last executing test programs: 1m36.640100346s ago: executing program 3 (id=234): r0 = socket$packet(0x11, 0xa, 0x300) getpeername$packet(r0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x20005d, 0x0, 0x0, 0x800000, 0x20000}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x4, 0xa, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x18, 0x1000008, 0x8, 0x6, 0x9001, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x0, 0x5, 0x0, 0x0, @value=r5, @void, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) setsockopt$inet_opts(r2, 0x0, 0xc, 0x0, 0x0) r7 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0xc0105b08, &(0x7f0000000040)) creat(&(0x7f00000000c0)='./file0\x00', 0x84) mount(&(0x7f0000000200)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='minix\x00', 0x1008001, 0x0) getsockopt$inet_opts(r2, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x2b) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @multicast2}}}], 0x20}, 0x0) 1m33.538062083s ago: executing program 3 (id=247): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4f24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000300)) creat(&(0x7f00000000c0)='./file0\x00', 0x8b) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES8], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x679fd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000440)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x40012043, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) fcntl$getown(r2, 0x9) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r7, 0x5608, 0x0) rt_sigtimedwait(&(0x7f00000003c0)={[0x6549]}, &(0x7f0000000540), &(0x7f0000000400), 0x8) mremap(&(0x7f000013c000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f00002f0000/0x3000)=nil) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000005000000020000000400000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000040000000000000000713e4764a8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r8}, 0x10) socket(0x25, 0xa, 0x0) 1m32.509927507s ago: executing program 3 (id=251): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000180)=0xffffffff, 0x4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e97800004000000000000a0000000000000004000400"], 0x1c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x200004, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=ff,rfdno=', @ANYBLOB="280cdc48f0bca16d95feacdd964b3cb4943fbee81183ce062cb3cbab2fdd1dc53c5a7984234ca57c39b4", @ANYBLOB=',wfdno=', @ANYRES16=r2, @ANYBLOB=',cache=readahead,cache=fscache,\x00']) pipe(0x0) vmsplice(r3, &(0x7f0000000400), 0x0, 0x8ca1c786d857b05d) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ppoll(&(0x7f00000000c0)=[{r7, 0x1007}], 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6, 0x0, 0x0, 0x3, 0x0, r6}, &(0x7f0000000380), &(0x7f0000000280)) syz_open_dev$sg(0x0, 0x0, 0x48202) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f046}) 1m32.345619962s ago: executing program 3 (id=253): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x7fffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000193c0)=ANY=[@ANYRESOCT=0x0, @ANYRES32, @ANYBLOB="15000000000000000080940000000000001c0000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=r0], 0x48) io_setup(0x1ff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f0000000040)='fd\x00') ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102376, 0x18fe8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x21, 0x3, 0x580, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4b0, 0xffffffff, 0xffffffff, 0x4b0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'veth0\x00', 'syzkaller1\x00'}, 0x0, 0x220, 0x248, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'sit0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x8, 0x5}}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv0\x00', 'veth1\x00'}, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@private1, [], @ipv4=@remote}, {@ipv6=@dev, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@ipv4=@multicast2, [], @ipv6=@loopback}, {@ipv6=@rand_addr=' \x01\x00', [], @ipv4=@local}]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x389380a, 0x0) umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x1) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x3ff) r6 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000019300)={'syztnl2\x00', &(0x7f0000019340)={'ip6_vti0\x00', 0x0, 0x48e6496b2115901f, 0x28, 0x4, 0x6, 0x8, @loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x7800, 0x7, 0x6f, 0x9}}) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r6, &(0x7f0000000600)="5f0efc", 0xfffffffffffffe4c, 0x44, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) 1m31.737333096s ago: executing program 3 (id=255): r0 = getpid() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udplite(0x2, 0x2, 0x88) ioprio_set$uid(0x3, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) r4 = syz_open_procfs(r0, &(0x7f00000000c0)='net/dev_snmp6\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000004000000020000000200000000080100", @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/24, @ANYRES32, @ANYBLOB="52dc921a6cf7f024033c39f86c2b3b4fd3"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d", @ANYBLOB="500215306dc6ffacee17688703a4e46e266ea974fc27ec6ddc76566479379de9e117c449ab9af80891080e00e62acf8f102ae98da6a8775a063db333837ffd23f9424769f947b9788993b471544ee59cb7ff9839e2675d76cf787127957d245109cdf8f679ff23d25db2a28410cb08e27f504603e5209dfd19f1105a5ab0755dfe6577cff0329c9f0462d7824d45613c1d5a2483a854f5f167ed043670457390f903e5b9ee579d1123f7242cd27e845cfb0d074bb8e2ebad1a3b177c50dd267e39e848c38ba85021ecc18c41e9555d11f43bd1e28af791faabc2ce37e42af46ddc909a156a10c5ef33d67cc69b7a95e00bcc360b80d6e0", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010000000000000000085"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xb, 0xb, &(0x7f0000000400)=@raw=[@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x52ff}}, @call={0x85, 0x0, 0x0, 0x8e}, @map_val={0x18, 0x4, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x10}], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb3, &(0x7f000000cf3d)=""/179, 0x0, 0x22, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xe) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, r3, 0x400}}, 0x48) close(r2) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) read$fb(r6, 0x0, 0x0) 1m30.949605432s ago: executing program 3 (id=257): creat(&(0x7f0000000040)='./file0\x00', 0x10c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_hsr\x00', &(0x7f0000000a80)=@ethtool_channels={0x4f}}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) shutdown(0xffffffffffffffff, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) futex(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r2 = msgget$private(0x0, 0x84) msgctl$IPC_RMID(r2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(r3, 0x0, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) 1m29.875266054s ago: executing program 32 (id=257): creat(&(0x7f0000000040)='./file0\x00', 0x10c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_hsr\x00', &(0x7f0000000a80)=@ethtool_channels={0x4f}}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) shutdown(0xffffffffffffffff, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) futex(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r2 = msgget$private(0x0, 0x84) msgctl$IPC_RMID(r2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(r3, 0x0, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) 15.732135489s ago: executing program 5 (id=499): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r5 = syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)=0x0) getpriority(0x1, r8) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f000000bbc0)=[{{&(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000500)="2c20ea399a81e6a72c96b8163fb00a06478c5745a663aba8ab6f06b52ce9c0082d0331c604eecc02c1da1e6883e04ab20c34fb521641ab2063883755c114cee4bbcfd057384752495cbd1f75d34e6469b31c2f597c30d7745ae319318a9d4b230c0fbb8e671cac6e8562129fa3446a0a6b0e602a4e5a660b679f36c8b3981945ebfeb88f0a107d19ad4a4b8947c7d0b39e3ecbc40e30f6f9", 0x98}], 0x1, &(0x7f0000000840)=[@rights={{0x1c, 0x1, 0x1, [r3, r7, r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0, 0x44040}}, {{&(0x7f0000006200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000006280)=[{&(0x7f0000008340)="2d0ce8df13ea488c35b6a7b8ccfdec8d03c22f82f0c883db1b33e5b82f6f97b0de6dcddcf1f996b963b062a1c39a7b9aca247d19200a7b34a5272bc0c8fee008bf4a2c5774bbf5220857c4f5f0c9c61d72afe880ab295477a8d01333e8413833fb18", 0x62}, {&(0x7f00000041c0)="63596fa34221d596e72da070b0a466ecd66f3f", 0x13}], 0x2, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r8}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x28, 0x1, 0x1, [r6, 0xffffffffffffffff, r1, r1, r0, r3]}}], 0xc0, 0x10044880}}, {{&(0x7f0000008540)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000180)=[{&(0x7f00000085c0)="2a5c93c0b9d1f26ef01289f362cdcc0344342d577091e931bfae93d01277224225b29d3019c9baa9a335c26405cd45efa210e1bbcbf0757c50238836c81398843cdf5459e6831f86369c8a41fbbedb0a03999055bb1151e16648fb1f9b6c20fd247d1f3dfa895d0daee0b0c6bb245fd41fc2373d50946aeb57dafd2fd66e92102c3df51e08a1187bc3b46385045c9e46e6c31108c56c6d5bfa269f8f94a6b55a58e7fdf6fad8f24266dcb87dd81e1b8f259460053e0f112fb96eef5b", 0xbc}, {&(0x7f0000008680)="6b283adea08050d9e62a6df553d6391e6f89d7e3215514fbe5eeba19c82b93d66a", 0x21}, {&(0x7f00000086c0)="8cdd7f3ac25ca19149e7c2b0129016f2ab6e7c1a941d834953190ef24981b50bb85638d40a903f3c9f273bc4bafe4c312aa8e771621e947976c9d10c13450bbe8125fb68b31fb5622dff837004e15ecf9fb0b1dd145fcdbb8f7d559ed9985bca90f777a9eff933c50b81e6cb6006", 0x6e}, {&(0x7f0000008740)="75c08aeda260e25a26b1f2b9935b1347c50ae33cb0e431a8beaa3b4f9772592f4538ec2f143767486ca67d5db2607dd7c38102a3867c03cce461e0e96cda277061d580a736fe08df99a12d1458eba1dfab99cb2789b4955c3221b8b95e7b20e2fe111292cfa794e8a8cb87024ed44420c460958b3a32019fcc446866abb4c58e1560de990ad2818f6c6e2bc006bf98f88d733b892e656e17425233f97c9d7fcd1cf3da2f9cc58f67d841319db9ca57152e9b7359018783f69969034770f2c7c4e25ff67322f21bdf0333143afb5c07ca8bc3b1ae", 0xd4}], 0x4, 0x0, 0x0, 0x4004004}}, {{&(0x7f0000008880)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000008dc0)=[{&(0x7f0000008900)="40b16970ca31", 0x6}, {&(0x7f0000008940)="d185f8a76098a3f6bd99c634a5672f7a002c", 0x12}, {&(0x7f0000008980)="f3b436edc1b283d9ae3ca3eb43b54320e0ed610234a373f800e29065d79c6d16b196206e931b49", 0x27}, {&(0x7f00000089c0)="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", 0xfe}, {&(0x7f0000008ac0)="5d20671ac3b58b2f7b382312c17127f8868c1a33b2abdeec234395a9ce7e6dfe17271b67b5912f3f8bc0300667d4392c17a02d91da05a2b64f90adfe53588c34f8", 0x41}, {&(0x7f0000008b40)="f689655107435cd517b6d3d2696903473aef49c16fcb1134a2b0d512a0564df128191e0dfd25f773f8302258e9452b272476b20b07015c938cb8a105e8a03cea320df61e2b773a94f5bacb055fc990af90902180e046dda8a8f25550f362a7b25f44e2a95eabd70bd11a11d705d694d23357e87570f4fdb2bcb81d872e0fe6140a220ad5183009760c761067c37f1ef4408745d979bc810326f97933726dec2852f75f4efe4ab94f32cdc52c15c50bbcac55dfc8032d0af5018c204e4f3a7c2dbe8453e56ac2597026434ef2491a957239c9f53d98ec035519b184", 0xdb}, {&(0x7f0000008c40)="347bcb55a19b86ea773b10fef96e2b6b6c435b6ac81d013e4409b4a477246fcce44d71c766a5eaf204a5fe36e9f10b9448de8d8da9d3e5228c240e16099ae11b34e3c4200c1281a3d904b4fe661ad3e15bec67d44accf63e83e870746392dcbc76f57a4353e98ac01bc8efab7a148556f049f2d2b4bca33d0ceec441a831", 0x7e}, {&(0x7f0000008cc0)="9f0ee525c521b3140dd68394a3be4be893bc145666c1260a3c07a14fc1a5fad953cae0e3c9ef056ea3c0f1f929dc70766c08db793cefe8c52eb6d7a2d858a5cb46af15b3c7280d0495bf6c1a5a4bb85e054af695722d7ca899d7da6d2da9a4a72faba62853f799f6e8e4ecf4a0cd8c036e9adad22cd9b2335b278c7e4a1aa3f1196fa151ebfabab3065a2931d606a29e17a01ef7e48a4a5a9352d94c09e8ce898278", 