last executing test programs: 31.499888764s ago: executing program 2 (id=1760): r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@gettaction={0x28, 0x32, 0x1, 0x72bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x6, 0x6, 0x1a, 0x18, "61d4bfbf9c49d8650474c62733f2703b81c89fed4ad10e8bcb74f6c6e7e06977275d57e756e4a9ebeb097a28989271bc0f7bab189777c473cb16a2fedf0886cd", "77114250a45734d55a8eec33ae391c538306d1657e8d0cbbabce4682894f4fab", [0x7f, 0x4]}) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f0000000900)={0xfffffffeffffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7, "12263221df18d4"}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001900)={{0x0, 0xf, 0x8000, 0x0, 0x2, 0x9ca3, 0x3, 0x4ac6, 0x80000000, 0x2, 0x5, 0x0, 0x7ff, 0xad, 0x1}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000002900)={r10, r11, "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", "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"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x6000) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 29.563496829s ago: executing program 2 (id=1765): syz_emit_vhci(0x0, 0x22) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f041, 0x8e5}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x4e0206, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x401, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mount(&(0x7f0000000000)=@sr0, 0x0, &(0x7f0000000180)='omfs\x00', 0x1000048, 0x0) waitid(0x1, 0x0, 0x0, 0x1000008, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x2b) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x129140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0xc010) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) creat(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 27.549430871s ago: executing program 2 (id=1772): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x20000084) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x80000002, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r2, 0x80047456, 0xfffffffffffc) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x600702) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x2981) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40045304, &(0x7f0000000400)={0x0, 0x0, {0x3, 0x3, 0x0, 0x2, 0x7}, 0x5}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x24}}, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYRESOCT=r3], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r4, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00') setns(0xffffffffffffffff, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x9, @mcast1, 0x2}], 0x1c) 26.383124986s ago: executing program 2 (id=1775): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000002980)={0x0, [{0x1, 0x58, 0x3, &(0x7f0000000000)="fb33f5bf97b31ddaf9be9f"}, {0x3, 0x3008, 0x401, &(0x7f0000000240)="7b64ac87c5649f86557fb5dfe2db53dafd15ab93bea1e3044039975b11ba8e80ef4c70b9a4a0cbe6fcc5dd13c1122e1617d84372c7b3e5e7975518268aa7071c197bcae083c952c52e91f3167860442b592934fd96773cff5ca64a6152631cac8d6b9d84de6a6f7e79f9ecfa78e02f7d4696c8f9b6e78573f21d042074c8d11540a9846c4e950442e7fdb8971c26dc18406c533d28aee2933f9c1b315106fe0686aa3459d3cc994c2e32d3db8bd97dba3096a0e03e20e1a20e3c422c525dc769f33ba642a4a950a2754fd38ebb1d08d87b22004fb92113aecb4515e52018682faf579ba27077af6f3b3ae0078ff538245acdc1dfe461b400721deaa3b8e41ef1c1c763a2aac6495d630e607d15a1719b4e3737f3edb9255a00b12f4bb46c6c670aca5cea0a1e60935bfc51bd5cd75c6863617c2ac9c49fb0002a9c9c78bad72a66dc640b5ea2cc60ca8910312cf204658d7b64d650cc3b31cf286e5c74bbe38e4c5ad42da5277a793a0231a203d5e6aa0641d0f221835f65feefd9228f56ae8c27faa468546ad9d34c4d9d1c841a658d55881a62b6b5e532f4a52d47b2a287291de8e8389ef407eb06ff23a7468077c125842fd881c54f069cb49c7e3e399a9199a4115f3ab76e30df4d2521fd61a01cecc826e6b480330c85c5937257b9b3b1f734e466dc8c638ac3e20c480e65b5ec63120b995224355bdc176ad56bbcb407a9a6c9f5d5a3f9671e4c16a84344f3a8ca1754e25513e79dfd21c4c04da5483969e5dc9023affcd725d27023533da889f968373ab93bd0a71d8eda1132ac6033fe6bc4d218d4bc487a55be6fc9fb6776a29cdab1112dbf0aa7ccb0c6c97c667fc93a03293aef5391b084085038c895e0a3f7ed92cf882bbab2d25e425d9155d5f677fa7593ed695b2adc029a34be6dc6646a6c6b1b39527128657328c48c367e0920699e2b097a13c3e8bca6a8f7cde05351e57eb0dbf364915161760a632c052dc3090e43f043c9ff89ae155e6eb6e028629dc746bf2b604ee36e9ae9ce76e1c57035757cb9c21b093e5caf9934d1f41d4a710d15be20a226de135e4f0c6b3c97986bdf66eb70648db0f2f6aee876e49e4a860715b74608a3617969060baee7e37159f98ca6b55decd0b080de557dc45b693495b2375ec81c3ab7913bbc6d58e0940aa7b169ab0ce2fd956a076bd1bb00bf4ba934ccd42f6664f97754e8ec293e053e84775a8b23180849c6673b17b4b6012df0e3604a5342e0cfbcbda42f9fab00e2f7b1301b87b70390ba1ab9f9b93673a2c43a339d6a86c7787b540ce9d4a2c976cb0ee89a1cfb3996a01ac8f1c4fa6df6ba6a673b4a3b314530618b851a3a277f8aa52a542e66c2f3644bf00d3346feb52a91a35542b8d8ab3e6b0dfadddbcccbf231209377adec00f2b44f5ccc6ae0d3ec2b61ebb7c137860f52205eefdc068310021caa27a24a855adec6ce90c0c671eca4b6f20d182a2e312f497a1088afa9c1bf83e82555c98277caa7279ab00a570e79c0b23b237f430739920775f840d0112216c122aa2983c6f6f1a8d16bec2e5dcce7c487234cd30026bb727b62c9b4204d2e34f37b7d0d3cbc4890b64093e894975ff78844ddc8966bb0758099929251a0e0376f25b30323fa662e2908e23a9b3382d739159115c2677becf725fb46ba98f77b18bf45364277bc838b717c7a88f9cdf342e8ab00601c8147bafffe9731a9bef8eccf43827df9f76c291228b94f13d1e50701c40550f6a1c504aa41734918fbfe801ebb73e0fcd9d35f484838e72c8392bbdd2114c47eebce65edd37ffef6a675aea07ddd2e062000b141c28434ecf6813c7803c08fbd0bccfb54c9d4b5dde87ff296c73f8c9fe52aa2722676f080eae33608c3636c454188ed0be680d4c73cdbbc7a802fdc3c0b8624c06a4de5d042b8e801be87d2d3612d3f69d6cb95483d4b5137164282e99d9f11c5e8d1cad79336d754f4e614476a2f74279a8c753b4dbde459f45da6ece874d0eace284488ffa854aadd443fdf67bf0fbe138aec05df8fb937abfc1d2d3836edb770a57a866d26e17db9bd8a2a63e6c291b001f2e284f00b4b3271689b3435febc2def7b92f4113bcc9f00402229971729f4206b7f2f589d0b917f1f0af05bfc784c05ae7cb66585479637c7ede6ae7529"}, {0x1, 0x0, 0x8b, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x0, 0x0, 0x8000003, 0x0}, {0x3, 0x0, 0x81, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x800000, 0x0}, {0x2, 0x0, 0x70000000, 0x0}, {0x3, 0x0, 0x1d8a, 0x0}, {0xbffda8787da7b524, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x7f, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x200, 0x0}]}) r2 = fsopen(&(0x7f0000000880)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) fchdir(r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) r8 = socket(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000019700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020008f92473388ec8d720000000080a05000000000000000000020000020900010073797a30000000002c000000080a01010000000000000000020000000900010073797a30000000000900020073797a32"], 0xa0}}, 0x40000) r9 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x101402) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000000180)={0x3, 0x11, 0x5, 0x6, 0x0, 0x5, 0x0}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r7, 0x3b72, &(0x7f0000000940)=ANY=[@ANYBLOB="9600000000000000e8000000000000003201000000000001046763ca4c14b55d36c98db12c7178155804aca2d43beb93cd82edb5c0571c4531e75db0c9d227377a6907f4557bd0cd8026a6ee6d2215df3e4cad71e5337c23195815d27d695c84d2835bf34b58706206c6004f0a3f4366ed91d146bb878522bd1e49475055adfc318bbe4a2dd77c6fd1ca7ebed5745117beba9c8bec2493ad495d749fb4c81eb702a7465367c22b136edb87292a86f14e7b5ad118099d10c1606cd01f8c5c54f376b867d08da7674d3162b815a04224e629e5a9040d42b00315de7daac8756a3e63b023ba73b551b8c7bc394f5d2f22c3a7670f2c51722abf8d6d8ca9851d06451dcc11c517404591d53b19842b4fa41df56927"]) ppoll(&(0x7f0000000040)=[{r3}, {r0, 0xb058}, {r0, 0x8100}, {r5, 0x4040}, {r9}], 0x5, &(0x7f0000000080), &(0x7f00000000c0)={[0x3]}, 0x8) 25.533126391s ago: executing program 2 (id=1776): bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="18000000000301012abd09000000df2507000002d3000000"], 0x18}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000080) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) creat(&(0x7f0000000080)='./file0\x00', 0x248) r2 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r2) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0xc0403d11, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x10010, 0xffffffffffffffff, 0x28f43000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) 25.163919423s ago: executing program 2 (id=1778): r0 = socket$netlink(0x10, 0x3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={0x0, 0x0, 0x18}, 0x18) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x402000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x6) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000608000/0x3000)=nil, 0x3000, 0x12) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) recvmmsg(r4, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010000, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200005fcdd4ce00000000000000080045000024000000000073907800000300e000000100000000fe9a"], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) socket(0x200000000000011, 0xa, 0x0) write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 24.858836386s ago: executing program 32 (id=1778): r0 = socket$netlink(0x10, 0x3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={0x0, 0x0, 0x18}, 0x18) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x402000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x6) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000608000/0x3000)=nil, 0x3000, 0x12) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) recvmmsg(r4, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010000, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200005fcdd4ce00000000000000080045000024000000000073907800000300e000000100000000fe9a"], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) socket(0x200000000000011, 0xa, 0x0) write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 7.475374081s ago: executing program 4 (id=1820): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x0, 0xfffffffc, @loopback, 0xc7f}], 0x2c) sendto$inet6(r1, &(0x7f0000000040)="e4", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080)=0x9b7f, 0x4) recvmmsg(r1, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x4}], 0x1, 0x40000023, 0x0) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff070000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010102007f"], 0x38}, 0x1, 0x0, 0x0, 0x400c884}, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2400c808) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x40020000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) close(0x3) fallocate(0xffffffffffffffff, 0x2c, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x2004d8b0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd26, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e22}}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0xa5}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000005180)={0x2020}, 0x2020) 7.071362429s ago: executing program 5 (id=1823): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d0001000060000904008002030000000921060400012205000905810320000908070905020340"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_ep_read(r4, 0x2, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60fddbdf250000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) syz_usb_ep_write(r4, 0x81, 0x10, &(0x7f0000000080)="116b41319ef13386d7fd40ac5cf9181c") syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) sendmsg$inet6(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="944cf7", 0x3}], 0x1}, 0x20000010) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r6], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(0x0, r6) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r9, 0x40026f34, &(0x7f00000001c0)=0x5) sendmsg$DEVLINK_CMD_TRAP_GET(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.832254817s ago: executing program 4 (id=1824): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r1, 0x1269, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getrlimit(0xd, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f00000005c0)=""/227, 0xe3}, {&(0x7f00000006c0)=""/57, 0x39}, {&(0x7f0000000700)=""/3, 0x3}, {&(0x7f0000000740)=""/35, 0x23}, {&(0x7f0000000780)=""/162, 0xa2}, {&(0x7f0000000c40)=""/4096, 0x1000}], 0x6, &(0x7f0000001cc0)=""/62, 0x3e}, 0x6}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001d00)=""/220, 0xdc}], 0x1, &(0x7f0000001e40)=""/157, 0x9d}, 0x2}, {{&(0x7f0000001f00)=@nl=@unspec, 0x80, &(0x7f00000063c0)=[{&(0x7f0000001f80)=""/141, 0x8d}, {&(0x7f0000002040)=""/69, 0x45}, {&(0x7f0000006180)=""/62, 0x3e}, {&(0x7f00000061c0)=""/128, 0x80}, {&(0x7f0000006240)=""/175, 0xaf}, {&(0x7f0000006300)=""/144, 0x90}], 0x6}, 0xfff}, {{&(0x7f0000006440), 0x80, &(0x7f0000007980)=[{&(0x7f00000064c0)=""/255, 0xff}, {&(0x7f00000065c0)=""/152, 0x98}, {&(0x7f0000006680)=""/111, 0x6f}, {&(0x7f0000006700)=""/55, 0x37}, {&(0x7f0000006740)=""/100, 0x64}, {&(0x7f00000067c0)=""/232, 0xe8}, {&(0x7f00000068c0)=""/4096, 0x1000}, {&(0x7f00000078c0)=""/138, 0x8a}], 0x8}, 0x6}, {{&(0x7f0000007a00)=@l2tp, 0x80, &(0x7f0000007cc0)=[{&(0x7f0000007a80)=""/16, 0x10}, {&(0x7f0000007ac0)=""/220, 0xdc}, {&(0x7f0000007bc0)=""/103, 0x67}, {&(0x7f0000007c40)=""/97, 0x61}], 0x4, &(0x7f0000007d00)=""/90, 0x5a}, 0x5}], 0x5, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r5, &(0x7f0000000a80), 0x12) 5.784926104s ago: executing program 0 (id=1828): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x400, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x68, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7f14a703a436b04d}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x7c}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x78, r3, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x67}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0xceacdff05832dab7}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x5814dc6d4fd5c896}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x9e4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x3b7}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1049}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x46c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x147}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ftruncate(r0, 0x400) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000440), 0x200000, 0x0) execveat(r4, &(0x7f0000000480)='./file0\x00', &(0x7f0000000600)={[&(0x7f00000004c0)='SEG6\x00', &(0x7f0000000500)='\x1a#+/$\x00', &(0x7f0000000540)='!##(&*]!\x00', &(0x7f0000000580)='-\x00', &(0x7f00000005c0)='nl80211\x00']}, &(0x7f0000000800)={[&(0x7f0000000640)='ethtool\x00', &(0x7f0000000680)='SEG6\x00', &(0x7f00000006c0)='nl80211\x00', &(0x7f0000000700)='ethtool\x00', &(0x7f0000000740)='\x00', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='*-.\'\x00']}, 0x1000) ioctl$KVM_GET_PIT(r4, 0xc048ae65, &(0x7f0000000840)) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f00000008c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000900)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r4, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x200000c1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) recvmsg$kcm(r4, &(0x7f0000000c00)={&(0x7f0000000a40)=@ax25={{0x3, @netrom}, [@rose, @default, @default, @netrom, @default, @rose, @bcast, @default]}, 0x80, &(0x7f0000000ac0), 0x0, &(0x7f0000000b00)=""/232, 0xe8}, 0x12040) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f0000000d40)={r4, &(0x7f0000000c40)='-\x00', 0x1, &(0x7f0000000c80)={@_ha_fsid={[0x6f2a]}, {0x6, 0x8d, 0x9, 0x7fffffffffffffff}}, 0x2bb7, &(0x7f0000000cc0)={@_ha_fsid}, &(0x7f0000000d00)=0x3}) syncfs(r6) ioctl$FE_SET_VOLTAGE(r6, 0x6f43, &(0x7f0000000d80)) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000dc0)={0xfff7, 0x4, 0x200}) setsockopt$inet_tcp_buf(r4, 0x6, 0xe, &(0x7f0000000e00)="5e1f091c5421d849b347f889ea4817cf03a0a22c3c9d2c3926e18215f981971a83f1a05806b14fd530259fc88cd4427747b65ccad6d72793599cf3af7053198eb202d8d62d8d2fbeea157573e5c24e4baef94f41acea79097429851054c26c632c731d1d78cc325fec4d9036e423ad32d1d2a5a104da9b792fef5901107010e515e21a", 0x83) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000ec0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$IMHOLD_L1(r4, 0x80044948, &(0x7f0000000f00)=0x10a) syncfs(r4) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000f80)=@o_path={&(0x7f0000000f40)='./file0\x00', 0x0, 0x0, r5}, 0x18) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$INCFS_IOC_PERMIT_FILL(r7, 0x40046721, &(0x7f0000000fc0)={r6}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000001040), 0x4) 5.659912716s ago: executing program 4 (id=1829): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) sendmsg$nl_netfilter(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0xd0, 0x9, 0x8, 0x101, 0x70bd26, 0x25dfdbfe, {0x2, 0x0, 0x9}, [@generic="5701ef0403fdb1298b16ef976aba93105158d099f6462c97e720b73df77134d48a3c991f7507bcd31bc9210a8c9ee51e29100d523f8fa6ca3aa5d4a04452cc5b00dc5c76e13eecd92c5ef68fdb25cfe41a321b1de70f853df5fa4c36d3967ff4037fe63910bcc532f60056fc6c547f6dcab9684d79cc5a064a3204436ad9d195a7dd70d2298eae816d16892e912890a825f816a4026639bfe05da052f3784fb50976917b6630dab19532daf686865eba8544624e68355a9cb4a3b8"]}, 0xd0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000041) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {0x0, 0x9}, {0x10, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x9}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_usb_connect$uac3(0x3, 0x8b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000010532b2400400001020301090279000301023006080b0000010130090904000000010130000a2401ff1500000000000b240d4007050000000010090401000001023000090401010101023000090501"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) 5.539967387s ago: executing program 0 (id=1830): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) unshare(0x600) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ppoll(&(0x7f0000000300)=[{r0, 0x100}], 0x1, 0x0, 0x0, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000000c0)="0207070002000000e4a17c45c8d2", 0xe}, {&(0x7f0000000500)="c2d9", 0x2}], 0x2}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@initdev, @broadcast}, &(0x7f0000000100)=0xc) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0xa0602, 0x0) dup(r2) writev(r2, 0x0, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x6]}, 0x8) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close_range(r3, r3, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) 4.407258772s ago: executing program 1 (id=1832): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000001"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.116760445s ago: executing program 3 (id=1833): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000400)={{r1, 0x0, 0x0, 0x0, 0x401, &(0x7f0000000100), 0x0}, 0x0, 0x0}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0x7, 0x9dfe, 0x14, "60ef6fb5280d3dfa"}) write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYRES8, @ANYRES8], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7ffd, 0xf, "0062007d82000000000000002240f7ffffff00"}) r3 = syz_open_pts(r2, 0x22a800) r4 = dup3(r3, r2, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000200)=0x17) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 3.834505271s ago: executing program 1 (id=1834): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000004340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) fcntl$lock(r0, 0x11, 