last executing test programs: 16.968877259s ago: executing program 1 (id=129): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000}}, &(0x7f0000000300)='syzkaller\x00', 0x4c, 0x0, 0x0, 0x41000, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff9e, @void, @value}, 0x94) 15.866857581s ago: executing program 1 (id=133): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e21, 0x0, @empty, 0xfffffffe}, 0x1c) r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) socket$inet6(0xa, 0x400000000001, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mremap(&(0x7f00006f0000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setreuid(0x0, 0xee00) io_setup(0x2, &(0x7f0000002400)) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800"/127], 0x110) setsockopt$inet_group_source_req(r5, 0x0, 0x2f, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) 14.348015303s ago: executing program 3 (id=138): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x23, 0x6, 0x0) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000080)=0x57d) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="f9aced89f174d7ee8162d8af47da9b2d9f6d2121d4fa87d34ad531814294a95cf79eb84aba490a", 0x27}], 0x1, 0x3, 0xd4bd) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000040)=0x10000) 12.63993825s ago: executing program 3 (id=139): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 12.587827026s ago: executing program 1 (id=140): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x800, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x200001e0, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x3}]}) getpgid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r2, 0xda90) accept4(r2, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x64f, 0x7fffffff, 0x0, 0x3, 0x1ff, 0x401, 0x9}, 0x1c) recvmmsg(r3, &(0x7f0000008140)=[{{0x0, 0x0, &(0x7f0000002880)}}], 0x1, 0x7fb10726dd8b, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, 0x0) setuid(r6) r7 = landlock_create_ruleset(&(0x7f00000000c0)={0xb4e8}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x5e23, @private=0xa010100}, 0x10) 10.823629359s ago: executing program 1 (id=147): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write(r0, 0x6, 0x0, 0x0) (fail_nth: 1) 9.899170159s ago: executing program 3 (id=150): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)='B', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) ptrace$peekuser(0x3, r2, 0xfffffffffffffffd) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x2b9}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000340)=[r5], &(0x7f0000000280)=[0x1], 0x0, 0x0, 0x0, 0x7f}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xa0}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) close(r3) r8 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db28709050201200003100d090585"], 0x0) syz_usb_control_io(r8, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000580)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0x0, 0xe9, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7, 0x1, 0x3, 0xff, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x8, 0x60, 0x7}}}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x110, 0x1, 0x8, 0x8, 0x8, 0x8}, 0x24, &(0x7f0000000600)={0x5, 0xf, 0x24, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x18, "2d8742b190e77394314992b969eb3b75"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x70, 0x4, 0xf5, 0x6, 0x3}]}, 0x6, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x44a}}, {0xb4, &(0x7f0000000680)=@string={0xb4, 0x3, "64e9014eff044f751fc7461d97f19590b4905aa989aea37bfd378887f89316031f5275a20d48d17db948c8183cf688ceaa7ecb523f9df57f6f12645169bd6ae8308e0accafae255437dce624c86d59eb2ab2a46f27bce61893447a5a443575efa1bd967b9980bcd79cf6aca7122c4fa98d14f96a40f5936efe722e30ef22f9156a7fd26151c7e0ad5dfb416a9c7e975c8be6784effae81af52621011ed2e79ed2bd5ca18cce7b42fd75e0201535920a05e8d"}}, {0x7d, &(0x7f0000000740)=@string={0x7d, 0x3, "161cc871831040825fa386d9774f14ca8b5398309b477f0b7d96dbd272af0a6b0935fd5017b62009800dbcd4604494312c7b2724fc4e7e3373f8f395827048c10d852250135cf12aaf98a95c08ea46430464eeaa455976d2bc28cc96a506ae551c61cb07ff58ef1073c23f5bff1c885c1d143dea931bbd7966c142"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x439}}, {0x58, &(0x7f0000000880)=@string={0x58, 0x3, "ffefcd0880c7edbc17fe6b86b78b340401f373057455aa085a52d144f53cd56139529f1e55c5d0fa621beb765806d8208ecd5c4a99413ada7badda944a550c356b3f132c26a10f7d13e56fcd21ceb443ae98812130cd"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x41f}}]}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000980)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) recvmsg$can_raw(r9, &(0x7f0000000d40)={&(0x7f0000000a40)=@xdp, 0x80, &(0x7f0000000c40)=[{&(0x7f00000009c0)=""/48, 0x30}, {&(0x7f0000000ac0)=""/104, 0x68}, {&(0x7f0000000b40)=""/127, 0x7f}, {&(0x7f0000000bc0)=""/76, 0x4c}], 0x4, &(0x7f0000000c80)=""/192, 0xc0}, 0x2) syz_usb_control_io(r8, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.337902525s ago: executing program 1 (id=153): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)='B', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) ptrace$peekuser(0x3, r2, 0xfffffffffffffffd) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x2b9}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000340)=[r5], &(0x7f0000000280)=[0x1], 0x0, 0x0, 0x0, 0x7f}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xa0}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) close(r3) r8 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db28709050201200003100d090585"], 0x0) syz_usb_control_io(r8, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000580)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0x0, 0xe9, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7, 0x1, 0x3, 0xff, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x8, 0x60, 0x7}}}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x110, 0x1, 0x8, 0x8, 0x8, 0x8}, 0x24, &(0x7f0000000600)={0x5, 0xf, 0x24, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x18, "2d8742b190e77394314992b969eb3b75"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x70, 0x4, 0xf5, 0x6, 0x3}]}, 0x6, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x44a}}, {0xb4, &(0x7f0000000680)=@string={0xb4, 0x3, "64e9014eff044f751fc7461d97f19590b4905aa989aea37bfd378887f89316031f5275a20d48d17db948c8183cf688ceaa7ecb523f9df57f6f12645169bd6ae8308e0accafae255437dce624c86d59eb2ab2a46f27bce61893447a5a443575efa1bd967b9980bcd79cf6aca7122c4fa98d14f96a40f5936efe722e30ef22f9156a7fd26151c7e0ad5dfb416a9c7e975c8be6784effae81af52621011ed2e79ed2bd5ca18cce7b42fd75e0201535920a05e8d"}}, {0x7d, &(0x7f0000000740)=@string={0x7d, 0x3, "161cc871831040825fa386d9774f14ca8b5398309b477f0b7d96dbd272af0a6b0935fd5017b62009800dbcd4604494312c7b2724fc4e7e3373f8f395827048c10d852250135cf12aaf98a95c08ea46430464eeaa455976d2bc28cc96a506ae551c61cb07ff58ef1073c23f5bff1c885c1d143dea931bbd7966c142"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x439}}, {0x58, &(0x7f0000000880)=@string={0x58, 0x3, "ffefcd0880c7edbc17fe6b86b78b340401f373057455aa085a52d144f53cd56139529f1e55c5d0fa621beb765806d8208ecd5c4a99413ada7badda944a550c356b3f132c26a10f7d13e56fcd21ceb443ae98812130cd"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x41f}}]}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000980)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) recvmsg$can_raw(r9, &(0x7f0000000d40)={&(0x7f0000000a40)=@xdp, 0x80, &(0x7f0000000c40)=[{&(0x7f00000009c0)=""/48, 0x30}, {&(0x7f0000000ac0)=""/104, 0x68}, {&(0x7f0000000b40)=""/127, 0x7f}, {&(0x7f0000000bc0)=""/76, 0x4c}], 0x4, &(0x7f0000000c80)=""/192, 0xc0}, 0x2) syz_usb_control_io(r8, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.207306322s ago: executing program 2 (id=155): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x601) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x1ce) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000001200)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r4, &(0x7f0000000000)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newlink={0x80, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x9}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x80}, 0x1, 0xba01}, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./bus\x00') open(&(0x7f00000003c0)='./bus\x00', 0x2282, 0x80) 7.611290637s ago: executing program 4 (id=156): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x5d) 6.936878688s ago: executing program 2 (id=157): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, 0x0, 0x0) 6.477140275s ago: executing program 2 (id=159): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000380)={0x0, 0xffffffca, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0xe, 0x7f, 0x0, 0x0, [0x0], [0x0, 0x29, 0x2], [], [0x0, 0x0, 0xfffffffffffffffd]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x83ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) close_range(r3, 0xffffffffffffffff, 0x1f) 5.518013675s ago: executing program 2 (id=160): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0xc1, 0x0, 0x0, 0x49a}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000180)) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x8e, 0x180000504) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x41, 0x0) ioctl$TCSETS(r6, 0x40045431, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) lsetxattr$security_ima(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x2) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480240001800b000100736f636b6574000014000280080002400000000308000140000000021c0001800a00010071756575650000000c00028008000440000000100900010073797230000000000900020073797a3a00000000140000001100010000000000000000000000000ad33780f03c10284da7c7279dc82b1f6749fd04d42ee41306e4027a88cfff6818ed636b575251a4"], 0x98}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) (async) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) (async) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async) fcntl$notify(r5, 0x402, 0x5c) 5.079723598s ago: executing program 2 (id=162): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x23, 0x6, 0x0) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000080)=0x57d) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="f9aced89f174d7ee8162d8af47da9b2d9f6d2121d4fa87d34ad531814294a95cf79eb84aba490a8d33b2", 0x2a}], 0x1, 0x3, 0xd4bd) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000040)=0x10000) 5.023145462s ago: executing program 1 (id=163): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1223, 0x3f07, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0xc002) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x80, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)={0x44, r5, 0x8, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xd}, @broadcast, @broadcast, @random="146c25f1257a", {0x0, 0x5}}, @addba_resp={0x3, 0x1, {0x3, 0x32, {0x1, 0x1, 0x8, 0x111}, 0xb49}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4.913323883s ago: executing program 0 (id=164): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e21, 0x0, @empty, 0xfffffffe}, 0x1c) r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) socket$inet6(0xa, 0x400000000001, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mremap(&(0x7f00006f0000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setreuid(0x0, 0xee00) io_setup(0x2, &(0x7f0000002400)) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800"/127], 0x110) setsockopt$inet_group_source_req(r5, 0x0, 0x2f, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x2b00, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) 4.78564137s ago: executing program 3 (id=165): syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) socket$kcm(0x25, 0x4, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x80, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, r6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r8, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x700fbff, 0x4, 0x1, 0x0, r7, &(0x7f0000000180)='\x00', 0x1001}]) dup3(r4, r7, 0x6700000000000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 3.371034442s ago: executing program 0 (id=166): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 3.368537018s ago: executing program 4 (id=167): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x601) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x1ce) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000001200)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r4, &(0x7f0000000000)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newlink={0x80, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x9}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x80}, 0x1, 0xba01}, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./bus\x00') open(&(0x7f00000003c0)='./bus\x00', 0x2282, 0x80) 3.368042356s ago: executing program 2 (id=168): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0xf0, 0x67) r2 = socket(0x10, 0x3, 0x2) syz_usb_connect$uac1(0x0, 0x127, &(0x7f0000001480)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x115, 0x3, 0x1, 0x6, 0xc0, 0xcb, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7cfe}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x300, 0x2, 0x3, 0x46}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x303, 0x6, 0x6, 0xf4}, @mixer_unit={0x5, 0x24, 0x4, 0x5, 0x61}, @feature_unit={0x13, 0x24, 0x6, 0x3, 0x1, 0x6, [0x2, 0x6, 0x1, 0x2, 0x7, 0x9], 0xc}, @mixer_unit={0xb, 0x24, 0x4, 0x6, 0x3, "1a8ca3a65a89"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x3, 0x3, 0xd, 0x1, '+u', "ebca"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x4f}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x3a, 0x2, 0x3c, 0xa, "861786d8babade68d6"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x4, 0x8c5, 0x4, "0cc427bb35b43c1b"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x400, 0x6b4, 0x3, "84a6cdd7c351c9ab76"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xfa, 0x6, 0x4, {0x7, 0x25, 0x1, 0x2, 0xf9, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7, 0x5, 0x1007}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xfc, 0x2, 0x80, 0x0, "b31d"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x6, 0x2, 0x0, 0x2d, "41082cebe38f68"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xb, 0x1, 0x3b, 0xb, "2154be351e910019"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x21, 0x3, 0xff, 0xf2, "e533"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x8, 0x0, 0x8, {0x7, 0x25, 0x1, 0x80, 0x72, 0xd8}}}}}}}]}}, &(0x7f00000017c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x1, 0x8, 0x8, 0x58, 0xf9}, 0xb1, &(0x7f0000000180)={0x5, 0xf, 0xb1, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x41, 0x0, 0xc, 0xd7, 0xc6}, @ssp_cap={0x24, 0x10, 0xa, 0x2, 0x6, 0x9, 0xf00, 0x3ff, [0xffff30, 0x0, 0xc0, 0x0, 0x3f00, 0xf]}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x5, 0x2, 0x200}, @ssp_cap={0xc, 0x10, 0xa, 0x3, 0x0, 0x7, 0xf000, 0x1}, @generic={0x60, 0x10, 0x4, "2a610aafd273a13758807a9f444483cfab058d6af444ae585eedfb86cc73620d9131ee253d6ff94529d7e90079eaf41e90674b9163513c32af6629e14c48739b04b24d76f95e2a64a50315a35ad5af83b0ffce4f0144120d05d78d904f"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x0, 0x4, 0x384}]}, 0x4, [{0x4, &(0x7f0000001600)=@lang_id={0x4, 0x3, 0x827}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000001680)=@lang_id={0x4, 0x3, 0x404}}, {0xd1, &(0x7f00000016c0)=@string={0xd1, 0x3, "00a89c47133328ac21e2860cdd76148cd9a039a2aaf31c8d225d40f5f24d0b89e219493b0562d2d45f1869ef0a031858acabc6c35b566202f847572e5ff8d64e07e9927faa5e850021f3605c95ecd9869e5b0ad76af043aaf1bf064caa04283537a14f83f9091bdde657a37c551b1fba029a272310d50df0736ab3e9862ce7db6c76fcfeb02fe505a6192c719084f5929b7ab974353dd45343e4738e8b4543703d815d67d0f8a9c3614ed3bcddb0cc71fd7d8b87ad05befa6c4f39197849d80c2f2ced37371940c89e14a435133ed7"}}]}) connect$netlink(r2, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) close(0x3) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) syz_emit_ethernet(0x6e, &(0x7f0000000300)={@multicast, @link_local, @val={@void}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0, 0x0]}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x314df2ae15d87bb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r5, r4}, 0xc) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$BLKPG(r6, 0x1269, &(0x7f00000000c0)={0x3, 0x0, 0x98, &(0x7f0000000000)={0x300000000000000, 0x200, 0x11}}) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=ANY=[@ANYBLOB="08000000000000000000000000000000e00000010000000000000000000000000000000001005c562e471f849d34c5f51ee1ff000000000000000000000000009bf15cead2a480a03112ede15ade20a087d44fbef566c2e440f868c8c556201dfef2285d6b7d8f3223f18320d50bb6f87628b9d53fc40ea8b6d567daf8f6c985f6e9dc0159b9d6a1252e7ca89df47cb3b8721acde84808c9a858cf15de71c21f0a727566017b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000fc01000000000000000000000000000100000000000000000100000000000000000000000000000000000000000000000800000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000cf00000004000000fcffffff033500000a000000f70000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0004000700"/268], 0x154}}, 0x0) 3.284136049s ago: executing program 0 (id=169): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x48}, 0x0) 3.241058961s ago: executing program 0 (id=170): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x14, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x2e, 0x0, 0x0, @void, @value}, 0x20) syz_emit_ethernet(0x6e, &(0x7f0000002000)={@broadcast, @remote, @val={@val={0x88a8, 0x2, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0xff, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "10b1a0", 0x0, 0x0, 0x0, @empty, @local}}}}}}}, 0x0) 3.197136754s ago: executing program 0 (id=171): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 2.82969483s ago: executing program 3 (id=172): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) socket$inet6_tcp(0xa, 0x1, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x101000) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xe4}}, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x4e23, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$ax25(0xffffffffffffffff, &(0x7f0000000100)="e8c458668e251505922a17779eeb04941e0584cac1bf87ea60b60420c70195fe710ca1f303dd69dd76329126e407b3e01dd34f65e6f448413ae45099d30c2a11a3f932", 0x43, 0x20040000, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b18, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000200900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x4c}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_PAYLOAD_OFFSET={0x8}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) 2.455366068s ago: executing program 4 (id=173): quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000501, 0xffffffffffffffff, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, &(0x7f0000000000)=""/5, &(0x7f0000000040)=0x5) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x400, 0xfffffffe, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4810}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) write(r1, 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000b00000002000000000300000000000004040000000000002e"], 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e00000000000000080000000200000000000000", @ANYRES32, @ANYBLOB="00000000800000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000000100"/28], 0x48) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.016768277s