0xa2}, {&(0x7f0000000600)="c94317c34b16ffd072e1", 0xa}], 0x9, &(0x7f0000008f00)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, r6, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30, 0x4000}}, {{&(0x7f0000008f40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000a340)=[{&(0x7f0000008fc0)="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", 0x1000}, {&(0x7f0000009fc0)="c2ac37f80ef87dbad984454c3006edf35e2deea65a785c968ddccea5ae7815ac1109b42fd1280f91d29121eb81108920b8855052c4786bb1f452d3028e2b72bfc80a900bde523c686a2ba77d9023e15fc45cd9cf0556f55a2760e6ab44242b1dd7b8098fa46f21d95f0095f1cfd13328c90eb8be20efad502ded8189550b90db4f47a3ac8020e0ff91df", 0x8a}, {&(0x7f000000a080)}, {&(0x7f000000a0c0)="a9c5b010b96933814f2591688c389eb8d4e11706c1e888e01cc220d6cc7e0b195d2abff31cbd62974c446304ae9dcf64da19ce6a5fef48b3e27cf8ff053dbc96ed38a4c66624859f1989091ec8e84744be3862e8a0d8d263fe5b92c9c0a54e080f4d06a47cd0a4d906e9f094b6b7d53432653e1ef6c87afdaee7f8311a4d7c7c836abd5c2dc9ce960f74c8722598879edf9bcdca682c09e73b42e94e", 0x9c}, {&(0x7f000000a180)="896bbdf58afa08aaaf5314003cd8f68ef5db435a179de50cf67149bdffa0a856215087491dc12c33aeca8cf76e3517113b979d13b90400d6222e79a95ba2f19d11ac5c1b1bdb954361711c0a9f5f56a0e961ec061ba979c0d6ebca71de1d15d40229a47c8ae640223957c926277b31ca8e4cc48b3e418f501d8c0181a860fdb6684f2b061c2c9600138c79994e9d6f53", 0x90}, {&(0x7f000000a240)="49317e603a97aba3b7ca85a0ca0c636a090becef62ed6655bde6750c32bf60f128bc5a75b267069da99490e820672eaef88121c35c59237fc85a5de3e7a8ad28723541de43bcdca99e5f0d519ad0766d89d898d25b0fde98601fa9cb2b1eccc4c25162d802ffdf0b9160ec1e4bf89f8b6bb2fc253650f10e7becbd21dadc3a4c1137e6098bbb2ebbdd8969fabcdc64c9e438f1cbba049bdf25e190133218cd878058163fe70d3310d82775230b6f6985446d31609763fefd1f58d3b79eae1b618bec43ea2715f292088bafe877596fb13eca93152bb528beccff0a8fd59c", 0xde}], 0x6, &(0x7f000000a3c0)=[@rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40, 0x5}}, {{&(0x7f000000a400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000bac0)=[{&(0x7f000000a480)="758f013fad4cfcddb675e945d7e8c8e0853d8cd797665c65611957708b2975e8771b88e9295a493363093001740b8ace8934ac83d73b920c2ae92941f08e078ae291a41f5093413e2fef41a2e8da016cc868eb93113f2f0d8fb6838be4ae22e5d5f781fb82fdc0fcc2ea0b364fad993b48d2a5e84b454164400a6b10eb86f4ed997a2af3cfe0813dde529cc9c9dbb09f0b9cfee6be6da861b1252457d7718710d17319", 0xa3}, {&(0x7f000000a540)="cf5c99282cfede99906b5918f127cf4fb86a9dc7ea3c749740cfafe17c1dc1cabfc1bbf909137546e4e0019c33f70b4a23aa18a4becf91fdc94f0646bdf3793c2c202cf5a11050437175ab83040f4065338396f1204e62e2506bbd30f2b592f3042d689e231c9e9aef2e3b2133b90933ecc7e919dff351c3d82bcdeb", 0x7c}, {&(0x7f000000a5c0)="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", 0x1000}, {&(0x7f000000b5c0)="4ecd60672999868f4e2d16b9fbc07fad61a2e2a1a4bbf992db06ef9dbd6ede8c1ee5191d91bcfb5aa6f1489b19ec7aa2692f57cefa0a191b9ab06da636e3edded74ffe008125e391890437286a87300afb4f1e96e52adeaf923460f0a44b0f2b5386b1fbbbc5f67c30c0edcecfbcf1291792032c5ae38758b65d3dd46f970422a2c224f9875e0531df7304e1d339cf395cb589ac600180a7b592cf351fab79e5022d", 0xa2}, {&(0x7f000000b680)="a1982b45c991deac60611a1e137cd1035a8ed0188272f8af8c29ea5f73ca902521519e9c0de6a157cb6f8478ba9228beed53e1e37873effb21217dec29bda99654c1eaba2e3f271eebeede2267917a609f2d9fd3a135f0bfe4e09e8dc25a", 0x5e}, {&(0x7f000000b700)="da5d3258c39dca40a74a35c70f1ade067fc83b2497000554a457b7d153abb461fdbc916c3bc9fbe3aabc55ce2cbacbdc19a0aa566b3e9bf2afdf768a5d4d1918167d2fa2fcfb69cd4623559400611fab52c122833c22ca8c3594d9a1ce3401de33d3b1e1a5318ec5d7efaf33d2755887ff458bff9da544b3464eb2c36ce3319674ec3911c6d5f77f8d6c5d56ffec56a03ac2d92aa28c7574f4a42f2432f43c2ddf197b736f03d3a37adbf0420bfde1a577dc7adc7552bdb7e3da85563f553d81", 0xc0}, {&(0x7f000000b7c0)="8e41b3d2856917a1c519ccd1913f484672f8b3c2037b7d1e17ba568ccafeb247757ca90f96706ae0096d29245cfb164b87b57ecbfbaef9a80cf7071ed4604323a567c75eb472bb2731345a4fb8041467618e9d2abd8ffd4aab0559c58ad1607212b73bce6fc2ade73dbc91b818e32931c2f67ae163f4252c71a9a7ff1fe9021ced3b18b1a4a09de6f1e809ce0c8fb5dd1e3a7c6b637094f1b6fc2afaa53aa0ee393d38e2493a9737bc4373f0fb710fd9a07e629f6c52f5d5c851633254e2a536d39bb691bf55af7e099167ed4ab20e9da6b7fcb9e55e64bc5b5681123932c4c711520d13a57ff0f44dbb181f1add724ddc64134ee2cfcd62a23d", 0xfa}, {&(0x7f000000b8c0)="22a79c68ab450faee0fa6c88839938c4d908383863b04bd6a80bd9c5bea12bd6c31ebb4b53cbec923cd832a8c41b580d71b44416aa9b54897c729857a4cbcabd8840e0dc6561de2d15cd0c25ddfa62aca478c5959e1753879ed22ef2c2597ca057a1214e03e6699a4207b7ddd3c447196cb5d8e601b35df0edafd6a4e752e67a029d5870ea1566d042178dbeec0a472dbebda351defafd91422d60413f98c9a86ac20ea1bc04bd12ada55c01d0da317a6e76c48639428c87a1f2688a67f7d4edb7027b146a7a464a29a7c401821d404cf48dfca21236a9", 0xd7}, {&(0x7f000000b9c0)="3adb57aa8003c7e2b099a221caff08b4f9bdbc762c64fb544804341c99493a5992c382bdf653ed8f53f30df3d825d17e013517964ec21dada63a0eeff856fd92bed96bb530acb1121afe0e5b30d9430562d9b2144266989c485ed7c840e1376cfc659d00493826ed28b31a7d3fcf646db4a35585714299031d552f2319c1079a234c7a1b7bb5879f070649709dbd9e409748be93ebbbe99d131a01c5e9e417601e7233608e46cbb32a548f1049cd5aceb843ce0cafe2904d240eeeb51014c9ea2384c60adea770e1620b183c", 0xcc}], 0x9, &(0x7f000000bb80)=[@rights={{0x14, 0x1, 0x1, [r6]}}], 0x18}}], 0x6, 0x4040000) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) bind$tipc(r10, 0x0, 0x0) r11 = accept4(r0, &(0x7f0000000400)=@hci, &(0x7f0000000340)=0x80, 0x400) close_range(r9, 0xffffffffffffffff, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpeername$packet(r11, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) sendmmsg$inet_sctp(r1, &(0x7f00000002c0)=[{&(0x7f0000000040)=@in={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)='l', 0x1}, {0x0}, {0x0}], 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="200001000000000084e3000008000000fe02b2ca4300d0c984e7cd5dc500000000f356fb8abbd6228d0000000000008400000007000000e0"], 0x38, 0x14001}], 0x1, 0x4044040) 12.473334426s ago: executing program 5 (id=515): r0 = syz_usbip_server_init(0x5) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1fb, @dev={0xfe, 0x80, '\x00', 0xb}, 0x9}, r4, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r3}}, 0x18) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00cf9a1a9d70288e8b213f2da45b0000", @ANYRES16=r5, @ANYBLOB="000426bd7000fbdbdf250200000005002e0001000000080032000100008008003b0006000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a13de30840205029f185010203010902"], 0x0) write$usbip_server(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000300000001"], 0x30) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xd) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000500)={r1}, 0x8) close(r7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() 10.310310497s ago: executing program 5 (id=523): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 8.766180678s ago: executing program 0 (id=526): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a00", @ANYRES32], 0x68}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x57, 0x9f, 0xf, 0x10, 0x15c2, 0x46, 0x5e15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x8b, 0x0, 0x0, 0xc2, 0xb8, 0xcf, 0xfd}}]}}]}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) syz_usb_connect(0x1, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) (async, rerun: 64) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async, rerun: 64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) (rerun: 64) openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async, rerun: 64) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) (rerun: 64) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f0000000000)={0x8080000, 0x16000}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0xcfdf) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='cachefiles_ondemand_open\x00', r4, 0x0, 0x3}, 0x18) write$char_usb(r3, &(0x7f0000000200)='c', 0x1) 8.355674511s ago: executing program 0 (id=530): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000fc850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) r2 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0080bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) write(r2, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$inet6(0xa, 0x3, 0x3a) r3 = syz_io_uring_setup(0x7440, &(0x7f00000004c0)={0x0, 0xa6e9, 0x10100, 0x2, 0xfffffffb}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0x80}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) setsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000380)={0x0, @dev={0xac, 0x14, 0x14, 0x21}, @private=0xa010101}, 0xc) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r7, 0x0) ioctl$EVIOCGMASK(r6, 0x80104592, &(0x7f0000000100)={0x1f, 0xdd, &(0x7f0000000540)="3018a15a330f0731aed512167ccc989343a4f9679d4b1e9907e6914e80d436cb4493269023f248659ab5abbd6a6ade1f958ca8d820c1b1b0f26d34c3921b40602fae4da4a8a830ccc699fee2b63ad1fe9b06f35fc1ac4f6af34de337463df5193b8fedb186298e2a50fb176b34a7aa5e05f995bb3a479f9e2109468bea0ae6646754f5cc36efbebe67dce85036355f9f51a29c1e1a93d548d2f32a6dc6eb10f5c760ce2c3d951c9ec80c927405ced4e8867fbc31d414bbbde23f559196f822a05936a002b95744886766408a92f2bfb31b4dd828b45ced221df59775fa"}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000002c0)={r8, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x200, 0x7a, 0x0, 0x80}, &(0x7f00000003c0)=0x9c) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000040)={r8, 0x6, 0x7, 0x3, 0x3, 0xfff}, &(0x7f00000000c0)=0x14) 8.118078274s ago: executing program 0 (id=532): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24008045, &(0x7f00000001c0)={0xa, 0x406, 0x398, @empty}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) creat(0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) getpid() sendmmsg$unix(r3, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000880}}, {{&(0x7f0000000900)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000a40)="96902cdcd8e444bd0994f6c98c20306dbb5496369536a6848c83e7015293cf1be2454b7440227da5ec1615be18eccff8db8998f373ba40ca891ba77ce21630d2a42c0510809e5f62c0008efe315153f26eeb7278740bc0655f1f90", 0x5b}, {&(0x7f0000000ac0)="4d0165c3e8693dacab79fdbaa0152c11df565f326ff0980daab37b740080f33bbfe662eb0f817a4c7a0ff3ea419d1b8a50fe65cc0fe5f1fd152c2aa22d9ca860ab3ef8492f0f77eb9c699cc1b1bf01fd09106f82379ea5a98a8f", 0x5a}, {&(0x7f0000000b80)="5959645a771b0d74692cb887304220cfaa12713fab62f16d57ccd79d4a2b6b570a9f93a2995f60a999", 0x29}, {&(0x7f0000004080)}], 0x4}}], 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0xd) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0x0) 7.561660199s ago: executing program 0 (id=536): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x18, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x101880, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close_range(r2, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000380), &(0x7f0000000040)=0x8) 6.821341604s ago: executing program 2 (id=537): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7e, 0x9e, 0xb4, 0x10, 0x54c, 0x38, 0x16f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xc5, 0x38}}]}}]}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x1c0, 0x12, 0x60a, 0x1c0, 0x202, 0x2b0, 0x2e8, 0x2e8, 0x2b0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @private}, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500100001000130700000000000000002223ac14140000fe00000000963680610c4e8874754c000000491b9eaf07e7e5a400000000000000000000014523aae4", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000033000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000010000000000000000000020000000a00020000000000000000005d001400"], 