0x0) mq_open(&(0x7f0000000800)='netdevsim', 0x40, 0x45, &(0x7f0000000840)={0xfff, 0x72778bc4, 0x80, 0x180000000000000}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r1 = socket$caif_stream(0x25, 0x1, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x26201, 0x0) r3 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x3, &(0x7f0000000040)='fd', &(0x7f00000000c0)='2', 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$tty20(0xc, 0x4, 0x1) mmap(&(0x7f00005ff000/0x3000)=nil, 0x3000, 0x0, 0x1010, r1, 0x4163b000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) personality(0x8) uname(&(0x7f0000000000)=""/123) setsockopt$sock_attach_bpf(r4, 0x1, 0x2e, &(0x7f0000000000)=r4, 0x4) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0xfffffffffffffffe, 0x1, 0x800, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x20000000}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040880}, 0x0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0xfffffffffffffffc) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000040)=0x8, 0x4) 3.677832459s ago: executing program 5 (id=1835): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) socket$isdn(0x22, 0x2, 0x22) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001500010000000000000000000a0000"], 0x44}}, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r5, 0xff, 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, r6, {0x4}}, './file1\x00'}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r4}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x0) recvmsg(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4093, 0xffd}, {&(0x7f0000001600)=""/4093, 0xffd}], 0x2}, 0x40020162) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x88000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r8, 0xc0505350, &(0x7f0000000940)={{0x1, 0xff}, {0xb5, 0xeb}, 0x100, 0x4, 0x3}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x7, 0x0, 0x0, 0x0, 0x63, 0x11, 0x5f}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 3.447496091s ago: executing program 1 (id=1836): socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x29, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) timer_delete(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1c1f40, 0x0) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x6c, 0xfffffffffffffffe) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, 0x0, 0x0}) kexec_load(0xd0ffbf, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0xbfffd000, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xd3, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r4, r5, r4}, &(0x7f0000000240)=""/56, 0x38, 0x0) 3.415333176s ago: executing program 1 (id=1837): syz_emit_vhci(0x0, 0x22) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f041, 0x8e5}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x4e0206, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x401, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mount(0x0, 0x0, &(0x7f0000000180)='omfs\x00', 0x1000048, 0x0) waitid(0x1, 0x0, 0x0, 0x1000008, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x2b) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x129140, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x14, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x5, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0xc010) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) creat(0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0xa, 0x4e22, 0xffff0001, @mcast2, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1400000000000000290000003e000000010000000000000018"], 0x30}, 0x240080c4) 3.274971938s ago: executing program 4 (id=1838): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000080)=0x9b7f, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x4}], 0x1, 0x40000023, 0x0) socket(0x200000000000011, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) close(0x3) fallocate(0xffffffffffffffff, 0x2c, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3.177829824s ago: executing program 4 (id=1839): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r1, 0x1269, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getrlimit(0xd, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f00000005c0)=""/227, 0xe3}, {&(0x7f00000006c0)=""/57, 0x39}, {&(0x7f0000000700)=""/3, 0x3}, {&(0x7f0000000740)=""/35, 0x23}, {&(0x7f0000000780)=""/162, 0xa2}, {&(0x7f0000000c40)=""/4096, 0x1000}], 0x6, &(0x7f0000001cc0)=""/62, 0x3e}, 0x6}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001d00)=""/220, 0xdc}], 0x1, &(0x7f0000001e40)=""/157, 0x9d}, 0x2}, {{&(0x7f0000001f00)=@nl=@unspec, 0x80, &(0x7f00000063c0)=[{&(0x7f0000001f80)=""/141, 0x8d}, {&(0x7f0000002040)=""/69, 0x45}, {&(0x7f0000006180)=""/62, 0x3e}, {&(0x7f00000061c0)=""/128, 0x80}, {&(0x7f0000006240)=""/175, 0xaf}, {&(0x7f0000006300)=""/144, 0x90}], 0x6}, 0xfff}, {{&(0x7f0000006440), 0x80, &(0x7f0000007980)=[{&(0x7f00000064c0)=""/255, 0xff}, {&(0x7f00000065c0)=""/152, 0x98}, {&(0x7f0000006680)=""/111, 0x6f}, {&(0x7f0000006700)=""/55, 0x37}, {&(0x7f0000006740)=""/100, 0x64}, {&(0x7f00000067c0)=""/232, 0xe8}, {&(0x7f00000068c0)=""/4096, 0x1000}, {&(0x7f00000078c0)=""/138, 0x8a}], 0x8}, 0x6}, {{&(0x7f0000007a00)=@l2tp, 0x80, &(0x7f0000007cc0)=[{&(0x7f0000007a80)=""/16, 0x10}, {&(0x7f0000007ac0)=""/220, 0xdc}, {&(0x7f0000007bc0)=""/103, 0x67}, {&(0x7f0000007c40)=""/97, 0x61}], 0x4, &(0x7f0000007d00)=""/90, 0x5a}, 0x5}], 0x5, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r5, &(0x7f0000000a80), 0x12) 3.169379624s ago: executing program 3 (id=1840): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r0, 0x2000, 0x0) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f00001fe000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000080)="baf80c66b8a80aac8466efbafc0c66ed3e0f79610adee8b800008ee8ba4000ecba420066ed3e670fc7696666b9fc0a000066b80000000066ba008000000f30660f38804521baf80c66b8a5aad28466efbafc0cb02aee", 0x56}], 0x1, 0x4d, &(0x7f00000001c0)=[@cstype3={0x5, 0x5}, @cstype3={0x5, 0xa}], 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0) lseek(r1, 0x9, 0x0) fsopen(&(0x7f0000000040)='vfat\x00', 0x0) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000180)='jffs2\x00', 0x8000, 0x0) 2.995572586s ago: executing program 3 (id=1841): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002840)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac, @device_b, @broadcast}}}]}, 0x40}}, 0x0) 2.892074322s ago: executing program 3 (id=1842): socket$inet(0x2, 0x1, 0x6) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500001c000000008004007800000000e000030000009078006420d08000000000000000041224ac24ac9821adf2a29a52adab42f3f12565d157c38fe74f9eee25b77184cd7076ca91e24a17af54efa0161f3f4a0d4904889388a084d37a54ffdae1c5ec5ee87abfc2bc1374481d81311bf1a278b5edbd2d73d3476b02de2cbe3ecae2d724f706f7c77d10cab26e6deee63dccc3524d8520c201bfa6a5d3111cb9efe3ea2474b57cc998313f00"/198], 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25"}) mprotect(&(0x7f0000729000/0x3000)=nil, 0x3000, 0x2000005) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x70}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000180)={@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x97d1, 0x4, 0x100, 0x9, 0x400000}) 2.724938297s ago: executing program 0 (id=1843): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="6ba425bd7000fbdbdf2501000000d476db2656d53fa3c447a0f3cbc43902ff9cbdb873a12bf41ffa55db8a5e49bbfe14bbf8ba665ec7e7805b2bf4d05d766f78b2c57285a2a969038d61babdb229c9312d400860dc7f8a62cbd04f28d9a3d861bc1d6a25e1763a712ae833d99fa63d4d090c238b25fcfc8f8b5908e248701f48bae77612115ea25ba39685684420f4868b2f8879ce00f5f312a44fb4f5250fd0023d0caac69faeaa004f095a27ed15e9cad0fc38affd7724bc43aaa0ad53e0b1aceed86a31af7946608aa294"], 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fchdir(r0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000200)) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x2, 0x202000) r2 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x8, 0x6, {"00000000000000000000000000000001"}, 0x1119dff, 0x9, 0xcd46}}}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r7 = socket(0x1e, 0x4, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f0000003240), 0x4000000000000e4, 0x9000000) 1.756090134s ago: executing program 4 (id=1844): r0 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000000)=0x1) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat6\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = userfaultfd(0x80801) r4 = epoll_create1(0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000440)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000080)={r6, 0x3, r5, 0x3, 0x80000}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x10000000}) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904"], 0x0) setgroups(0xffffffffffffff79, 0x0) readv(r2, &(0x7f0000000340)=[{0x0}], 0x1) syz_usb_control_io(r1, &(0x7f0000000a40)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="40064500000045240d1adaa3cae546e2c5f437298fe78dc19175aa7b8d6afe2ef6b196de1aaab99b60f44276ce4c9bd640b78c7fb5f66b7397692465"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac3(0x5, 0xa4, &(0x7f0000000400)=ANY=[@ANYBLOB="12011001000000208205b2004000010203010902920003010f10fa080b0002010130030904000000010120000a2401042e001b00000011240901010000000000000080010000001324030200030201"], 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r7, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0xe2, 0x29}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044000}, 0x1) 1.700074748s ago: executing program 0 (id=1845): r0 = syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000080)={0x0, 0x0, 0x0, @lost_msgs}) 1.544040884s ago: executing program 0 (id=1846): syz_emit_vhci(0x0, 0x22) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f041, 0x8e5}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x4e0206, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x401, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mount(&(0x7f0000000000)=@sr0, 0x0, &(0x7f0000000180)='omfs\x00', 0x1000048, 0x0) waitid(0x1, 0x0, 0x0, 0x1000008, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x2b) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x129140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0xc010) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) creat(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 1.541404191s ago: executing program 3 (id=1847): socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x29, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) timer_delete(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1c1f40, 0x0) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x6c, 0xfffffffffffffffe) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, 0x0, 0x0}) kexec_load(0xd0ffbf, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0xbfffd000, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xd3, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r3, r4, r3}, &(0x7f0000000240)=""/56, 0x38, 0x0) 1.186237293s ago: executing program 5 (id=1848): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800}, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000680)={{r2, &(0x7f0000000180)='}&$}\x00', 0x142, &(0x7f0000000400)={@_ha_fsid={[0x401, 0xb72]}, {0x9, 0x11, 0x1ff, 0x7f}}, 0xffffffa4, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000480)=0xfffffe00}, {[0x4, 0xfffffff8, 0xac86, 0x5]}, 0xc, 0xe6, &(0x7f0000000500)=""/230}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYBLOB="814c8d", @ANYRES16], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000600)=[0x5, 0x3ff], 0x0, 0x0, 0x2, 0x1}}, 0x40) accept4(r0, &(0x7f00000002c0)=@vsock, &(0x7f0000000340)=0x80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::.:\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2c}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000068000000060a010400000000000000000100000008000b40000000000900010073797a3000000000400004803c0001800a0001006c696d69740000002c0002800c000240000000008000000108000440000000010c0001400000000000000008080005500000000114000000110001"], 0xf0}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000700)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @val={@void, {0x8100, 0x5, 0x1, 0x3}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x31, 0x30, 0x65, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x5, 0x0, 0x65, 0x174, 0xd, 0x73, 0x6, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) dup(r5) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004b80), 0x0, 0x4) 833.918163ms ago: executing program 5 (id=1849): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000080)=0x9b7f, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x4}], 0x1, 0x40000023, 0x0) socket(0x200000000000011, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) close(0x3) fallocate(0xffffffffffffffff, 0x2c, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) 570.454758ms ago: executing program 5 (id=1850): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a801800048014000580"], 0x3c}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 373.436834ms ago: executing program 5 (id=1851): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xc45, 0x5112, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x7, 0x19, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x200, 0x3, 0x1, {0x22, 0x2d}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xff, 0x3}}}}}]}}]}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4e2603, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) 231.413155ms ago: executing program 1 (id=1852): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002840)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac, @device_b, @broadcast}}}]}, 0x40}}, 0x0) 142.225272ms ago: executing program 1 (id=1853): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) unshare(0x600) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ppoll(&(0x7f0000000300)=[{r0, 0x100}], 0x1, 0x0, 0x0, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000000c0)="0207070002000000e4a17c45c8d2", 0xe}, {&(0x7f0000000500)="c2d9", 0x2}], 0x2}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@initdev, @broadcast}, &(0x7f0000000100)=0xc) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0xa0602, 0x0) dup(r2) writev(r2, 0x0, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x6]}, 0x8) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close_range(r3, r3, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) 13.166783ms ago: executing program 3 (id=1854): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r1, 0x1269, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getrlimit(0xd, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f00000005c0)=""/227, 0xe3}, {&(0x7f00000006c0)=""/57, 0x39}, {&(0x7f0000000700)=""/3, 0x3}, {&(0x7f0000000740)=""/35, 0x23}, {&(0x7f0000000780)=""/162, 0xa2}, {&(0x7f0000000c40)=""/4096, 0x1000}], 0x6, &(0x7f0000001cc0)=""/62, 0x3e}, 0x6}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001d00)=""/220, 0xdc}], 0x1, &(0x7f0000001e40)=""/157, 0x9d}, 0x2}, {{&(0x7f0000001f00)=@nl=@unspec, 0x80, &(0x7f00000063c0)=[{&(0x7f0000001f80)=""/141, 0x8d}, {&(0x7f0000002040)=""/69, 0x45}, {&(0x7f0000006180)=""/62, 0x3e}, {&(0x7f00000061c0)=""/128, 0x80}, {&(0x7f0000006240)=""/175, 0xaf}, {&(0x7f0000006300)=""/144, 0x90}], 0x6}, 0xfff}, {{&(0x7f0000006440), 0x80, &(0x7f0000007980)=[{&(0x7f00000064c0)=""/255, 0xff}, {&(0x7f00000065c0)=""/152, 0x98}, {&(0x7f0000006680)=""/111, 0x6f}, {&(0x7f0000006700)=""/55, 0x37}, {&(0x7f0000006740)=""/100, 0x64}, {&(0x7f00000067c0)=""/232, 0xe8}, {&(0x7f00000068c0)=""/4096, 0x1000}, {&(0x7f00000078c0)=""/138, 0x8a}], 0x8}, 0x6}, {{&(0x7f0000007a00)=@l2tp, 0x80, &(0x7f0000007cc0)=[{&(0x7f0000007a80)=""/16, 0x10}, {&(0x7f0000007ac0)=""/220, 0xdc}, {&(0x7f0000007bc0)=""/103, 0x67}, {&(0x7f0000007c40)=""/97, 0x61}], 0x4, &(0x7f0000007d00)=""/90, 0x5a}, 0x5}], 0x5, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r5, &(0x7f0000000a80), 0x12) 0s ago: executing program 0 (id=1855): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="6ba425bd7000fbdbdf2501000000d476db2656d53fa3c447a0f3cbc43902ff9cbdb873a12bf41ffa55db8a5e49bbfe14bbf8ba665ec7e7805b2bf4d05d766f78b2c57285a2a969038d61babdb229c9312d400860dc7f8a62cbd04f28d9a3d861bc1d6a25e1763a712ae833d99fa63d4d090c238b25fcfc8f8b5908e248701f48bae77612115ea25ba39685684420f4868b2f8879ce00f5f312a44fb4f5250fd0023d0caac69faeaa004f095a27ed15e9cad0fc38affd7724bc43aaa0ad53e0b1aceed86a31af7946608aa294"], 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fchdir(r0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000200)) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x2, 0x202000) r2 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x8, 0x6, {"00000000000000000000000000000001"}, 0x1119dff, 0x9, 0xcd46}}}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r7 = socket(0x1e, 0x4, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r9, 0x201, 0x400000, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x4004}}}, 0x24}}, 0x40) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003240), 0x4000000000000e4, 0x9000000) kernel console output (not intermixed with test programs): -cpro 0003:1B1C:0C10.0015: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 578.053719][T10863] corsair-cpro 0003:1B1C:0C10.0015: probe with driver corsair-cpro failed with error -5 [ 578.082929][ T5914] usb 2-1: USB disconnect, device number 57 [ 578.803207][T11740] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 579.219350][ T5813] usb 1-1: USB disconnect, device number 39 [ 579.347775][T11746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1388'. [ 581.210261][T11729] delete_channel: no stack [ 581.628174][T11770] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 581.818395][T11761] delete_channel: no stack [ 582.015054][T11778] ipt_rpfilter: unknown options [ 582.052249][T11777] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 582.184415][T11782] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 582.331974][ T5813] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 582.602803][ T5813] usb 1-1: Using ep0 maxpacket: 16 [ 582.657113][ T29] audit: type=1400 audit(1776414397.572:762): avc: denied { mount } for pid=11786 comm="syz.2.1398" name="/" dev="ramfs" ino=47350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 583.036885][ T5813] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 583.099976][ T5813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 583.114829][ T29] audit: type=1400 audit(1776414397.572:763): avc: denied { mounton } for pid=11786 comm="syz.2.1398" path="/file0" dev="ramfs" ino=47351 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 583.139292][T11773] delete_channel: no stack [ 583.222769][ T5813] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 583.249242][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.279440][ T5813] usb 1-1: Product: syz [ 583.303021][ T5813] usb 1-1: Manufacturer: syz [ 583.325107][ T5813] usb 1-1: SerialNumber: syz [ 583.365650][ T5813] usb 1-1: config 0 descriptor?? [ 583.378236][ T29] audit: type=1400 audit(1776414398.302:764): avc: denied { connect } for pid=11794 comm="syz.4.1400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 583.407375][ T5813] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 583.426981][T11779] delete_channel: no stack [ 583.508069][ T5813] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 584.143212][ T5813] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 584.149837][ T5813] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 584.157472][ T5813] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 584.164774][ T5813] em28xx 1-1:0.0: No AC97 audio processor [ 584.190222][ T5813] usb 1-1: USB disconnect, device number 40 [ 584.222292][ T5813] em28xx 1-1:0.0: Disconnecting em28xx [ 584.253295][ T5813] em28xx 1-1:0.0: Freeing device [ 586.069268][T11817] ubi31: attaching mtd0 [ 586.116842][T11817] ubi31: scanning is finished [ 586.400456][T11817] ubi31: empty MTD device detected [ 586.628042][T11824] bridge0: entered promiscuous mode [ 586.654580][T11824] bridge0: left promiscuous mode [ 586.759510][T11817] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 586.785277][T11817] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 586.825106][T11817] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 586.845100][T11817] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 586.885906][T11817] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 586.980050][T11817] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 587.016322][T11817] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2957701004 [ 587.043586][T11817] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 587.090636][T11838] ubi31: background thread "ubi_bgt31d" started, PID 11838 [ 587.093711][T11843] ipt_rpfilter: unknown options [ 587.381982][ T5893] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 587.392013][ T5879] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 587.551967][ T5879] usb 5-1: Using ep0 maxpacket: 16 [ 587.561814][ T5893] usb 2-1: unable to get BOS descriptor or descriptor too short [ 587.585444][ T5879] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 587.602437][ T5893] usb 2-1: not running at top speed; connect to a high speed hub [ 587.630510][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 587.646899][ T5893] usb 2-1: config 8 has an invalid interface number: 99 but max is 0 [ 587.676959][ T5893] usb 2-1: config 8 has no interface number 0 [ 587.689844][ T5879] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 587.708964][ T5893] usb 2-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=8d.1e [ 587.732011][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.745804][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.755345][ T5879] usb 5-1: Product: syz [ 587.766800][ T5879] usb 5-1: Manufacturer: syz [ 587.776594][ T5893] usb 2-1: Product: syz [ 587.786702][ T5879] usb 5-1: SerialNumber: syz [ 587.795804][ T5893] usb 2-1: Manufacturer: syz [ 587.813740][ T5879] usb 5-1: config 0 descriptor?? [ 587.818749][ T5893] usb 2-1: SerialNumber: syz [ 587.856371][ T5879] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 587.889265][ T5879] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 588.122363][ T5879] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 588.149462][ T5879] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 588.177498][ T5879] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 588.200970][ T5879] em28xx 5-1:0.0: No AC97 audio processor [ 588.242751][ T5879] usb 5-1: USB disconnect, device number 61 [ 588.264991][ T5879] em28xx 5-1:0.0: Disconnecting em28xx [ 588.278776][ T5879] em28xx 5-1:0.0: Freeing device [ 588.755470][ T29] audit: type=1400 audit(1776414403.682:765): avc: denied { shutdown } for pid=11850 comm="syz.3.1416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 588.863504][ T29] audit: type=1400 audit(1776414403.702:766): avc: denied { read } for pid=11850 comm="syz.3.1416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 590.150977][ T5893] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 590.195910][ T5893] usb 2-1: USB disconnect, device number 58 [ 590.492181][ T5813] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 590.695451][ T5813] usb 5-1: Using ep0 maxpacket: 32 [ 590.740905][ T5813] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 590.823188][ T5813] usb 5-1: config 0 interface 0 has no altsetting 0 [ 590.857469][ T5813] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 590.934371][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.983618][ T5813] usb 5-1: config 0 descriptor?? [ 591.833618][T11889] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1425'. [ 592.226909][ T5813] corsair-cpro 0003:1B1C:0C10.0016: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 592.839718][ T5813] corsair-cpro 0003:1B1C:0C10.0016: probe with driver corsair-cpro failed with error -110 [ 592.859195][ T5813] usb 5-1: USB disconnect, device number 62 [ 593.813820][ T5813] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 594.076669][ T5816] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 594.103662][ T5813] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 594.116680][ T5813] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 594.132301][ T5813] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 594.141557][ T5813] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 594.153663][ T5813] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 594.166815][ T5813] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 594.184135][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 594.206911][ T5813] usb 3-1: Product: syz [ 594.216866][ T5813] usb 3-1: Manufacturer: syz [ 594.233705][ T5816] usb 4-1: Using ep0 maxpacket: 8 [ 594.250545][ T5816] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 594.261760][ T5813] cdc_wdm 3-1:1.0: skipping garbage [ 594.279128][ T5813] cdc_wdm 3-1:1.0: skipping garbage [ 594.284938][ T5816] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 594.314395][ T5816] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 594.329079][ T5813] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 594.348204][ T5813] cdc_wdm 3-1:1.0: Unknown control protocol [ 594.360016][ T5816] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 594.398136][ T5816] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 594.439614][ T5816] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 594.472024][ T5914] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 594.490118][ T5816] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 594.518011][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.561210][ T29] audit: type=1400 audit(1776414409.482:767): avc: denied { read write } for pid=11926 comm="syz.0.1436" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 594.630525][ T29] audit: type=1400 audit(1776414409.482:768): avc: denied { open } for pid=11926 comm="syz.0.1436" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 594.674972][ T5914] usb 5-1: unable to get BOS descriptor or descriptor too short [ 594.718200][ T5914] usb 5-1: not running at top speed; connect to a high speed hub [ 594.747646][ T5914] usb 5-1: config 8 has an invalid interface number: 99 but max is 0 [ 594.861528][ T5914] usb 5-1: config 8 has no interface number 0 [ 595.148892][ T5816] usb 4-1: usb_control_msg returned -32 [ 595.157438][ T5816] usbtmc 4-1:16.0: can't read capabilities [ 595.166102][ T5914] usb 5-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=8d.1e [ 595.208990][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.244587][ T29] audit: type=1400 audit(1776414410.152:769): avc: denied { ioctl } for pid=11904 comm="syz.3.1430" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3525 ioctlcmd=0x5b19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 595.281439][ T5914] usb 5-1: Product: syz [ 595.306479][ T5914] usb 5-1: Manufacturer: syz [ 595.307688][ T5893] usb 3-1: USB disconnect, device number 58 [ 595.311198][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 595.323636][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 595.329719][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 595.443854][ T5914] usb 5-1: SerialNumber: syz [ 595.607872][T11936] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1438'. [ 596.030368][T11932] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 597.413681][ T5893] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 597.476035][T10863] usb 4-1: USB disconnect, device number 50 [ 597.582107][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 597.602612][ T5893] usb 2-1: unable to get BOS descriptor or descriptor too short [ 597.625475][ T5914] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 597.633802][ T5893] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 597.667102][ T5914] usb 5-1: USB disconnect, device number 63 [ 597.681999][ T5893] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 597.728045][ T5893] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 597.795090][ T5893] usb 2-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 597.841578][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.884047][ T5893] usb 2-1: Product: syz [ 597.912168][ T5893] usb 2-1: Manufacturer: syz [ 597.939533][ T5893] usb 2-1: SerialNumber: syz [ 598.971194][ T5893] usb 2-1: USB disconnect, device number 59 [ 599.018777][ T29] audit: type=1400 audit(1776414413.942:770): avc: denied { map } for pid=11979 comm="syz.3.1450" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 599.109589][ T8614] udevd[8614]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 599.114079][ T29] audit: type=1400 audit(1776414413.972:771): avc: denied { execute } for pid=11979 comm="syz.3.1450" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 599.252108][T10863] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 599.474396][T10863] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 599.542033][T10863] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 599.574898][T10863] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 599.598033][T10863] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 599.653178][T10863] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 599.702722][T10863] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 599.715215][T10863] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 599.731514][T10863] usb 5-1: Product: syz [ 599.736075][T10863] usb 5-1: Manufacturer: syz [ 600.074414][T10863] cdc_wdm 5-1:1.0: skipping garbage [ 600.097647][T10863] cdc_wdm 5-1:1.0: skipping garbage [ 600.319934][T10863] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 600.443437][T10863] cdc_wdm 5-1:1.0: Unknown control protocol [ 601.158313][T10863] usb 5-1: USB disconnect, device number 64 [ 601.879840][T12013] FAULT_INJECTION: forcing a failure. [ 601.879840][T12013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 601.893155][T12013] CPU: 1 UID: 0 PID: 12013 Comm: syz.4.1460 Not tainted syzkaller #0 PREEMPT(full) [ 601.893182][T12013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 601.893193][T12013] Call Trace: [ 601.893200][T12013] [ 601.893207][T12013] dump_stack_lvl+0x100/0x190 [ 601.893237][T12013] should_fail_ex.cold+0x5/0xa [ 601.893268][T12013] _copy_to_user+0x32/0xd0 [ 601.893301][T12013] simple_read_from_buffer+0xcb/0x170 [ 601.893338][T12013] proc_fail_nth_read+0x1af/0x230 [ 601.893371][T12013] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 601.893404][T12013] ? rw_verify_area+0xce/0x6d0 [ 601.893431][T12013] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 601.893462][T12013] vfs_read+0x1e4/0xb30 [ 601.893496][T12013] ? __pfx_vfs_read+0x10/0x10 [ 601.893526][T12013] ? __fget_files+0x215/0x3d0 [ 601.893554][T12013] ? __fget_files+0x21f/0x3d0 [ 601.893583][T12013] ksys_read+0x12a/0x250 [ 601.893614][T12013] ? __pfx_ksys_read+0x10/0x10 [ 601.893647][T12013] ? rcu_is_watching+0x12/0xc0 [ 601.893682][T12013] do_syscall_64+0x10b/0xf80 [ 601.893703][T12013] ? clear_bhb_loop+0x40/0x90 [ 601.893736][T12013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.893759][T12013] RIP: 0033:0x7f021ff5d04e [ 601.893777][T12013] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 601.893796][T12013] RSP: 002b:00007f0220ec0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 601.893816][T12013] RAX: ffffffffffffffda RBX: 00007f0220ec16c0 RCX: 00007f021ff5d04e [ 601.893831][T12013] RDX: 000000000000000f RSI: 00007f0220ec10a0 RDI: 0000000000000005 [ 601.893844][T12013] RBP: 00007f0220ec1090 R08: 0000000000000000 R09: 0000000000000000 [ 601.893858][T12013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.893870][T12013] R13: 00007f0220216038 R14: 00007f0220215fa0 R15: 00007ffdae30e628 [ 601.893900][T12013] [ 602.295858][ T29] audit: type=1400 audit(1776414417.182:772): avc: denied { getopt } for pid=12015 comm="syz.0.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 602.710048][T12025] ipt_rpfilter: unknown options [ 602.804546][T12028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1465'. [ 602.813586][ T5914] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 602.862503][T12030] ipt_rpfilter: unknown options [ 602.994190][ T5914] usb 3-1: unable to get BOS descriptor or descriptor too short [ 603.002682][ T5914] usb 3-1: not running at top speed; connect to a high speed hub [ 603.011706][ T5914] usb 3-1: config 8 has an invalid interface number: 99 but max is 0 [ 603.020109][ T5914] usb 3-1: config 8 has no interface number 0 [ 603.028803][ T5914] usb 3-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=8d.1e [ 603.038913][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.047105][ T5914] usb 3-1: Product: syz [ 603.051291][ T5914] usb 3-1: Manufacturer: syz [ 603.056231][ T5914] usb 3-1: SerialNumber: syz [ 603.172705][T10863] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 603.181147][ T798] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 603.382030][T10863] usb 2-1: Using ep0 maxpacket: 16 [ 603.389516][ T798] usb 5-1: Using ep0 maxpacket: 16 [ 603.415057][T10863] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 603.464939][ T798] usb 5-1: unable to get BOS descriptor or descriptor too short [ 603.497715][ T798] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 603.512132][T10863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 603.551809][ T798] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 603.590479][T10863] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 603.608294][ T798] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 603.621310][T10863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.630723][T10863] usb 2-1: Product: syz [ 603.635828][T10863] usb 2-1: Manufacturer: syz [ 603.641202][T10863] usb 2-1: SerialNumber: syz [ 603.650746][ T798] usb 5-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 603.660222][ T798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.675403][ T798] usb 5-1: Product: syz [ 603.680593][T10863] usb 2-1: config 0 descriptor?? [ 603.690724][T10863] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 603.691988][ T9] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 603.710997][ T798] usb 5-1: Manufacturer: syz [ 603.718159][ T798] usb 5-1: SerialNumber: syz [ 603.723094][T10863] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 603.875225][ T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 603.893562][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 603.919087][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 603.941128][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 603.982934][T10863] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 603.983459][ T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 604.004509][T10863] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 604.019540][ T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 604.020661][T10863] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 604.044220][T10863] em28xx 2-1:0.0: No AC97 audio processor [ 604.044913][ T9] usb 4-1: Product: syz [ 604.070719][ T9] usb 4-1: Manufacturer: syz [ 604.091346][ T9] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 604.101293][T10863] usb 2-1: USB disconnect, device number 60 [ 604.154387][T10863] em28xx 2-1:0.0: Disconnecting em28xx [ 604.210934][T10863] em28xx 2-1:0.0: Freeing device [ 604.275180][ T798] usb 5-1: USB disconnect, device number 65 [ 604.434584][ T8614] udevd[8614]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 604.713945][ T9] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 604.816063][ T5914] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 604.836544][T10863] usb 4-1: USB disconnect, device number 51 [ 604.883788][ T5914] usb 3-1: USB disconnect, device number 59 [ 604.900523][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 604.920616][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 604.948277][ T9] usb 1-1: config 4 has an invalid interface number: 245 but max is 0 [ 604.972461][ T9] usb 1-1: config 4 has no interface number 0 [ 604.986718][ T9] usb 1-1: too many endpoints for config 4 interface 245 altsetting 7: 146, using maximum allowed: 30 [ 605.023125][ T9] usb 1-1: config 4 interface 245 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 146 [ 605.057594][ T9] usb 1-1: config 4 interface 245 has no altsetting 0 [ 605.095802][ T9] usb 1-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 605.117947][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.128756][ T9] usb 1-1: Product: syz [ 605.133851][ T9] usb 1-1: Manufacturer: syz [ 605.139006][ T9] usb 1-1: SerialNumber: syz [ 605.522022][ T5977] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 605.545536][T12078] tmpfs: Bad value for 'mpol' [ 605.694367][ T5977] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 605.730104][ T5977] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 605.955349][ T5977] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 606.023091][ T5977] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 606.055150][ T5977] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 606.077836][ T5977] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 606.088267][ T5977] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 606.097801][ T5977] usb 2-1: Product: syz [ 606.104149][ T5977] usb 2-1: Manufacturer: syz [ 606.144677][ T5977] cdc_wdm 2-1:1.0: skipping garbage [ 606.153427][ T5977] cdc_wdm 2-1:1.0: skipping garbage [ 606.182740][ T5977] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 606.191308][ T5977] cdc_wdm 2-1:1.0: Unknown control protocol [ 606.465549][T12098] ipt_rpfilter: unknown options [ 606.504063][T12098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1478'. [ 606.562189][ T9] ums-alauda 1-1:4.245: USB Mass Storage device detected [ 606.711772][ T9] usb 1-1: USB disconnect, device number 41 [ 606.853258][ T5816] usb 2-1: USB disconnect, device number 61 [ 606.902031][T10863] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 607.074748][T10863] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 607.097617][T10863] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 607.121064][T10863] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 607.131211][T10863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.161439][T10863] usb 4-1: Product: syz [ 607.258836][T10863] usb 4-1: Manufacturer: syz [ 607.275153][T10863] usb 4-1: SerialNumber: syz [ 607.293511][T10863] usb 4-1: config 0 descriptor?? [ 608.200773][ T5977] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 608.324032][T12122] No such timeout policy "syz0" [ 608.852774][ T5977] usb 3-1: Using ep0 maxpacket: 16 [ 608.873140][ T5977] usb 3-1: unable to get BOS descriptor or descriptor too short [ 608.897182][ T5977] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 608.910298][ T5977] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 608.921965][ T5977] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 608.959131][ T5977] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 608.983515][ T5977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.000670][ T5977] usb 3-1: Product: syz [ 609.009696][ T5977] usb 3-1: Manufacturer: syz [ 609.021039][ T5977] usb 3-1: SerialNumber: syz [ 609.615457][T12135] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 610.131048][T10863] mos7840 4-1:0.0: required endpoints missing [ 610.165019][T10863] usb 4-1: USB disconnect, device number 52 [ 610.215422][T12144] fuse: Bad value for 'fd' [ 610.663001][T12135] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 610.713284][T12135] team0: Port device batadv1 added [ 610.852629][ T5977] usb 3-1: USB disconnect, device number 60 [ 610.997871][ T8614] udevd[8614]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 611.280957][T12165] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 611.322067][ T5977] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 611.502028][ T5977] usb 3-1: device descriptor read/64, error -71 [ 611.762196][ T5977] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 612.462239][ T5977] usb 3-1: device descriptor read/64, error -71 [ 612.772529][ T5977] usb usb3-port1: attempt power cycle [ 613.109350][T12179] ipt_rpfilter: unknown options [ 613.125885][T12160] delete_channel: no stack [ 613.175237][ T5977] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 613.212571][ T5977] usb 3-1: device descriptor read/8, error -71 [ 613.302047][ T9] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 613.381977][ T5816] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 613.472130][ T5977] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 613.482718][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 613.493815][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 613.521303][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 613.554693][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 613.565754][ T5816] usb 4-1: Using ep0 maxpacket: 16 [ 613.580659][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.591202][ T5816] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 613.611948][ T9] usb 2-1: Product: syz [ 613.616194][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 613.627155][ T9] usb 2-1: Manufacturer: syz [ 613.637652][ T9] usb 2-1: SerialNumber: syz [ 613.644731][ T5816] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 613.659383][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.672051][T10863] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 613.683661][ T9] usb 2-1: config 0 descriptor?? [ 613.691944][ T5816] usb 4-1: Product: syz [ 613.708450][ T9] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 613.717743][ T5977] usb 3-1: device not accepting address 64, error -71 [ 613.724547][ T5816] usb 4-1: Manufacturer: syz [ 613.733845][ T5816] usb 4-1: SerialNumber: syz [ 613.740323][ T5977] usb usb3-port1: unable to enumerate USB device [ 613.754093][ T9] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 613.764836][ T5816] usb 4-1: config 0 descriptor?? [ 613.779085][ T5816] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 613.795410][ T5816] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 613.855550][T10863] usb 5-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 613.866850][T10863] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 613.886651][T12185] FAULT_INJECTION: forcing a failure. [ 613.886651][T12185] name failslab, interval 1, probability 0, space 0, times 0 [ 613.909610][T12177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1497'. [ 613.920807][T12185] CPU: 0 UID: 0 PID: 12185 Comm: syz.2.1501 Not tainted syzkaller #0 PREEMPT(full) [ 613.920835][T12185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 613.920848][T12185] Call Trace: [ 613.920855][T12185] [ 613.920865][T12185] dump_stack_lvl+0x100/0x190 [ 613.920895][T12185] should_fail_ex.cold+0x5/0xa [ 613.920922][T12185] ? tomoyo_encode2+0xfb/0x3c0 [ 613.920948][T12185] should_failslab+0xc2/0x120 [ 613.920982][T12185] __kmalloc_noprof+0xe0/0x850 [ 613.921016][T12185] tomoyo_encode2+0xfb/0x3c0 [ 613.921046][T12185] tomoyo_encode+0x29/0x50 [ 613.921073][T12185] tomoyo_realpath_from_path+0x18c/0x690 [ 613.921109][T12185] tomoyo_path_number_perm+0x23c/0x580 [ 613.921132][T12185] ? tomoyo_path_number_perm+0x22e/0x580 [ 613.921158][T12185] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 613.921213][T12185] ? find_held_lock+0x2b/0x80 [ 613.921251][T12185] ? __fget_files+0x215/0x3d0 [ 613.921271][T12185] ? hook_file_ioctl_common+0x149/0x410 [ 613.921299][T12185] ? __fget_files+0x215/0x3d0 [ 613.921322][T12185] ? __fget_files+0x21f/0x3d0 [ 613.921346][T12185] security_file_ioctl+0xd3/0x230 [ 613.921374][T12185] __x64_sys_ioctl+0xb7/0x210 [ 613.921406][T12185] do_syscall_64+0x10b/0xf80 [ 613.921426][T12185] ? clear_bhb_loop+0x40/0x90 [ 613.921453][T12185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.921476][T12185] RIP: 0033:0x7f792139c819 [ 613.921494][T12185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 613.921514][T12185] RSP: 002b:00007f79221ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 613.921535][T12185] RAX: ffffffffffffffda RBX: 00007f7921615fa0 RCX: 00007f792139c819 [ 613.921550][T12185] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 613.921562][T12185] RBP: 00007f79221ba090 R08: 0000000000000000 R09: 0000000000000000 [ 613.921575][T12185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 613.921588][T12185] R13: 00007f7921616038 R14: 00007f7921615fa0 R15: 00007ffc5669f378 [ 613.921617][T12185] [ 613.921666][T12185] ERROR: Out of memory at tomoyo_realpath_from_path. [ 613.926341][T10863] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 613.941418][T12185] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 613.950054][T10863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.162901][T10863] usb 5-1: Product: syz [ 614.167152][T10863] usb 5-1: Manufacturer: syz [ 614.171810][T10863] usb 5-1: SerialNumber: syz [ 614.180148][T10863] usb 5-1: config 0 descriptor?? [ 614.222339][ T9] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 614.234820][ T5816] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 614.242546][ T9] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 614.253910][ T5816] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 614.261278][ T9] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 614.269477][ T5816] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 614.271738][T12192] fuse: Bad value for 'fd' [ 614.278017][ T9] em28xx 2-1:0.0: No AC97 audio processor [ 614.287008][ T5816] em28xx 4-1:0.0: No AC97 audio processor [ 614.303174][ T9] usb 2-1: USB disconnect, device number 62 [ 614.311118][ T5816] usb 4-1: USB disconnect, device number 53 [ 614.329072][ T9] em28xx 2-1:0.0: Disconnecting em28xx [ 614.335460][ T5816] em28xx 4-1:0.0: Disconnecting em28xx [ 614.344507][ T9] em28xx 2-1:0.0: Freeing device [ 614.352486][ T5977] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 614.363946][ T5816] em28xx 4-1:0.0: Freeing device [ 614.521944][ T5977] usb 1-1: Using ep0 maxpacket: 8 [ 614.534328][ T5977] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 614.551954][ T5977] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 614.583368][ T5977] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 614.593449][ T5977] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 614.609869][ T5977] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 614.713931][T12197] No such timeout policy "syz0" [ 615.098886][ T5977] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 615.116211][ T5977] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 615.125313][ T5977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.238559][T12201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1506'. [ 615.474354][ T5977] usb 1-1: usb_control_msg returned -32 [ 615.483154][ T5977] usbtmc 1-1:16.0: can't read capabilities [ 616.520491][T10863] mos7840 5-1:0.0: required endpoints missing [ 616.978790][T10863] usb 5-1: USB disconnect, device number 66 [ 617.259733][T12223] ipt_rpfilter: unknown options [ 617.362238][ T798] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 617.410859][ T9] usb 1-1: USB disconnect, device number 42 [ 617.602911][ T5977] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 617.713315][ T798] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 617.736799][ T798] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 617.748102][ T798] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 617.763637][ T798] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 617.775410][ T798] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 617.810200][ T798] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 617.820048][ T798] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 617.832069][ T798] usb 4-1: Product: syz [ 617.843316][ T798] usb 4-1: Manufacturer: syz [ 617.894302][ T5977] usb 5-1: Using ep0 maxpacket: 16 [ 618.144296][ T5977] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 618.144389][ T798] cdc_wdm 4-1:1.0: skipping garbage [ 618.175439][ T5977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 618.187539][ T798] cdc_wdm 4-1:1.0: skipping garbage [ 618.202574][ T5977] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 618.211981][ T5977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.222330][ T798] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 618.237768][ T798] cdc_wdm 4-1:1.0: Unknown control protocol [ 618.291547][ T5977] usb 5-1: Product: syz [ 618.300083][ T5977] usb 5-1: Manufacturer: syz [ 618.310194][ T5977] usb 5-1: SerialNumber: syz [ 618.321762][ T5977] usb 5-1: config 0 descriptor?? [ 618.336670][ T5977] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 618.350613][ T5977] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 618.532120][ T5914] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 618.782840][T10863] usb 4-1: USB disconnect, device number 54 [ 618.824434][ T5977] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 618.842525][ T5977] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 618.853304][ T5914] usb 3-1: Using ep0 maxpacket: 16 [ 618.869125][ T5977] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 618.881584][ T5914] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 618.897793][ T5977] em28xx 5-1:0.0: No AC97 audio processor [ 618.914048][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 618.929416][ T5977] usb 5-1: USB disconnect, device number 67 [ 618.937916][ T5977] em28xx 5-1:0.0: Disconnecting em28xx [ 618.948087][ T5914] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 618.959233][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.970504][ T5977] em28xx 5-1:0.0: Freeing device [ 618.980261][ T5914] usb 3-1: Product: syz [ 618.987274][ T5914] usb 3-1: Manufacturer: syz [ 619.006333][ T5914] usb 3-1: SerialNumber: syz [ 619.019697][ T5914] usb 3-1: config 0 descriptor?? [ 619.030282][ T5914] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 619.041766][ T5914] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 619.230751][T12236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1516'. [ 619.312015][T10863] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 619.312308][ T5914] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 619.325901][ T5914] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 619.407745][ T5914] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 619.415173][ T5914] em28xx 3-1:0.0: No AC97 audio processor [ 619.443783][ T5914] usb 3-1: USB disconnect, device number 65 [ 619.457920][ T5914] em28xx 3-1:0.0: Disconnecting em28xx [ 619.464875][T10863] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 619.489433][ T5914] em28xx 3-1:0.0: Freeing device [ 619.515759][T10863] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 619.546969][T10863] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 619.559241][T12251] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 619.566311][T10863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.576433][T10863] usb 4-1: Product: syz [ 619.580774][T10863] usb 4-1: Manufacturer: syz [ 619.591336][T10863] usb 4-1: SerialNumber: syz [ 619.608970][T10863] usb 4-1: config 0 descriptor?? [ 620.058646][T12263] No such timeout policy "syz0" [ 620.700576][T12248] delete_channel: no stack [ 620.793413][ T798] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 620.951976][ T798] usb 2-1: Using ep0 maxpacket: 8 [ 620.962047][ T798] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 620.971497][ T798] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 621.014191][ T798] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 621.036104][ T798] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 621.062539][ T798] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 621.083808][ T798] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 621.118057][ T798] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 621.139444][ T798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.373677][ T798] usb 2-1: usb_control_msg returned -32 [ 621.400397][ T798] usbtmc 2-1:16.0: can't read capabilities [ 621.838630][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 621.859872][T12281] usbtmc 2-1:16.0: Unable to send data, error -71 [ 621.879906][T12281] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 621.982650][ T5816] usb 2-1: USB disconnect, device number 63 [ 622.048823][T10863] mos7840 4-1:0.0: required endpoints missing [ 622.147204][T10863] usb 4-1: USB disconnect, device number 55 [ 622.322650][ T5893] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 622.483577][ T5893] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 622.563791][ T5893] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 622.590045][ T5893] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 623.038046][ T5893] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 623.049237][ T5893] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 623.079645][ T5893] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 623.104001][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 623.121644][ T5893] usb 5-1: Product: syz [ 623.135223][ T5893] usb 5-1: Manufacturer: syz [ 623.171455][ T5893] cdc_wdm 5-1:1.0: skipping garbage [ 623.187002][ T5893] cdc_wdm 5-1:1.0: skipping garbage [ 623.208763][ T5893] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 623.224389][ T5893] cdc_wdm 5-1:1.0: Unknown control protocol [ 623.349550][T12301] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 623.902235][ T5893] usb 5-1: USB disconnect, device number 68 [ 624.066072][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.072468][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.550873][T12298] delete_channel: no stack [ 624.576662][T12312] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 625.706036][ T29] audit: type=1400 audit(1776414440.632:773): avc: denied { read } for pid=12319 comm="syz.1.1539" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 625.867054][ T29] audit: type=1400 audit(1776414440.632:774): avc: denied { open } for pid=12319 comm="syz.1.1539" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 625.881972][ T5816] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 625.969978][ T29] audit: type=1400 audit(1776414440.652:775): avc: denied { ioctl } for pid=12319 comm="syz.1.1539" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 626.103209][ T5816] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 626.113692][ T5816] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 626.143134][ T5816] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 626.160867][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.171709][T12309] delete_channel: no stack [ 626.182032][ T5816] usb 3-1: Product: syz [ 626.192253][ T5816] usb 3-1: Manufacturer: syz [ 626.201836][ T5816] usb 3-1: SerialNumber: syz [ 626.220417][ T5816] usb 3-1: config 0 descriptor?? [ 626.272000][ T5893] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 626.431961][ T5893] usb 2-1: Using ep0 maxpacket: 8 [ 626.444429][ T5893] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 626.457112][ T5893] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 626.585447][ T5893] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 626.621982][ T5893] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 626.705621][T12343] No such timeout policy "syz0" [ 627.031395][ T5893] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 627.041665][ T5893] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 627.070505][ T5893] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 627.102762][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.328526][ T5893] usb 2-1: usb_control_msg returned -32 [ 627.347177][ T5893] usbtmc 2-1:16.0: can't read capabilities [ 627.662108][ T5914] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 627.758764][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 627.768719][T12336] usbtmc 2-1:16.0: Unable to send data, error -71 [ 627.776381][T12336] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 627.842727][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 627.843049][ T5893] usb 2-1: USB disconnect, device number 64 [ 627.862304][ T5914] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 627.886141][ T5977] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 627.897792][ T5914] usb 5-1: config 0 interface 0 has no altsetting 0 [ 627.915852][ T5914] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 627.925275][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.940231][ T5914] usb 5-1: config 0 descriptor?? [ 628.107092][ T5977] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 628.157008][ T5977] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 628.295651][ T5977] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 628.340543][ T5977] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 628.406246][ T5977] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 628.456932][ T5977] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 628.466715][ T5977] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 628.474878][ T5977] usb 1-1: Product: syz [ 628.479238][ T5977] usb 1-1: Manufacturer: syz [ 628.498281][ T5977] cdc_wdm 1-1:1.0: skipping garbage [ 628.505946][ T5977] cdc_wdm 1-1:1.0: skipping garbage [ 628.516958][ T5977] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 628.526475][ T5977] cdc_wdm 1-1:1.0: Unknown control protocol [ 628.691166][ T5816] mos7840 3-1:0.0: required endpoints missing [ 628.719001][ T5816] usb 3-1: USB disconnect, device number 66 [ 628.941951][ T5914] corsair-cpro 0003:1B1C:0C10.0017: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 629.556289][ T5816] usb 1-1: USB disconnect, device number 43 [ 630.030357][ T29] audit: type=1400 audit(1776414444.952:776): avc: denied { ioctl } for pid=12356 comm="syz.2.1549" path="/dev/ptyq8" dev="devtmpfs" ino=127 ioctlcmd=0x540f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 630.373251][ T5914] corsair-cpro 0003:1B1C:0C10.0017: probe with driver corsair-cpro failed with error -71 [ 630.435028][ T5914] usb 5-1: USB disconnect, device number 69 [ 