ago: executing program 4 (id=174): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) socket$rds(0x15, 0x5, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_io_uring_setup(0x24fa, &(0x7f00000006c0)={0x0, 0x0, 0x10100, 0x0, 0x1c5}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[@ANYRES64=r3], 0x118) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x24844}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.016427091s ago: executing program 3 (id=175): socket(0x11, 0x80a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$ARCH_GET_FS(0x1e, r3, 0x0, 0x1003) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timerfd_create(0x8, 0x80800) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000080)={0x0, 0x700, &(0x7f0000000200)={&(0x7f0000000380)={0x2, 0x9, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2c, 0x18}]}, 0x38}, 0x1, 0xfdffffff}, 0x0) flistxattr(r1, 0x0, 0x0) munmap(&(0x7f0000ff6000/0x3000)=nil, 0x3000) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x4}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x38, 0x18, 0x309, 0x0, 0x1000, {0xa, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfd, 0xb}, [@RTA_OIF={0x8, 0x4, r7}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0xb}}]}, 0x38}}, 0x1000c840) 919.986846ms ago: executing program 4 (id=176): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x5, 0x18}, 0xc) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="028ec11bcba616b79cf82ee2635834fddc82505581bd019148b17d4fdc024bc3fcad7b622d8b71662856eff0f65593d33dcb70818af5449660c1b0197ab75323bcc21614", 0x44}, {&(0x7f00000000c0)="4bb9d83e953336776d86872f788116a3da43da6570813481f682f48e3f8670d65d2ebe89c5a934698225ebabfd03b67449fc5951e0f5190ecd0638e46c66f816096812fe344fc3eed019448c76fa79c3e89d75bf88be93f974c67bb10715561ea18bd84d5b0968f0a17c76ae4ef095cbee23c8f0cbdac164d13a0f39f2ab3943b9de0f372dbb72f424c009e32149da5f2937ebf4e752aa72ed671a2809fe3113", 0xa0}], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xc001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'xfrm0\x00', 0x2}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000280)={0x80000000, 0x2}) r4 = socket$inet(0x2, 0x80000, 0x8) r5 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00000025c0), 0x2, 0x0) r6 = syz_clone(0x2100, &(0x7f0000002600)="f21fb3931a25", 0x6, &(0x7f0000002640), &(0x7f0000002680), &(0x7f00000026c0)="036e7e5e3afa6feaff8090b2e401e3da6067c3c2b33cc6f880621f2308176c84b58ce2ce088397a64de1b12834daf3942dbf8ee94f07aeaa16f2f3dccf3a4df49ea39a67be63b80e60b0bfbe0d1951e1e76cc1dea8eefb84f18655b4778718d74dbd41471e9b30300fa17b29e00d103ba7cce5301df6") ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000002740)=0x0) getresuid(&(0x7f0000002780), &(0x7f00000027c0)=0x0, &(0x7f0000002800)) getresgid(&(0x7f0000002840), &(0x7f0000002880), &(0x7f00000028c0)=0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000002900)=0x0) statx(r3, &(0x7f0000002940)='./file0\x00', 0x0, 0x10, &(0x7f0000002980)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002a80), 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000003fc0)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private0}}, &(0x7f00000040c0)=0xe8) r15 = openat$bsg(0xffffffffffffff9c, &(0x7f0000004100), 0x210000, 0x0) r16 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000004140)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000004240)=0xe8) sendmmsg$unix(r3, &(0x7f0000004340)=[{{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f00000002c0)="f106023aa0b68144685f583e49b6a6df344bae5ab4d719f6de053fb3c8de58f4cd4f669c5d8f221521d56849023da8185b5c82548c82cd45129e5b3925b553d3a76460df88103b11cb8b912e11842c69045f3d05674fffe59eda5bb429f8c649761879f1b3df9fb8dc5cd59e39593e6374d347749d1490135ed298244003551151c07cfc1641f6d4e79605a2c5b147d11c6ed9a29e4b0fde8ca9db44a5ead785143aceb74a15cf1d64", 0xa9}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="fc0eace4a12f6af3d1180cd1d1fc7e9f883b3f9f69452d6687d44580c71a9520a94b0c264440dee1445257cdd89dfb60f57685a2c23cb2623bab60adc51a0cf745154b78eef89ac51eae2552a50f0c29d61e1aac918b24dccee532f3b80ff829cf52d3afde3afcd1ac86a8bf5ce9c021cd4169f569ee7b87649d79548390905e3028b9a0", 0x84}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000002440)="15446d9d554302bc55e83a22ee09104cff4455783fa34e991cd58d9b7bd64e9cd458d5001c3d1cc4c5090fcbc163223e4353f6fd6d915887451931d51b77db1ef78b11b02ab9edc23c41127aac590d356f15ac850fc35be4cf436df1026304f527c57593c8c73a3b11f3db0165735fd656d993a5d48471d11e7f3dffa8777a4ed16a7bd90330e7294060351f174d6250d186bbe9af01045f88b7974ea94319d64bbec924cd772e5c045764b8eb2017cb96108ee01379b6aafd3ff83aca813ece9f5b98fca9e7ce7d88f2ad2e383d6a51a804142fb63899e13cb018025b4b778e28ffe05f4a7d47", 0xe7}], 0x5, &(0x7f0000002ac0)=[@rights={{0x34, 0x1, 0x1, [r4, r1, r2, r0, r1, r2, r1, r5, r3]}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r2, r1, r3, r3, r12]}}], 0xd8, 0x40000000}}, {{&(0x7f0000002bc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003f40)=[{&(0x7f0000002c40)="b31a76394d533972918d64dc90f769a338a36bc0b3fd4e4036538f474db428e3fe81c8232a37120b3fed8f8803a0314527f2d98237cd8d9da0ca7fa38d6eb21dd7224d74a4b6a4db277e18707b812130579534dd6a2f700075409d225b712c52a610625f6e6b000b5e6d72211c2782ed4380515351f5f479dbb51daa1955d2ab59037ede1500e5c3c70afb3e404f", 0x8e}, {&(0x7f0000002d00)="a0f1f0798dedfafaace7995f5da41f48a6f50f4fd5bef8a09aca484af6c59a243e0725d92993", 0x26}, {&(0x7f0000002d40)="2316165642c0eea78e5273f046c12e19731313712cf54ba16603e261a5ab8296900cdd561c04f5762a05c7c277cf26c9f0558d0e28b0b267f9848ad84521b3f5823548595a", 0x45}, {&(0x7f0000002dc0)="334005f30ddb5c759ca10e8aba1cb2d1397c89a285ee595166f1eab327c42a1e78ce833540dacbeaada982857822f897a46dcda0a90caefaa59e53ffe6953d19b17de98f9c2da392e93337a893e494da91cbd2deb114c527ffa9226083040ab7fcf8a01e6c37f8f6a2bd46648898d65b9d442e76ef98b2ac4e2349510276827040df3da0fca223f2a71186e99020a0f8a61845d4639dd228babafd4e68e8e20d0db3cf227ce87feb323d4ed7e4bdf6956336576e71ee28af3c46722a04d6d5cb0aed56f720796d356d7685beb91e785729c570fb7b3ec992585d37b4c1760da8741f6c6c8a3312def64438814ff0908aecfc93d839d13a3af4cfcec5e295321c5773161870038d32be2f34ef71b5544765550e97c622f70acf22adeb0ac57127d388a87e7a1f3f6df4f28cb0dafe9398e9915e84df81d773498394c8e6371769f1c67b557362decc40a2ad602ed3c89cbf5a0d7d62facf0cfa8708343646ff0a13de1f0c5142a12a038fa18c03bba87578b0f6ee5ea28b873df0716e47871a9f7fc77c40822e85423451c37b962a695bf277adca3e9d6da396358039076843ed6c4bcfeaaf8b1cea99363c1f7ebf7e16eb77e33f23f1291c0e8eae7a298bcd58f5d1a25879cf5b9bd1586ef5184757271e5ce24a70fb2f8bdf87cc58691222f7353ec655bf4348c5d099acceb5e816ff99eead5a6684dffa7856a2dca09797869a3bd152d0da6c04823fc6945f06d43941309ca9aa6848b049d58576af5f5de29ad8455559f53c6b1ee293d9e05566d72ab6e94d29fcb5cf79d148a8b4cf75bd9db053d654064bc8c9d691bd78989f10ed7b9fc1772758610288fc07e4ece9fbddc44e1b59be6f6cad0911c250e91838869d81a5faaa94081bed42c8502eda2044fbe636c8298d3831bf75ea90401ebf0d4c68254d30292be08850aa10d4431ad8db0749f8e22f56d6cedd141e9b42d4b93f2981fe75b21b93bb96bf2489777a0f8b954f761be8cbd954f2371300e76b9c234891f02c7ba9bf1ba9716b9ab897065cfcdfed93edd79c66705d790a0ac90f7b1329f3916c0380cee714b697f623b269112943e56f1137c72d8799972dfbbdf1a94340f98aa84bf569cb6b35d2df279828bc23189db627cf933e9528b786a80bd4c193238795c955965550eefedbf6972273803cdbac14b2539899455961b931898da88e404097979b7453abb5f68304930fc40459179036776dbd38344e51eb5c153e51c93f8e5af41c87c210ebc12e1cfbc43a1888faa79d1cc6e3c6c3b1a280c5b7a09dd6bbc6875b22a8a9108688a2db882cfd69ce8ee87f7ed8710375e6586944c7ee2adede02145b1da556b2d84b7ac49f9fb5aa35489a7bccffef2b0579f3f101a325bb4bc33abf2e9f66321963cac0766eb0fb8296409bd4f6aa0eb3263b7c5a36840d1ca078c5bcf77714df66c2b50f7c053abced66d435ade19b95a8341b6c027ea0e642571267ef22cc604923139c955c01baea8112c25cf03b0ae398b753a37c3df427fd51b71fecc56e609305dce8582e75234b3e66ed97c9a3f189f860365303b68ff43030cbf39c8b835a671493c37f5e2cfb7a28e5f7271fae3e770db5a3ec16ad26cd1a1bce279640b60a7abce7212134d571ed993ba1ab7c45f77a09925a434f52ec3ba064740578d4cb036866ac4d8400f4c1b8978b25491a02e18dfff1ca95cd6c68d44ec8c402b228b3339c33f0a053fd73562cf4337e462558a7baa3edfd98c955ed43eb113b421d7f3ad5e53136547adeedadb39b3fb0fbe9a14f384b2da714dfefcf8616fd1e1dacb10d52ea31be130890b0b63d606537672a0fc1d17b11f04bafbd6d30e51f4f0338dbd2921d5557fad28c4515f1394f8f465477aa2b561ccb59634d38ead02ca52a3fe3ae51a1075b802e68d898542471e06926168adae2348aa001dacd356f68716d1a313e288b5d2b89e446cec454f1bcdeb8e82997314c070c8f4fdcd15614c3dc728055424e84a1c3dafb58d4d99110853cb87784c46fc890d2c41ffd81d3271e44addce898459d5a96fd9221620b43fffe48c1d8aba9b73c9b1e340d1f5cf91e3669385205a0b7263a25d94003f1f3c1f7280c28150e5e175b102f42803de0a262400ac47c8f189fe66bd6f3e2ba55f69b6d8c58fc24ee73355677c7ddf9536fdd21cbab8086e365b6df7f41e60cd68feb55ff8cdbb95f438902b82405d71dd545096bf7deef3bdac2e624d721f329f42795ccdd84f66005a5a9e0b2b0be3f41d70eebc72b137568177373662b632a375c8327175dffd3940dcf9b4d63a0761a25137d5e0f90162536a90ee8a171e612535c8850907b80f8e92e69e261e94dbe98a36a3c5a8e3d421672e89325f99101d09a7ea6f96e7166323a8f5db1c1e93efb6004b5ebb1079234c44d175db8262bd5d3a20c19643939e51957f935f5cec25e2a443c0090a0de5c495dac1bd4ffe534e390056d206fdebc7bdbe3bbbfd815e32bfe7d16ae4900c2d75627bd8acf3ae6b193f6001df48ca45f3fa2f74a200243206d8019b5bb79997f717aa96af8443a72ee371454d4ab29b891a7f519a90a7f8ca8fdff31e553770848dd7cac92c0c242a2344ccb3327ebfe2842565cc80e255de947bb72a414a0e45adc9c520d778d04b500a71ae2fc7e15929113dc707c228d413b1feeb089d26e34d2b48db037eba1256daabe4d84561bc95eebda4db9a471b2df4b6207c60ddb68b971a83dc568c4f98707b3f18a7b01421439503975b0213b85027a9dd93fcb8eb3ce912b0f55863ae7ea7651086d01f9bc7fcf26415d13fc2d6a44ed1e80b4deabebf2d487ab87c27589089d2f2d381bb3c1deb172668a25df8a0ee449da154fb474cb4515cd5bb0c2eddf3f1bc4e1d4d8fae4a813e8c29a2b3c9d778a8a3780a2ae3a4a1f4a05f81929d1f15798ce8d90d7a2882fae72c5f3d8cb7a0fd002f89499e8dba0328bb4bd0b5d494064a74ac91a5d4ff401cc061ec4656b1a92c2f10bfcab52647cb1b6e66ba9e6d96a18ac37d5efc1ea9859b036868a7f98dbfe56789eea6c5bd122191cf47e323a8b8a9239aad263f5405698035de699106a7af2eb5215ce744f714e36d6ab67ad6fee8d1877b0ea14d3538c259a7d1c09feee676e77638896f8d7389985d50eaba9da18f25444ab5023d3e54978019c88b27ce99b2e65e17a9ee5648ca9ea3dd64cea96409439b06d2a16c31c04c74bb4a116cc41ad52e0810ce4301f4dfb751784697200765e0a4176d2109c73f57173e012f8329021107de78bceb38f75d75ca4e131b5977cfda8498f41f9aac9af4da1f67aa865d788bd123e78321447a9378aace6b35472febfcc3109cb6c545d0b18bace0853ea9835a695c2063bb8f21079d264e8551dad9585ea31cf9b26237f58db9256a1ce34fb5d8690c48a5b36a9516ca64c9247f4ebe87a1f194edad2aa42d4670ee63c932538e28be5cf910d850e93bd48481b24f3d239b90aa97abf0892caca296a852877198953333f7d799b1e91807b4ae7e0aa2439125887365fe019ddadcd80057c97f248418f08c585f2a37cdbd5757b1e86eb51c5afefb0b04bb1b5a308e8d1fe1931249dcacff652c6b5e42a0591e6c791a3486a3399ead5b5e2131d4192a16e5fc7b0b9fb12c5fedf75dacf7801b6626d91e3b838f87c945711828c1ca86c04a92f0b04cb0147f9dd86bca93b871649ee47381d0240f991844cda605b7f9a88cb1a7cf3f6aaab7022eded93c8edfbfe80f740c0ffa4b2437c47f97512239f3cf89a7d035ba18c7dbc4de66c69f92afde26e227a6890056a07ac4a0140356ee727779c372a76971a37518d9d826c353094f23f014f4a3aab9f48009fb9f49a80a0a4891f24b38f542a203f019f182c6fc1d1cac0dabdbf165499750a1f65b743b2cd3e5607d7ba70eb6bab16579fe3fbbdee8b4b9f75a2d6f06d96682dea44f06ef83a889c5b565e20393fcd1bb8d2e6d26dbd493847ecff51b51d52a169197dc069dce1ef09a8957e8ffb0572853df29133adfa31fcae4db05b5e75fddee2300152f56f61223553e141a7c2215558d92fbff32809924cfc9bf352fd568e679856d378576afeb61015edbfdbd7b989dbfe9d2b1867ec1c1f5035e61f23e9fd79e50bc6f450747b0fe75e78af0d8f21478687dc76ae2550da1fb2c88ed14081e81020e6548fb03a3df4b392fe56b2332eb3588068a47fd4a333f21f95f06c046bd629b4453c083c4a2572ace9f4d7a230058ad658ba4bd70ead06b395a36e4c28cc48618f4a35f46967c140c19d6659a32b2cec57a5e1a964b3bfd2bafd94320833a079701b308327e5842adfb0490f37c3a7b14431171b5ff0ea036938a0e14a005cc1f189b6c1871de235989d8949c4a1fa7b3469256889ae5c3dc8857702d5e4da743d03f781a1f12d3634eb78fd691c5218a55e12d3800596e5afabf354720b535dbdf8ffe412b17f1e588f3d56f83b9e3dacf155d46bf3290a006d7927e9a3ae57262a2ceafb942a045e20da4c6a0ac8c4feeccd09d2206aeb95587994ca77928ca778f61e2e61db5b0315e78a7030483ee9958841be8ace14ed7df03aff48304b771250eff7912085e783ec6a846317eab3eaef4bb9911fe7bf0c94149acb828e31fa47c9935b93721c8fce6b2f96eec2ca1f50a0fb15b2c381f70b4e811ac86417ce3dfce1b5405c542632c5c7fb72a1c9ba55dc2370e523e4d34ac9afdc4cc6d5f7c06c457f30eca3816510a21bca1c9baf49cc152193ec54fd54ccfb91df51830c239653f45a7395686973bfc36f2613b3a5cd720e8795641f2f696b6156dab500b570f4ba446400687dda26dfc99d9505e4ff35c7ced2bfc2a8ba176118802db69aea52fbee2e7d86ab6bb91c51a98823d97a9a57f3a0013d030b4dbd003826212220ea13c72d0cebb052c3896aba963ac4f2b922b3d9b2927c80e143a9a0a9e74b9957ac49aaeba606cc399d7448b2632f6f402c773fa9d180654f90290b3a2865fe32170acff44f2edc9a22a7f93c574b22e8452322435d10b77b4f7d43527a598d94aea7b019332a3902d99b300896a2e12fd3d5d64dc12a9e9bf1afb8ded1f79f02951cce17bc767ace3ab2a58120cfce194c32c68f11ce8dddea7c5967d1a3b234d7625489bb57f7f7287d37f665b6874913c71470299b72a65f3ce0414436cdb2f6396645ad2e662c12129a0bcc1c1461debead9ca14ac7da83a0ba274cc66b1d18fd676f490c6c5c11dd4de9531e2399af38b7b4f488805093908eac7fa57b6cc88e278c7a3a6d289fd5a59739f5a32680f977d8003f235d17e728b2951ed7a439400c69f0e975bb80805691febbb78c80b64a1765ceef70e8f49b73df4d2b046b30d660841dea70185528f70831371e9d029f276de3f8532daf4f7133767983c4a127372be881e7c38e66d8dabb181863c2942d0a6e2a823225134359869a725059bc59392baf01b3dc63a2cd1cb031217ddcdbacd0104551c9e49fc9e9622aadbe4f555d7dfd24ccad4778b7719ec7e69be34c950ad812bf8c95053461973d8a6f1c3ba3ee626d1900059a9620593d98191e3a9077de4279d9e892cb38629491ca622f01b2ece3a49f3b697118dc8cb0055264c41508fd3b6260590de97218f322cd1f1d684743c0b9a341514d1789f35df247bbe4a5ce7e7a8ba64daae95d6be4fae055da660226b57d2d9694549f720b00ce11aa00d7d400ad0c2ce80eb27bae33d0c2d0870bc1917dbe4d5ae882f70c3214648f6ba770517c4a19291c4be6", 0x1000}, {&(0x7f0000003dc0)="d8c0a682bde745893625309c379e53bab4abc9c49164374d247412c4610eae3b34d7a7c7f67bd87672c8c7c6ea90028eda9f7b402bbe178c08cc4fc73cf0712b0a886b33ed4b053beaecd1a74ecf01ad6614f94da10fffc1d245064c6f97b51676cf0db1adf0952ca715916a1261bddd65418a541dd2ded7923623ee5a6731dab00b4618f51e5a08619a52", 0x8b}, {&(0x7f0000003e80)="5a74fe8f8fd760fd060d0d244db4ee058f0ebbbb0d307b7259c50f953385df0792f7bb8f0ea780a0fbe7771f000dc35aa3a0752210b8e1198557c3620bc81c19819b2a1db4e9a2e1dcc9f402b16d9cda7a49da7d0711b5", 0x57}, {&(0x7f0000003f00)='*', 0x1}], 0x7, &(0x7f0000004280)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r14, 0xffffffffffffffff}}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r1, r1, r1, r0, r2, r15, r2]}}, @cred={{0x1c, 0x1, 0x2, {r16, r18, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [r1, r2, r3, r1]}}], 0x98, 0x20008040}}], 0x2, 0x4000080) r19 = syz_genetlink_get_family_id$team(&(0x7f0000004400), r15) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004440)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000004480)={@loopback, 0x0}, &(0x7f00000044c0)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000004580)={r0, 0x58, &(0x7f0000004500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockname$packet(r15, &(0x7f00000045c0)={0x11, 0x0, 0x0}, &(0x7f0000004600)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r15, 0x89f1, &(0x7f00000046c0)={'syztnl2\x00', &(0x7f0000004640)={'syztnl2\x00', r13, 0x29, 0x6, 0x83, 0x80000000, 0x1c, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x700, 0xe36d, 0x7f}}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004e00)={&(0x7f00000043c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004dc0)={&(0x7f0000004700)={0x6bc, r19, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x1d0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r17}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r20}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r21}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r13}, {0x220, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7911014}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd6}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r13}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r22}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x7, 0x1, 0x80, 0x5}, {0x0, 0x10, 0x2, 0x4}, {0x0, 0x7, 0x8, 0xa37}, {0xf, 0x8, 0x6, 0x1}, {0x1, 0x8, 0x9e, 0xe}, {0x6, 0x9, 0x4, 0x1ff}, {0x3, 0x4, 0xc, 0x9}, {0xfff7, 0x7, 0x3, 0xb}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r13}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r23}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xbf9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r24}}}]}}]}, 0x6bc}, 0x1, 0x0, 0x0, 0x20040011}, 0x8000) r25 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000004e40), 0x2, 0x0) fallocate(r25, 0x40, 0x4, 0x8) 661.541473ms ago: executing program 4 (id=177): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x5d) 0s ago: executing program 0 (id=178): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x23, 0x6, 0x0) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000080)=0x57d) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="f9aced89f174d7ee8162d8af47da9b2d9f6d2121d4fa87d34ad531814294a95cf79eb84aba490a8d33b2", 0x2a}], 0x1, 0x3, 0xd4bd) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000040)=0x10000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.224' (ED25519) to the list of known hosts. [ 339.010807][ T29] audit: type=1400 audit(1739360745.976:88): avc: denied { mounton } for pid=5828 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 339.014602][ T5828] cgroup: Unknown subsys name 'net' [ 339.033584][ T29] audit: type=1400 audit(1739360745.976:89): avc: denied { mount } for pid=5828 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 339.063148][ T29] audit: type=1400 audit(1739360746.026:90): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 339.219649][ T5828] cgroup: Unknown subsys name 'cpuset' [ 339.226594][ T5828] cgroup: Unknown subsys name 'rlimit' [ 339.389570][ T29] audit: type=1400 audit(1739360746.356:91): avc: denied { setattr } for pid=5828 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 339.412894][ T29] audit: type=1400 audit(1739360746.356:92): avc: denied { create } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 339.433487][ T29] audit: type=1400 audit(1739360746.356:93): avc: denied { write } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 339.459077][ T29] audit: type=1400 audit(1739360746.356:94): avc: denied { read } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 339.480651][ T29] audit: type=1400 audit(1739360746.356:95): avc: denied { mounton } for pid=5828 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 339.505870][ T29] audit: type=1400 audit(1739360746.356:96): avc: denied { mount } for pid=5828 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 339.521666][ T5830] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 339.529903][ T29] audit: type=1400 audit(1739360746.426:97): avc: denied { read } for pid=5487 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 340.348885][ T5828] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 342.310690][ T5131] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 342.340344][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 342.348013][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 342.355937][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 342.364388][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 342.372603][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 342.372844][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 