0x150}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000c400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000200)={0x50, 0x0, r6, {0x7, 0x1f, 0xffffffff, 0x21a028b, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x402, {0x410000006, 0x10, 0x0, {0x0, 0x4000000, 0x10000000, 0x0, 0x0, 0x8, 0x400000, 0x7, 0x0, 0x8001, 0x0, r7, r8, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_open_dev$loop(0x0, 0x47ffffa, 0x122c42) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@ipv6_newrule={0x2c, 0x18, 0x409, 0x0, 0x0, {0xa, 0x20, 0x14}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e23}}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x28, r3, 0x5, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff38}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) 6.39946412s ago: executing program 5 (id=540): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x12) ptrace$setregs(0xf, r0, 0x4, &(0x7f0000000440)) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x0, 0x91, 0xe1, &(0x7f0000000280)="27327b669e5126743958fda7f011daca1fc8b058cf7fcb07a5ebae38fb4f2ca808149a95bb18bb0ea92e8969a20d70f62939eb0d926877050f7b5c875ae6d4256f4b271461902fcfdcf3e79f5824a9d97f681e02e6ad375e254572d940dd37a553617d6c13641bb2496f167131e231875e0e2b44a24b5e30414e3dd178c3cfd6b699f2812e7d3d5b1c89b02fab31616eee", &(0x7f0000000340)=""/225, 0x2, 0x0, 0x27, 0xdf, &(0x7f0000000440)="e3fef8e1eecc39db3ace534341c7efd0e3dd958ce398f4b02ef18fa634a76415d725d055e6994d", &(0x7f0000000480)="92ec590cbf569e0faeda7e3a84bea3e9617273362e5b2063cbdefcb2d5055987a675763794347f1e84e70ff0f3f433ce238b3b9367b7dfbe1eaa4a3c8789ffa667657e73eee3b3b61e42e4b7612d4b2242e4608d13fad2e6c6a6ee3954f88c099146a24f55e72cc1afc73107124cde090365b4417a2797cbc6c759aa5ad60d6bf5924e2061575df6f4f50c48b4542e9b3bbb25507e9843606c860e86e6fa0cf14d14f4811cbcc6c5cadd16f43fdfb24692f276dc09c9c39610b2e3ddceea541484c3841a90c4fbf6a546f96a388156fc9e5d35a034d2526bde242be33cfc0e", 0x2, 0x0, 0xfcc}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000680)={0x0, 0x68, &(0x7f0000000600)=[@in6={0xa, 0x4e21, 0x9, @mcast1, 0xffffffff}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e21, 0x8, @empty, 0x5}]}, &(0x7f00000006c0)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) socket(0x25, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r7, 0x40045569, 0x7) write$uinput_user_dev(r7, &(0x7f0000000080)={'syz0\x00', {0x0, 0x2}, 0x35, [0x4346, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfff, 0xfffffffc, 0xffffffff, 0x401, 0x5, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x851, 0x0, 0x2, 0x3, 0x0, 0x0, 0x800], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0xa0000000, 0x0, 0x80000001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x2, 0x5, 0x4, 0x2, 0x7, 0xd5c2], [0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x80000000, 0xc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x100, 0x0, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x5, 0x0, 0x0, 0x2, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8]}, 0x45c) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x11) ioctl$UI_DEV_CREATE(r7, 0x5501) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000700)={r3, 0xfff}, 0x8) mkdir(&(0x7f0000000740)='./file0\x00', 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', r2, 0x7, 0x80, 0x6, 0x5e52, {{0x47, 0x4, 0x1, 0x2, 0x11c, 0x67, 0x0, 0x15, 0x4, 0x0, @local, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x34, 0xd8, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x28}, 0xb5}, {@empty, 0x8001}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x8}, {@local, 0x5b}, {@multicast2, 0xe}]}, @timestamp_prespec={0x44, 0x24, 0xaa, 0x3, 0x6, [{@broadcast, 0x9}, {@broadcast, 0x1000}, {@loopback, 0x7}, {@empty, 0xfffffff8}]}, @cipso={0x86, 0x50, 0x0, [{0x6, 0x8, "4feb7e35da7e"}, {0x0, 0x5, "decfb1"}, {0x2, 0xb, "25e94e75bd242d8229"}, {0x5, 0x3, "f7"}, {0x0, 0x9, "744d873958a3ad"}, {0x2, 0x12, "d6942026b703b6728e85b0f03b29812b"}, {0x2, 0xe, "f553ec71a4cb47c74e2d8e4c"}, {0x5, 0x6, "55d9058e"}]}, @timestamp_prespec={0x44, 0x3c, 0x49, 0x3, 0x7, [{@multicast2, 0xfffffffb}, {@private=0xa010100, 0x200}, {@remote, 0x6}, {@local}, {@loopback}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@multicast2, 0x8001}]}, @rr={0x7, 0x23, 0xbd, [@rand_addr=0x64010100, @multicast2, @remote, @empty, @rand_addr=0x64010100, @multicast1, @multicast1, @private=0xa010100]}]}}}}}) 6.150711106s ago: executing program 1 (id=542): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070000000c000000ffffffff00000000", @ANYRES32, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000000000000e2a100000000000000000000000000dbc30000"], 0x50) add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, 0x0, 0x0) 6.095289058s ago: executing program 4 (id=543): socket$inet6(0xa, 0x3, 0x84) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xa8202, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_open_dev$loop(0x0, 0x3, 0x10b242) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x88) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0xfffffff2, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000300)={0x48}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r6, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) close_range(r0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) 5.690273528s ago: executing program 1 (id=544): r0 = socket$kcm(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) shutdown(r4, 0x1) close(0xffffffffffffffff) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x80) mknodat(r5, 0x0, 0x0, 0xc) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x98, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x58, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @broadcast}, @IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}, @IFLA_GENEVE_TOS={0x5, 0x4, 0xf}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private0}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x98}, 0x1, 0x0, 0x0, 0x20004885}, 0x240040d4) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) 5.096697402s ago: executing program 5 (id=545): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x13d, 0x0, &(0x7f0000000300)="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", 0x0, 0xccea, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x5, &(0x7f0000000640)=[{0x1, 0x6, 0x4, 0x3}, {0x200, 0x48, 0x88, 0x1724}, {0x3, 0x3, 0x9, 0x2}, {0xb, 0x8, 0xf4, 0x7fffffff}, {0x5, 0x7e, 0x1, 0x8}]}, 0x10) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000500)=""/155, 0x9b, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="540100001000130700000000000000007f000001000000000000000000000000ac1e03010000000000000000000000000000fffd000000000a0080003b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000078a9000000000000000000000000000000000000000000000000000000008040000000000000000000000000e70000000000000008000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000004350000020004ff6f0000000000000048000200656362286369706865725f6e756c6c000000000000000000000000000000000000000000000000000000000000000000000000001c0004000700"/252], 0x154}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) setuid(0xee00) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="39000000140081ae50003c00fbff008311001f9f660fcf0e5a05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 5.096095247s ago: executing program 4 (id=546): socket$nl_route(0x10, 0x3, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x8b) close(r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @local}, 0x2}}, 0x2e) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) connect$vsock_stream(r3, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x404, 0x1, 0x80d6}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000200), 0x2010000, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r6 = syz_io_uring_setup(0x10d2, 0x0, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) io_uring_enter(r6, 0x47bc, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4.689196597s ago: executing program 1 (id=547): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000005e0000000000001eba3da0ff641f785a5144b32706b499bb26b2b6c85f73b2a377b492fefc330103d3da1b2564069db7392a88b8018e6ce4e50e8f3780", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='hfs\x00', 0x482, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f00000001c0), 0xed) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0, 0x59, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xeb, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'tunl0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x1, 0x20, 0x7, 0x5, {{0x6, 0x4, 0x3, 0x38, 0x18, 0x65, 0x0, 0xe, 0x29, 0x0, @local, @multicast2, {[@end]}}}}}) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x114a, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000b00)={0x2550, 0x8, 0x1, {0x1, @sdr={0x49433553, 0x8}}, 0x5}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'batadv_slave_1\x00', 0x0}) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r11, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x210cfa, 0x3, 0x8000008, 0x3, 0x0, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r11, 0x40505330, &(0x7f0000000500)={0x800080, 0x10000, 0x2, 0x0, 0x40, 0x558}) close(0x3) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x0, r10, 0xe}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000900)={'gretap0\x00', &(0x7f00000007c0)={'gretap0\x00', 0x0, 0x1, 0x8, 0xffffffff, 0x718, {{0x47, 0x4, 0x2, 0x37, 0x11c, 0x65, 0x0, 0x6, 0x0, 0x0, @multicast1, @empty, {[@cipso={0x86, 0x3e, 0xffffffffffffffff, [{0x0, 0xe, "98d96594a33ab545253fb8ee"}, {0x1, 0x11, "e6202a47503b5bd92fdd3228cb48ca"}, {0x0, 0x12, "d931001e7dffffe4c6a70c1858f1065c"}, {0x1, 0x4, 'Y#'}, {0xa8a68bb42039ad09, 0x3, '>'}]}, @cipso={0x86, 0x48, 0xffffffffffffffff, [{0x0, 0x10, "dacf94da4f84b7d145560e23b0f0"}, {0x6, 0x8, "c5b48187905f"}, {0x6, 0xc, "4029e87f037ba3fb2a18"}, {0x2, 0x10, "432d6fa2659e384aba98b4839234"}, {0x1, 0xe, "db4cb75bb8218904372cc9df"}]}, @ssrr={0x89, 0x13, 0x12, [@multicast2, @empty, @multicast2, @private=0xa010101]}, @end, @end, @ssrr={0x89, 0x17, 0x1a, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x2d}, @loopback]}, @timestamp_addr={0x44, 0xc, 0xac, 0x1, 0x6, [{@multicast2}]}, @timestamp_prespec={0x44, 0x34, 0xee, 0x3, 0x6, [{@loopback, 0x3}, {@private=0xa010102, 0x6}, {@loopback, 0x6}, {@private=0xa010101}, {@broadcast, 0x6}, {@local, 0xfff}]}, @timestamp_addr={0x44, 0x14, 0x13, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xb}, {@broadcast, 0xfff}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a80)={&(0x7f0000000d80)=ANY=[@ANYRES16=r4, @ANYRES16=r11, @ANYBLOB="000229bd7000fcdbdf250400000058000180140002006e72300000000000000000000000000014000200677265300000000000000000000000001400020076657468315f746f5f7465616d00000008000300030000000800030002000000080003000700000024533078aba470c31eac3bdc73758000018008000100", @ANYRES32=r5, @ANYBLOB="cf855df059aa65f79573191608cd0100", @ANYRES32=r6, @ANYBLOB="08000300000000002c000180140002006261746164765f736c6176655f3000001400020073797a5f74756e000000000000000000840001801400020070696d72656730000000000000000000140002006970366772653000000000000000000014000200766c616e310000000000000000000000140002006d6163766c616e300000000000000000080003000100000008000100", @ANYRES32=r7, @ANYBLOB="080003000100000008000100", @ANYRES32=r10, @ANYBLOB="080003000100000008000100", @ANYRES32=r12, @ANYBLOB], 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000801) 4.492137293s ago: executing