630.441382][T12359] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 631.906069][T12400] Bluetooth: MGMT ver 1.23 [ 632.162095][ T5816] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 632.352036][ T5914] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 632.361415][ T5816] usb 1-1: Using ep0 maxpacket: 8 [ 632.380204][ T5816] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 632.422035][ T5816] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 632.526816][ T5816] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 632.558767][ T5914] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 632.611592][ T5914] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 632.630986][ T5816] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 632.783806][ T5914] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 632.797517][ T5816] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 632.810824][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.820564][ T5816] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 632.833815][ T5914] usb 4-1: Product: syz [ 632.838277][ T5914] usb 4-1: Manufacturer: syz [ 632.846767][ T5914] usb 4-1: SerialNumber: syz [ 632.851559][ T5816] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 632.866078][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.943410][ T5914] usb 4-1: config 0 descriptor?? [ 633.545953][ T5816] usb 1-1: usb_control_msg returned -32 [ 633.565468][ T5816] usbtmc 1-1:16.0: can't read capabilities [ 633.686641][T12419] No such timeout policy "syz0" [ 634.572880][T12423] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 634.846651][T12431] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 635.164774][ T5914] mos7840 4-1:0.0: required endpoints missing [ 635.167053][ T5914] usb 4-1: USB disconnect, device number 56 [ 636.065818][ T5893] usb 1-1: USB disconnect, device number 44 [ 636.255735][T12428] delete_channel: no stack [ 636.622180][ T5893] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 636.781970][ T5893] usb 1-1: Using ep0 maxpacket: 16 [ 636.798309][ T5893] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 636.860161][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 636.937043][ T5893] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 636.997190][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.035788][ T5893] usb 1-1: Product: syz [ 637.042064][ T5893] usb 1-1: Manufacturer: syz [ 637.056898][ T5893] usb 1-1: SerialNumber: syz [ 637.088310][ T5893] usb 1-1: config 0 descriptor?? [ 637.131243][ T5893] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 637.202067][ T5893] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 637.325263][T12449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1570'. [ 637.454498][ T5893] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 637.568834][ T5893] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 637.605510][ T5893] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 637.618003][ T5893] em28xx 1-1:0.0: No AC97 audio processor [ 637.689118][ T5893] usb 1-1: USB disconnect, device number 45 [ 637.739026][ T5893] em28xx 1-1:0.0: Disconnecting em28xx [ 637.784328][ T5893] em28xx 1-1:0.0: Freeing device [ 638.432257][ T5816] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 638.614061][ T5816] usb 1-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 638.624245][ T5816] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 639.012234][ T5816] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 639.021434][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.038290][ T5816] usb 1-1: Product: syz [ 639.042739][ T5816] usb 1-1: Manufacturer: syz [ 639.052877][ T5816] usb 1-1: SerialNumber: syz [ 639.216913][ T5816] usb 1-1: config 0 descriptor?? [ 639.658322][T12490] No such timeout policy "syz0" [ 640.252110][ T9] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 640.284672][T12500] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 640.421976][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 640.430140][ T9] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 640.440853][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 640.468868][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 640.493158][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 640.510807][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 640.533864][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 640.562919][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 640.582015][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.811337][ T9] usb 5-1: usb_control_msg returned -32 [ 640.817559][ T9] usbtmc 5-1:16.0: can't read capabilities [ 641.114227][T12505] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 641.249841][ T5816] mos7840 1-1:0.0: required endpoints missing [ 641.258168][ T5816] usb 1-1: USB disconnect, device number 46 [ 641.352540][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 641.362748][T12506] usbtmc 5-1:16.0: Unable to send data, error -71 [ 641.369921][T12506] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 641.451276][T12495] delete_channel: no stack [ 641.497668][ T5879] usb 5-1: USB disconnect, device number 70 [ 642.127128][T12502] delete_channel: no stack [ 642.166838][T12518] overlayfs: missing 'lowerdir' [ 642.170797][ T5879] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 642.171955][ T5816] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 642.342187][ T5816] usb 2-1: Using ep0 maxpacket: 16 [ 642.353259][ T5879] usb 3-1: Using ep0 maxpacket: 32 [ 642.354611][ T5816] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 642.385295][ T5816] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 642.390388][ T5879] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 642.398120][ T5816] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 642.458256][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.467243][ T5816] usb 2-1: Product: syz [ 642.467540][ T5879] usb 3-1: config 0 interface 0 has no altsetting 0 [ 642.471578][ T5816] usb 2-1: Manufacturer: syz [ 642.485297][ T5816] usb 2-1: SerialNumber: syz [ 642.506125][ T5879] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 642.525970][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.549948][ T5816] usb 2-1: config 0 descriptor?? [ 642.573322][ T5879] usb 3-1: config 0 descriptor?? [ 642.575929][ T5816] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 642.601402][ T5816] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 642.692166][ T5893] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 642.852165][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 642.855448][T12516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1587'. [ 643.104715][ T5893] usb 5-1: unable to get BOS descriptor or descriptor too short [ 643.127291][ T5893] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 643.154571][ T5893] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 643.166538][ T5893] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 643.179810][ T5893] usb 5-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 643.189375][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.197615][ T5893] usb 5-1: Product: syz [ 643.202227][ T5893] usb 5-1: Manufacturer: syz [ 643.204375][ T5816] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 643.206922][ T5893] usb 5-1: SerialNumber: syz [ 643.237530][ T5816] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 643.278698][ T5816] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 643.290568][ T5816] em28xx 2-1:0.0: No AC97 audio processor [ 643.322943][ T5816] usb 2-1: USB disconnect, device number 65 [ 643.340273][ T5816] em28xx 2-1:0.0: Disconnecting em28xx [ 643.356326][ T5816] em28xx 2-1:0.0: Freeing device [ 643.417969][ T5879] corsair-cpro 0003:1B1C:0C10.0018: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 644.361484][ T5879] corsair-cpro 0003:1B1C:0C10.0018: probe with driver corsair-cpro failed with error -71 [ 644.427642][ T5879] usb 3-1: USB disconnect, device number 67 [ 645.766223][T12556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1597'. [ 646.153484][ T5893] usb 5-1: USB disconnect, device number 71 [ 646.210557][ T8628] udevd[8628]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 646.560361][T12571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1600'. [ 646.662336][ T5893] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 646.832356][ T5893] usb 3-1: Using ep0 maxpacket: 8 [ 646.854370][ T5893] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 646.876421][ T5893] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 646.928966][ T5893] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 646.965446][ T5893] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 647.001600][ T5893] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 647.035015][ T5893] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 647.089266][ T5893] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 647.134774][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.385924][ T5893] usb 3-1: usb_control_msg returned -32 [ 647.396137][ T5893] usbtmc 3-1:16.0: can't read capabilities [ 647.829420][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 647.867359][T12566] usbtmc 3-1:16.0: Unable to send data, error -71 [ 647.882853][T12566] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 647.996566][ T5816] usb 3-1: USB disconnect, device number 68 [ 649.363614][T12593] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 649.916193][T12584] delete_channel: no stack [ 649.981809][ T5816] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 650.186641][ T5816] usb 3-1: Using ep0 maxpacket: 32 [ 650.206652][ T5816] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 650.521316][ T5816] usb 3-1: config 0 interface 0 has no altsetting 0 [ 650.538145][ T5816] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 650.581768][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.625184][ T5816] usb 3-1: config 0 descriptor?? [ 651.467403][ T5816] corsair-cpro 0003:1B1C:0C10.0019: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 651.704874][ T5816] corsair-cpro 0003:1B1C:0C10.0019: probe with driver corsair-cpro failed with error -5 [ 651.827211][T12622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1612'. [ 652.028581][ T5816] usb 3-1: USB disconnect, device number 69 [ 652.583331][T12634] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1613'. [ 654.170887][T12660] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 655.416842][T12657] delete_channel: no stack [ 656.752019][ T5816] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 656.955479][ T5816] usb 1-1: Using ep0 maxpacket: 32 [ 656.983786][ T5816] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 657.013369][ T5816] usb 1-1: config 0 interface 0 has no altsetting 0 [ 657.041196][ T5816] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 657.075023][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.124786][ T5816] usb 1-1: config 0 descriptor?? [ 657.409565][T12691] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1627'. [ 657.435364][T12691] netlink: 'syz.4.1627': attribute type 1 has an invalid length. [ 657.475055][T12691] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1627'. [ 657.956430][ T5816] corsair-cpro 0003:1B1C:0C10.001A: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 658.152339][ T5879] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 658.487347][ T5816] corsair-cpro 0003:1B1C:0C10.001A: probe with driver corsair-cpro failed with error -110 [ 658.663684][ T5879] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 658.701507][ T5879] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 658.768142][ T5879] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 658.805314][ T5816] usb 1-1: USB disconnect, device number 47 [ 658.817715][ T5879] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 658.898155][ T5879] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 658.934804][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 658.970513][ T5879] usb 5-1: Product: syz [ 658.990081][ T5879] usb 5-1: Manufacturer: syz [ 659.021220][ T5879] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 659.737585][T12729] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1632'. [ 659.749157][T12729] netlink: 'syz.0.1632': attribute type 1 has an invalid length. [ 659.758828][T12729] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1632'. [ 660.301832][T12737] overlayfs: missing 'lowerdir' [ 660.472002][ T46] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 660.564514][T10863] usb 5-1: USB disconnect, device number 72 [ 660.753849][ T46] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 660.826774][ T46] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 660.939163][ T46] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 661.018315][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.050461][ T46] usb 3-1: Product: syz [ 661.062018][ T46] usb 3-1: Manufacturer: syz [ 661.066702][ T46] usb 3-1: SerialNumber: syz [ 661.078468][ T46] usb 3-1: config 0 descriptor?? [ 661.164422][T12752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1638'. [ 661.592797][T12758] No such timeout policy "syz0" [ 662.494964][T12768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1641'. [ 662.921964][T10863] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 663.123415][T10863] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 663.144500][T10863] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 663.191310][T10863] usb 5-1: config 0 has no interface number 0 [ 663.253893][ T46] mos7840 3-1:0.0: required endpoints missing [ 663.274751][T10863] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 663.286815][ T46] usb 3-1: USB disconnect, device number 70 [ 663.301059][T10863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.315671][T10863] usb 5-1: Product: syz [ 663.370826][T10863] usb 5-1: Manufacturer: syz [ 663.408979][T10863] usb 5-1: SerialNumber: syz [ 663.493951][T10863] usb 5-1: config 0 descriptor?? [ 663.800534][T10863] uvcvideo 5-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 663.809931][T10863] uvcvideo 5-1:0.64: No valid video chain found. [ 663.848389][T10863] usb 5-1: USB disconnect, device number 73 [ 664.068012][T12787] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1646'. [ 664.309355][T12790] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1647'. [ 664.724377][T12793] overlayfs: missing 'lowerdir' [ 666.024642][T12804] FAULT_INJECTION: forcing a failure. [ 666.024642][T12804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 666.060851][T12804] CPU: 0 UID: 0 PID: 12804 Comm: syz.4.1652 Not tainted syzkaller #0 PREEMPT(full) [ 666.060881][T12804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 666.060890][T12804] Call Trace: [ 666.060894][T12804] [ 666.060899][T12804] dump_stack_lvl+0x100/0x190 [ 666.060918][T12804] should_fail_ex.cold+0x5/0xa [ 666.060934][T12804] strncpy_from_user+0x3b/0x2d0 [ 666.060955][T12804] do_getname+0x78/0x390 [ 666.060971][T12804] do_sys_openat2+0xc5/0x1e0 [ 666.060985][T12804] ? __pfx_do_sys_openat2+0x10/0x10 [ 666.061000][T12804] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 666.061016][T12804] ? __fget_files+0x21f/0x3d0 [ 666.061030][T12804] __x64_sys_openat+0x12d/0x210 [ 666.061044][T12804] ? __pfx___x64_sys_openat+0x10/0x10 [ 666.061058][T12804] ? ksys_write+0x1ac/0x250 [ 666.061076][T12804] ? rcu_is_watching+0x12/0xc0 [ 666.061096][T12804] do_syscall_64+0x10b/0xf80 [ 666.061107][T12804] ? clear_bhb_loop+0x40/0x90 [ 666.061122][T12804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.061134][T12804] RIP: 0033:0x7f021ff9c819 [ 666.061153][T12804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 666.061164][T12804] RSP: 002b:00007f0220ec1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 666.061177][T12804] RAX: ffffffffffffffda RBX: 00007f0220215fa0 RCX: 00007f021ff9c819 [ 666.061185][T12804] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 666.061192][T12804] RBP: 00007f0220ec1090 R08: 0000000000000000 R09: 0000000000000000 [ 666.061199][T12804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 666.061206][T12804] R13: 00007f0220216038 R14: 00007f0220215fa0 R15: 00007ffdae30e628 [ 666.061221][T12804] [ 666.532275][T10863] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 666.578975][T12816] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1657'. [ 666.687335][T10863] usb 1-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 666.713203][T10863] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 666.734596][T10863] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 666.744170][T10863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.757420][T10863] usb 1-1: Product: syz [ 666.778342][T10863] usb 1-1: Manufacturer: syz [ 666.809084][T10863] usb 1-1: SerialNumber: syz [ 667.114901][T10863] usb 1-1: config 0 descriptor?? [ 667.558594][T12832] No such timeout policy "syz0" [ 669.286570][T10863] mos7840 1-1:0.0: required endpoints missing [ 669.327736][T10863] usb 1-1: USB disconnect, device number 48 [ 670.561978][T10863] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 670.792059][T10863] usb 5-1: Using ep0 maxpacket: 32 [ 670.810002][T10863] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 670.850729][ T29] audit: type=1400 audit(1776414485.772:777): avc: denied { ioctl } for pid=12864 comm="syz.1.1670" path="socket:[53917]" dev="sockfs" ino=53917 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 670.879985][T10863] usb 5-1: config 0 interface 0 has no altsetting 0 [ 670.892754][T10863] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 670.910994][T10863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.957068][T10863] usb 5-1: config 0 descriptor?? [ 671.687082][T12868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1671'. [ 671.763284][T10863] corsair-cpro 0003:1B1C:0C10.001B: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 672.021734][T10863] corsair-cpro 0003:1B1C:0C10.001B: probe with driver corsair-cpro failed with error -5 [ 672.396628][T12875] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1672'. [ 672.806635][ T5914] usb 5-1: USB disconnect, device number 74 [ 673.131964][T10863] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 673.302022][T10863] usb 2-1: Using ep0 maxpacket: 16 [ 673.314814][T10863] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 673.341702][T10863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 673.410041][T10863] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 673.462950][T10863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.482132][T10863] usb 2-1: Product: syz [ 673.740555][T10863] usb 2-1: Manufacturer: syz [ 673.764410][T10863] usb 2-1: SerialNumber: syz [ 673.793189][T10863] usb 2-1: config 0 descriptor?? [ 673.841133][T10863] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 673.869774][T10863] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 674.012530][ T5914] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 674.418454][T12878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1673'. [ 674.853255][ T5914] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 674.878459][ T5914] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 674.910721][ T5914] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 