342.386122][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 342.388226][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 342.394669][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 342.408447][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 342.416630][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 342.416937][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 342.427696][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 342.437548][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 342.438526][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 342.446383][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 342.453039][ T5853] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 342.458856][ T5856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 342.465884][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 342.473455][ T5856] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 342.479922][ T5853] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 342.486839][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 342.493700][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 342.500702][ T5856] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 342.514602][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 342.518323][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 342.534890][ T5855] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 342.542712][ T5857] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 342.551112][ T5857] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 342.779451][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 342.840414][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 342.932849][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 342.941321][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.948496][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.955772][ T5842] bridge_slave_0: entered allmulticast mode [ 342.963852][ T5842] bridge_slave_0: entered promiscuous mode [ 342.973234][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.981478][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.988639][ T5842] bridge_slave_1: entered allmulticast mode [ 342.995283][ T5842] bridge_slave_1: entered promiscuous mode [ 343.020621][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 343.057279][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.071037][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 343.091916][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.140807][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.148295][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.155365][ T5838] bridge_slave_0: entered allmulticast mode [ 343.162079][ T5838] bridge_slave_0: entered promiscuous mode [ 343.171919][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.179221][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.186312][ T5838] bridge_slave_1: entered allmulticast mode [ 343.192858][ T5838] bridge_slave_1: entered promiscuous mode [ 343.212047][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.219176][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.226270][ T5844] bridge_slave_0: entered allmulticast mode [ 343.232824][ T5844] bridge_slave_0: entered promiscuous mode [ 343.241028][ T5842] team0: Port device team_slave_0 added [ 343.260025][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.267077][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.274336][ T5844] bridge_slave_1: entered allmulticast mode [ 343.280719][ T5844] bridge_slave_1: entered promiscuous mode [ 343.288529][ T5842] team0: Port device team_slave_1 added [ 343.321802][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.332931][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.372326][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.379424][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.386504][ T5840] bridge_slave_0: entered allmulticast mode [ 343.393066][ T5840] bridge_slave_0: entered promiscuous mode [ 343.401515][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.412450][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.422476][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.429599][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.455551][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.471713][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.478796][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.485885][ T5846] bridge_slave_0: entered allmulticast mode [ 343.492506][ T5846] bridge_slave_0: entered promiscuous mode [ 343.501511][ T5838] team0: Port device team_slave_0 added [ 343.507307][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.514454][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.521753][ T5840] bridge_slave_1: entered allmulticast mode [ 343.528450][ T5840] bridge_slave_1: entered promiscuous mode [ 343.538870][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.545802][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.571842][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.586764][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.593863][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.601167][ T5846] bridge_slave_1: entered allmulticast mode [ 343.607586][ T5846] bridge_slave_1: entered promiscuous mode [ 343.616828][ T5838] team0: Port device team_slave_1 added [ 343.656921][ T5844] team0: Port device team_slave_0 added [ 343.664742][ T5844] team0: Port device team_slave_1 added [ 343.681485][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.691197][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.698407][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.724377][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.735951][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.742973][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.768960][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.782447][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.793557][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.814106][ T5842] hsr_slave_0: entered promiscuous mode [ 343.820286][ T5842] hsr_slave_1: entered promiscuous mode [ 343.828438][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.850760][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.859837][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.887781][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.899961][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.906894][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.932901][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.971147][ T5846] team0: Port device team_slave_0 added [ 343.983859][ T5840] team0: Port device team_slave_0 added [ 343.991885][ T5840] team0: Port device team_slave_1 added [ 344.006102][ T5846] team0: Port device team_slave_1 added [ 344.019360][ T5838] hsr_slave_0: entered promiscuous mode [ 344.025256][ T5838] hsr_slave_1: entered promiscuous mode [ 344.031531][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.039306][ T5838] Cannot create hsr debugfs directory [ 344.067042][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.074564][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.100676][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.126723][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.133926][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.160032][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.171966][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.179060][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.205113][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.218317][ T5844] hsr_slave_0: entered promiscuous mode [ 344.224236][ T5844] hsr_slave_1: entered promiscuous mode [ 344.230182][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.237825][ T5844] Cannot create hsr debugfs directory [ 344.258848][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.265781][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.292071][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.351339][ T5846] hsr_slave_0: entered promiscuous mode [ 344.357327][ T5846] hsr_slave_1: entered promiscuous mode [ 344.363256][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.371663][ T5846] Cannot create hsr debugfs directory [ 344.421329][ T5840] hsr_slave_0: entered promiscuous mode [ 344.427250][ T5840] hsr_slave_1: entered promiscuous mode [ 344.433179][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.440944][ T5840] Cannot create hsr debugfs directory [ 344.550268][ T5857] Bluetooth: hci1: command tx timeout [ 344.550269][ T5131] Bluetooth: hci0: command tx timeout [ 344.556897][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 344.592611][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 344.602571][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 344.614263][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 344.632060][ T5131] Bluetooth: hci4: command tx timeout [ 344.632291][ T5849] Bluetooth: hci2: command tx timeout [ 344.643336][ T5857] Bluetooth: hci3: command tx timeout [ 344.665103][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 344.673539][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 344.686540][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 344.709384][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 344.732563][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 344.752986][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 344.762901][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 344.772930][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 344.808588][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 344.831364][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 344.839844][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 344.853367][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 344.910267][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.919381][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 344.928654][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 344.937030][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 344.947237][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 345.001324][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.028436][ T3018] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.035629][ T3018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.048840][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.057334][ T5892] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.064408][ T5892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.092743][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.114812][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.138796][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.149331][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.161455][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.168530][ T5891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.179163][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.186227][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.205312][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.212371][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.221402][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.228511][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.249285][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.292521][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 345.292534][ T29] audit: type=1400 audit(1739360752.256:111): avc: denied { sys_module } for pid=5842 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 345.319110][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.332546][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.339647][ T5863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.365839][ T5844] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 345.378064][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 345.403290][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.410399][ T5863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.462183][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.475885][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.509906][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.516966][ T5863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.529143][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.536219][ T5863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.550922][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 345.569411][ T5842] veth0_vlan: entered promiscuous mode [ 345.583155][ T5842] veth1_vlan: entered promiscuous mode [ 345.683023][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.709426][ T5842] veth0_macvtap: entered promiscuous mode [ 345.734092][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.752595][ T5842] veth1_macvtap: entered promiscuous mode [ 345.803738][ T5844] veth0_vlan: entered promiscuous mode [ 345.821656][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.842622][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.855944][ T5838] veth0_vlan: entered promiscuous mode [ 345.865134][ T5842] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.874679][ T5842] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.883832][ T5842] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.892800][ T5842] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.908508][ T5844] veth1_vlan: entered promiscuous mode [ 345.924747][ T5838] veth1_vlan: entered promiscuous mode [ 345.933635][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.971426][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.023743][ T5844] veth0_macvtap: entered promiscuous mode [ 346.061817][ T5838] veth0_macvtap: entered promiscuous mode [ 346.069568][ T5844] veth1_macvtap: entered promiscuous mode [ 346.079497][ T5838] veth1_macvtap: entered promiscuous mode [ 346.107150][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.119721][ T3018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.131780][ T3018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.141249][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.153051][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.175801][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.187390][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.199373][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.213281][ T5896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.226445][ T5896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.230123][ T5846] veth0_vlan: entered promiscuous mode [ 346.250380][ T5840] veth0_vlan: entered promiscuous mode [ 346.257003][ T29] audit: type=1400 audit(1739360753.216:112): avc: denied { mounton } for pid=5842 comm="syz-executor" path="/root/syzkaller.l919ir/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 346.257733][ T5844] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.294579][ T29] audit: type=1400 audit(1739360753.216:113): avc: denied { mount } for pid=5842 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 346.297424][ T5844] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.321938][ T29] audit: type=1400 audit(1739360753.216:114): avc: denied { mounton } for pid=5842 comm="syz-executor" path="/root/syzkaller.l919ir/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 346.327629][ T5844] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.359944][ T5844] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.364364][ T29] audit: type=1400 audit(1739360753.216:115): avc: denied { mount } for pid=5842 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 346.392246][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.395697][ T29] audit: type=1400 audit(1739360753.216:116): avc: denied { mounton } for pid=5842 comm="syz-executor" path="/root/syzkaller.l919ir/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 346.407591][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.434377][ T29] audit: type=1400 audit(1739360753.256:117): avc: denied { mounton } for pid=5842 comm="syz-executor" path="/root/syzkaller.l919ir/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 346.439517][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.470541][ T29] audit: type=1400 audit(1739360753.256:118): avc: denied { unmount } for pid=5842 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 346.477775][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.510241][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.521008][ T29] audit: type=1400 audit(1739360753.336:119): avc: denied { mounton } for pid=5842 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 346.544119][ T29] audit: type=1400 audit(1739360753.336:120): avc: denied { mount } for pid=5842 comm="syz-executor" name="/" dev="gadgetfs" ino=6822 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 346.571713][ T5846] veth1_vlan: entered promiscuous mode [ 346.585725][ T5840] veth1_vlan: entered promiscuous mode [ 346.595709][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 346.630106][ T5846] veth0_macvtap: entered promiscuous mode [ 346.636713][ T5857] Bluetooth: hci1: command tx timeout [ 346.643094][ T5857] Bluetooth: hci0: command tx timeout [ 346.650394][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.670412][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.697112][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.707958][ T5857] Bluetooth: hci4: command tx timeout [ 346.713928][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.718790][ T5857] Bluetooth: hci3: command tx timeout [ 346.727050][ T5849] Bluetooth: hci2: command tx timeout [ 346.736724][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.752902][ T5846] veth1_macvtap: entered promiscuous mode [ 346.761621][ T5838] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.770582][ T5838] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.779987][ T5838] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.789348][ T5838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.829922][ T3989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.841431][ T5840] veth0_macvtap: entered promiscuous mode [ 346.844495][ T3989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.873752][ T5840] veth1_macvtap: entered promiscuous mode [ 346.882057][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.892623][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.903581][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.914298][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.924137][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.934816][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.934994][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 346.949697][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.982936][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.993533][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.003653][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.014283][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.024714][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.039646][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.050976][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.063844][ T5891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.066594][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.072210][ T5891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.083700][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.100398][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.111020][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.122846][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.124331][ T8] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 347.133373][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.146894][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 347.160151][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.163114][ T8] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.01 [ 347.177061][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.182568][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.196667][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.208962][ T8] usb 2-1: config 0 descriptor?? [ 347.236936][ T5846] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.245862][ T5846] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.255015][ T5846] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.264290][ T5846] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.275754][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.292286][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.302224][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.313717][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.323634][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.334169][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.344056][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.354995][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.365575][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.377713][ T5863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.389672][ T5863] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.418077][ T5840] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.426826][ T5840] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.437131][ T5840] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.446164][ T5840] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.471932][ T3018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.524536][ T3018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.654243][ T8] aquacomputer_d5next 0003:0C70:F00A.0001: item fetching failed at offset 5/7 [ 347.707154][ T8] aquacomputer_d5next 0003:0C70:F00A.0001: probe with driver aquacomputer_d5next failed with error -22 [ 347.745393][ T3018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.147849][ T5944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.240028][ T5945] FAULT_INJECTION: forcing a failure. [ 348.240028][ T5945] name failslab, interval 1, probability 0, space 0, times 1 [ 348.248954][ T3018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.263080][ T5945] CPU: 0 UID: 0 PID: 5945 Comm: syz.3.4 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 348.263100][ T5945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 348.263109][ T5945] Call Trace: [ 348.263114][ T5945] [ 348.263120][ T5945] dump_stack_lvl+0x16c/0x1f0 [ 348.263143][ T5945] should_fail_ex+0x50a/0x650 [ 348.263165][ T5945] ? fs_reclaim_acquire+0xae/0x150 [ 348.263191][ T5945] should_failslab+0xc2/0x120 [ 348.263209][ T5945] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 348.263226][ T5945] ? __alloc_skb+0x2b1/0x380 [ 348.263248][ T5945] __alloc_skb+0x2b1/0x380 [ 348.263267][ T5945] ? __pfx___alloc_skb+0x10/0x10 [ 348.263288][ T5945] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 348.263312][ T5945] netlink_alloc_large_skb+0x69/0x130 [ 348.263332][ T5945] netlink_sendmsg+0x689/0xd70 [ 348.263355][ T5945] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.263380][ T5945] ____sys_sendmsg+0xaaf/0xc90 [ 348.263405][ T5945] ? copy_msghdr_from_user+0x10b/0x160 [ 348.263424][ T5945] ? __pfx_____sys_sendmsg+0x10/0x10 [ 348.263451][ T5945] ? find_held_lock+0x2d/0x110 [ 348.263470][ T5945] ___sys_sendmsg+0x135/0x1e0 [ 348.263488][ T5945] ? rcu_preempt_deferred_qs_irqrestore+0x502/0xbd0 [ 348.263514][ T5945] ? __pfx____sys_sendmsg+0x10/0x10 [ 348.263534][ T5945] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 348.263574][ T5945] __sys_sendmmsg+0x201/0x420 [ 348.263598][ T5945] ? __pfx___sys_sendmmsg+0x10/0x10 [ 348.263624][ T5945] ? preempt_schedule_thunk+0x1a/0x30 [ 348.263646][ T5945] ? fput+0x25b/0x440 [ 348.263660][ T5945] ? ksys_write+0x1ba/0x250 [ 348.263677][ T5945] ? __pfx_ksys_write+0x10/0x10 [ 348.263696][ T5945] __x64_sys_sendmmsg+0x9c/0x100 [ 348.263711][ T5945] ? lockdep_hardirqs_on+0x7c/0x110 [ 348.263732][ T5945] do_syscall_64+0xcd/0x250 [ 348.263747][ T5945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.263768][ T5945] RIP: 0033:0x7f7ead18cde9 [ 348.263781][ T5945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.263800][ T5945] RSP: 002b:00007f7eae002038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 348.263816][ T5945] RAX: ffffffffffffffda RBX: 00007f7ead3a5fa0 RCX: 00007f7ead18cde9 [ 348.263826][ T5945] RDX: 040000000000009f RSI: 00004000000002c0 RDI: 0000000000000004 [ 348.263836][ T5945] RBP: 00007f7eae002090 R08: 0000000000000000 R09: 0000000000000000 [ 348.263845][ T5945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.263854][ T5945] R13: 0000000000000000 R14: 00007f7ead3a5fa0 R15: 00007ffdd5c8f748 [ 348.263875][ T5945] [ 348.264571][ T5944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.273603][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.600230][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.652310][ T5848] usb 2-1: USB disconnect, device number 2 [ 348.680335][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.681300][ T5892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.712995][ T5857] Bluetooth: hci1: command tx timeout [ 348.713012][ T5849] Bluetooth: hci0: command tx timeout [ 348.725058][ T5892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.735222][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.794863][ T5849] Bluetooth: hci2: command tx timeout [ 348.794880][ T5857] Bluetooth: hci3: command tx timeout [ 348.794906][ T5857] Bluetooth: hci4: command tx timeout [ 348.828735][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 349.001552][ T8] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 349.011381][ T8] usb 4-1: config 0 has no interface number 0 [ 349.042375][ T8] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010d, bcdDevice=da.16 [ 349.071527][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.094660][ T8] usb 4-1: Product: syz [ 349.117809][ T8] usb 4-1: Manufacturer: syz [ 349.135619][ T8] usb 4-1: SerialNumber: syz [ 349.180520][ T8] usb 4-1: config 0 descriptor?? [ 349.247906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 349.315727][ T5986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12'. [ 349.325189][ T5986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12'. [ 349.334356][ T5986] netlink: 'syz.4.12': attribute type 11 has an invalid length. [ 349.397584][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 349.417565][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 349.517516][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 349.557623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 349.568232][ T5985] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11'. [ 349.761559][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 349.787545][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 349.877513][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 349.887541][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 350.217739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 350.256198][ T5993] warning: `syz.1.14' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 350.333684][ T5993] xt_TCPMSS: Only works on TCP SYN packets [ 350.353335][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 350.353350][ T29] audit: type=1400 audit(1739360757.316:169): avc: denied { write } for pid=5994 comm="syz.4.15" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 350.440684][ T29] audit: type=1400 audit(1739360757.406:170): avc: denied { create } for pid=5992 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 350.788605][ T5857] Bluetooth: hci1: command tx timeout [ 350.794650][ T5857] Bluetooth: hci0: command tx timeout [ 350.868278][ T5857] Bluetooth: hci2: command tx timeout [ 350.868316][ T5131] Bluetooth: hci3: command tx timeout [ 350.874341][ T5849] Bluetooth: hci4: command tx timeout [ 350.956228][ T6004] Zero length message leads to an empty skb [ 351.807937][ T6010] netlink: 'syz.2.17': attribute type 2 has an invalid length. [ 351.816174][ T6010] netlink: 'syz.2.17': attribute type 1 has an invalid length. [ 351.824213][ T6010] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.17'. [ 351.833756][ T6010] nbd: couldn't find a device at index 1568768 [ 352.284856][ T8] kvaser_usb 4-1:0.1: error -ENODEV: Cannot get usb endpoint(s) [ 352.307758][ T8] usb 4-1: USB disconnect, device number 2 [ 352.618771][ T29] audit: type=1400 audit(1739360759.586:171): avc: denied { write } for pid=6015 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 352.702462][ T29] audit: type=1400 audit(1739360759.606:172): avc: denied { name_connect } for pid=6015 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 352.774465][ T29] audit: type=1400 audit(1739360759.636:173): avc: denied { listen } for pid=6015 comm="syz.3.20" lport=55031 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 352.899012][ T29] audit: type=1400 audit(1739360759.706:174): avc: denied { setopt } for pid=6015 comm="syz.3.20" lport=55031 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 352.919776][ T29] audit: type=1400 audit(1739360759.776:175): avc: denied { accept } for pid=6015 comm="syz.3.20" lport=55031 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 352.941075][ T29] audit: type=1400 audit(1739360759.836:176): avc: denied { map } for pid=6015 comm="syz.3.20" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8563 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 352.968190][ T29] audit: type=1400 audit(1739360759.836:177): avc: denied { read write } for pid=6015 comm="syz.3.20" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8563 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 353.094589][ T29] audit: type=1400 audit(1739360760.036:178): avc: denied { prog_run } for pid=6015 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 353.548705][ T6029] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22'. [ 353.947898][ T8] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 354.146606][ T6039] usb usb9: usbfs: process 6039 (syz.3.23) did not claim interface 0 before use [ 354.298934][ T6039] bridge0: port 3(vlan2) entered blocking state [ 354.305441][ T6039] bridge0: port 3(vlan2) entered disabled state [ 354.313087][ T6039] vlan2: entered allmulticast mode [ 354.738569][ T6039] vlan2: left allmulticast mode [ 355.020062][ T8] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 355.032183][ T8] usb 1-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 355.066606][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.174311][ T8] usb 1-1: Product: syz [ 355.182051][ T8] usb 1-1: Manufacturer: syz [ 355.186628][ T8] usb 1-1: SerialNumber: syz [ 355.427235][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 355.427248][ T29] audit: type=1400 audit(1739360762.386:189): avc: denied { write } for pid=6030 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 355.483104][ T8] usb 1-1: selecting invalid altsetting 1 [ 355.489002][ T933] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 355.656517][ T8] LME2510(C): Firmware Status: 06 03 47 72 6f 76 [ 355.656552][ T8] usb 1-1: dvb_usb_v2: found a 'DM04_LME2510C_DVB-S RS2000' in warm state [ 355.671751][ T933] usb 2-1: Using ep0 maxpacket: 32 [ 355.688500][ T933] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 355.697287][ T933] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.725525][ T8] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 355.735217][ T933] usb 2-1: config 0 has no interface number 0 [ 355.756878][ T933] usb 2-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 355.806069][ T8] usb 1-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 15) [ 355.826022][ T8] dvbdev: DVB: registering new adapter (DM04_LME2510C_DVB-S RS2000) [ 355.841822][ T933] usb 2-1: config 0 interface 1 has no altsetting 0 [ 356.133430][ T29] audit: type=1400 audit(1739360763.046:190): avc: denied { unmount } for pid=5846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 356.365016][ T8] usb 1-1: media controller created [ 356.372572][ T933] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 356.382536][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 356.390987][ T933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.404982][ T933] usb 2-1: Product: syz [ 356.409223][ T933] usb 2-1: Manufacturer: syz [ 356.413842][ T933] usb 2-1: SerialNumber: syz [ 356.420381][ T933] usb 2-1: config 0 descriptor?? [ 356.445058][ T29] audit: type=1400 audit(1739360763.406:191): avc: denied { bind } for pid=6060 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 356.465222][ C0] vkms_vblank_simulate: vblank timer overrun [ 356.599089][ T6063] futex_wake_op: syz.2.28 tries to shift op by -1; fix this program [ 356.757711][ T29] audit: type=1400 audit(1739360763.406:192): avc: denied { read } for pid=6060 comm="syz.2.28" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 356.780481][ C0] vkms_vblank_simulate: vblank timer overrun [ 356.817118][ T6062] pim6reg: entered allmulticast mode [ 356.873514][ T933] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 356.912886][ T933] cx231xx 2-1:0.1: Not found matching IAD interface [ 356.938379][ T8] DVB: Unable to find symbol m88rs2000_attach() [ 356.944644][ T8] LME2510(C): DM04/QQBOX Not Powered up or not Supported [ 356.944668][ T8] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 356.969343][ T933] usb 2-1: USB disconnect, device number 3 [ 357.006076][ T29] audit: type=1400 audit(1739360763.406:193): avc: denied { open } for pid=6060 comm="syz.2.28" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 357.029305][ C0] vkms_vblank_simulate: vblank timer overrun [ 357.156477][ T8] usb 1-1: USB disconnect, device number 2 [ 357.187009][ T6071] random: crng reseeded on system resumption [ 357.198792][ T29] audit: type=1400 audit(1739360763.406:194): avc: denied { ioctl } for pid=6060 comm="syz.2.28" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 357.231067][ T29] audit: type=1400 audit(1739360763.646:195): avc: denied { connect } for pid=6060 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 357.251217][ T29] audit: type=1400 audit(1739360763.666:196): avc: denied { bind } for pid=6060 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 357.271626][ T29] audit: type=1400 audit(1739360763.756:197): avc: denied { setopt } for pid=6060 comm="syz.2.28" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 357.291956][ T29] audit: type=1400 audit(1739360764.006:198): avc: denied { write } for pid=6060 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 357.379553][ T5894] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 357.397557][ T933] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 357.438507][ T5893] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 357.547569][ T933] usb 2-1: Using ep0 maxpacket: 32 [ 357.554505][ T933] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 357.562707][ T933] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.568704][ T5894] usb 4-1: config 1 interface 0 has no altsetting 0 [ 357.572868][ T933] usb 2-1: config 0 has no interface number 0 [ 357.584780][ T5894] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 357.585474][ T933] usb 2-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 357.594942][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.608342][ T933] usb 2-1: config 0 interface 1 has no altsetting 0 [ 357.615610][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 357.627711][ T5894] usb 4-1: Product: syz [ 357.629162][ T933] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 357.631990][ T5894] usb 4-1: Manufacturer: syz [ 357.644615][ T933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.646747][ T5894] usb 4-1: SerialNumber: syz [ 357.655333][ T933] usb 2-1: Product: syz [ 357.662779][ T5893] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.675231][ T5893] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 357.686020][ T933] usb 2-1: Manufacturer: syz [ 357.690232][ T5893] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 357.692019][ T933] usb 2-1: SerialNumber: syz [ 357.705158][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.713454][ T5893] usb 5-1: Product: syz [ 357.716399][ T933] usb 2-1: config 0 descriptor?? [ 357.722786][ T5893] usb 5-1: Manufacturer: syz [ 357.727447][ T5893] usb 5-1: SerialNumber: syz [ 358.042825][ T6075] Illegal XDP return value 4294967274 on prog (id 4) dev N/A, expect packet loss! [ 358.045982][ T5893] usb 5-1: 0:2 : does not exist [ 358.235566][ T5893] usb 5-1: unit 6 not found! [ 358.264875][ T933] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 358.275751][ T933] cx231xx 2-1:0.1: Not found matching IAD interface [ 358.286469][ T933] usb 2-1: USB disconnect, device number 4 [ 358.314681][ T5893] usb 5-1: USB disconnect, device number 2 [ 358.331417][ T5894] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 358.467613][ T8] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 359.076984][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 359.149102][ T8] usb 3-1: config 4 has an invalid interface number: 44 but max is 0 [ 359.168839][ T8] usb 3-1: config 4 has no interface number 0 [ 359.175145][ T8] usb 3-1: config 4 interface 44 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 359.191203][ T8] usb 3-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 359.254324][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.271225][ T8] usb 3-1: Product: syz [ 359.275713][ T8] usb 3-1: Manufacturer: syz [ 359.280872][ T8] usb 3-1: SerialNumber: syz [ 359.310965][ T5926] IPVS: starting estimator thread 0... [ 359.329449][ T6092] Bluetooth: MGMT ver 1.23 [ 359.417662][ T6093] IPVS: using max 29 ests per chain, 69600 per kthread [ 359.453695][ T6090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.467260][ T5893] libceph: connect (1)[c::]:6789 error -101 [ 359.522706][ T6090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.549489][ T6090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.578009][ T6090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.899848][ T5893] libceph: mon0 (1)[c::]:6789 connect error [ 359.918454][ T5893] libceph: connect (1)[c::]:6789 error -101 [ 359.925107][ T5893] libceph: mon0 (1)[c::]:6789 connect error [ 360.126507][ T6090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.143746][ T6090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.230194][ T5893] libceph: connect (1)[c::]:6789 error -101 [ 360.239275][ T5893] libceph: mon0 (1)[c::]:6789 connect error [ 360.246419][ T6074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.254971][ T6074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.266240][ T8] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 360.283154][ T8] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 