program 4 (id=548): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010007bd7000fddbdf2555000000080001006400000008000300", @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) 4.152273396s ago: executing program 0 (id=549): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80, 0xffff], [0x0, 0x0, 0x0, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1f2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a8fe2e2], [0x88000001, 0x0, 0x8, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x800000, 0x0, 0x3ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1400, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x44], [0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x6, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) fsmount(0xffffffffffffffff, 0x0, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) 4.073798111s ago: executing program 1 (id=550): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x2c, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f00000001c0)={0xf0, 0x20, 0x3c0, 0x140, 0xe, 0x0, 0xf, 0x1, {0x5, 0x8, 0x1}, {0xffffb7b0, 0x88}, {0x7, 0x3}, {0x101, 0x7}, 0x0, 0x1, 0xc8b2, 0x6, 0x0, 0x0, 0x536, 0xd8, 0xff, 0x2000000, 0x3, 0xffff, 0x2, 0x2, 0x3, 0x1}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4140aecd, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000002"], 0x14}], 0x1}, 0x44) 3.933332899s ago: executing program 1 (id=551): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 3.504643868s ago: executing program 2 (id=552): r0 = socket$alg(0x26, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0xa03, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r3, 0xc048aeca, &(0x7f0000000200)) io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x6990, 0x40, 0x2, 0xfffffffe}) r4 = socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r4, 0x0, 0x0, 0x80) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r5, 0x545c, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x100000001, 0x50000) ioctl$USBDEVFS_CLAIM_PORT(r6, 0x80045518, &(0x7f00000000c0)=0xbe6) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x40, 0x4}, {0x1, 0x101}}}}, 0x11) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 3.304457948s ago: executing program 0 (id=553): r0 = syz_usbip_server_init(0x5) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1fb, @dev={0xfe, 0x80, '\x00', 0xb}, 0x9}, r4, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r3}}, 0x18) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00cf9a1a9d70288e8b213f2da45b0000", @ANYRES16=r5, @ANYBLOB="000426bd7000fbdbdf250200000005002e0001000000080032000100008008003b0006000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a13de30840205029f185010203010902"], 0x0) write$usbip_server(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000300000001"], 0x30) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xd) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000500)={r1}, 0x8) close(r7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 3.192618886s ago: executing program 4 (id=554): r0 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r0}) mkdir(&(0x7f0000000440)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) socket$inet_dccp(0x2, 0x6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100000000000095000000000200"/25], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000082000692041752c85ea2de46500"]) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB=' '], 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) chdir(&(0x7f0000000280)='./file1\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x8000000000000001, 0x1, 0x2000000000a962, 0x2, 0x201, 0x7fff, 0x48cd, 0xfffffffffffffffc, 0x9}) fchown(0xffffffffffffffff, 0xee01, 0x0) 2.44235757s ago: executing program 2 (id=555): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x12) ptrace$setregs(0xf, r0, 0x4, &(0x7f0000000440)) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x0, 0x91, 0xe1, &(0x7f0000000280)="27327b669e5126743958fda7f011daca1fc8b058cf7fcb07a5ebae38fb4f2ca808149a95bb18bb0ea92e8969a20d70f62939eb0d926877050f7b5c875ae6d4256f4b271461902fcfdcf3e79f5824a9d97f681e02e6ad375e254572d940dd37a553617d6c13641bb2496f167131e231875e0e2b44a24b5e30414e3dd178c3cfd6b699f2812e7d3d5b1c89b02fab31616eee", &(0x7f0000000340)=""/225, 0x2, 0x0, 0x27, 0xdf, &(0x7f0000000440)="e3fef8e1eecc39db3ace534341c7efd0e3dd958ce398f4b02ef18fa634a76415d725d055e6994d", &(0x7f0000000480)="92ec590cbf569e0faeda7e3a84bea3e9617273362e5b2063cbdefcb2d5055987a675763794347f1e84e70ff0f3f433ce238b3b9367b7dfbe1eaa4a3c8789ffa667657e73eee3b3b61e42e4b7612d4b2242e4608d13fad2e6c6a6ee3954f88c099146a24f55e72cc1afc73107124cde090365b4417a2797cbc6c759aa5ad60d6bf5924e2061575df6f4f50c48b4542e9b3bbb25507e9843606c860e86e6fa0cf14d14f4811cbcc6c5cadd16f43fdfb24692f276dc09c9c39610b2e3ddceea541484c3841a90c4fbf6a546f96a388156fc9e5d35a034d2526bde242be33cfc0e", 0x2, 0x0, 0xfcc}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000680)={0x0, 0x68, &(0x7f0000000600)=[@in6={0xa, 0x4e21, 0x9, @mcast1, 0xffffffff}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e21, 0x8, @empty, 0x5}]}, &(0x7f00000006c0)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) socket(0x25, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r7, 0x40045569, 0x7) write$uinput_user_dev(r7, &(0x7f0000000080)={'syz0\x00', {0x0, 0x2}, 0x35, [0x4346, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfff, 0xfffffffc, 0xffffffff, 0x401, 0x5, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x851, 0x0, 0x2, 0x3, 0x0, 0x0, 0x800], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0xa0000000, 0x0, 0x80000001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x2, 0x5, 0x4, 0x2, 0x7, 0xd5c2], [0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x80000000, 0xc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x100, 0x0, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x5, 0x0, 0x0, 0x2, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8]}, 0x45c) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x11) ioctl$UI_DEV_CREATE(r7, 0x5501) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000700)={r3, 0xfff}, 0x8) mkdir(&(0x7f0000000740)='./file0\x00', 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', r2, 0x7, 0x80, 0x6, 0x5e52, {{0x47, 0x4, 0x1, 0x2, 0x11c, 0x67, 0x0, 0x15, 0x4, 0x0, @local, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x34, 0xd8, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x28}, 0xb5}, {@empty, 0x8001}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x8}, {@local, 0x5b}, {@multicast2, 0xe}]}, @timestamp_prespec={0x44, 0x24, 0xaa, 0x3, 0x6, [{@broadcast, 0x9}, {@broadcast, 0x1000}, {@loopback, 0x7}, {@empty, 0xfffffff8}]}, @cipso={0x86, 0x50, 0x0, [{0x6, 0x8, "4feb7e35da7e"}, {0x0, 0x5, "decfb1"}, {0x2, 0xb, "25e94e75bd242d8229"}, {0x5, 0x3, "f7"}, {0x0, 0x9, "744d873958a3ad"}, {0x2, 0x12, "d6942026b703b6728e85b0f03b29812b"}, {0x2, 0xe, "f553ec71a4cb47c74e2d8e4c"}, {0x5, 0x6, "55d9058e"}]}, @timestamp_prespec={0x44, 0x3c, 0x49, 0x3, 0x7, [{@multicast2, 0xfffffffb}, {@private=0xa010100, 0x200}, {@remote, 0x6}, {@local}, {@loopback}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@multicast2, 0x8001}]}, @rr={0x7, 0x23, 0xbd, [@rand_addr=0x64010100, @multicast2, @remote, @empty, @rand_addr=0x64010100, @multicast1, @multicast1, @private=0xa010100]}]}}}}}) 2.440407386s ago: executing program 5 (id=556): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x90) ustat(0xb3c, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000003c0)='sys_enter\x00', r2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) fchdir(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) iopl(0x3) r4 = gettid() r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000000180)=0x1, 0x4) sendto$inet6(r5, &(0x7f00000002c0)="36e831a918acfa70fe17db07f98ce5cd4e0d51d75243582c40fbf2abd93b0aae3337826bab8b9f0147440832d4028bba7d3ac754832f7a4a9e9909f4320525642af4559b5bddec4bfe81d540ee5189de9e609fd716a1589ff7a0af0c31a88f527935d28f7dd8c55224d434b2725764d8bd7d93032a470540923da79166838d933bee0877532959f6ac0b0157138ca9f4e7326f505f03c38dcd4350a2ff9b15840153da5fcc8ea966927ee046faaecb24a97a07a0c3f19020f8f7cc2e2dc9ff238d3075724876e9489689a4374dab6a90c86e398a5f9cac10d6f0b4bf8187e87c93c6783aeb9f749b758b15cae3c6e1137ff3afc969cb9d", 0xf7, 0x24008854, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0x400000}, 0x1c) listen(r6, 0xfffffffd) accept(r6, 0x0, 0x0) 2.227365528s ago: executing program 4 (id=557): connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r4, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x20000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffc000/0x4000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r7}, 0x10) semtimedop(0x0, 0x0, 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$ax25(0x3, 0x2, 0xc4) 957.930766ms ago: executing program 2 (id=558): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000010000800000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x40580) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x0, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz2\x00'}]}, 0x1c}}, 0x854) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)=0x2) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r5, 0x80045017, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r6, 0x4122, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f00000000c0)={0x8000005, 0x0, "679c51ecbc837c3be89cc66068c9135adc714d432546da16827000", 0x3, 0x0, 0x10000, 0x8000}) 795.419231ms ago: executing program 2 (id=559): syz_emit_ethernet(0x82, &(0x7f00000006c0)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x4c, 0x3, 0x0, [{@private=0xa010121}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local}, {@remote}, {@private=0xa010102}, {@dev}, {@private}]}]}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x404c050) 691.720185ms ago: executing program 2 (id=560): socket$kcm(0xa, 0x922000000003, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000940)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0xf0ffff, 0x0) 495.002948ms ago: executing program 4 (id=561): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000002030104000000f4ffffffff000000000800010001"], 0x28}}, 0x40000) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="20000000030305000000000000000000000000000c0002"], 0x20}}, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x8, 0xa0, 0x6b, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x7, 0x24, 0x6, 0x0, 0x0, "648c"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xb76, 0x0, 0xc35, 0xeb}, [@network_terminal={0x7, 0x24, 0xa, 0xf0, 0x4, 0xf9, 0x94}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x2, 0xff, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x5, 0x5, 0x4c}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x8, 0x5, 0x3, 0x8, 0x7}, 0x3d, &(0x7f0000000100)={0x5, 0xf, 0x3d, 0x2, [@ssp_cap={0x24, 0x10, 0xa, 0xfa, 0x6, 0xa34, 0x78f, 0x1, [0xffc000, 0x3f00, 0xff0030, 0xff000f, 0x3f30, 0xf0]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "e84aafea719d4679a1c3ae938e76b389"}]}, 0x2, [{0x90, &(0x7f0000000180)=@string={0x90, 0x3, "ee287bfd16c3dab14f665f21fb8f19e82e729adf1a58a9b74b5313d5fd0aa556e68441f9c18511061458b2b1850a2a15ddd806dc4b07f67f0bdd1ff5092f96e275e55be9ba808d84f52aad69cd0fa8310967a6dd480cd434fd8fd1f2e75a34fa5942525fb0329f1326e65a86126f3f4130a87f3d4155d364b385ba82772194a5a7915875928b586cb518497bcc6e"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3009}}]}) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$snddsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$KIOCSOUND(r2, 