674.912452][T10863] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 674.933467][T12893] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1678'. [ 674.947864][T10863] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 674.958117][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.975530][T10863] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 674.991463][ T5914] usb 3-1: Product: syz [ 675.000349][T10863] em28xx 2-1:0.0: No AC97 audio processor [ 675.020027][ T5914] usb 3-1: Manufacturer: syz [ 675.038492][T10863] usb 2-1: USB disconnect, device number 66 [ 675.062702][T10863] em28xx 2-1:0.0: Disconnecting em28xx [ 675.074095][ T5914] usb 3-1: SerialNumber: syz [ 675.113410][T10863] em28xx 2-1:0.0: Freeing device [ 675.252808][ T5914] usb 3-1: config 0 descriptor?? [ 676.057029][T12904] No such timeout policy "syz0" [ 676.623102][T12906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1681'. [ 677.013284][T12910] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 677.518294][ T5914] mos7840 3-1:0.0: required endpoints missing [ 677.649782][ T5914] usb 3-1: USB disconnect, device number 71 [ 677.691451][T12914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1683'. [ 678.559540][T12919] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1685'. [ 680.967412][T12947] FAULT_INJECTION: forcing a failure. [ 680.967412][T12947] name failslab, interval 1, probability 0, space 0, times 0 [ 680.980594][T12947] CPU: 1 UID: 0 PID: 12947 Comm: syz.1.1690 Not tainted syzkaller #0 PREEMPT(full) [ 680.980624][T12947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 680.980637][T12947] Call Trace: [ 680.980644][T12947] [ 680.980652][T12947] dump_stack_lvl+0x100/0x190 [ 680.980680][T12947] should_fail_ex.cold+0x5/0xa [ 680.980716][T12947] ? tomoyo_encode2+0xfb/0x3c0 [ 680.980743][T12947] should_failslab+0xc2/0x120 [ 680.980776][T12947] __kmalloc_noprof+0xe0/0x850 [ 680.980802][T12947] ? tomoyo_encode2+0x8e/0x3c0 [ 680.980835][T12947] tomoyo_encode2+0xfb/0x3c0 [ 680.980867][T12947] tomoyo_encode+0x29/0x50 [ 680.980894][T12947] tomoyo_realpath_from_path+0x18c/0x690 [ 680.980930][T12947] tomoyo_path_number_perm+0x23c/0x580 [ 680.980954][T12947] ? tomoyo_path_number_perm+0x22e/0x580 [ 680.980981][T12947] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 680.981004][T12947] ? trace_sched_exit_tp+0x11c/0x160 [ 680.981056][T12947] ? find_held_lock+0x2b/0x80 [ 680.981087][T12947] ? __fget_files+0x215/0x3d0 [ 680.981107][T12947] ? hook_file_ioctl_common+0x149/0x410 [ 680.981138][T12947] ? __fget_files+0x215/0x3d0 [ 680.981164][T12947] ? __fget_files+0x21f/0x3d0 [ 680.981190][T12947] security_file_ioctl+0xd3/0x230 [ 680.981218][T12947] __x64_sys_ioctl+0xb7/0x210 [ 680.981250][T12947] do_syscall_64+0x10b/0xf80 [ 680.981271][T12947] ? clear_bhb_loop+0x40/0x90 [ 680.981297][T12947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.981320][T12947] RIP: 0033:0x7f2f6ed9c819 [ 680.981337][T12947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.981358][T12947] RSP: 002b:00007f2f6fc59028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 680.981379][T12947] RAX: ffffffffffffffda RBX: 00007f2f6f016180 RCX: 00007f2f6ed9c819 [ 680.981393][T12947] RDX: 00002000000000c0 RSI: 00000000c040aed5 RDI: 0000000000000009 [ 680.981411][T12947] RBP: 00007f2f6fc59090 R08: 0000000000000000 R09: 0000000000000000 [ 680.981423][T12947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 680.981436][T12947] R13: 00007f2f6f016218 R14: 00007f2f6f016180 R15: 00007ffdada79968 [ 680.981465][T12947] [ 681.199305][T12947] ERROR: Out of memory at tomoyo_realpath_from_path. [ 681.622052][ T5879] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 681.942627][ T5914] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 682.468978][ T5914] usb 5-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 682.493897][ T5914] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 682.665928][ T5914] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 682.703584][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.724764][ T5914] usb 5-1: Product: syz [ 682.733849][T12967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1698'. [ 682.752281][ T5914] usb 5-1: Manufacturer: syz [ 682.757754][ T5914] usb 5-1: SerialNumber: syz [ 682.779542][ T5914] usb 5-1: config 0 descriptor?? [ 683.231494][T12975] No such timeout policy "syz0" [ 683.838397][T12984] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1701'. [ 683.847539][ T29] audit: type=1400 audit(2000000004.509:778): avc: denied { nlmsg_read } for pid=12979 comm="syz.2.1701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 684.003168][T12984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1701'. [ 684.398337][ T5813] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 684.574173][ T5813] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 684.587401][ T5813] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 684.603862][ T5813] usb 3-1: config 0 has no interfaces? [ 684.614486][ T5813] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 684.630312][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.645996][ T5813] usb 3-1: config 0 descriptor?? [ 684.750244][ T5914] mos7840 5-1:0.0: required endpoints missing [ 684.774146][ T5914] usb 5-1: USB disconnect, device number 75 [ 684.926842][T12985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1701'. [ 685.450316][ T29] audit: type=1400 audit(2000000006.119:779): avc: denied { map } for pid=12995 comm="syz.0.1704" path="socket:[54459]" dev="sockfs" ino=54459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 685.507848][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.516750][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.562574][ T798] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 687.126465][T13017] FAULT_INJECTION: forcing a failure. [ 687.126465][T13017] name failslab, interval 1, probability 0, space 0, times 0 [ 687.139288][T13017] CPU: 0 UID: 0 PID: 13017 Comm: syz.0.1709 Not tainted syzkaller #0 PREEMPT(full) [ 687.139314][T13017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 687.139321][T13017] Call Trace: [ 687.139326][T13017] [ 687.139330][T13017] dump_stack_lvl+0x100/0x190 [ 687.139350][T13017] should_fail_ex.cold+0x5/0xa [ 687.139367][T13017] ? tomoyo_encode2+0xfb/0x3c0 [ 687.139387][T13017] should_failslab+0xc2/0x120 [ 687.139406][T13017] __kmalloc_noprof+0xe0/0x850 [ 687.139421][T13017] ? rcu_is_watching+0x12/0xc0 [ 687.139441][T13017] tomoyo_encode2+0xfb/0x3c0 [ 687.139458][T13017] tomoyo_encode+0x29/0x50 [ 687.139473][T13017] tomoyo_realpath_from_path+0x18c/0x690 [ 687.139493][T13017] tomoyo_path_number_perm+0x23c/0x580 [ 687.139506][T13017] ? tomoyo_path_number_perm+0x22e/0x580 [ 687.139520][T13017] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 687.139534][T13017] ? ktime_get+0x1a4/0x320 [ 687.139561][T13017] ? find_held_lock+0x2b/0x80 [ 687.139578][T13017] ? __fget_files+0x215/0x3d0 [ 687.139589][T13017] ? hook_file_ioctl_common+0x149/0x410 [ 687.139606][T13017] ? __fget_files+0x215/0x3d0 [ 687.139620][T13017] ? __fget_files+0x21f/0x3d0 [ 687.139633][T13017] security_file_ioctl+0xd3/0x230 [ 687.139649][T13017] __x64_sys_ioctl+0xb7/0x210 [ 687.139667][T13017] do_syscall_64+0x10b/0xf80 [ 687.139679][T13017] ? clear_bhb_loop+0x40/0x90 [ 687.139694][T13017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.139706][T13017] RIP: 0033:0x7f2121b9c819 [ 687.139716][T13017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 687.139728][T13017] RSP: 002b:00007f2122a9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 687.139740][T13017] RAX: ffffffffffffffda RBX: 00007f2121e16090 RCX: 00007f2121b9c819 [ 687.139747][T13017] RDX: 0000200000000040 RSI: 00000000c0686611 RDI: 0000000000000004 [ 687.139755][T13017] RBP: 00007f2122a9c090 R08: 0000000000000000 R09: 0000000000000000 [ 687.139761][T13017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.139768][T13017] R13: 00007f2121e16128 R14: 00007f2121e16090 R15: 00007fff77d90318 [ 687.139784][T13017] [ 687.140640][T13017] ERROR: Out of memory at tomoyo_realpath_from_path. [ 687.615261][ T798] usb 5-1: Using ep0 maxpacket: 16 [ 687.685830][ T798] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 687.754400][ T798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 687.836760][ T798] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 687.885363][ T798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.906506][ T798] usb 5-1: Product: syz [ 687.927262][ T798] usb 5-1: Manufacturer: syz [ 687.956505][ T798] usb 5-1: SerialNumber: syz [ 687.994060][ T798] usb 5-1: config 0 descriptor?? [ 688.040577][ T798] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 688.103504][ T798] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 688.242311][T13007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1706'. [ 688.733215][ T798] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 688.755013][ T798] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 688.772214][ T798] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 688.797797][ T798] em28xx 5-1:0.0: No AC97 audio processor [ 688.864668][ T798] usb 5-1: USB disconnect, device number 76 [ 688.947737][ T798] em28xx 5-1:0.0: Disconnecting em28xx [ 689.001056][ T798] em28xx 5-1:0.0: Freeing device [ 689.088780][ T5813] usb 3-1: string descriptor 0 read error: -71 [ 689.110640][ T5813] usb 3-1: USB disconnect, device number 72 [ 689.212179][ T46] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 689.385112][ T46] usb 2-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 689.410251][ T46] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 689.484165][ T46] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 689.499167][T13036] FAULT_INJECTION: forcing a failure. [ 689.499167][T13036] name failslab, interval 1, probability 0, space 0, times 0 [ 689.526720][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.536313][T13036] CPU: 1 UID: 0 PID: 13036 Comm: syz.4.1715 Not tainted syzkaller #0 PREEMPT(full) [ 689.536344][T13036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 689.536356][T13036] Call Trace: [ 689.536363][T13036] [ 689.536371][T13036] dump_stack_lvl+0x100/0x190 [ 689.536402][T13036] should_fail_ex.cold+0x5/0xa [ 689.536431][T13036] ? alloc_pipe_info+0x1ec/0x590 [ 689.536452][T13036] should_failslab+0xc2/0x120 [ 689.536485][T13036] __kmalloc_noprof+0xe0/0x850 [ 689.536520][T13036] alloc_pipe_info+0x1ec/0x590 [ 689.536545][T13036] splice_direct_to_actor+0x78f/0xa30 [ 689.536572][T13036] ? __pfx_direct_splice_actor+0x10/0x10 [ 689.536594][T13036] ? inode_has_perm+0x16d/0x1d0 [ 689.536618][T13036] ? __file_has_perm+0x336/0x460 [ 689.536642][T13036] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 689.536666][T13036] ? __pfx___file_has_perm+0x10/0x10 [ 689.536696][T13036] do_splice_direct+0x174/0x240 [ 689.536721][T13036] ? __pfx_do_splice_direct+0x10/0x10 [ 689.536745][T13036] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 689.536770][T13036] ? bpf_lsm_file_permission+0x9/0x10 [ 689.536799][T13036] ? security_file_permission+0x76/0x210 [ 689.536829][T13036] ? rw_verify_area+0xce/0x6d0 [ 689.536854][T13036] do_sendfile+0xadc/0xe20 [ 689.536891][T13036] ? __pfx_do_sendfile+0x10/0x10 [ 689.536919][T13036] ? __fget_files+0x21f/0x3d0 [ 689.536947][T13036] __x64_sys_sendfile64+0x1d8/0x220 [ 689.536968][T13036] ? ksys_write+0x1ac/0x250 [ 689.536996][T13036] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 689.537022][T13036] ? rcu_is_watching+0x12/0xc0 [ 689.537054][T13036] do_syscall_64+0x10b/0xf80 [ 689.537072][T13036] ? clear_bhb_loop+0x40/0x90 [ 689.537099][T13036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.537120][T13036] RIP: 0033:0x7f021ff9c819 [ 689.537140][T13036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 689.537159][T13036] RSP: 002b:00007f0220ec1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 689.537178][T13036] RAX: ffffffffffffffda RBX: 00007f0220215fa0 RCX: 00007f021ff9c819 [ 689.537192][T13036] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 689.537203][T13036] RBP: 00007f0220ec1090 R08: 0000000000000000 R09: 0000000000000000 [ 689.537214][T13036] R10: 000000007ffff004 R11: 0000000000000246 R12: 0000000000000001 [ 689.537224][T13036] R13: 00007f0220216038 R14: 00007f0220215fa0 R15: 00007ffdae30e628 [ 689.537239][T13036] [ 689.783585][ T46] usb 2-1: Product: syz [ 689.787755][ T46] usb 2-1: Manufacturer: syz [ 689.792408][ T46] usb 2-1: SerialNumber: syz [ 689.814199][ T46] usb 2-1: config 0 descriptor?? [ 689.942397][T13040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1711'. [ 690.363634][T13052] No such timeout policy "syz0" [ 691.982297][ T46] mos7840 2-1:0.0: required endpoints missing [ 692.066320][ T46] usb 2-1: USB disconnect, device number 67 [ 692.082141][T13063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1721'. [ 692.091042][T13063] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1721'. [ 692.432735][ T5813] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 692.472126][ T46] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 692.603432][ T5813] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 692.638145][ T5813] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 692.649743][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 692.655520][ T5813] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 692.678213][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 692.779902][ T46] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 692.801971][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.811930][ T46] usb 2-1: Product: syz [ 692.813067][ T5813] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 692.816125][ T46] usb 2-1: Manufacturer: syz [ 692.816145][ T46] usb 2-1: SerialNumber: syz [ 692.821412][ T46] usb 2-1: config 0 descriptor?? [ 693.298332][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.319508][T13063] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1721'. [ 693.320648][ T5813] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 693.361228][ T5813] usb 3-1: invalid MIDI out EP 0 [ 693.586065][ T29] audit: type=1400 audit(2000000014.259:780): avc: denied { append } for pid=13076 comm="syz.0.1726" name="demux0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 693.635167][ T5813] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 693.691823][ T5813] usb 3-1: USB disconnect, device number 73 [ 694.259984][ T29] audit: type=1400 audit(2000000014.929:781): avc: denied { mount } for pid=13088 comm="syz.4.1728" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 694.981940][ T46] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 695.163347][ T46] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 695.193833][ T46] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 695.230137][ T46] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 695.251053][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.275342][ T46] usb 3-1: Product: syz [ 695.290009][ T46] usb 3-1: Manufacturer: syz [ 695.303191][ T46] usb 3-1: SerialNumber: syz [ 695.315214][ T798] usb 2-1: USB disconnect, device number 68 [ 695.350018][ T46] usb 3-1: config 0 descriptor?? [ 695.833014][T13115] No such timeout policy "syz0" [ 696.243126][ T29] audit: type=1400 audit(2000000016.889:782): avc: denied { shutdown } for pid=13105 comm="syz.0.1732" laddr=fe80::15 lport=33456 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 697.009897][ T5879] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 697.668920][ T5879] usb 2-1: Using ep0 maxpacket: 16 [ 697.693708][ T5879] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 697.726597][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 697.847099][ T46] mos7840 3-1:0.0: required endpoints missing [ 697.882681][ T5879] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 697.901204][ T46] usb 3-1: USB disconnect, device number 74 [ 697.946016][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.068221][ T5879] usb 2-1: Product: syz [ 698.076841][ T5879] usb 2-1: Manufacturer: syz [ 698.608656][ T5879] usb 2-1: SerialNumber: syz [ 698.681553][ T5879] usb 2-1: config 0 descriptor?? [ 698.701791][ T5879] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 698.729731][ T5879] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 698.939729][T13123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1735'. [ 699.130674][ T5879] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 699.175602][ T5879] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 699.199754][ T5879] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 699.244381][ T29] audit: type=1400 audit(2000000019.919:783): avc: denied { read write } for pid=13140 comm="syz.2.1740" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 699.624403][ T5879] em28xx 2-1:0.0: No AC97 audio processor [ 699.653466][ T29] audit: type=1400 audit(2000000019.959:784): avc: denied { open } for pid=13140 comm="syz.2.1740" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 699.670771][ T5879] usb 2-1: USB disconnect, device number 69 [ 699.710124][ T5914] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 699.781073][ T5879] em28xx 2-1:0.0: Disconnecting em28xx [ 699.911684][ T5879] em28xx 2-1:0.0: Freeing device [ 699.961941][ T5813] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 700.010412][ T5914] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 700.193779][ T5813] usb 3-1: config 0 has no interfaces? [ 700.218651][ T5813] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 700.232157][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 700.234064][T13154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1742'. [ 700.671986][ T5813] usb 3-1: SerialNumber: syz [ 700.703248][ T5813] usb 3-1: config 0 descriptor?? [ 701.312397][ T798] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 701.528251][ T798] usb 4-1: Using ep0 maxpacket: 16 [ 701.575992][ T798] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 701.594806][ T798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 701.622954][ T798] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 701.648333][ T798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.707164][ T798] usb 4-1: Product: syz [ 701.737776][ T798] usb 4-1: Manufacturer: syz [ 701.755357][ T798] usb 4-1: SerialNumber: syz [ 701.791730][ T798] usb 4-1: config 0 descriptor?? [ 701.850298][ T798] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 701.877672][ T798] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 702.054394][T13162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1745'. [ 702.142207][ T798] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 702.167871][ T798] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 702.188514][ T798] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 702.210193][ T798] em28xx 4-1:0.0: No AC97 audio processor [ 702.259521][ T798] usb 4-1: USB disconnect, device number 57 [ 702.281983][ T5813] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 702.318504][ T798] em28xx 4-1:0.0: Disconnecting em28xx [ 702.340368][ T798] em28xx 4-1:0.0: Freeing device [ 702.390621][ T5914] usb 3-1: USB disconnect, device number 75 [ 702.452209][ T5813] usb 2-1: Using ep0 maxpacket: 16 [ 702.472908][ T5813] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 702.499358][ T5813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 702.534682][ T5813] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 