360.295564][ T8] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 360.303453][ T8] usb 3-1: media controller created [ 360.316939][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 360.410608][ T8] DVB: Unable to find symbol dib7000p_attach() [ 360.420082][ T8] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 360.557788][ T8] rc_core: IR keymap rc-dib0700-rc5 not found [ 360.565714][ T8] Registered IR keymap rc-empty [ 360.738137][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 360.738167][ T29] audit: type=1400 audit(1739360767.596:210): avc: denied { mounton } for pid=6102 comm="syz.0.38" path="/7/file0" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 361.007200][ T8] dvb-usb: could not initialize remote control. [ 361.013919][ T8] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 361.027050][ C1] usblp0: nonzero write bulk status received: -71 [ 361.036077][ T5893] libceph: connect (1)[c::]:6789 error -101 [ 361.042378][ T5893] libceph: mon0 (1)[c::]:6789 connect error [ 361.060791][ T5894] usb 4-1: USB disconnect, device number 3 [ 361.074777][ T5894] usblp0: removed [ 361.207660][ T6095] ceph: No mds server is up or the cluster is laggy [ 361.308426][ T8] usb 3-1: USB disconnect, device number 2 [ 361.376601][ T8] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 361.620139][ T6116] netlink: 60 bytes leftover after parsing attributes in process `syz.4.39'. [ 362.194418][ T29] audit: type=1400 audit(1739360769.156:211): avc: denied { create } for pid=6119 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 362.214180][ T29] audit: type=1400 audit(1739360769.156:212): avc: denied { write } for pid=6119 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 362.461904][ T29] audit: type=1400 audit(1739360769.426:213): avc: denied { setopt } for pid=6122 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 362.568129][ T29] audit: type=1400 audit(1739360769.476:214): avc: denied { read } for pid=6122 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 362.625295][ T29] audit: type=1400 audit(1739360769.576:215): avc: denied { ioctl } for pid=6122 comm="syz.1.42" path="socket:[8181]" dev="sockfs" ino=8181 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 362.762552][ T6129] random: crng reseeded on system resumption [ 362.853132][ T29] audit: type=1400 audit(1739360769.806:216): avc: denied { create } for pid=6130 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 362.879344][ T29] audit: type=1400 audit(1739360769.816:217): avc: denied { execute } for pid=6130 comm="syz.2.45" path="/7/cpu.stat" dev="tmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 362.957597][ T5926] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 363.107711][ T5926] usb 5-1: Using ep0 maxpacket: 16 [ 363.125861][ T5926] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 363.135417][ T5926] usb 5-1: config 0 has no interface number 0 [ 363.146760][ T5926] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 363.167279][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.177536][ T5926] usb 5-1: Product: syz [ 363.185546][ T5926] usb 5-1: Manufacturer: syz [ 363.190683][ T5926] usb 5-1: SerialNumber: syz [ 363.197319][ T5926] usb 5-1: config 0 descriptor?? [ 363.217573][ T5894] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 363.249975][ T6137] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 363.382146][ T5894] usb 3-1: config 1 interface 0 has no altsetting 0 [ 363.400346][ T5894] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 363.413641][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.419715][ T5926] usb 5-1: selecting invalid altsetting 1 [ 363.423256][ T5894] usb 3-1: Product: syz [ 363.432227][ T5926] speedtch 5-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 363.440728][ T5894] usb 3-1: Manufacturer: syz [ 363.440746][ T5894] usb 3-1: SerialNumber: syz [ 363.450394][ T5926] speedtch 5-1:0.1: usbatm_usb_probe: bind failed: -22! [ 363.457362][ T5926] speedtch 5-1:0.1: probe with driver speedtch failed with error -22 [ 363.475448][ T5926] usb 5-1: USB disconnect, device number 3 [ 363.699076][ T6144] usb usb9: usbfs: process 6144 (syz.1.49) did not claim interface 0 before use [ 364.122677][ T5894] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 364.271831][ T29] audit: type=1400 audit(1739360771.226:218): avc: denied { read write } for pid=6151 comm="syz.4.52" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 364.294774][ C0] vkms_vblank_simulate: vblank timer overrun [ 364.374219][ T29] audit: type=1400 audit(1739360771.226:219): avc: denied { open } for pid=6151 comm="syz.4.52" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 364.667696][ T5893] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 364.845369][ T8] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 365.035528][ T6170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.070508][ T8] usb 4-1: config 4 has an invalid interface number: 44 but max is 0 [ 365.154953][ T6170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.173789][ T8] usb 4-1: config 4 has no interface number 0 [ 365.196150][ T8] usb 4-1: config 4 interface 44 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 365.217297][ T8] usb 4-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 365.227517][ T5893] usb 2-1: Using ep0 maxpacket: 8 [ 365.232275][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.236071][ T5893] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 365.241028][ T8] usb 4-1: Product: syz [ 365.257397][ T5893] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 365.258446][ T8] usb 4-1: Manufacturer: syz [ 365.269110][ T5893] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 365.282025][ T8] usb 4-1: SerialNumber: syz [ 365.285288][ T6159] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 365.296311][ T5893] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 365.338404][ T5893] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 365.350882][ T5893] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 365.360116][ T5893] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 365.381710][ T5893] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 365.403779][ T5893] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 365.415127][ T6167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.437824][ T6167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.450122][ T5893] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 365.629058][ T5893] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 365.637018][ T5893] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 365.652989][ T5893] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 365.673312][ T5893] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 365.729590][ T6176] usb usb9: usbfs: process 6176 (syz.0.58) did not claim interface 0 before use [ 365.809544][ T5894] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 366.398636][ T5893] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 366.412630][ C0] usblp0: nonzero write bulk status received: -71 [ 366.420774][ T933] usb 3-1: USB disconnect, device number 3 [ 366.446306][ T5893] usb 2-1: string descriptor 0 read error: -22 [ 366.511578][ T5893] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 366.546073][ T5894] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 366.592406][ T5894] usb 5-1: config 0 has no interface number 0 [ 366.594875][ T6134] usblp0: removed [ 366.607005][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.647722][ T5894] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.686209][ T5894] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.742184][ T5893] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 366.755004][ T6178] kvm: emulating exchange as write [ 366.790000][ T5894] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 366.810753][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.903615][ T5894] usb 5-1: config 0 descriptor?? [ 367.083883][ T933] usb 2-1: USB disconnect, device number 5 [ 367.129291][ T8] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 367.139361][ T6184] random: crng reseeded on system resumption [ 367.152166][ T8] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 367.167780][ T8] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 367.177265][ T8] usb 4-1: media controller created [ 367.190469][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 367.250629][ T8] DVB: Unable to find symbol dib7000p_attach() [ 367.269932][ T8] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 367.327548][ T8] rc_core: IR keymap rc-dib0700-rc5 not found [ 367.337557][ T8] Registered IR keymap rc-empty [ 367.342530][ T8] dvb-usb: could not initialize remote control. [ 367.367560][ T8] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 367.473399][ T5894] input: HID 04d9:a055 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:04D9:A055.0002/input/input7 [ 367.571065][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 367.571078][ T29] audit: type=1400 audit(1739360774.536:223): avc: denied { read } for pid=5178 comm="acpid" name="event4" dev="devtmpfs" ino=2780 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 367.606168][ T5894] holtek_kbd 0003:04D9:A055.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.4-1/input1 [ 367.637686][ T29] audit: type=1400 audit(1739360774.536:224): avc: denied { open } for pid=5178 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2780 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 367.661143][ C1] vkms_vblank_simulate: vblank timer overrun [ 367.676801][ T8] usb 4-1: USB disconnect, device number 4 [ 367.707179][ T29] audit: type=1400 audit(1739360774.536:225): avc: denied { ioctl } for pid=5178 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2780 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 367.707600][ T8] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 367.827990][ T933] usb 5-1: USB disconnect, device number 4 [ 368.107057][ T6200] netlink: 60 bytes leftover after parsing attributes in process `syz.1.63'. [ 368.837252][ T29] audit: type=1400 audit(1739360775.796:226): avc: denied { relabelfrom } for pid=6206 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 368.856836][ C1] vkms_vblank_simulate: vblank timer overrun [ 368.873368][ T29] audit: type=1400 audit(1739360775.796:227): avc: denied { relabelto } for pid=6206 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 368.931305][ T29] audit: type=1400 audit(1739360775.896:228): avc: denied { write } for pid=6208 comm="syz.0.66" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 368.975310][ T29] audit: type=1400 audit(1739360775.896:229): avc: denied { open } for pid=6208 comm="syz.0.66" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 369.207608][ T5936] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 369.260922][ T29] audit: type=1400 audit(1739360776.226:230): avc: denied { create } for pid=6226 comm="syz.4.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 369.379016][ T5936] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 369.393046][ T5936] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 369.403861][ T5936] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 369.417359][ T5936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 369.426442][ T5936] usb 1-1: SerialNumber: syz [ 369.548696][ T5893] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 369.567605][ T5894] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 369.617586][ T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 369.647450][ T29] audit: type=1400 audit(1739360776.606:231): avc: denied { ioctl } for pid=6208 comm="syz.0.66" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 369.673052][ C1] vkms_vblank_simulate: vblank timer overrun [ 369.717587][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 369.724358][ T5893] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.737789][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 369.749504][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 369.759981][ T5893] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 369.769764][ T5894] usb 3-1: Using ep0 maxpacket: 8 [ 369.782237][ T5936] usb 1-1: 0:2 : does not exist [ 369.787406][ T5893] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 369.802947][ T5894] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 369.812737][ T5936] usb 1-1: unit 5: unexpected type 0x09 [ 369.818623][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.830256][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 369.847760][ T5893] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 369.859848][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.871281][ T5936] usb 1-1: USB disconnect, device number 3 [ 369.878105][ T6215] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 369.880397][ T5893] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 369.893849][ T5894] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 369.909402][ T25] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 369.925725][ T5893] usb 5-1: Manufacturer: syz [ 369.930828][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 369.944288][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.953560][ T5893] usb 5-1: config 0 descriptor?? [ 369.968018][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 369.980575][ T25] usb 4-1: config 0 descriptor?? [ 369.993545][ T5894] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 370.001538][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 370.012843][ T5894] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 370.024574][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 370.035785][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 370.048981][ T5894] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 370.056517][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 370.173893][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 370.178415][ T5894] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 370.206479][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 370.222730][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 370.237732][ T5894] usb 3-1: string descriptor 0 read error: -22 [ 370.269706][ T5894] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 370.312343][ T6239] netlink: 60 bytes leftover after parsing attributes in process `syz.1.75'. [ 370.338011][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.393755][ T5894] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 370.456250][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 370.603621][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 370.697044][ T5894] usb 3-1: USB disconnect, device number 4 [ 370.704815][ T25] usb 4-1: USB disconnect, device number 5 [ 370.727665][ T5893] rc_core: IR keymap rc-hauppauge not found [ 370.745233][ T5893] Registered IR keymap rc-empty [ 370.759685][ T5893] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 370.789400][ T5893] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 370.820351][ T5893] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 370.840130][ T5893] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input8 [ 370.975268][ T5893] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.040491][ T5893] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.053751][ T6246] random: crng reseeded on system resumption [ 371.075988][ T29] audit: type=1400 audit(1739360778.036:232): avc: denied { rename } for pid=5175 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 371.102834][ T5893] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.172176][ T5893] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.228307][ T5893] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.277717][ T5893] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.319009][ T5893] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.378792][ T5893] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.417712][ T5893] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.440341][ T6255] FAULT_INJECTION: forcing a failure. [ 371.440341][ T6255] name failslab, interval 1, probability 0, space 0, times 0 [ 371.704076][ T6255] CPU: 0 UID: 0 PID: 6255 Comm: syz.2.80 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 371.704102][ T6255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 371.704109][ T6255] Call Trace: [ 371.704113][ T6255] [ 371.704119][ T6255] dump_stack_lvl+0x16c/0x1f0 [ 371.704142][ T6255] should_fail_ex+0x50a/0x650 [ 371.704166][ T6255] should_failslab+0xc2/0x120 [ 371.704183][ T6255] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 371.704188][ T5893] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.704199][ T6255] ? __pfx___lock_acquire+0x10/0x10 [ 371.704220][ T6255] ? __alloc_skb+0x2b1/0x380 [ 371.704239][ T6255] __alloc_skb+0x2b1/0x380 [ 371.704254][ T6255] ? __pfx___alloc_skb+0x10/0x10 [ 371.704268][ T6255] ? find_held_lock+0x2d/0x110 [ 371.704285][ T6255] ? xfrm_get_translator+0xeb/0x290 [ 371.704304][ T6255] xfrm_alloc_compat+0xb9c/0x1290 [ 371.704326][ T6255] ? __pfx_xfrm_alloc_compat+0x10/0x10 [ 371.704344][ T6255] xfrm_send_state_notify+0xce7/0x1fb0 [ 371.704364][ T6255] ? __pfx_xfrm_send_state_notify+0x10/0x10 [ 371.704381][ T6255] ? trace_lock_acquire+0x14e/0x1f0 [ 371.704397][ T6255] ? km_state_notify+0x39/0x230 [ 371.704410][ T6255] ? lock_acquire+0x2f/0xb0 [ 371.704427][ T6255] ? km_state_notify+0x39/0x230 [ 371.704441][ T6255] ? __pfx_xfrm_send_state_notify+0x10/0x10 [ 371.704459][ T6255] km_state_notify+0xa8/0x230 [ 371.704474][ T6255] xfrm_add_sa+0x34e7/0x5720 [ 371.704496][ T6255] ? cap_capable+0xb3/0x250 [ 371.704512][ T6255] ? __pfx_xfrm_add_sa+0x10/0x10 [ 371.704531][ T6255] ? __nla_parse+0x40/0x60 [ 371.704545][ T6255] ? __pfx_xfrm_add_sa+0x10/0x10 [ 371.704562][ T6255] xfrm_user_rcv_msg+0x58c/0xc00 [ 371.704582][ T6255] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 371.704597][ T6255] ? find_held_lock+0x2d/0x110 [ 371.704612][ T6255] ? hlock_class+0x4e/0x130 [ 371.704625][ T6255] ? __lock_acquire+0x15a9/0x3c40 [ 371.704666][ T6255] ? __mutex_trylock_common+0xea/0x250 [ 371.704686][ T6255] ? __pfx___mutex_trylock_common+0x10/0x10 [ 371.704705][ T6255] ? xfrm_netlink_rcv+0x62/0x90 [ 371.704721][ T6255] netlink_rcv_skb+0x16b/0x440 [ 371.704738][ T6255] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 371.704755][ T6255] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 371.704770][ T6255] ? xfrm_netlink_rcv+0x62/0x90 [ 371.704801][ T6255] xfrm_netlink_rcv+0x71/0x90 [ 371.704815][ T6255] netlink_unicast+0x53c/0x7f0 [ 371.704833][ T6255] ? __pfx_netlink_unicast+0x10/0x10 [ 371.704855][ T6255] netlink_sendmsg+0x8b8/0xd70 [ 371.704874][ T6255] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.704898][ T6255] ____sys_sendmsg+0xaaf/0xc90 [ 371.704929][ T6255] ? copy_msghdr_from_user+0x10b/0x160 [ 371.704946][ T6255] ? __pfx_____sys_sendmsg+0x10/0x10 [ 371.704977][ T6255] ___sys_sendmsg+0x135/0x1e0 [ 371.705000][ T6255] ? __pfx____sys_sendmsg+0x10/0x10 [ 371.705026][ T6255] ? __pfx_lock_release+0x10/0x10 [ 371.705043][ T6255] ? trace_lock_acquire+0x14e/0x1f0 [ 371.705066][ T6255] ? __fget_files+0x206/0x3a0 [ 371.705085][ T6255] __sys_sendmsg+0x16e/0x220 [ 371.705103][ T6255] ? __pfx___sys_sendmsg+0x10/0x10 [ 371.705134][ T6255] do_syscall_64+0xcd/0x250 [ 371.705152][ T6255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.705170][ T6255] RIP: 