0x4b2f, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) syz_emit_ethernet(0x82, &(0x7f00000000c0)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x5c, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010103, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @local, {[@lsrr={0x83, 0xb, 0x0, [@dev, @empty]}, @cipso={0x86, 0x32, 0x0, [{0x6, 0x5, "df6116"}, {0x0, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x8, "02a20948fd74"}, {0x7, 0xd, "ccf0294e2a3bdb4aa40b24"}]}]}}}}}}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) 0s ago: executing program 1 (id=562): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00", @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r5, 0x5452, &(0x7f0000001840)=0x5d4) write$P9_RREMOVE(r5, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001a}}, 0x1c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200440d0) link(&(0x7f0000000040)='./file0\x00', 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc00) kernel console output (not intermixed with test programs): k: 36 bytes leftover after parsing attributes in process `syz.1.248'. [ 136.033797][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.051299][ T5876] usb 5-1: Product: syz [ 136.055576][ T5876] usb 5-1: Manufacturer: syz [ 136.057417][ T6965] netlink: 36 bytes leftover after parsing attributes in process `syz.1.248'. [ 136.060158][ T5876] usb 5-1: SerialNumber: syz [ 136.115462][ T30] audit: type=1400 audit(1745433848.955:367): avc: denied { mount } for pid=6947 comm="syz.0.246" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 136.115997][ T5876] usb 5-1: config 0 descriptor?? [ 136.262258][ T974] usb usb40-port1: unable to enumerate USB device [ 136.286696][ T6971] NILFS (loop2): device size too small [ 136.424831][ T6973] 9pnet: Could not find request transport: ff [ 136.526590][ T30] audit: type=1400 audit(1745433849.365:368): avc: denied { read } for pid=6977 comm="syz.3.253" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 136.641393][ T30] audit: type=1400 audit(1745433849.365:369): avc: denied { open } for pid=6977 comm="syz.3.253" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 136.907381][ T974] usb 5-1: USB disconnect, device number 12 [ 136.959438][ T30] audit: type=1400 audit(1745433849.735:370): avc: denied { bind } for pid=6977 comm="syz.3.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 137.334881][ T5824] bond0: (slave syz_tun): Releasing backup interface [ 138.178680][ T67] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.926798][ T67] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.095103][ T67] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.145868][ T7008] NILFS (loop0): device size too small [ 139.530643][ T67] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.567602][ T7014] netlink: 32 bytes leftover after parsing attributes in process `syz.2.264'. [ 139.588728][ T7014] netlink: 32 bytes leftover after parsing attributes in process `syz.2.264'. [ 139.631106][ T974] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 139.656345][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 139.667373][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 139.680274][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 139.688802][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 139.731772][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 139.801468][ T974] usb 5-1: Using ep0 maxpacket: 16 [ 139.815867][ T974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.847269][ T974] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 139.865406][ T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.311331][ T974] usb 5-1: config 0 descriptor?? [ 140.630388][ T974] usbhid 5-1:0.0: can't add hid device: -71 [ 140.646664][ T974] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 140.668866][ T974] usb 5-1: USB disconnect, device number 13 [ 140.711155][ T5877] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 140.844049][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.855904][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.868938][ T67] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 140.877497][ T5877] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.887760][ T5877] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 140.892014][ T67] bond0 (unregistering): Released all slaves [ 140.907612][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.920395][ T5877] usb 2-1: config 0 descriptor?? [ 140.927588][ T5877] pwc: Askey VC010 type 2 USB webcam detected. [ 140.983242][ T7016] lo speed is unknown, defaulting to 1000 [ 141.375669][ T5877] pwc: recv_control_msg error -32 req 02 val 2b00 [ 141.821245][ T5831] Bluetooth: hci2: command tx timeout [ 141.953281][ T974] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 141.991499][ T7016] chnl_net:caif_netlink_parms(): no params data found [ 142.052136][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 142.052149][ T30] audit: type=1400 audit(1745433854.895:381): avc: denied { append } for pid=7065 comm="syz.0.273" name="nbd0" dev="devtmpfs" ino=679 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 142.120214][ T5877] pwc: recv_control_msg error -71 req 02 val 2c00 [ 142.120587][ T67] hsr_slave_0: left promiscuous mode [ 142.127197][ T5877] pwc: recv_control_msg error -71 req 04 val 1000 [ 142.151254][ T7068] NILFS (loop2): device size too small [ 142.158834][ T5877] pwc: recv_control_msg error -71 req 04 val 1300 [ 142.171029][ T974] usb 5-1: Using ep0 maxpacket: 16 [ 142.186944][ T67] hsr_slave_1: left promiscuous mode [ 142.193458][ T974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.206280][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.224533][ T974] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.00 [ 142.241791][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.245681][ T5877] pwc: recv_control_msg error -71 req 04 val 1400 [ 142.255513][ T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.283100][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.283879][ T5877] pwc: recv_control_msg error -71 req 02 val 2000 [ 142.290519][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.301425][ T974] usb 5-1: config 0 descriptor?? [ 142.330069][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.273'. [ 142.376243][ T5877] pwc: recv_control_msg error -71 req 02 val 2100 [ 142.409862][ T67] veth1_macvtap: left promiscuous mode [ 142.410328][ T5877] pwc: recv_control_msg error -71 req 04 val 1500 [ 142.424321][ T67] veth0_macvtap: left promiscuous mode [ 142.602936][ T5877] pwc: recv_control_msg error -71 req 02 val 2500 [ 142.614667][ T974] usbhid 5-1:0.0: can't add hid device: -71 [ 142.620651][ T974] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 142.628453][ T5877] pwc: recv_control_msg error -71 req 02 val 2400 [ 142.628869][ T5877] pwc: recv_control_msg error -71 req 02 val 2600 [ 142.629212][ T5877] pwc: recv_control_msg error -71 req 02 val 2900 [ 142.629519][ T5877] pwc: recv_control_msg error -71 req 02 val 2800 [ 142.642672][ T67] veth1_vlan: left promiscuous mode [ 142.642908][ T67] ªªªªª»: left promiscuous mode [ 142.722762][ T974] usb 5-1: USB disconnect, device number 14 [ 142.887713][ T5877] pwc: recv_control_msg error -71 req 04 val 1100 [ 142.926942][ T5877] pwc: recv_control_msg error -71 req 04 val 1200 [ 142.964983][ T5877] pwc: Registered as video103. [ 142.970570][ T5877] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input22 [ 143.105892][ T5877] usb 2-1: USB disconnect, device number 7 [ 143.229245][ T7080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.274'. [ 144.102292][ T5831] Bluetooth: hci2: command tx timeout [ 144.194113][ T5877] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 144.252130][ T974] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 144.382159][ T5877] usb 1-1: Using ep0 maxpacket: 32 [ 144.390947][ T67] team0 (unregistering): Port device team_slave_1 removed [ 144.432755][ T974] usb 3-1: Using ep0 maxpacket: 32 [ 144.459444][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.528714][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.569094][ T974] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 144.609633][ T67] team0 (unregistering): Port device team_slave_0 removed [ 144.641938][ T974] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 144.689991][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.750095][ T974] usb 3-1: config 0 descriptor?? [ 145.197858][ T5877] usb 1-1: config 0 has no interfaces? [ 145.210975][ T5877] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 145.230441][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.244156][ T5877] usb 1-1: config 0 descriptor?? [ 145.409606][ T974] hid (null): invalid report_size 24940 [ 145.453830][ T974] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0003/input/input23 [ 145.915970][ T7105] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 145.970940][ T30] audit: type=1400 audit(1745433858.435:382): avc: denied { read } for pid=7088 comm="syz.2.277" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 146.046991][ T30] audit: type=1400 audit(1745433858.435:383): avc: denied { open } for pid=7088 comm="syz.2.277" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 146.058203][ T974] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0003/input/input24 [ 146.119163][ T5908] usb 1-1: USB disconnect, device number 9 [ 146.171044][ T5831] Bluetooth: hci2: command tx timeout [ 146.429827][ T974] kye 0003:0458:5011.0003: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 146.593440][ T7080] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 146.604608][ T7089] macvlan0: entered allmulticast mode [ 146.629544][ T7089] veth1_vlan: entered allmulticast mode [ 146.803293][ T5908] usb 3-1: USB disconnect, device number 7 [ 146.880348][ T7016] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.888204][ T7016] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.898623][ T7016] bridge_slave_0: entered allmulticast mode [ 146.906783][ T7016] bridge_slave_0: entered promiscuous mode [ 146.926136][ T7016] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.951814][ T7016] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.959979][ T7016] bridge_slave_1: entered allmulticast mode [ 146.967598][ T7016] bridge_slave_1: entered promiscuous mode [ 147.550328][ T7016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.568746][ T7016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.357574][ T5831] Bluetooth: hci2: command tx timeout [ 148.363270][ T5838] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 148.374605][ T5838] Bluetooth: hci0: Injecting HCI hardware error event [ 148.385485][ T5831] Bluetooth: hci0: hardware error 0x00 [ 148.866931][ T7016] team0: Port device team_slave_0 added [ 149.078751][ T7151] delete_channel: no stack [ 149.345784][ T7016] team0: Port device team_slave_1 added [ 149.377798][ T7153] NILFS (loop1): device size too small [ 149.386866][ T7154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.288'. [ 149.452021][ T7016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.493537][ T7016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.614858][ T7016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.642719][ T7016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.649679][ T7016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.695940][ T7016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.217226][ T7016] hsr_slave_0: entered promiscuous mode [ 150.230568][ T7016] hsr_slave_1: entered promiscuous mode [ 150.871045][ T5831] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 