702.572232][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.600605][ T5813] usb 2-1: Product: syz [ 702.611972][ T5813] usb 2-1: Manufacturer: syz [ 702.636160][ T5813] usb 2-1: SerialNumber: syz [ 702.665392][ T5813] usb 2-1: config 0 descriptor?? [ 702.698889][ T5813] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 702.720296][ T5813] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 702.900095][T13176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1748'. [ 702.932158][ T798] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 703.202072][ T5813] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 703.208462][ T5813] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 703.215767][ T5813] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 703.223849][ T5813] em28xx 2-1:0.0: No AC97 audio processor [ 703.235909][ T5813] usb 2-1: USB disconnect, device number 70 [ 703.243319][ T5813] em28xx 2-1:0.0: Disconnecting em28xx [ 703.255480][ T5813] em28xx 2-1:0.0: Freeing device [ 703.274136][T13025] udevd[13025]: setting mode of /dev/bus/usb/002/070 to 020664 failed: No such file or directory [ 703.304409][ T798] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 703.320586][T13025] udevd[13025]: setting owner of /dev/bus/usb/002/070 to uid=0, gid=0 failed: No such file or directory [ 703.343051][ T798] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 703.388302][ T798] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 703.417262][ T798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.443814][ T798] usb 3-1: Product: syz [ 703.457238][ T798] usb 3-1: Manufacturer: syz [ 703.472667][ T798] usb 3-1: SerialNumber: syz [ 703.499366][ T798] usb 3-1: config 0 descriptor?? [ 703.512002][ T5914] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 703.848709][ T5914] usb 1-1: unable to get BOS descriptor or descriptor too short [ 703.859316][ T5914] usb 1-1: not running at top speed; connect to a high speed hub [ 703.868849][ T5914] usb 1-1: config 8 has an invalid interface number: 99 but max is 0 [ 703.877975][ T5914] usb 1-1: config 8 has no interface number 0 [ 703.886551][ T5914] usb 1-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=8d.1e [ 703.899156][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.920040][ T5914] usb 1-1: Product: syz [ 703.963871][T13195] No such timeout policy "syz0" [ 704.432919][ T5914] usb 1-1: Manufacturer: syz [ 704.479991][ T5914] usb 1-1: SerialNumber: syz [ 705.915507][ T798] mos7840 3-1:0.0: required endpoints missing [ 705.974179][ T798] usb 3-1: USB disconnect, device number 76 [ 706.752403][ T5813] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 706.946832][ T5813] usb 2-1: Using ep0 maxpacket: 16 [ 707.178370][ T5813] usb 2-1: unable to get BOS descriptor or descriptor too short [ 707.203444][ T5813] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 707.222010][ T5813] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 707.232088][ T5914] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 707.240312][ T5813] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 707.255519][ T5914] usb 1-1: USB disconnect, device number 50 [ 707.283983][ T5813] usb 2-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 707.311916][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.345821][ T5813] usb 2-1: Product: syz [ 707.360521][ T5813] usb 2-1: Manufacturer: syz [ 707.377395][ T5813] usb 2-1: SerialNumber: syz [ 707.540034][ T29] audit: type=1400 audit(2000000028.209:785): avc: denied { connect } for pid=13217 comm="syz.0.1759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 709.046885][ T29] audit: type=1400 audit(2000000029.069:786): avc: denied { mount } for pid=13215 comm="syz.3.1758" name="/" dev="hugetlbfs" ino=56020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 709.330907][T13229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1763'. [ 709.480542][ T5813] usb 2-1: USB disconnect, device number 71 [ 709.588834][T13236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1764'. [ 709.659280][ T8687] udevd[8687]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 710.598730][T13252] fuse: Bad value for 'fd' [ 710.637009][T13255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1767'. [ 711.351635][T13265] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 711.572560][ T5816] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 711.595366][T13254] delete_channel: no stack [ 711.908321][ T5816] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 711.917121][ T5816] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 711.935537][ T5816] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 712.030621][ T5816] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 712.045742][ T5816] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 712.099302][ T5816] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 712.118764][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 712.149515][ T5816] usb 1-1: Product: syz [ 712.159778][ T5816] usb 1-1: Manufacturer: syz [ 712.207167][ T5816] cdc_wdm 1-1:1.0: skipping garbage [ 712.223340][ T5816] cdc_wdm 1-1:1.0: skipping garbage [ 712.238981][ T5816] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 712.249502][ T5816] cdc_wdm 1-1:1.0: Unknown control protocol [ 712.341960][ T29] audit: type=1400 audit(2000000033.009:787): avc: denied { remove_name } for pid=13277 comm="syz.2.1772" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 712.462409][ T5813] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 712.480330][ T29] audit: type=1400 audit(2000000033.009:788): avc: denied { unlink } for pid=13277 comm="syz.2.1772" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 712.689433][ T5813] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 712.748133][ T5813] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 712.823287][ T5813] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 712.847263][ T5813] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 712.875459][ T5813] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 712.908479][ T5813] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 712.919829][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.941294][ T5813] usb 2-1: Product: syz [ 712.950133][ T29] audit: type=1400 audit(2000000033.629:789): avc: denied { getopt } for pid=13293 comm="syz.3.1774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 712.954190][ T5813] usb 2-1: Manufacturer: syz [ 713.080683][ T5813] usb 2-1: SerialNumber: syz [ 713.106902][T13283] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 713.532600][ T5813] cdc_mbim 2-1:1.0: skipping garbage [ 713.723480][T13283] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 713.787459][ T798] usb 1-1: USB disconnect, device number 51 [ 714.125035][ T7630] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.366439][T13283] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 714.481402][ T7630] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.610793][ T5813] cdc_mbim 2-1:1.0: bind() failure [ 714.658047][ T5813] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 714.690243][ T5813] cdc_ncm 2-1:1.1: bind() failure [ 714.696011][ T7630] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.797218][T11230] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 714.815685][T11230] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 714.835334][T11230] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 714.843808][T11230] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 714.852916][T11230] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 714.974113][ T5816] usb 2-1: USB disconnect, device number 72 [ 714.985618][ T7630] bond0: (slave netdevsim0): Releasing backup interface [ 715.090270][ T7630] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.302783][ T29] audit: type=1400 audit(2000000035.979:790): avc: denied { read } for pid=5479 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 715.553114][ T7630] bridge_slave_1: left allmulticast mode [ 715.560856][ T7630] bridge_slave_1: left promiscuous mode [ 715.568553][ T7630] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.591427][ T7630] bridge_slave_0: left allmulticast mode [ 715.607138][ T7630] bridge_slave_0: left promiscuous mode [ 715.620476][ T7630] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.621993][ T46] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 715.833683][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 715.864416][ T46] usb 1-1: unable to get BOS descriptor or descriptor too short [ 715.894955][ T46] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 715.921791][ T46] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 715.925048][T13338] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 715.954138][ T46] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 715.990014][ T46] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 716.007012][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.039758][ T46] usb 1-1: Product: syz [ 716.051260][ T46] usb 1-1: Manufacturer: syz [ 716.070984][ T46] usb 1-1: SerialNumber: syz [ 716.941986][ T5826] Bluetooth: hci1: command tx timeout [ 717.007652][T13335] delete_channel: no stack [ 717.192190][ T46] usb 1-1: USB disconnect, device number 52 [ 717.309670][ T9298] udevd[9298]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 717.479512][ T7630] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 717.503182][ T7630] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 717.549870][ T7630] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 717.568798][ T7630] bond0 (unregistering): Released all slaves [ 717.592802][ T7630] bond1 (unregistering): Released all slaves [ 717.636653][T13315] chnl_net:caif_netlink_parms(): no params data found [ 717.763418][ T7630] tipc: Left network mode [ 718.025003][T13360] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 718.098104][T13315] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.115586][T13315] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.131005][T13315] bridge_slave_0: entered allmulticast mode [ 718.144101][T13315] bridge_slave_0: entered promiscuous mode [ 718.156367][ T29] audit: type=1400 audit(2000000038.819:791): avc: denied { read open } for pid=13364 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 718.187800][T13315] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.196726][T13315] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.216506][T13315] bridge_slave_1: entered allmulticast mode [ 718.223234][T13367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1788'. [ 718.266793][T13315] bridge_slave_1: entered promiscuous mode [ 718.284053][ T29] audit: type=1400 audit(2000000038.819:792): avc: denied { getattr } for pid=13364 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 718.584885][T13315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.620682][T13315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.002043][ T46] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 719.033949][ T5826] Bluetooth: hci1: command tx timeout [ 719.312458][ T46] usb 1-1: unable to get BOS descriptor or descriptor too short [ 719.321405][ T46] usb 1-1: not running at top speed; connect to a high speed hub [ 719.330585][ T46] usb 1-1: config 8 has an invalid interface number: 99 but max is 0 [ 719.339153][ T46] usb 1-1: config 8 has no interface number 0 [ 719.353751][ T46] usb 1-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=8d.1e [ 719.364351][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.381291][ T46] usb 1-1: Product: syz [ 719.820051][ T46] usb 1-1: Manufacturer: syz [ 719.820493][ T5914] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 719.842886][ T46] usb 1-1: SerialNumber: syz [ 719.906937][T13315] team0: Port device team_slave_0 added [ 719.916478][ T29] audit: type=1400 audit(2000000040.589:793): avc: denied { add_name } for pid=13362 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 719.950183][T13315] team0: Port device team_slave_1 added [ 719.962350][ T7630] hsr_slave_0: left promiscuous mode [ 719.994010][ T7630] hsr_slave_1: left promiscuous mode [ 719.999474][ T29] audit: type=1400 audit(2000000040.589:794): avc: denied { create } for pid=13362 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 720.024330][ T7630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 720.032368][ T7630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 720.044289][ T7630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 720.052675][ T29] audit: type=1400 audit(2000000040.589:795): avc: denied { write } for pid=13362 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=11143 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 720.079412][ T7630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 720.112923][ T29] audit: type=1400 audit(2000000040.589:796): avc: denied { append } for pid=13362 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=11143 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 720.162939][ T7630] veth1_macvtap: left promiscuous mode [ 720.169400][ T7630] veth0_macvtap: left promiscuous mode [ 720.186270][ T5914] usb 5-1: unable to get BOS descriptor or descriptor too short [ 720.210421][ T5914] usb 5-1: not running at top speed; connect to a high speed hub [ 720.256511][T13353] delete_channel: no stack [ 720.268664][ T5914] usb 5-1: config 8 has an invalid interface number: 99 but max is 0 [ 720.300810][ T5914] usb 5-1: config 8 has no interface number 0 [ 720.316429][ T29] audit: type=1400 audit(2000000040.969:797): avc: denied { remove_name } for pid=13387 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=11143 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 720.389120][ T29] audit: type=1400 audit(2000000040.989:798): avc: denied { unlink } for pid=13387 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=11143 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 720.468917][ T5914] usb 5-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=8d.1e [ 720.509167][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.545597][ T5914] usb 5-1: Product: syz [ 720.565298][ T5914] usb 5-1: Manufacturer: syz [ 720.578742][ T5914] usb 5-1: SerialNumber: syz [ 720.798633][ T7630] team0 (unregistering): Port device team_slave_1 removed [ 720.916642][ T7630] team0 (unregistering): Port device team_slave_0 removed [ 721.105238][ T5826] Bluetooth: hci1: command tx timeout [ 721.371046][T13315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 721.385158][T13315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 721.414880][T13315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 721.430387][ T5479] 8021q: adding VLAN 0 to HW filter on device eth1 [ 721.445548][T13315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 721.461380][T13315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 721.511592][T13315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 721.714501][T13315] hsr_slave_0: entered promiscuous mode [ 721.721410][T13315] hsr_slave_1: entered promiscuous mode [ 721.729987][T13315] debugfs: 'hsr0' already exists in 'hsr' [ 721.745224][T13315] Cannot create hsr debugfs directory [ 722.502912][ T46] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 722.515072][ T5914] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 722.533727][ T46] usb 1-1: USB disconnect, device number 53 [ 722.634874][ T5914] usb 5-1: USB disconnect, device number 77 [ 723.272004][ T5826] Bluetooth: hci1: command tx timeout [ 723.282743][ T798] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 723.291518][ T29] audit: type=1400 audit(2000000043.639:799): avc: denied { create } for pid=13412 comm="syz.4.1797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 723.317831][ T29] audit: type=1400 audit(2000000043.639:800): avc: denied { write } for pid=13412 comm="syz.4.1797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 723.446866][T13419] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 723.551527][ T798] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 723.575000][ T798] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 723.599815][ T798] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 723.649573][ T798] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 723.693737][ T798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.714098][T13409] delete_channel: no stack [ 723.739706][ T798] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 723.764276][ T798] usb 2-1: invalid MIDI out EP 0 [ 724.132629][T13315] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 724.257380][T13315] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 724.296733][T13315] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 724.395352][T13315] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 724.427906][T13315] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 724.485080][T13315] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 724.523470][T13315] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 724.567982][T13315] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 724.589910][ T5479] 8021q: adding VLAN 0 to HW filter on device eth2 [ 724.614432][ T798] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 724.634863][ T798] usb 2-1: USB disconnect, device number 73 [ 724.897296][T13315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 725.031776][T13315] 8021q: adding VLAN 0 to HW filter on device team0 [ 725.095069][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.102249][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.233487][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.240671][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 725.385902][T13467] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1804'. [ 725.592104][T13474] FAULT_INJECTION: forcing a failure. [ 725.592104][T13474] name failslab, interval 1, probability 0, space 0, times 0 [ 725.605978][T13474] CPU: 0 UID: 0 PID: 13474 Comm: syz.3.1805 Not tainted syzkaller #0 PREEMPT(full) [ 725.606011][T13474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 725.606025][T13474] Call Trace: [ 725.606034][T13474] [ 725.606043][T13474] dump_stack_lvl+0x100/0x190 [ 725.606075][T13474] should_fail_ex.cold+0x5/0xa [ 725.606107][T13474] ? vb2_core_allocated_buffers_storage+0x184/0x220 [ 725.606134][T13474] should_failslab+0xc2/0x120 [ 725.606170][T13474] __kmalloc_noprof+0xe0/0x850 [ 725.606206][T13474] vb2_core_allocated_buffers_storage+0x184/0x220 [ 725.606236][T13474] vb2_core_reqbufs+0x382/0xf30 [ 725.606269][T13474] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 725.606313][T13474] __vb2_init_fileio+0x32d/0x1000 [ 725.606350][T13474] __vb2_perform_fileio+0x91e/0x1380 [ 725.606385][T13474] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 725.606423][T13474] vb2_fop_read+0x211/0x520 [ 725.606453][T13474] v4l2_read+0x229/0x2c0 [ 725.606474][T13474] ? __pfx_v4l2_read+0x10/0x10 [ 725.606497][T13474] vfs_read+0x1e4/0xb30 [ 725.606534][T13474] ? __pfx_vfs_read+0x10/0x10 [ 725.606563][T13474] ? find_held_lock+0x2b/0x80 [ 725.606597][T13474] ? __fget_files+0x215/0x3d0 [ 725.606624][T13474] ? __fget_files+0x215/0x3d0 [ 725.606651][T13474] ? __fget_files+0x21f/0x3d0 [ 725.606682][T13474] ksys_read+0x12a/0x250 [ 725.606714][T13474] ? __pfx_ksys_read+0x10/0x10 [ 725.606745][T13474] ? trace_irq_enable.constprop.0+0x31/0x160 [ 725.606776][T13474] ? rcu_is_watching+0x12/0xc0 [ 725.606813][T13474] do_syscall_64+0x10b/0xf80 [ 725.606835][T13474] ? clear_bhb_loop+0x40/0x90 [ 725.606863][T13474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.606887][T13474] RIP: 0033:0x7fe33039c819 [ 725.606908][T13474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 725.606930][T13474] RSP: 002b:00007fe3311b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 725.606953][T13474] RAX: ffffffffffffffda RBX: 00007fe330616180 RCX: 00007fe33039c819 [ 725.606968][T13474] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 725.606996][T13474] RBP: 00007fe3311b2090 R08: 0000000000000000 R09: 0000000000000000 [ 725.607010][T13474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 725.607031][T13474] R13: 00007fe330616218 R14: 00007fe330616180 R15: 00007ffc69243b58 [ 725.607063][T13474] [ 726.017579][T13315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.560410][ T5479] 8021q: adding VLAN 0 to HW filter on device eth3 [ 726.646352][T13492] random: crng reseeded on system resumption [ 726.719737][ T29] audit: type=1400 audit(2000000047.319:801): avc: denied { write } for pid=13488 comm="syz.3.1806" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 726.850404][ T29] audit: type=1400 audit(2000000047.319:802): avc: denied { open } for pid=13488 comm="syz.3.1806" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 727.093144][T13315] veth0_vlan: entered promiscuous mode [ 727.127314][T13315] veth1_vlan: entered promiscuous mode [ 727.205643][T13315] veth0_macvtap: entered promiscuous mode [ 727.226509][T13315] veth1_macvtap: entered promiscuous mode [ 727.339683][T13315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 727.373720][T13315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 727.402855][ T1153] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.413653][ T1153] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.449876][ T1153] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.470075][ T1153] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.748757][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.802536][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.978253][ T7626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.987698][ T7626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.026456][ T29] audit: type=1400 audit(2000000048.699:803): avc: denied { mounton } for pid=13315 comm="syz-executor" path="/root/syzkaller.sWWKwB/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 728.584214][ T29] audit: type=1400 audit(2000000049.249:804): avc: denied { mounton } for pid=13315 comm="syz-executor" path="/root/syzkaller.sWWKwB/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 729.126240][ T29] audit: type=1400 audit(2000000049.249:805): avc: denied { mounton } for pid=13315 comm="syz-executor" path="/root/syzkaller.sWWKwB/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=58309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 729.212455][ T29] audit: type=1400 audit(2000000049.359:806): avc: denied { mounton } for pid=13315 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 730.344372][T13538] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 730.402562][ T5479] 8021q: adding VLAN 0 to HW filter on device eth4 [ 730.982915][T13550] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 731.094919][ T29] audit: type=1400 audit(2000000051.679:807): avc: denied { create } for pid=13554 comm="syz.5.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 731.106548][T13532] delete_channel: no stack [ 731.671946][ T29] audit: type=1400 audit(2000000051.859:808): avc: denied { setopt } for pid=13554 comm="syz.5.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 731.691821][ T29] audit: type=1400 audit(2000000051.869:809): avc: denied { write } for pid=13554 comm="syz.5.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 731.767781][ T29] audit: type=1400 audit(2000000052.439:810): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 732.038673][T13573] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1820'. [ 732.414438][T10863] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 732.593901][T10863] usb 6-1: Using ep0 maxpacket: 32 [ 732.616062][T10863] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 732.675319][T10863] usb 6-1: config 0 interface 0 has no altsetting 0 [ 732.693693][T10863] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 732.719133][T10863] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.738136][T13591] forcing mempool usage for bio_alloc_bioset+0x905/0x1030 [ 732.742585][T10863] usb 6-1: config 0 descriptor?? [ 733.710577][T10863] corsair-cpro 0003:1B1C:0C10.001D: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.5-1/input0 [ 734.092499][ T5893] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 734.281963][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 734.321662][ T5893] usb 5-1: unable to get BOS descriptor or descriptor too short [ 734.337632][ T5893] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 734.352146][ T5893] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 734.365172][ T5893] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 734.775888][ T5893] usb 5-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 734.786857][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.796832][ T5893] usb 5-1: Product: syz [ 734.806272][ T5893] usb 5-1: Manufacturer: syz [ 734.811178][ T5893] usb 5-1: SerialNumber: syz [ 734.841268][T10863] corsair-cpro 0003:1B1C:0C10.001D: probe with driver corsair-cpro failed with error -71 [ 734.894952][T10863] usb 6-1: USB disconnect, device number 2 [ 735.209585][T13637] sp0: Synchronizing with TNC [ 735.274706][ T5893] usb 5-1: USB disconnect, device number 78 [ 735.404860][T10873] udevd[10873]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 735.519441][ T29] audit: type=1400 audit(2000000056.189:811): avc: denied { create } for pid=13644 comm="syz.1.1834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 735.580560][ T29] audit: type=1400 audit(2000000056.229:812): avc: denied { map } for pid=13644 comm="syz.1.1834" path="socket:[58716]" dev="sockfs" ino=58716 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 735.606669][ T29] audit: type=1400 audit(2000000056.229:813): avc: denied { read } for pid=13644 comm="syz.1.1834" path="socket:[58716]" dev="sockfs" ino=58716 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 735.651397][ T29] audit: type=1400 audit(2000000056.319:814): avc: denied { setopt } for pid=13644 comm="syz.1.1834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 735.728962][T13652] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 736.105037][T13665] No source specified [ 736.374383][T13671] syz_tun: entered allmulticast mode [ 736.434691][T13671] syz_tun: left allmulticast mode [ 737.215961][T13647] delete_channel: no stack [ 737.931944][ T5893] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 738.093534][ T5893] usb 5-1: device descriptor read/64, error -71 [ 738.383262][ T5893] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 738.542122][ T5893] usb 5-1: device descriptor read/64, error -71 [ 738.693136][ T5893] usb usb5-port1: attempt power cycle [ 738.723438][T13702] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1850'. [ 739.062766][ T5893] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 739.102607][ T5893] usb 5-1: device descriptor read/8, error -71 [ 739.133960][T10863] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 739.303709][T10863] usb 6-1: Using ep0 maxpacket: 16 [ 739.322267][T10863] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 739.357276][ T5893] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 739.369618][T10863] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 739.407006][T10863] usb 6-1: config 0 interface 0 has no altsetting 0 [ 739.417075][ T5893] usb 5-1: device descriptor read/8, error -71 [ 739.438872][T10863] usb 6-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 739.531483][T10863] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.551058][ T5893] usb usb5-port1: unable to enumerate USB device [ 739.695929][T10863] usb 6-1: config 0 descriptor?? [ 740.064290][T13730] [ 740.066655][T13730] ============================================ [ 740.072805][T13730] WARNING: possible recursive locking detected [ 740.078958][T13730] syzkaller #0 Not tainted [ 740.083377][T13730] -------------------------------------------- [ 740.089544][T13730] syz.5.1851/13730 is trying to acquire lock: [ 740.095622][T13730] ffffffff8f7bfff0 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0 [ 740.105919][T13730] [ 740.105919][T13730] but task is already holding lock: [ 740.113284][T13730] ffffffff8f7bfff0 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0 [ 740.123576][T13730] [ 740.123576][T13730] other info that might help us debug this: [ 740.131636][T13730] Possible unsafe locking scenario: [ 740.131636][T13730] [ 740.139086][T13730] CPU0 [ 740.142367][T13730] ---- [ 740.145653][T13730] lock(qp_broker_list.mutex); [ 740.150515][T13730] lock(qp_broker_list.mutex); [ 740.155376][T13730] [ 740.155376][T13730] *** DEADLOCK *** [ 740.155376][T13730] [ 740.163515][T13730] May be due to missing lock nesting notation [ 740.163515][T13730] [ 740.171836][T13730] 1 lock held by syz.5.1851/13730: [ 740.176950][T13730] #0: ffffffff8f7bfff0 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0 [ 740.187680][T13730] [ 740.187680][T13730] stack backtrace: [ 740.193574][T13730] CPU: 1 UID: 0 PID: 13730 Comm: syz.5.1851 Not tainted syzkaller #0 PREEMPT(full) [ 740.193606][T13730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 740.193620][T13730] Call Trace: [ 740.193628][T13730] [ 740.193637][T13730] dump_stack_lvl+0x100/0x190 [ 740.193668][T13730] print_deadlock_bug.cold+0xbd/0xca [ 740.193705][T13730] __lock_acquire+0x12bb/0x2630 [ 740.193738][T13730] lock_acquire+0x1b1/0x370 [ 740.193762][T13730] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 740.193787][T13730] ? __pfx___might_resched+0x10/0x10 [ 740.193817][T13730] ? kasan_save_stack+0x3f/0x50 [ 740.193848][T13730] __mutex_lock+0x1a4/0x1b10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 740.193872][T13730] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 740.193894][T13730] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 740.193934][T13730] ? vmci_host_close+0x115/0x1a0 [ 740.193965][T13730] ? __fput+0x3ff/0xb50 [ 740.193987][T13730] ? task_work_run+0x150/0x240 [ 740.194012][T13730] ? exit_to_user_mode_loop+0x100/0x4a0 [ 740.194039][T13730] ? do_syscall_64+0x706/0xf80 [ 740.194060][T13730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.194084][T13730] ? __pfx___mutex_lock+0x10/0x10 [ 740.194116][T13730] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 740.194138][T13730] vmci_qp_broker_detach+0x14c/0x11e0 [ 740.194161][T13730] ? kasan_quarantine_put+0x104/0x240 [ 740.194191][T13730] ? lockdep_hardirqs_on+0x78/0x100 [ 740.194213][T13730] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 740.194235][T13730] ? ctx_free_ctx+0x4a0/0xda0 [ 740.194258][T13730] ? ctx_free_ctx+0x4bd/0xda0 [ 740.194281][T13730] ? kfree+0x223/0x6c0 [ 740.194309][T13730] ctx_free_ctx+0x517/0xda0 [ 740.194333][T13730] ? __pfx___schedule+0x10/0x10 [ 740.194365][T13730] ? __pfx_ctx_free_ctx+0x10/0x10 [ 740.194390][T13730] ? preempt_schedule_thunk+0x16/0x30 [ 740.194425][T13730] ? preempt_schedule_common+0x42/0xc0 [ 740.194459][T13730] ? preempt_schedule_thunk+0x16/0x30 [ 740.194496][T13730] vmci_ctx_enqueue_datagram+0x4be/0x5f0 [ 740.194525][T13730] vmci_datagram_dispatch+0x3db/0xc60 [ 740.194553][T13730] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 740.194581][T13730] ? find_held_lock+0x2b/0x80 [ 740.194614][T13730] ? vmci_qp_broker_detach+0xef9/0x11e0 [ 740.194636][T13730] ? vmci_qp_broker_detach+0xef9/0x11e0 [ 740.194660][T13730] qp_notify_peer+0x1a6/0x230 [ 740.194693][T13730] ? __pfx_qp_notify_peer+0x10/0x10 [ 740.194732][T13730] vmci_qp_broker_detach+0xa20/0x11e0 [ 740.194757][T13730] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 740.194779][T13730] ? ctx_free_ctx+0x4a0/0xda0 [ 740.194800][T13730] ? ctx_free_ctx+0x4bd/0xda0 [ 740.194822][T13730] ? kfree+0x223/0x6c0 [ 740.194846][T13730] ctx_free_ctx+0x517/0xda0 [ 740.194868][T13730] ? synchronize_rcu_expedited+0x3c3/0x450 [ 740.194892][T13730] ? __pfx_ctx_free_ctx+0x10/0x10 [ 740.194920][T13730] ? __pfx_autoremove_wake_function+0x10/0x10 [ 740.194947][T13730] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 740.194976][T13730] vmci_ctx_destroy+0x150/0x1c0 [ 740.195000][T13730] vmci_host_close+0x115/0x1a0 [ 740.195032][T13730] ? __pfx_vmci_host_close+0x10/0x10 [ 740.195062][T13730] __fput+0x3ff/0xb50 [ 740.195089][T13730] task_work_run+0x150/0x240 [ 740.195111][T13730] ? __pfx_task_work_run+0x10/0x10 [ 740.195133][T13730] ? rcu_is_watching+0x12/0xc0 [ 740.195161][T13730] exit_to_user_mode_loop+0x100/0x4a0 [ 740.195185][T13730] ? do_syscall_64+0x52d/0xf80 [ 740.195204][T13730] do_syscall_64+0x706/0xf80 [ 740.195221][T13730] ? clear_bhb_loop+0x40/0x90 [ 740.195244][T13730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.195261][T13730] RIP: 0033:0x7fdf62d9c819 [ 740.195279][T13730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 740.195299][T13730] RSP: 002b:00007fdf63bb6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 740.195319][T13730] RAX: 0000000000000000 RBX: 00007fdf63016090 RCX: 00007fdf62d9c819 [ 740.195331][T13730] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000005 [ 740.195344][T13730] RBP: 00007fdf62e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 740.195357][T13730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 740.195370][T13730] R13: 00007fdf63016128 R14: 00007fdf63016090 R15: 00007ffca2387d58 [ 740.195392][T13730] [ 741.141738][ T1113] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.246285][ T1113] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.358471][ T1113] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.426241][ T1113] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.544971][ T1113] bridge_slave_1: left allmulticast mode [ 741.550664][ T1113] bridge_slave_1: left promiscuous mode [ 741.556517][ T1113] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.564704][ T1113] bridge_slave_0: left allmulticast mode [ 741.570352][ T1113] bridge_slave_0: left promiscuous mode [ 741.576255][ T1113] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.629208][ T1113] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 741.874999][ T1113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 741.885231][ T1113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 741.895018][ T1113] bond0 (unregistering): Released all slaves [ 741.903458][ T1113] bond1 (unregistering): Released all slaves [ 741.914058][ T1113] bond2 (unregistering): Released all slaves [ 741.987102][ T1113] tipc: Left network mode [ 742.124360][ T1113] hsr_slave_0: left promiscuous mode [ 742.130646][ T1113] hsr_slave_1: left promiscuous mode [ 742.138460][ T1113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 742.147183][ T1113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 742.155319][ T1113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 742.162828][ T1113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 742.173230][ T1113] veth1_macvtap: left promiscuous mode [ 742.178765][ T1113] veth0_macvtap: left promiscuous mode [ 742.295349][ T1113] team0 (unregistering): Port device team_slave_1 removed [ 742.307903][ T1113] team0 (unregistering): Port device team_slave_0 removed [ 742.344737][ T5479] 8021q: adding VLAN 0 to HW filter on device eth5 [ 742.610222][ T5479] 8021q: adding VLAN 0 to HW filter on device eth6 [ 742.619117][ T1113] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.648731][ T1113] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.697229][ T1113] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.760102][ T1113] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.857178][ T5479] 8021q: adding VLAN 0 to HW filter on device eth8 [ 742.908889][ T1113] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.922166][ T1113] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.965724][ T1113] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.975605][ T1113] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.005179][ T1113] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 743.015311][ T1113] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.101104][ T1113] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 743.113446][ T1113] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.229471][ T1113] bridge_slave_1: left allmulticast mode [ 743.235515][ T1113] bridge_slave_1: left promiscuous mode [ 743.241223][ T1113] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.251455][ T1113] bridge_slave_0: left allmulticast mode [ 743.257248][ T1113] bridge_slave_0: left promiscuous mode [ 743.262990][ T1113] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.398959][ T1113] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 743.407754][ T1113] bond0 (unregistering): Released all slaves [ 743.644870][ T1113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 743.655563][ T1113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 743.665452][ T1113] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 743.674043][ T1113] bond0 (unregistering): Released all slaves [ 743.748816][ T1113] tipc: Left network mode [ 743.754223][ T1113] tipc: Left network mode [ 744.060436][ T1113] hsr_slave_0: left promiscuous mode [ 744.066428][ T1113] hsr_slave_1: left promiscuous mode [ 744.074529][ T1113] hsr_slave_0: left promiscuous mode [ 744.080272][ T1113] hsr_slave_1: left promiscuous mode [ 744.086285][ T1113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 744.095534][ T1113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 744.103513][ T1113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 744.110935][ T1113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 744.124121][ T1113] veth1_macvtap: left promiscuous mode [ 744.129662][ T1113] veth0_macvtap: left promiscuous mode [ 744.136370][ T1113] veth1_macvtap: left promiscuous mode [ 744.141931][ T1113] veth0_macvtap: left promiscuous mode [ 744.205492][ T1113] team0 (unregistering): Port device batadv1 removed [ 744.348815][ T1113] team0 (unregistering): Port device team_slave_1 removed [ 744.359972][ T1113] team0 (unregistering): Port device team_slave_0 removed [ 744.403529][ T5479] 8021q: adding VLAN 0 to HW filter on device eth7 [ 744.948649][T10863] usbhid 6-1:0.0: can't add hid device: -32 [ 744.962019][T10863] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 744.991459][ T5479] 8021q: adding VLAN 0 to HW filter on device eth9 [ 745.190361][ T5479] 8021q: adding VLAN 0 to HW filter on device eth10 [ 745.395226][ T5479] 8021q: adding VLAN 0 to HW filter on device eth11 [ 745.566263][ T5479] 8021q: adding VLAN 0 to HW filter on device eth12 [ 745.754914][ T5479] 8021q: adding VLAN 0 to HW filter on device eth13 [ 745.930315][ T5479] 8021q: adding VLAN 0 to HW filter on device eth14 [ 746.109713][ T5479] 8021q: adding VLAN 0 to HW filter on device eth15 [ 746.287970][ T5479] 8021q: adding VLAN 0 to HW filter on device eth16 [ 746.943837][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.950194][ T1303] ieee802154 phy1 wpan1: encryption failed: -22