0033:0x7f28be98cde9 [ 371.705182][ T6255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.705194][ T6255] RSP: 002b:00007f28bf8b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.705208][ T6255] RAX: ffffffffffffffda RBX: 00007f28beba5fa0 RCX: 00007f28be98cde9 [ 371.705217][ T6255] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000003 [ 371.705225][ T6255] RBP: 00007f28bf8b6090 R08: 0000000000000000 R09: 0000000000000000 [ 371.705233][ T6255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 371.705240][ T6255] R13: 0000000000000000 R14: 00007f28beba5fa0 R15: 00007ffed37532c8 [ 371.705259][ T6255] [ 372.189076][ T5893] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 372.200128][ T5893] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 372.219467][ T5893] usb 5-1: USB disconnect, device number 5 [ 372.617644][ T5936] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 372.692053][ T5893] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 373.084076][ T6269] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 373.096169][ T5936] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 373.106585][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.139224][ T5936] usb 3-1: Product: syz [ 373.155936][ T5936] usb 3-1: Manufacturer: syz [ 373.165942][ T5936] usb 3-1: SerialNumber: syz [ 373.183922][ T5936] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 373.297969][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 373.312497][ T5893] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.344765][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 373.363654][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 373.376678][ T5893] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 373.394568][ T25] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 373.415553][ T5893] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 373.432345][ T5893] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 373.442131][ T5893] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 373.451522][ T5893] usb 5-1: Manufacturer: syz [ 373.459236][ T5893] usb 5-1: config 0 descriptor?? [ 373.557682][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 373.687615][ T5926] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 373.732154][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.801762][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.867094][ T8] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 373.908323][ T5926] usb 1-1: Using ep0 maxpacket: 8 [ 373.926265][ T5926] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 373.943645][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.966425][ T5926] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 373.997445][ T8] usb 4-1: config 0 descriptor?? [ 374.017136][ T5926] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 374.079913][ T5926] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 374.110168][ T5926] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 374.125332][ T5926] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 374.138693][ T5926] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 374.151448][ T5926] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 374.173060][ T5926] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 374.202752][ T5926] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 374.216652][ T5926] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 374.225209][ T5926] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 374.238494][ T5893] rc_core: IR keymap rc-hauppauge not found [ 374.241704][ T5926] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 374.245939][ T5893] Registered IR keymap rc-empty [ 374.256491][ T5926] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 374.272461][ T5926] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 374.298056][ T5926] usb 1-1: string descriptor 0 read error: -22 [ 374.305635][ T5926] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 374.320974][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.334234][ T5893] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 374.357418][ T5926] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 374.367588][ T5893] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 374.408498][ T933] usb 3-1: USB disconnect, device number 5 [ 374.435001][ T5893] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 374.456088][ T5893] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input9 [ 374.459453][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 374.471056][ T5893] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 374.487655][ T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 374.507601][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 374.507618][ T29] audit: type=1400 audit(1739360781.466:238): avc: denied { setopt } for pid=6289 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 374.508058][ T5893] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 374.513657][ T29] audit: type=1400 audit(1739360781.466:239): avc: denied { accept } for pid=6289 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 374.513684][ T29] audit: type=1400 audit(1739360781.466:240): avc: denied { write } for pid=6289 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 374.513712][ T29] audit: type=1400 audit(1739360781.466:241): avc: denied { read } for pid=6289 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 374.523681][ T8] usb 4-1: USB disconnect, device number 6 [ 374.625951][ T5893] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 374.630524][ T5848] usb 1-1: USB disconnect, device number 4 [ 374.650740][ T5893] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 374.677766][ T5893] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 374.697678][ T5893] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 374.727715][ T5893] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 374.762225][ T5893] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 374.797809][ T5893] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 374.828300][ T5893] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 374.847618][ T5893] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 374.869034][ T5893] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 92 [ 374.878828][ T5893] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 374.897717][ T5893] usb 5-1: USB disconnect, device number 6 [ 375.238144][ T5848] IPVS: starting estimator thread 0... [ 375.243804][ T29] audit: type=1400 audit(1739360782.156:242): avc: denied { setopt } for pid=6303 comm="syz.3.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 375.307732][ T25] usb 3-1: Service connection timeout for: 256 [ 375.313935][ T25] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 375.329229][ T25] ath9k_htc: Failed to initialize the device [ 375.337655][ T29] audit: type=1400 audit(1739360782.286:243): avc: denied { read append } for pid=6303 comm="syz.3.95" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 375.338146][ T933] usb 3-1: ath9k_htc: USB layer deinitialized [ 375.362966][ T29] audit: type=1400 audit(1739360782.286:244): avc: denied { open } for pid=6303 comm="syz.3.95" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 375.393430][ T6305] IPVS: using max 35 ests per chain, 84000 per kthread [ 375.535560][ T6309] usb usb9: usbfs: process 6309 (syz.2.94) did not claim interface 0 before use [ 376.269676][ T5936] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 376.484723][ T5936] usb 1-1: config 1 interface 0 has no altsetting 0 [ 376.502735][ T5936] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 376.522355][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.536410][ T5936] usb 1-1: Product: syz [ 376.551036][ T5936] usb 1-1: Manufacturer: syz [ 376.566824][ T5936] usb 1-1: SerialNumber: syz [ 376.841703][ T6327] netlink: 60 bytes leftover after parsing attributes in process `syz.4.99'. [ 377.877520][ T5936] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 377.982417][ T6333] FAULT_INJECTION: forcing a failure. [ 377.982417][ T6333] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 378.183935][ T6333] CPU: 1 UID: 0 PID: 6333 Comm: syz.0.96 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 378.183961][ T6333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 378.183970][ T6333] Call Trace: [ 378.183976][ T6333] [ 378.183982][ T6333] dump_stack_lvl+0x16c/0x1f0 [ 378.184007][ T6333] should_fail_ex+0x50a/0x650 [ 378.184038][ T6333] _copy_to_user+0x32/0xd0 [ 378.184056][ T6333] simple_read_from_buffer+0xd0/0x160 [ 378.184082][ T6333] proc_fail_nth_read+0x198/0x270 [ 378.184107][ T6333] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 378.184131][ T6333] ? rw_verify_area+0xcf/0x680 [ 378.184153][ T6333] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 378.184176][ T6333] vfs_read+0x1df/0xbf0 [ 378.184201][ T6333] ? __fget_files+0x1fc/0x3a0 [ 378.184217][ T6333] ? __pfx___mutex_lock+0x10/0x10 [ 378.184236][ T6333] ? __pfx_vfs_read+0x10/0x10 [ 378.184266][ T6333] ? __fget_files+0x206/0x3a0 [ 378.184289][ T6333] ksys_read+0x12b/0x250 [ 378.184312][ T6333] ? __pfx_ksys_read+0x10/0x10 [ 378.184344][ T6333] do_syscall_64+0xcd/0x250 [ 378.184364][ T6333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.184387][ T6333] RIP: 0033:0x7f4ff618b7fc [ 378.184401][ T6333] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 378.184415][ T6333] RSP: 002b:00007f4ff3fd5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 378.184431][ T6333] RAX: ffffffffffffffda RBX: 00007f4ff63a6080 RCX: 00007f4ff618b7fc [ 378.184442][ T6333] RDX: 000000000000000f RSI: 00007f4ff3fd50a0 RDI: 0000000000000004 [ 378.184451][ T6333] RBP: 00007f4ff3fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 378.184461][ T6333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.184470][ T6333] R13: 0000000000000000 R14: 00007f4ff63a6080 R15: 00007ffd0a633788 [ 378.184492][ T6333] [ 378.423284][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.433891][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.461098][ T6325] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 378.512770][ T933] usb 1-1: USB disconnect, device number 5 [ 378.638784][ T933] usblp0: removed [ 378.710905][ T29] audit: type=1400 audit(1739360785.646:245): avc: denied { mount } for pid=6343 comm="syz.1.104" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 378.803567][ T29] audit: type=1400 audit(1739360785.706:246): avc: denied { unmount } for pid=5842 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 378.897584][ T5893] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 378.918185][ T5848] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 378.998219][ T933] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 379.091733][ T5893] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 379.104693][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.212572][ T5893] usb 5-1: Product: syz [ 379.248508][ T5893] usb 5-1: Manufacturer: syz [ 379.258029][ T5848] usb 3-1: Using ep0 maxpacket: 8 [ 379.326260][ T933] usb 1-1: Using ep0 maxpacket: 16 [ 379.339424][ T933] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.343078][ T5893] usb 5-1: SerialNumber: syz [ 379.357560][ T5848] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 379.366658][ T5848] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 379.378274][ T933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 379.381682][ T5893] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 379.403354][ T5848] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 379.424596][ T933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 379.425451][ T45] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 379.450471][ T933] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 379.461027][ T5848] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 379.472487][ T933] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 379.485625][ T5848] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 379.498095][ T5848] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 379.505521][ T5848] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 379.517845][ T5848] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 379.529690][ T933] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 379.538781][ T933] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 379.546757][ T933] usb 1-1: Manufacturer: syz [ 379.551539][ T5848] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 379.573528][ T933] usb 1-1: config 0 descriptor?? [ 379.578688][ T5926] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 379.586427][ T5848] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 379.604157][ T5936] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 379.606323][ T5848] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 379.620240][ T5848] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 379.633540][ T5848] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 379.658948][ T5848] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 379.676552][ T5848] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 379.691273][ T5848] usb 3-1: string descriptor 0 read error: -22 [ 379.703108][ T5848] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 379.712533][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.735430][ T5848] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 379.753879][ T5926] usb 4-1: config 4 has an invalid interface number: 44 but max is 0 [ 379.762241][ T5926] usb 4-1: config 4 has no interface number 0 [ 379.769411][ T5926] usb 4-1: config 4 interface 44 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 379.783079][ T5926] usb 4-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 379.790440][ T5936] usb 2-1: Using ep0 maxpacket: 32 [ 379.792268][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.809400][ T5936] usb 2-1: config 0 has an invalid interface number: 9 but max is 0 [ 379.811368][ T5926] usb 4-1: Product: syz [ 379.820721][ T5936] usb 2-1: config 0 has no interface number 0 [ 379.830600][ T5936] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 379.831685][ T5926] usb 4-1: Manufacturer: syz [ 379.851061][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.858259][ T5926] usb 4-1: SerialNumber: syz [ 379.863256][ T5936] usb 2-1: Product: syz [ 379.873808][ T5936] usb 2-1: Manufacturer: syz [ 379.888866][ T5936] usb 2-1: SerialNumber: syz [ 379.898969][ T5936] usb 2-1: config 0 descriptor?? [ 379.907178][ T5936] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 379.918559][ T933] rc_core: IR keymap rc-hauppauge not found [ 379.924510][ T933] Registered IR keymap rc-empty [ 379.929837][ T933] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 379.951147][ T933] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 379.951743][ T5893] usb 3-1: USB disconnect, device number 6 [ 379.978196][ T933] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 379.991438][ T933] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input10 [ 380.008909][ T933] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 380.027613][ T933] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 380.047606][ T933] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 380.067751][ T933] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 380.088238][ T933] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 380.109462][ T933] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 380.138761][ T933] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 380.150004][ T5894] usb 5-1: USB disconnect, device number 7 [ 380.167823][ T933] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 380.190290][ T933] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 380.217676][ T933] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 380.239132][ T933] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 380.247184][ T933] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 380.260540][ T933] usb 1-1: USB disconnect, device number 6 [ 380.310500][ T6351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.319915][ T6351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.347412][ T5926] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 380.391597][ T5926] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 380.400091][ T5926] dib0700: firmware download failed at 7 with -22 [ 380.412282][ T5926] usb 4-1: USB disconnect, device number 7 [ 380.678678][ T6364] usb usb9: usbfs: process 6364 (syz.0.109) did not claim interface 0 before use [ 380.948362][ T45] usb 5-1: Service connection timeout for: 256 [ 381.098969][ T45] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 381.123669][ T45] ath9k_htc: Failed to initialize the device [ 381.136581][ T5894] usb 5-1: ath9k_htc: USB layer deinitialized [ 381.593319][ T5936] gspca_topro: Sensor cx0342 [ 381.800024][ T5849] Bluetooth: unknown link type 170 [ 381.806054][ T5849] Bluetooth: hci2: connection err: -111 [ 381.929015][ T29] audit: type=1400 audit(1739360788.896:247): avc: denied { lock } for pid=6347 comm="syz.1.107" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 382.269515][ T5926] IPVS: starting estimator thread 0... [ 382.397680][ T6390] IPVS: using max 28 ests per chain, 67200 per kthread [ 382.456054][ T29] audit: type=1400 audit(1739360789.416:248): avc: denied { setopt } for pid=6371 comm="syz.0.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 382.577301][ T6398] xt_TCPMSS: Only works on TCP SYN packets [ 382.748335][ T5894] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 382.937630][ T5894] usb 3-1: Using ep0 maxpacket: 8 [ 382.951647][ T5894] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 382.961788][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 382.976457][ T5894] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 383.013445][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 383.074950][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 383.075515][ T5848] usb 2-1: USB disconnect, device number 6 [ 383.090053][ T5894] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 383.141212][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 383.258014][ T5894] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 383.326209][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 383.399598][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 383.526461][ T5894] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 383.534363][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 383.561614][ T5894] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 383.573628][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 383.584839][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 383.603422][ T5894] usb 3-1: string descriptor 0 read error: -22 [ 383.610411][ T5894] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 383.700092][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.799953][ T29] audit: type=1400 audit(1739360790.706:249): avc: denied { mounton } for pid=6406 comm="syz.3.124" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 383.865230][ T5894] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 383.962317][ T29] audit: type=1400 audit(1739360790.806:250): avc: denied { ioctl } for pid=6406 comm="syz.3.124" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 383.985646][ T5894] usb 3-1: USB disconnect, device number 7 [ 383.986761][ C0] vkms_vblank_simulate: vblank timer overrun [ 384.827548][ T45] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 384.912546][ T6412] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 385.005555][ T45] usb 3-1: config 4 has an invalid interface number: 44 but max is 0 [ 385.121932][ T45] usb 3-1: config 4 has no interface number 0 [ 385.129590][ T6416] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 385.146825][ T45] usb 3-1: config 4 interface 44 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 385.164180][ T45] usb 3-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 385.173782][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.183126][ T45] usb 3-1: Product: syz [ 385.189260][ T45] usb 3-1: Manufacturer: syz [ 385.196673][ T45] usb 3-1: SerialNumber: syz [ 385.986739][ T29] audit: type=1400 audit(1739360792.946:251): avc: denied { sqpoll } for pid=6431 comm="syz.4.