150.875489][ T7016] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 150.916530][ T7016] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 150.966545][ T7016] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 151.007654][ T7016] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 151.140497][ T7181] netlink: 'syz.4.292': attribute type 10 has an invalid length. [ 151.329521][ T7181] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.336891][ T7181] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.436473][ T7016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.460808][ T7016] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.486829][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.494042][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.535827][ T3009] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.543004][ T3009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.612291][ T971] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 151.702999][ T7016] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 151.713774][ T7016] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.946151][ T7209] netlink: 'syz.2.296': attribute type 10 has an invalid length. [ 151.977704][ T7209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.000829][ T7210] netlink: 'syz.2.296': attribute type 30 has an invalid length. [ 152.022117][ T7209] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 152.031114][ T7210] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 152.040224][ T7210] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 152.216435][ T971] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 152.240622][ T971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.294305][ T7016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.340951][ T971] usb 2-1: Product: syz [ 152.345168][ T971] usb 2-1: Manufacturer: syz [ 152.349776][ T971] usb 2-1: SerialNumber: syz [ 152.364787][ T971] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 152.387392][ T30] audit: type=1400 audit(1745433865.225:384): avc: denied { firmware_load } for pid=5875 comm="kworker/1:4" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=287 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 152.429557][ T5875] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 152.622565][ T7220] capability: warning: `syz.4.298' uses deprecated v2 capabilities in a way that may be insecure [ 152.641099][ T5876] usb 2-1: USB disconnect, device number 8 [ 153.026636][ T7232] input: syz0 as /devices/virtual/input/input25 [ 153.381082][ T30] audit: type=1400 audit(1745433865.695:385): avc: denied { create } for pid=7217 comm="syz.4.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 153.480612][ T30] audit: type=1400 audit(1745433865.695:386): avc: denied { getopt } for pid=7217 comm="syz.4.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 153.581725][ T5875] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 153.588893][ T5875] ath9k_htc: Failed to initialize the device [ 153.711363][ T5876] usb 2-1: ath9k_htc: USB layer deinitialized [ 153.768876][ T7016] veth0_vlan: entered promiscuous mode [ 153.780016][ T7016] veth1_vlan: entered promiscuous mode [ 154.211169][ T5876] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 154.413205][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.454994][ T7016] veth0_macvtap: entered promiscuous mode [ 154.472575][ T7016] veth1_macvtap: entered promiscuous mode [ 154.575156][ T30] audit: type=1400 audit(1745433867.415:387): avc: denied { create } for pid=7250 comm="syz.1.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 154.615170][ T7251] netlink: 'syz.1.303': attribute type 29 has an invalid length. [ 154.630158][ T7016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.654767][ T30] audit: type=1400 audit(1745433867.445:388): avc: denied { write } for pid=7250 comm="syz.1.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 154.654844][ T5876] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 154.681118][ T7016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.697912][ T5876] usb 3-1: config 0 has no interface number 0 [ 154.719257][ T5876] usb 3-1: config 0 interface 4 has no altsetting 0 [ 154.720935][ T7016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.755697][ T7256] NILFS (loop4): device size too small [ 154.784185][ T5876] usb 3-1: New USB device found, idVendor=12d1, idProduct=b1e9, bcdDevice=c4.a1 [ 154.784226][ T7016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.802627][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.837109][ T5876] usb 3-1: Product: syz [ 154.848827][ T7016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.849197][ T5876] usb 3-1: Manufacturer: syz [ 154.865629][ T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.869600][ T7016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.888569][ T7016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.907820][ T5876] usb 3-1: SerialNumber: syz [ 154.917882][ T7016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.927021][ T5876] usb 3-1: config 0 descriptor?? [ 154.929783][ T7016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.965416][ T7258] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 154.982731][ T7016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.997080][ T7016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.013752][ T7016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.025228][ T7016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.036433][ T7016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.047301][ T7016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.057509][ T7016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.075683][ T7016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.087246][ T7016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.108022][ T7016] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.141632][ T7016] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.160650][ T7016] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.178140][ T7016] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.399574][ T7101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.421450][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.441187][ T7101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.468423][ T30] audit: type=1400 audit(1745433868.295:389): avc: denied { create } for pid=7242 comm="syz.2.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 156.024470][ T30] audit: type=1400 audit(1745433868.305:390): avc: denied { getopt } for pid=7242 comm="syz.2.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 156.055648][ T3009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.064839][ T3009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.118592][ T30] audit: type=1400 audit(1745433868.955:391): avc: denied { mounton } for pid=7016 comm="syz-executor" path="/root/syzkaller.zDg7fz/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 156.230249][ T7279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.308'. [ 156.481348][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.489720][ T30] audit: type=1400 audit(1745433869.015:392): avc: denied { mount } for pid=7016 comm="syz-executor" name="/" dev="gadgetfs" ino=5921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 156.520406][ T30] audit: type=1400 audit(1745433869.065:393): avc: denied { nlmsg_read } for pid=7278 comm="syz.0.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 156.931117][ T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.055101][ T5876] option 3-1:0.4: GSM modem (1-port) converter detected [ 157.251382][ T5876] usb 3-1: USB disconnect, device number 8 [ 157.258548][ T5876] option 3-1:0.4: device disconnected [ 157.833871][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.859945][ T7306] tipc: Started in network mode [ 157.870207][ T7306] tipc: Node identity 7218cd1359f3, cluster identity 4711 [ 157.878368][ T7306] tipc: Enabled bearer , priority 0 [ 158.029754][ T7295] syzkaller0: entered promiscuous mode [ 158.037900][ T7295] syzkaller0: entered allmulticast mode [ 158.047931][ T7295] tipc: Resetting bearer [ 158.081006][ T5875] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 158.130164][ T7313] FAULT_INJECTION: forcing a failure. [ 158.130164][ T7313] name failslab, interval 1, probability 0, space 0, times 0 [ 158.143170][ T7313] CPU: 1 UID: 0 PID: 7313 Comm: syz.0.313 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 158.143192][ T7313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 158.143202][ T7313] Call Trace: [ 158.143207][ T7313] [ 158.143213][ T7313] dump_stack_lvl+0x16c/0x1f0 [ 158.143241][ T7313] should_fail_ex+0x512/0x640 [ 158.143262][ T7313] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 158.143291][ T7313] should_failslab+0xc2/0x120 [ 158.143309][ T7313] __kmalloc_cache_noprof+0x6a/0x3e0 [ 158.143337][ T7313] ? do_raw_spin_lock+0x12c/0x2b0 [ 158.143356][ T7313] ? tcp_sendmsg_fastopen+0x24d/0x750 [ 158.143386][ T7313] tcp_sendmsg_fastopen+0x24d/0x750 [ 158.143416][ T7313] mptcp_sendmsg+0x1432/0x1e00 [ 158.143442][ T7313] ? sock_has_perm+0x259/0x2f0 [ 158.143461][ T7313] ? __pfx_sock_has_perm+0x10/0x10 [ 158.143482][ T7313] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 158.143508][ T7313] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 158.143533][ T7313] ? __fget_files+0x20e/0x3c0 [ 158.143548][ T7313] ? __print_lock_name+0xb0/0xe0 [ 158.143569][ T7313] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 158.143591][ T7313] inet6_sendmsg+0x119/0x140 [ 158.143611][ T7313] __sys_sendto+0x37d/0x510 [ 158.143630][ T7313] ? __pfx___sys_sendto+0x10/0x10 [ 158.143670][ T7313] ? ksys_write+0x1b9/0x240 [ 158.143684][ T7313] ? __pfx_ksys_write+0x10/0x10 [ 158.143702][ T7313] __x64_sys_sendto+0xe0/0x1c0 [ 158.143719][ T7313] ? do_syscall_64+0x91/0x260 [ 158.143740][ T7313] ? lockdep_hardirqs_on+0x7c/0x110 [ 158.143761][ T7313] do_syscall_64+0xcd/0x260 [ 158.143785][ T7313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.143802][ T7313] RIP: 0033:0x7f48bdd8e969 [ 158.143815][ T7313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.143831][ T7313] RSP: 002b:00007f48bec11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 158.143847][ T7313] RAX: ffffffffffffffda RBX: 00007f48bdfb6160 RCX: 00007f48bdd8e969 [ 158.143858][ T7313] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 158.143867][ T7313] RBP: 00007f48bec11090 R08: 0000000000000000 R09: 0000000000000000 [ 158.143876][ T7313] R10: 0000000000044810 R11: 0000000000000246 R12: 0000000000000001 [ 158.143885][ T7313] R13: 0000000000000000 R14: 00007f48bdfb6160 R15: 00007fff8bffbb38 [ 158.143909][ T7313] [ 158.382912][ T5908] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 158.406546][ T1089] tipc: Resetting bearer [ 158.450992][ T5872] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 158.540975][ T5875] usb 2-1: Using ep0 maxpacket: 16 [ 158.541080][ T5908] usb 5-1: Using ep0 maxpacket: 16 [ 158.558393][ T5875] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.559198][ T5908] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 158.568550][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 158.568578][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 158.579341][ T5908] usb 5-1: config 0 has no interface number 0 [ 158.587507][ T5875] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 158.587533][ T5875] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.612024][ T5875] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 158.637425][ T5875] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 158.645465][ T5875] usb 2-1: Manufacturer: syz [ 158.656118][ T5908] usb 5-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 158.660722][ T5875] usb 2-1: config 0 descriptor?? [ 158.674731][ T5872] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 158.684442][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.695421][ T5908] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 158.706877][ T5872] usb 3-1: Product: syz [ 158.714595][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 158.728753][ T5872] usb 3-1: Manufacturer: syz [ 158.736253][ T5872] usb 3-1: SerialNumber: syz [ 158.741007][ T5908] usb 5-1: Product: syz [ 158.745614][ T5908] usb 5-1: SerialNumber: syz [ 158.756051][ T5872] usb 3-1: config 0 descriptor?? [ 158.770016][ T5908] usb 5-1: config 0 descriptor?? [ 158.809841][ T5908] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 158.865485][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.973672][ T5872] tipc: Node number set to 736873747 [ 159.009470][ T5872] usb 3-1: USB disconnect, device number 9 [ 159.111184][ T7294] tipc: Resetting bearer [ 159.307674][ T7334] input: syz0 as /devices/virtual/input/input26 [ 159.515954][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 159.516018][ T30] audit: type=1400 audit(1745433872.355:395): avc: denied { listen } for pid=7299 comm="syz.4.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 159.686962][ T5876] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 159.863145][ T5876] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 159.873409][ T5876] usb 6-1: config 0 has no interface number 0 [ 159.879937][ T5876] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 159.899631][ T5876] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 159.935515][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.939490][ T5876] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 160.022932][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.059002][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.089579][ T5876] usb 6-1: Product: syz [ 160.108617][ T5876] usb 6-1: Manufacturer: syz [ 160.137888][ T5876] usb 6-1: SerialNumber: syz [ 160.269103][ T5876] usb 6-1: config 0 descriptor?? [ 160.470466][ T7332] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 160.517448][ T5876] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 160.581245][ T30] audit: type=1400 audit(1745433873.415:396): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 160.602828][ T5875] rc_core: IR keymap rc-hauppauge not found [ 160.734478][ T5875] Registered IR keymap rc-empty [ 160.739751][ T5875] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 160.771024][ T5875] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 160.792618][ T5875] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 160.814783][ T5875] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input27 [ 160.835808][ T5875] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 160.871069][ T5875] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 160.891062][ T7352] input: syz0 as /devices/virtual/input/input28 [ 160.928777][ T5875] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 161.016489][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.019488][ T30] audit: type=1400 audit(1745433873.805:397): avc: denied { kexec_image_load } for pid=7346 comm="syz.0.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 161.055085][ T5875] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 161.071496][ T5875] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 161.091476][ T5875] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 161.115616][ T30] audit: type=1400 audit(1745433873.955:398): avc: denied { connect } for pid=7331 comm="syz.5.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 161.123830][ T5875] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 161.142279][ T5872] usb 5-1: USB disconnect, device number 15 [ 161.339553][ T5876] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 161.354398][ T5875] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 161.405151][ T5875] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 161.443814][ T5875] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 161.474863][ T5875] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 161.509883][ T5875] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 161.512392][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.530786][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.541200][ T5875] usb 2-1: USB disconnect, device number 9 [ 161.565653][ T5876] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 161.589497][ T5876] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 161.605394][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.638650][ T5876] usb 1-1: config 0 descriptor?? [ 161.846538][ T7362] NILFS (loop4): device size too small [ 162.325018][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.347233][ T5876] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 162.380641][ T5876] plantronics 0003:047F:FFFF.0004: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 162.541942][ T5876] usb 1-1: USB disconnect, device number 10 [ 162.765875][ T7294] tipc: Disabling bearer [ 162.860056][ T5875] usb 6-1: USB disconnect, device number 2 [ 162.874290][ T5875] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 162.924912][ T7367] SELinux: policydb version 1785027157 does not match my version range 15-34 [ 162.935663][ T30] audit: type=1400 audit(1745433875.765:399): avc: denied { load_policy } for pid=7366 comm="syz.4.324" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 162.962248][ T7367] SELinux: failed to load policy [ 162.989469][ T7372] netlink: 8 bytes leftover after parsing attributes in process `syz.5.326'. [ 163.001791][ T7367] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 163.023073][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.046557][ T7367] SELinux: failed to load policy [ 163.755637][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.161609][ T7393] veth0_vlan: entered allmulticast mode [ 164.239789][ T7393] veth0_vlan: left promiscuous mode [ 164.256806][ T7393] veth0_vlan: entered promiscuous mode [ 164.448784][ T7393] lo speed is unknown, defaulting to 1000 [ 164.462154][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.570361][ T30] audit: type=1400 audit(1745433877.405:400): avc: denied { append } for pid=7395 comm="syz.1.332" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 164.803303][ T30] audit: type=1400 audit(1745433877.645:401): avc: denied { write } for pid=7395 comm="syz.1.332" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 164.824248][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.912405][ T7399] bridge_slave_1: left allmulticast mode [ 165.019213][ T7399] bridge_slave_1: left promiscuous mode [ 165.027714][ T7399] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.235447][ T7415] input: syz0 as /devices/virtual/input/input29 [ 165.668627][ T7412] NILFS (loop0): device size too small [ 165.793932][ T7399] bridge_slave_0: left allmulticast mode [ 165.832764][ T7399] bridge_slave_0: left promiscuous mode [ 165.846573][ T7399] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.909623][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.921475][ T7399] bond0: (slave bridge0): Releasing backup interface [ 166.075858][ T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.135258][ T6601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.488412][ T7427] netlink: 56 bytes leftover after parsing attributes in process `syz.1.338'. [ 167.829652][ T7444] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=7444 comm=syz.1.338 [ 168.161127][ T6601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.572182][ T30] audit: type=1400 audit(1745433881.225:402): avc: denied { write } for pid=7450 comm="syz.0.342" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 168.831248][ T974] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 169.275695][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.303909][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.362861][ T7425] lo speed is unknown, defaulting to 1000 [ 169.380405][ T30] audit: type=1400 audit(1745433881.295:403): avc: denied { bind } for pid=7450 comm="syz.0.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 169.431845][ T974] usb 6-1: Using ep0 maxpacket: 32 [ 169.448253][ T974] usb 6-1: config 0 has no interfaces? [ 169.464381][ T974] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 169.466347][ T30] audit: type=1400 audit(1745433881.295:404): avc: denied { write } for pid=7450 comm="syz.0.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 169.501129][ T974] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.544825][ T974] usb 6-1: config 0 descriptor?? [ 169.555665][ T7462] netlink: 'syz.0.346': attribute type 4 has an invalid length. [ 170.109801][ T7473] netlink: 28 bytes leftover after parsing attributes in process `syz.5.345'. [ 170.223652][ T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.413445][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.563390][ T974] usb 6-1: USB disconnect, device number 3 [ 170.685863][ T7484] netlink: 'syz.4.349': attribute type 10 has an invalid length. [ 170.706148][ T7484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.724401][ T7484] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 170.738493][ T7484] netlink: 'syz.4.349': attribute type 30 has an invalid length. [ 170.746876][ T7484] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 170.756051][ T7484] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 170.984203][ T7485] FAULT_INJECTION: forcing a failure. [ 170.984203][ T7485] name failslab, interval 1, probability 0, space 0, times 0 [ 171.000257][ T7485] CPU: 0 UID: 0 PID: 7485 Comm: syz.2.350 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 171.000281][ T7485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 171.000291][ T7485] Call Trace: [ 171.000297][ T7485] [ 171.000304][ T7485] dump_stack_lvl+0x16c/0x1f0 [ 171.000333][ T7485] should_fail_ex+0x512/0x640 [ 171.000351][ T7485] ? fs_reclaim_acquire+0xae/0x150 [ 171.000384][ T7485] ? tomoyo_encode2+0x100/0x3e0 [ 171.000406][ T7485] should_failslab+0xc2/0x120 [ 171.000425][ T7485] __kmalloc_noprof+0xd2/0x510 [ 171.000442][ T7485] ? d_absolute_path+0x136/0x1a0 [ 171.000468][ T7485] tomoyo_encode2+0x100/0x3e0 [ 171.000495][ T7485] tomoyo_encode+0x29/0x50 [ 171.000517][ T7485] tomoyo_realpath_from_path+0x18f/0x6e0 [ 171.000547][ T7485] tomoyo_path_number_perm+0x245/0x580 [ 171.000567][ T7485] ? tomoyo_path_number_perm+0x237/0x580 [ 171.000589][ T7485] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 171.000612][ T7485] ? find_held_lock+0x2b/0x80 [ 171.000654][ T7485] ? find_held_lock+0x2b/0x80 [ 171.000673][ T7485] ? hook_file_ioctl_common+0x145/0x410 [ 171.000694][ T7485] ? __fget_files+0x20e/0x3c0 [ 171.000713][ T7485] security_file_ioctl+0x9b/0x240 [ 171.000736][ T7485] __x64_sys_ioctl+0xb7/0x200 [ 171.000759][ T7485] do_syscall_64+0xcd/0x260 [ 171.000781][ T7485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.000798][ T7485] RIP: 0033:0x7f4566d8e969 [ 171.000812][ T7485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.000826][ T7485] RSP: 002b:00007f4567c56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.000842][ T7485] RAX: ffffffffffffffda RBX: 00007f4566fb5fa0 RCX: 00007f4566d8e969 [ 171.000852][ T7485] RDX: 00002000000001c0 RSI: 0000000040505330 RDI: 0000000000000003 [ 171.000862][ T7485] RBP: 