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 386.201771][ T6434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.127'. [ 386.367787][ T29] audit: type=1400 audit(1739360793.026:252): avc: denied { create } for pid=6418 comm="syz.2.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 386.518203][ T29] audit: type=1400 audit(1739360793.036:253): avc: denied { bind } for pid=6418 comm="syz.2.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 387.193497][ T29] audit: type=1400 audit(1739360793.036:254): avc: denied { bind } for pid=6418 comm="syz.2.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 387.528125][ T29] audit: type=1400 audit(1739360793.106:255): avc: denied { connect } for pid=6418 comm="syz.2.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 387.629730][ T45] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 387.648249][ T45] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 387.665668][ T45] dib0700: firmware download failed at 7 with -22 [ 387.676704][ T45] usb 3-1: USB disconnect, device number 8 [ 388.011375][ T6457] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 388.084901][ T6457] use of bytesused == 0 is deprecated and will be removed in the future, [ 388.093692][ T6457] use the actual size instead. [ 388.608065][ T6459] netlink: 60 bytes leftover after parsing attributes in process `syz.4.135'. [ 389.388916][ T5893] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 389.583819][ T6461] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 389.677417][ T5893] usb 1-1: Using ep0 maxpacket: 8 [ 389.684759][ T5893] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 389.692569][ T5893] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 389.704681][ T5893] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 389.716407][ T5893] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 389.760099][ T5893] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 389.785879][ T5893] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 389.797509][ T5893] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 389.820680][ T5893] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 389.858453][ T5893] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 389.943289][ T5893] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 389.995322][ T5893] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 390.042017][ T45] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 390.044608][ T6473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.141'. [ 390.087413][ T5893] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 390.162084][ T5893] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 390.240517][ T6477] netlink: 24 bytes leftover after parsing attributes in process `syz.2.141'. [ 390.241576][ T45] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 390.261458][ T5893] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 390.337660][ T5893] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 390.354937][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.363218][ T45] usb 4-1: Product: syz [ 390.372033][ T45] usb 4-1: Manufacturer: syz [ 390.376907][ T45] usb 4-1: SerialNumber: syz [ 390.385620][ T5893] usb 1-1: string descriptor 0 read error: -22 [ 390.395013][ T5893] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 390.993238][ T45] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 391.055470][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.451173][ T25] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 391.468419][ T5893] usb 1-1: can't set config #168, error -71 [ 391.492512][ T5893] usb 1-1: USB disconnect, device number 7 [ 391.630008][ T6492] futex_wake_op: syz.4.145 tries to shift op by -1; fix this program [ 391.687170][ T6492] pim6reg: entered allmulticast mode [ 391.762815][ T5848] usb 4-1: USB disconnect, device number 8 [ 391.768939][ T933] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 391.907830][ T5893] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 391.997439][ T29] audit: type=1400 audit(1739360798.956:256): avc: denied { read append } for pid=6493 comm="syz.2.148" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 392.048875][ T29] audit: type=1400 audit(1739360798.956:257): avc: denied { open } for pid=6493 comm="syz.2.148" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 392.077130][ T933] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 392.086285][ T933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.095505][ T933] usb 2-1: Product: syz [ 392.104642][ T933] usb 2-1: Manufacturer: syz [ 392.110389][ T29] audit: type=1400 audit(1739360798.966:258): avc: denied { map } for pid=6493 comm="syz.2.148" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 392.139407][ T5893] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 392.141541][ T933] usb 2-1: SerialNumber: syz [ 392.157673][ T6494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.148'. [ 392.163907][ T29] audit: type=1400 audit(1739360798.966:259): avc: denied { write execute } for pid=6493 comm="syz.2.148" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 392.177385][ T5893] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 392.209019][ T5893] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 392.217988][ T933] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 392.225924][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 392.238668][ T5893] usb 1-1: SerialNumber: syz [ 392.264623][ T29] audit: type=1400 audit(1739360799.066:260): avc: denied { create } for pid=6493 comm="syz.2.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 392.316090][ T5926] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 392.351023][ T29] audit: type=1400 audit(1739360799.076:261): avc: denied { bind } for pid=6493 comm="syz.2.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 392.399800][ T29] audit: type=1400 audit(1739360799.116:262): avc: denied { setopt } for pid=6493 comm="syz.2.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 392.513852][ T6490] FAULT_INJECTION: forcing a failure. [ 392.513852][ T6490] name failslab, interval 1, probability 0, space 0, times 0 [ 392.527677][ T6490] CPU: 1 UID: 0 PID: 6490 Comm: syz.1.147 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 392.527701][ T6490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 392.527711][ T6490] Call Trace: [ 392.527716][ T6490] [ 392.527722][ T6490] dump_stack_lvl+0x16c/0x1f0 [ 392.527749][ T6490] should_fail_ex+0x50a/0x650 [ 392.527773][ T6490] ? fs_reclaim_acquire+0xae/0x150 [ 392.527805][ T6490] ? tomoyo_realpath_from_path+0xb9/0x720 [ 392.527828][ T6490] should_failslab+0xc2/0x120 [ 392.527847][ T6490] __kmalloc_noprof+0xcb/0x510 [ 392.527862][ T6490] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 392.527886][ T6490] tomoyo_realpath_from_path+0xb9/0x720 [ 392.527907][ T6490] ? tomoyo_path_number_perm+0x235/0x590 [ 392.527927][ T6490] ? tomoyo_path_number_perm+0x235/0x590 [ 392.527946][ T6490] tomoyo_path_number_perm+0x248/0x590 [ 392.527963][ T6490] ? tomoyo_path_number_perm+0x235/0x590 [ 392.527983][ T6490] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 392.528024][ T6490] ? __pfx_lock_release+0x10/0x10 [ 392.528044][ T6490] ? trace_lock_acquire+0x14e/0x1f0 [ 392.528065][ T6490] ? lock_acquire+0x2f/0xb0 [ 392.528084][ T6490] ? __fget_files+0x40/0x3a0 [ 392.528102][ T6490] ? __fget_files+0x206/0x3a0 [ 392.528120][ T6490] security_file_ioctl+0x9b/0x240 [ 392.528143][ T6490] __x64_sys_ioctl+0xb7/0x200 [ 392.528167][ T6490] do_syscall_64+0xcd/0x250 [ 392.528186][ T6490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.528208][ T6490] RIP: 0033:0x7f832df8c9eb [ 392.528221][ T6490] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 392.528236][ T6490] RSP: 002b:00007f832ee3df70 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 392.528251][ T6490] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f832df8c9eb [ 392.528261][ T6490] RDX: 00007f832ee3dff0 RSI: 0000000040085507 RDI: 0000000000000003 [ 392.528270][ T6490] RBP: 0000000000000003 R08: 00007f832e2d0320 R09: 0000000000000000 [ 392.528279][ T6490] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 392.528287][ T6490] R13: 000000000000000e R14: 00007f832e1a5fa0 R15: 00007ffc411e3178 [ 392.528308][ T6490] [ 392.528333][ T6490] ERROR: Out of memory at tomoyo_realpath_from_path. [ 392.752415][ T25] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 392.917790][ T25] ath9k_htc: Failed to initialize the device [ 392.966923][ T5898] usb 2-1: USB disconnect, device number 7 [ 392.975470][ T5848] usb 4-1: ath9k_htc: USB layer deinitialized [ 393.149633][ T6491] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 393.162853][ T29] audit: type=1400 audit(1739360800.126:263): avc: denied { create } for pid=6489 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 393.692034][ T5926] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 393.705296][ T5926] ath9k_htc: Failed to initialize the device [ 393.727972][ T5898] usb 2-1: ath9k_htc: USB layer deinitialized [ 393.932830][ T5893] usb 1-1: 0:2 : does not exist [ 393.935857][ T5848] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 394.002006][ T5893] usb 1-1: unit 6 not found! [ 394.057994][ T6518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.154'. [ 394.087697][ T5893] usb 1-1: USB disconnect, device number 8 [ 394.131114][ T6518] netlink: 24 bytes leftover after parsing attributes in process `syz.4.154'. [ 394.321551][ T5848] usb 4-1: config 4 has an invalid interface number: 44 but max is 0 [ 394.374938][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 394.441835][ T5848] usb 4-1: config 4 has no interface number 0 [ 394.532798][ T5848] usb 4-1: config 4 interface 44 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 394.676498][ T5848] usb 4-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 394.706634][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.783729][ T6523] usb usb9: usbfs: process 6523 (syz.2.155) did not claim interface 0 before use [ 395.252620][ T5848] usb 4-1: Product: syz [ 395.256845][ T5848] usb 4-1: Manufacturer: syz [ 395.261589][ T5848] usb 4-1: SerialNumber: syz [ 395.827625][ T5898] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 396.008782][ T6498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.631856][ T6498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.657653][ T5898] usb 5-1: Using ep0 maxpacket: 8 [ 396.665777][ T5848] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 396.676136][ T5898] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 396.685104][ T5848] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 396.699425][ T5898] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 396.739029][ T5936] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 396.766998][ T5848] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 396.791420][ T5898] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 396.811889][ T5848] usb 4-1: media controller created [ 396.829575][ T5848] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 396.846648][ T5898] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 397.069879][ T5898] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 397.080176][ T6537] ======================================================= [ 397.080176][ T6537] WARNING: The mand mount option has been deprecated and [ 397.080176][ T6537] and is ignored by this kernel. Remove the mand [ 397.080176][ T6537] option from the mount to silence this warning. [ 397.080176][ T6537] ======================================================= [ 397.120234][ T6537] option changes via remount are deprecated (pid=6536 comm=syz.2.160) [ 397.120387][ T29] audit: type=1400 audit(1739360804.076:264): avc: denied { mount } for pid=6536 comm="syz.2.160" name="/" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 397.220227][ T5898] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 397.228132][ T5898] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 397.247240][ T29] audit: type=1400 audit(1739360804.086:265): avc: denied { remount } for pid=6536 comm="syz.2.160" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 397.250943][ T5848] DVB: Unable to find symbol dib7000p_attach() [ 397.275835][ T5898] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 397.281217][ T5936] usb 2-1: device descriptor read/all, error -71 [ 397.315623][ T5848] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 397.342159][ T29] audit: type=1400 audit(1739360804.166:266): avc: denied { unmount } for pid=5846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 397.365894][ T5898] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 397.385622][ T5898] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 397.405114][ T5898] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 397.417557][ T5898] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 397.432035][ T5898] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 397.444948][ T5898] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 397.456300][ T5898] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 397.470703][ T5898] usb 5-1: string descriptor 0 read error: -22 [ 397.487773][ T5898] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 397.496835][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.504990][ T5848] rc_core: IR keymap rc-dib0700-rc5 not found [ 397.520339][ T5848] Registered IR keymap rc-empty [ 397.526568][ T5848] dvb-usb: could not initialize remote control. [ 397.539856][ T5848] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 397.552904][ T5898] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 397.764773][ T5848] usb 4-1: USB disconnect, device number 9 [ 397.772417][ T25] usb 5-1: USB disconnect, device number 8 [ 398.593181][ T5936] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 398.741603][ T5848] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 398.742130][ T6543] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 399.137581][ T5936] usb 2-1: Using ep0 maxpacket: 32 [ 399.144011][ T5936] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 399.155822][ T5936] usb 2-1: config 0 has no interface number 0 [ 399.165039][ T5936] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 399.184522][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.265493][ T6571] usb usb9: usbfs: process 6571 (syz.4.167) did not claim interface 0 before use [ 399.546850][ T5936] usb 2-1: Product: syz [ 399.601114][ T5936] usb 2-1: Manufacturer: syz [ 399.637878][ T5897] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 399.707192][ T5936] usb 2-1: SerialNumber: syz [ 399.739620][ T5936] usb 2-1: config 0 descriptor?? [ 399.768248][ T5936] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 399.860326][ T5848] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 400.023685][ T5897] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 400.121915][ T5936] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 400.145226][ T5848] usb 3-1: Using ep0 maxpacket: 8 [ 400.150051][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.175332][ T5897] usb 1-1: Product: syz [ 400.204711][ T5936] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 400.229773][ T5897] usb 1-1: Manufacturer: syz [ 400.234642][ T5897] usb 1-1: SerialNumber: syz [ 400.235442][ T6546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.256236][ T5848] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 400.258480][ T5897] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 400.301904][ T5848] usb 3-1: config 179 has no interface number 0 [ 400.344440][ T5848] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 400.352426][ T25] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 400.360042][ T6546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.513261][ T5848] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 400.537916][ T5848] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 400.554117][ T5848] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 401.226944][ T5898] usb 1-1: USB disconnect, device number 9 [ 401.249352][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 401.276242][ T5926] usb 2-1: USB disconnect, device number 9 [ 401.282518][ T5848] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 401.316899][ T5926] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 401.339111][ T5848] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 401.352614][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.365386][ T5926] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 401.380842][ T5926] quatech2 2-1:0.51: device disconnected [ 401.480352][ T6563] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 401.519661][ T25] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 401.530250][ T25] ath9k_htc: Failed to initialize the device [ 401.567369][ T5898] usb 1-1: ath9k_htc: USB layer deinitialized [ 401.827534][ T29] audit: type=1400 audit(1739360808.676:267): avc: denied { wake_alarm } for pid=6582 comm="syz.3.175" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 401.857985][ T29] audit: type=1400 audit(1739360808.676:268): avc: denied { write } for pid=6582 comm="syz.3.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 402.053042][ T6563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.145849][ T6563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.366565][ T5894] usb 3-1: USB disconnect, device number 9 [ 402.366672][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 402.374175][ T29] audit: type=1400 audit(1739360809.326:269): avc: denied { ioctl } for pid=6562 comm="syz.2.168" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 402.380932][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 402.414002][ C0] ================================================================== [ 402.422073][ C0] BUG: KASAN: slab-use-after-free in register_lock_class+0x1033/0x1240 [ 402.430330][ C0] Read of size 1 at addr ffff88805cdce091 by task syz.3.175/6589 [ 402.438050][ C0] [ 402.440370][ C0] CPU: 0 UID: 0 PID: 6589 Comm: syz.3.175 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 402.440393][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 402.440404][ C0] Call Trace: [ 402.440411][ C0] [ 402.440419][ C0] dump_stack_lvl+0x116/0x1f0 [ 402.440444][ C0] print_report+0xc3/0x620 [ 402.440476][ C0] ? __virt_addr_valid+0x5e/0x590 [ 402.440495][ C0] ? __phys_addr+0xc6/0x150 [ 402.440514][ C0] kasan_report+0xd9/0x110 [ 402.440532][ C0] ? register_lock_class+0x1033/0x1240 [ 402.440559][ C0] ? register_lock_class+0x1033/0x1240 [ 402.440586][ C0] register_lock_class+0x1033/0x1240 [ 402.440613][ C0] ? __pfx_register_lock_class+0x10/0x10 [ 402.440641][ C0] __lock_acquire+0x135/0x3c40 [ 402.440668][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 402.440692][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 402.440723][ C0] lock_acquire.part.0+0x11b/0x380 [ 402.440747][ C0] ? __wake_up+0x1c/0x60 [ 402.440771][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 402.440796][ C0] ? rcu_is_watching+0x12/0xc0 [ 402.440815][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 402.440834][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 402.440851][ C0] ? __wake_up+0x1c/0x60 [ 402.440873][ C0] ? lock_acquire+0x2f/0xb0 [ 402.440896][ C0] ? __wake_up+0x1c/0x60 [ 402.440918][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 402.440945][ C0] ? __wake_up+0x1c/0x60 [ 402.440965][ C0] __wake_up+0x1c/0x60 [ 402.440986][ C0] usb_anchor_resume_wakeups+0xc2/0xe0 [ 402.441014][ C0] __usb_hcd_giveback_urb+0x3b7/0x6e0 [ 402.441038][ C0] usb_hcd_giveback_urb+0x396/0x450 [ 402.441061][ C0] dummy_timer+0x17f7/0x3960 [ 402.441088][ C0] ? debug_object_deactivate+0x1ef/0x370 [ 402.441109][ C0] ? __pfx_lock_release+0x10/0x10 [ 402.441134][ C0] ? lock_acquire+0x2f/0xb0 [ 402.441156][ C0] ? debug_object_deactivate+0x13b/0x370 [ 402.441176][ C0] ? find_held_lock+0x2d/0x110 [ 402.441196][ C0] ? __hrtimer_run_queues+0x53d/0xae0 [ 402.441214][ C0] ? __pfx_lock_release+0x10/0x10 [ 402.441238][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 402.441262][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 402.441291][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 402.441313][ C0] __hrtimer_run_queues+0x20a/0xae0 [ 402.441334][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 402.441352][ C0] ? read_tsc+0x9/0x20 [ 402.441374][ C0] hrtimer_run_softirq+0x17d/0x350 [ 402.441394][ C0] handle_softirqs+0x213/0x8f0 [ 402.441423][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 402.441451][ C0] __irq_exit_rcu+0x109/0x170 [ 402.441474][ C0] irq_exit_rcu+0x9/0x30 [ 402.441498][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 402.441517][ C0] [ 402.441523][ C0] [ 402.441529][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 402.441555][ C0] RIP: 0010:write_comp_data+0x3c/0x90 [ 402.441582][ C0] Code: 8b 05 10 0c 4a 7e a9 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 0f 00 75 60 a9 00 00 f0 00 75 59 8b 82 2c 16 00 00 85 c0 74 4f <8b> 82 08 16 00 00 83 f8 03 75 44 48 8b 82 10 16 00 00 8b 92 0c 16 [ 402.441598][ C0] RSP: 0018:ffffc900034e7218 EFLAGS: 00000246 [ 402.441614][ C0] RAX: 0000000080000000 RBX: 0000000000000001 RCX: ffffffff82267515 [ 402.441627][ C0] RDX: ffff888032bc4880 RSI: 0000000000000001 RDI: 0000000000000004 [ 402.441638][ C0] RBP: ffff88801de774f0 R08: 0000000000000004 R09: 0000000000000001 [ 402.441650][ C0] R10: 0000000000000001 R11: 0000000000007f35 R12: 00000000014602a3 [ 402.441661][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: ffff88801de774a8 [ 402.441676][ C0] ? __reset_page_owner+0x275/0x400 [ 402.441712][ C0] __reset_page_owner+0x275/0x400 [ 402.441741][ C0] free_unref_folios+0xa7b/0x1500 [ 402.441763][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 402.441792][ C0] folios_put_refs+0x587/0x7b0 [ 402.441820][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 402.441847][ C0] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 402.441878][ C0] shmem_undo_range+0x586/0x1170 [ 402.441906][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 402.441930][ C0] ? __lock_acquire+0xcc5/0x3c40 [ 402.441959][ C0] ? mark_lock+0xb5/0xc60 [ 402.441981][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 402.442004][ C0] ? hlock_class+0x4e/0x130 [ 402.442022][ C0] ? mark_lock+0xb5/0xc60 [ 402.442053][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 402.442076][ C0] ? hlock_class+0x4e/0x130 [ 402.442094][ C0] ? percpu_counter_add_batch+0xb5/0x1e0 [ 402.442119][ C0] shmem_evict_inode+0x3a3/0xba0 [ 402.442144][ C0] ? find_held_lock+0x2d/0x110 [ 402.442163][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 402.442187][ C0] ? evict+0x3c8/0x960 [ 402.442207][ C0] ? __pfx_lock_release+0x10/0x10 [ 402.442232][ C0] ? lock_acquire+0x2f/0xb0 [ 402.442257][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 402.442280][ C0] evict+0x409/0x960 [ 402.442300][ C0] ? __pfx_evict+0x10/0x10 [ 402.442326][ C0] iput+0x52a/0x890 [ 402.442346][ C0] ? __pfx_generic_delete_inode+0x10/0x10 [ 402.442374][ C0] dentry_unlink_inode+0x29c/0x480 [ 402.442395][ C0] __dentry_kill+0x1d0/0x600 [ 402.442418][ C0] dput.part.0+0x4b1/0x9b0 [ 402.442440][ C0] dput+0x1f/0x30 [ 402.442458][ C0] __fput+0x51c/0xb70 [ 402.442479][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 402.442504][ C0] task_work_run+0x14e/0x250 [ 402.442522][ C0] ? __pfx_task_work_run+0x10/0x10 [ 402.442541][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 402.442555][ C0] do_exit+0xad8/0x2d70 [ 402.442572][ C0] ? get_signal+0x8f7/0x26c0 [ 402.442599][ C0] ? __pfx_do_exit+0x10/0x10 [ 402.442618][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 402.442636][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 402.442655][ C0] do_group_exit+0xd3/0x2a0 [ 402.442675][ C0] get_signal+0x24ed/0x26c0 [ 402.442709][ C0] ? find_held_lock+0x2d/0x110 [ 402.442729][ C0] ? __pfx_get_signal+0x10/0x10 [ 402.442755][ C0] ? __pfx_do_futex+0x10/0x10 [ 402.442778][ C0] arch_do_signal_or_restart+0x90/0x7e0 [ 402.442799][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 402.442823][ C0] ? rcu_is_watching+0x12/0xc0 [ 402.442843][ C0] syscall_exit_to_user_mode+0x150/0x2a0 [ 402.442863][ C0] do_syscall_64+0xda/0x250 [ 402.442884][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.442908][ C0] RIP: 0033:0x7f7ead18cde9 [ 402.442922][ C0] Code: Unable to access opcode bytes at 0x7f7ead18cdbf. [ 402.442931][ C0] RSP: 002b:00007f7eadfe10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 402.442948][ C0] RAX: fffffffffffffe00 RBX: 00007f7ead3a6088 RCX: 00007f7ead18cde9 [ 402.442961][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7ead3a6088 [ 402.442973][ C0] RBP: 00007f7ead3a6080 R08: 0000000000000000 R09: 0000000000000000 [ 402.442984][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ead3a608c [ 402.442997][ C0] R13: 0000000000000000 R14: 00007ffdd5c8f660 R15: 00007ffdd5c8f748 [ 402.443014][ C0] [ 402.443021][ C0] [ 403.106704][ C0] Allocated by task 5848: [ 403.111001][ C0] kasan_save_stack+0x33/0x60 [ 403.115648][ C0] kasan_save_track+0x14/0x30 [ 403.120290][ C0] __kasan_kmalloc+0xaa/0xb0 [ 403.124848][ C0] xpad_probe+0x27e/0x1f50 [ 403.129238][ C0] usb_probe_interface+0x300/0x9c0 [ 403.134326][ C0] really_probe+0x23e/0xa90 [ 403.138797][ C0] __driver_probe_device+0x1de/0x440 [ 403.144053][ C0] driver_probe_device+0x4c/0x1b0 [ 403.149130][ C0] __device_attach_driver+0x1df/0x310 [ 403.154478][ C0] bus_for_each_drv+0x157/0x1e0 [ 403.159311][ C0] __device_attach+0x1e8/0x4b0 [ 403.164046][ C0] bus_probe_device+0x17f/0x1c0 [ 403.168871][ C0] device_add+0x114b/0x1a70 [ 403.173342][ C0] usb_set_configuration+0x10cb/0x1c50 [ 403.178768][ C0] usb_generic_driver_probe+0xb1/0x110 [ 403.184200][ C0] usb_probe_device+0xec/0x3e0 [ 403.188930][ C0] really_probe+0x23e/0xa90 [ 403.193398][ C0] __driver_probe_device+0x1de/0x440 [ 403.198650][ C0] driver_probe_device+0x4c/0x1b0 [ 403.203641][ C0] __device_attach_driver+0x1df/0x310 [ 403.208977][ C0] bus_for_each_drv+0x157/0x1e0 [ 403.213795][ C0] __device_attach+0x1e8/0x4b0 [ 403.218526][ C0] bus_probe_device+0x17f/0x1c0 [ 403.223350][ C0] device_add+0x114b/0x1a70 [ 403.227821][ C0] usb_new_device+0xd09/0x1a20 [ 403.232555][ C0] hub_event+0x2d9a/0x4e10 [ 403.236946][ C0] process_one_work+0x9c5/0x1ba0 [ 403.241852][ C0] worker_thread+0x6c8/0xf00 [ 403.246415][ C0] kthread+0x3af/0x750 [ 403.250452][ C0] ret_from_fork+0x45/0x80 [ 403.254837][ C0] ret_from_fork_asm+0x1a/0x30 [ 403.259568][ C0] [ 403.261858][ C0] Freed by task 5894: [ 403.265810][ C0] kasan_save_stack+0x33/0x60 [ 403.270452][ C0] kasan_save_track+0x14/0x30 [ 403.275094][ C0] kasan_save_free_info+0x3b/0x60 [ 403.280096][ C0] __kasan_slab_free+0x51/0x70 [ 403.284826][ C0] kfree+0x2c4/0x4d0 [ 403.288690][ C0] xpad_disconnect+0x1cf/0x580 [ 403.293420][ C0] usb_unbind_interface+0x1e2/0x960 [ 403.298584][ C0] device_remove+0x122/0x170 [ 403.303137][ C0] device_release_driver_internal+0x44a/0x610 [ 403.309169][ C0] bus_remove_device+0x22f/0x420 [ 403.314076][ C0] device_del+0x396/0x9f0 [ 403.318381][ C0] usb_disable_device+0x36c/0x7f0 [ 403.323371][ C0] usb_disconnect+0x2e1/0x920 [ 403.328018][ C0] hub_event+0x1da5/0x4e10 [ 403.332411][ C0] process_one_work+0x9c5/0x1ba0 [ 403.337317][ C0] worker_thread+0x6c8/0xf00 [ 403.341889][ C0] kthread+0x3af/0x750 [ 403.345946][ C0] ret_from_fork+0x45/0x80 [ 403.350363][ C0] ret_from_fork_asm+0x1a/0x30 [ 403.355107][ C0] [ 403.357420][ C0] The buggy address belongs to the object at ffff88805cdce000 [ 403.357420][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 403.371444][ C0] The buggy address is located 145 bytes inside of [ 403.371444][ C0] freed 1024-byte region [ffff88805cdce000, ffff88805cdce400) [ 403.385476][ C0] [ 403.387774][ C0] The buggy address belongs to the physical page: [ 403.394159][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5cdc8 [ 403.402894][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 403.411356][ C0] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 403.419311][ C0] page_type: f5(slab) [ 403.423259][ C0] raw: 00fff00000000040 ffff88801b041dc0 0000000000000000 dead000000000001 [ 403.431810][ C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 403.440370][ C0] head: 00fff00000000040 ffff88801b041dc0 0000000000000000 dead000000000001 [ 403.449007][ C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 403.457653][ C0] head: 00fff00000000003 ffffea0001737201 ffffffffffffffff 0000000000000000 [ 403.466290][ C0] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 403.474924][ C0] page dumped because: kasan: bad access detected [ 403.481304][ C0] page_owner tracks the page as allocated [ 403.486983][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5840, tgid 5840 (syz-executor), ts 344994307930, free_ts 12061001877 [ 403.507794][ C0] post_alloc_hook+0x181/0x1b0 [ 403.512537][ C0] get_page_from_freelist+0xfce/0x2f80 [ 403.517971][ C0] __alloc_frozen_pages_noprof+0x221/0x2470 [ 403.523834][ C0] alloc_pages_mpol+0x1fc/0x540 [ 403.528653][ C0] new_slab+0x23d/0x330 [ 403.532788][ C0] ___slab_alloc+0xc5d/0x1720 [ 403.537435][ C0] __slab_alloc.constprop.0+0x56/0xb0 [ 403.542788][ C0] __kmalloc_node_track_caller_noprof+0x2f1/0x510 [ 403.549179][ C0] kmalloc_reserve+0xef/0x2c0 [ 403.553828][ C0] __alloc_skb+0x164/0x380 [ 403.558223][ C0] inet6_rt_notify+0xc7/0x260 [ 403.562873][ C0] fib6_add+0x251d/0x4b20 [ 403.567269][ C0] ip6_ins_rt+0xb6/0x110 [ 403.571479][ C0] __ipv6_ifa_notify+0xaf6/0xe10 [ 403.576390][ C0] add_addr+0x245/0x350 [ 403.580520][ C0] add_v4_addrs+0x69e/0x9f0 [ 403.585005][ C0] page last free pid 1 tgid 1 stack trace: [ 403.590775][ C0] free_frozen_pages+0x6db/0xfb0 [ 403.595678][ C0] free_contig_range+0x133/0x3f0 [ 403.600580][ C0] destroy_args+0x66f/0x830 [ 403.605065][ C0] debug_vm_pgtable+0x130f/0x2d60 [ 403.610061][ C0] do_one_initcall+0x128/0x700 [ 403.614802][ C0] kernel_init_freeable+0x5c7/0x900 [ 403.619969][ C0] kernel_init+0x1c/0x2b0 [ 403.624267][ C0] ret_from_fork+0x45/0x80 [ 403.628669][ C0] ret_from_fork_asm+0x1a/0x30 [ 403.633400][ C0] [ 403.635693][ C0] Memory state around the buggy address: [ 403.641297][ C0] ffff88805cdcdf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 403.649336][ C0] ffff88805cdce000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 403.657363][ C0] >ffff88805cdce080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 403.665390][ C0] ^ [ 403.669945][ C0] ffff88805cdce100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 403.677971][ C0] ffff88805cdce180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 403.685997][ C0] ================================================================== [ 403.694031][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 403.701190][ C0] CPU: 0 UID: 0 PID: 6589 Comm: syz.3.175 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 403.711742][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 403.721774][ C0] Call Trace: [ 403.725026][ C0] [ 403.727842][ C0] dump_stack_lvl+0x3d/0x1f0 [ 403.732402][ C0] panic+0x71d/0x800 [ 403.736280][ C0] ? __pfx_panic+0x10/0x10 [ 403.740675][ C0] ? rcu_is_watching+0x12/0xc0 [ 403.745408][ C0] ? __pfx_lock_release+0x10/0x10 [ 403.750405][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 403.755490][ C0] check_panic_on_warn+0xab/0xb0 [ 403.760396][ C0] end_report+0x117/0x180 [ 403.764696][ C0] kasan_report+0xe9/0x110 [ 403.769083][ C0] ? register_lock_class+0x1033/0x1240 [ 403.774515][ C0] ? register_lock_class+0x1033/0x1240 [ 403.779957][ C0] register_lock_class+0x1033/0x1240 [ 403.785225][ C0] ? __pfx_register_lock_class+0x10/0x10 [ 403.790834][ C0] __lock_acquire+0x135/0x3c40 [ 403.795580][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 403.800749][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 403.805919][ C0] lock_acquire.part.0+0x11b/0x380 [ 403.811002][ C0] ? __wake_up+0x1c/0x60 [ 403.815229][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 403.820832][ C0] ? rcu_is_watching+0x12/0xc0 [ 403.825564][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 403.830730][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 403.836068][ C0] ? __wake_up+0x1c/0x60 [ 403.840280][ C0] ? lock_acquire+0x2f/0xb0 [ 403.844754][ C0] ? __wake_up+0x1c/0x60 [ 403.848968][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 403.854140][ C0] ? __wake_up+0x1c/0x60 [ 403.858353][ C0] __wake_up+0x1c/0x60 [ 403.862392][ C0] usb_anchor_resume_wakeups+0xc2/0xe0 [ 403.867825][ C0] __usb_hcd_giveback_urb+0x3b7/0x6e0 [ 403.873170][ C0] usb_hcd_giveback_urb+0x396/0x450 [ 403.878339][ C0] dummy_timer+0x17f7/0x3960 [ 403.882903][ C0] ? debug_object_deactivate+0x1ef/0x370 [ 403.888505][ C0] ? __pfx_lock_release+0x10/0x10 [ 403.893515][ C0] ? lock_acquire+0x2f/0xb0 [ 403.898007][ C0] ? debug_object_deactivate+0x13b/0x370 [ 403.903626][ C0] ? find_held_lock+0x2d/0x110 [ 403.908366][ C0] ? __hrtimer_run_queues+0x53d/0xae0 [ 403.913712][ C0] ? __pfx_lock_release+0x10/0x10 [ 403.918772][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 403.923723][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 403.929517][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 403.934437][ C0] __hrtimer_run_queues+0x20a/0xae0 [ 403.939622][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 403.945308][ C0] ? read_tsc+0x9/0x20 [ 403.949349][ C0] hrtimer_run_softirq+0x17d/0x350 [ 403.954430][ C0] handle_softirqs+0x213/0x8f0 [ 403.959168][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 403.964428][ C0] __irq_exit_rcu+0x109/0x170 [ 403.969077][ C0] irq_exit_rcu+0x9/0x30 [ 403.973291][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 403.978894][ C0] [ 403.981798][ C0] [ 403.984699][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 403.990663][ C0] RIP: 0010:write_comp_data+0x3c/0x90 [ 403.996009][ C0] Code: 8b 05 10 0c 4a 7e a9 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 0f 00 75 60 a9 00 00 f0 00 75 59 8b 82 2c 16 00 00 85 c0 74 4f <8b> 82 08 16 00 00 83 f8 03 75 44 48 8b 82 10 16 00 00 8b 92 0c 16 [ 404.015589][ C0] RSP: 0018:ffffc900034e7218 EFLAGS: 00000246 [ 404.021625][ C0] RAX: 0000000080000000 RBX: 0000000000000001 RCX: ffffffff82267515 [ 404.029572][ C0] RDX: ffff888032bc4880 RSI: 0000000000000001 RDI: 0000000000000004 [ 404.037514][ C0] RBP: ffff88801de774f0 R08: 0000000000000004 R09: 0000000000000001 [ 404.045469][ C0] R10: 0000000000000001 R11: 0000000000007f35 R12: 00000000014602a3 [ 404.053434][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: ffff88801de774a8 [ 404.061390][ C0] ? __reset_page_owner+0x275/0x400 [ 404.066580][ C0] __reset_page_owner+0x275/0x400 [ 404.071579][ C0] free_unref_folios+0xa7b/0x1500 [ 404.076575][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 404.082356][ C0] folios_put_refs+0x587/0x7b0 [ 404.087093][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 404.092350][ C0] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 404.098663][ C0] shmem_undo_range+0x586/0x1170 [ 404.103575][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 404.108919][ C0] ? __lock_acquire+0xcc5/0x3c40 [ 404.113833][ C0] ? mark_lock+0xb5/0xc60 [ 404.118143][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 404.123318][ C0] ? hlock_class+0x4e/0x130 [ 404.127792][ C0] ? mark_lock+0xb5/0xc60 [ 404.132096][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 404.137263][ C0] ? hlock_class+0x4e/0x130 [ 404.141746][ C0] ? percpu_counter_add_batch+0xb5/0x1e0 [ 404.147351][ C0] shmem_evict_inode+0x3a3/0xba0 [ 404.152271][ C0] ? find_held_lock+0x2d/0x110 [ 404.157006][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 404.162436][ C0] ? evict+0x3c8/0x960 [ 404.166478][ C0] ? __pfx_lock_release+0x10/0x10 [ 404.171477][ C0] ? lock_acquire+0x2f/0xb0 [ 404.175954][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 404.181384][ C0] evict+0x409/0x960 [ 404.185249][ C0] ? __pfx_evict+0x10/0x10 [ 404.189636][ C0] iput+0x52a/0x890 [ 404.193416][ C0] ? __pfx_generic_delete_inode+0x10/0x10 [ 404.199108][ C0] dentry_unlink_inode+0x29c/0x480 [ 404.204203][ C0] __dentry_kill+0x1d0/0x600 [ 404.208780][ C0] dput.part.0+0x4b1/0x9b0 [ 404.213181][ C0] dput+0x1f/0x30 [ 404.216803][ C0] __fput+0x51c/0xb70 [ 404.220774][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 404.225946][ C0] task_work_run+0x14e/0x250 [ 404.230516][ C0] ? __pfx_task_work_run+0x10/0x10 [ 404.235597][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 404.240761][ C0] do_exit+0xad8/0x2d70 [ 404.244894][ C0] ? get_signal+0x8f7/0x26c0 [ 404.249455][ C0] ? __pfx_do_exit+0x10/0x10 [ 404.254014][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 404.259005][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 404.264344][ C0] do_group_exit+0xd3/0x2a0 [ 404.268822][ C0] get_signal+0x24ed/0x26c0 [ 404.273297][ C0] ? find_held_lock+0x2d/0x110 [ 404.278029][ C0] ? __pfx_get_signal+0x10/0x10 [ 404.282851][ C0] ? __pfx_do_futex+0x10/0x10 [ 404.287496][ C0] arch_do_signal_or_restart+0x90/0x7e0 [ 404.293015][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 404.299224][ C0] ? rcu_is_watching+0x12/0xc0 [ 404.303957][ C0] syscall_exit_to_user_mode+0x150/0x2a0 [ 404.309557][ C0] do_syscall_64+0xda/0x250 [ 404.314028][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.319892][ C0] RIP: 0033:0x7f7ead18cde9 [ 404.324274][ C0] Code: Unable to access opcode bytes at 0x7f7ead18cdbf. [ 404.331257][ C0] RSP: 002b:00007f7eadfe10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 404.339635][ C0] RAX: fffffffffffffe00 RBX: 00007f7ead3a6088 RCX: 00007f7ead18cde9 [ 404.347576][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7ead3a6088 [ 404.355526][ C0] RBP: 00007f7ead3a6080 R08: 0000000000000000 R09: 0000000000000000 [ 404.363469][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ead3a608c [ 404.371407][ C0] R13: 0000000000000000 R14: 00007ffdd5c8f660 R15: 00007ffdd5c8f748 [ 404.379347][ C0] [ 405.453809][ C0] Shutting down cpus with NMI [ 405.458750][ C0] Kernel Offset: disabled [ 405.463058][ C0] Rebooting in 86400 seconds..