00007f4567c56090 R08: 0000000000000000 R09: 0000000000000000 [ 171.000871][ T7485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.000883][ T7485] R13: 0000000000000000 R14: 00007f4566fb5fa0 R15: 00007ffe810ad028 [ 171.000904][ T7485] [ 171.079993][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.223252][ T7485] ERROR: Out of memory at tomoyo_realpath_from_path. [ 171.448293][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.544695][ T7494] NILFS (nullb0): couldn't find nilfs on the device [ 171.822154][ T7496] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48482 sclass=netlink_audit_socket pid=7496 comm=syz.2.353 [ 171.822535][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.998129][ T7505] netlink: 'syz.1.357': attribute type 4 has an invalid length. [ 172.017049][ T7505] netlink: 17 bytes leftover after parsing attributes in process `syz.1.357'. [ 172.141059][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.461413][ T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.591407][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.851107][ T7519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.359'. [ 173.192255][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.298409][ T7526] input input30: cannot allocate more than FF_MAX_EFFECTS effects [ 173.352651][ T30] audit: type=1400 audit(1745433886.175:405): avc: denied { watch watch_reads } for pid=7524 comm="syz.4.361" path="/68" dev="tmpfs" ino=386 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 173.640973][ T5876] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 173.666002][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.704094][ T7529] syz_tun: entered allmulticast mode [ 174.095223][ T7529] netlink: 28 bytes leftover after parsing attributes in process `syz.0.362'. [ 174.301063][ T7539] netlink: 28 bytes leftover after parsing attributes in process `syz.0.362'. [ 174.691428][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.631102][ T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.675754][ T7528] syz_tun: left allmulticast mode [ 175.731695][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 175.812345][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.860645][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.892449][ T5876] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 175.917652][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.961624][ T5876] usb 2-1: config 0 descriptor?? [ 175.970815][ T5876] usb 2-1: can't set config #0, error -71 [ 176.026230][ T5876] usb 2-1: USB disconnect, device number 10 [ 176.071380][ T30] audit: type=1400 audit(1745433888.905:406): avc: denied { connect } for pid=7551 comm="syz.1.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 176.162761][ T30] audit: type=1400 audit(1745433888.935:407): avc: denied { sys_chroot } for pid=7550 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 176.403950][ T30] audit: type=1400 audit(1745433888.935:408): avc: denied { setgid } for pid=7550 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 176.410612][ T7566] input: syz0 as /devices/virtual/input/input31 [ 176.425338][ T30] audit: type=1400 audit(1745433888.935:409): avc: denied { setrlimit } for pid=7550 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 176.451933][ T30] audit: type=1400 audit(1745433889.085:410): avc: denied { ioctl } for pid=7555 comm="syz.4.366" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 176.734885][ T7571] delete_channel: no stack [ 176.895897][ T5877] net_ratelimit: 5 callbacks suppressed [ 176.895913][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.910001][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.676120][ T30] audit: type=1400 audit(1745433890.505:411): avc: denied { write } for pid=7579 comm="syz.4.373" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 177.760735][ T30] audit: type=1400 audit(1745433890.535:412): avc: denied { bind } for pid=7579 comm="syz.4.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 177.795051][ T30] audit: type=1400 audit(1745433890.535:413): avc: denied { listen } for pid=7579 comm="syz.4.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 177.914854][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.992224][ T6601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.089952][ T7593] input: syz0 as /devices/virtual/input/input32 [ 178.452750][ T7596] FAULT_INJECTION: forcing a failure. [ 178.452750][ T7596] name failslab, interval 1, probability 0, space 0, times 0 [ 178.508071][ T7596] CPU: 0 UID: 0 PID: 7596 Comm: syz.5.377 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 178.508095][ T7596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 178.508104][ T7596] Call Trace: [ 178.508109][ T7596] [ 178.508115][ T7596] dump_stack_lvl+0x16c/0x1f0 [ 178.508140][ T7596] should_fail_ex+0x512/0x640 [ 178.508155][ T7596] ? fs_reclaim_acquire+0xae/0x150 [ 178.508174][ T7596] ? tomoyo_encode2+0x100/0x3e0 [ 178.508193][ T7596] should_failslab+0xc2/0x120 [ 178.508208][ T7596] __kmalloc_noprof+0xd2/0x510 [ 178.508221][ T7596] ? d_absolute_path+0x136/0x1a0 [ 178.508241][ T7596] tomoyo_encode2+0x100/0x3e0 [ 178.508263][ T7596] tomoyo_encode+0x29/0x50 [ 178.508281][ T7596] tomoyo_realpath_from_path+0x18f/0x6e0 [ 178.508307][ T7596] tomoyo_path_number_perm+0x245/0x580 [ 178.508324][ T7596] ? tomoyo_path_number_perm+0x237/0x580 [ 178.508343][ T7596] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 178.508361][ T7596] ? find_held_lock+0x2b/0x80 [ 178.508399][ T7596] ? find_held_lock+0x2b/0x80 [ 178.508416][ T7596] ? hook_file_ioctl_common+0x145/0x410 [ 178.508435][ T7596] ? __fget_files+0x20e/0x3c0 [ 178.508453][ T7596] security_file_ioctl+0x9b/0x240 [ 178.508476][ T7596] __x64_sys_ioctl+0xb7/0x200 [ 178.508499][ T7596] do_syscall_64+0xcd/0x260 [ 178.508522][ T7596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.508538][ T7596] RIP: 0033:0x7f3488d8e969 [ 178.508551][ T7596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.508565][ T7596] RSP: 002b:00007f3489b75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.508580][ T7596] RAX: ffffffffffffffda RBX: 00007f3488fb5fa0 RCX: 00007f3488d8e969 [ 178.508591][ T7596] RDX: 0000200000001ac0 RSI: 000000008038550a RDI: 0000000000000003 [ 178.508601][ T7596] RBP: 00007f3489b75090 R08: 0000000000000000 R09: 0000000000000000 [ 178.508610][ T7596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.508619][ T7596] R13: 0000000000000000 R14: 00007f3488fb5fa0 R15: 00007ffe5a70c6c8 [ 178.508638][ T7596] [ 178.508654][ T7596] ERROR: Out of memory at tomoyo_realpath_from_path. [ 178.727634][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.736027][ T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.785219][ T7596] usb usb8: usbfs: process 7596 (syz.5.377) did not claim interface 0 before use [ 178.831630][ T81] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 178.947849][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.021930][ T81] usb 1-1: Using ep0 maxpacket: 32 [ 179.034044][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.043829][ T81] usb 1-1: config 0 has no interfaces? [ 179.049457][ T81] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 179.075639][ T81] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.168760][ T81] usb 1-1: config 0 descriptor?? [ 179.631426][ T7622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.364'. [ 179.822354][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.908826][ T81] usb 1-1: USB disconnect, device number 11 [ 180.076163][ T6601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.210142][ T30] audit: type=1400 audit(1745433893.035:414): avc: denied { remount } for pid=7631 comm="syz.5.383" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 180.405681][ T30] audit: type=1400 audit(1745433893.235:415): avc: denied { append } for pid=7638 comm="syz.5.387" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 180.648165][ T7644] FAULT_INJECTION: forcing a failure. [ 180.648165][ T7644] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 180.661340][ T7644] CPU: 0 UID: 0 PID: 7644 Comm: syz.1.384 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 180.661363][ T7644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 180.661373][ T7644] Call Trace: [ 180.661379][ T7644] [ 180.661386][ T7644] dump_stack_lvl+0x16c/0x1f0 [ 180.661414][ T7644] should_fail_ex+0x512/0x640 [ 180.661437][ T7644] strncpy_from_user+0x3b/0x2e0 [ 180.661457][ T7644] getname_flags.part.0+0x8f/0x550 [ 180.661479][ T7644] ? rcu_is_watching+0x12/0xc0 [ 180.661503][ T7644] getname_flags+0x93/0xf0 [ 180.661529][ T7644] __x64_sys_link+0x58/0xa0 [ 180.661548][ T7644] do_syscall_64+0xcd/0x260 [ 180.661573][ T7644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.661590][ T7644] RIP: 0033:0x7f553398e969 [ 180.661604][ T7644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.661620][ T7644] RSP: 002b:00007f5534831038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 180.661637][ T7644] RAX: ffffffffffffffda RBX: 00007f5533bb6160 RCX: 00007f553398e969 [ 180.661648][ T7644] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000200000000200 [ 180.661658][ T7644] RBP: 00007f5534831090 R08: 0000000000000000 R09: 0000000000000000 [ 180.661667][ T7644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.661676][ T7644] R13: 0000000000000000 R14: 00007f5533bb6160 R15: 00007ffe8c721248 [ 180.661698][ T7644] [ 180.666431][ T7644] evm: overlay not supported [ 181.570303][ T5908] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 181.585518][ T30] audit: type=1400 audit(1745433894.385:416): avc: denied { ioctl } for pid=7638 comm="syz.5.387" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 181.761309][ T5908] usb 5-1: Using ep0 maxpacket: 32 [ 181.788434][ T5908] usb 5-1: config 0 has no interfaces? [ 181.808377][ T5908] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 182.090749][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.225165][ T5908] usb 5-1: config 0 descriptor?? [ 182.527995][ T30] audit: type=1400 audit(1745433895.345:417): avc: denied { setopt } for pid=7668 comm="syz.5.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 182.634660][ T971] net_ratelimit: 5 callbacks suppressed [ 182.634677][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.636640][ T5908] usb 5-1: USB disconnect, device number 16 [ 182.640478][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.700248][ T7675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.709263][ T7675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.717954][ T7675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.741369][ T7675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.749880][ T7675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.204507][ T6601] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 183.444170][ T7681] FAULT_INJECTION: forcing a failure. [ 183.444170][ T7681] name failslab, interval 1, probability 0, space 0, times 0 [ 183.456990][ T7681] CPU: 0 UID: 0 PID: 7681 Comm: syz.0.393 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 183.457004][ T7681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 183.457011][ T7681] Call Trace: [ 183.457015][ T7681] [ 183.457019][ T7681] dump_stack_lvl+0x16c/0x1f0 [ 183.457038][ T7681] should_fail_ex+0x512/0x640 [ 183.457049][ T7681] ? __kmalloc_noprof+0xbf/0x510 [ 183.457061][ T7681] ? sock_kmalloc+0x111/0x170 [ 183.457075][ T7681] should_failslab+0xc2/0x120 [ 183.457087][ T7681] __kmalloc_noprof+0xd2/0x510 [ 183.457096][ T7681] ? do_raw_spin_lock+0x12c/0x2b0 [ 183.457112][ T7681] sock_kmalloc+0x111/0x170 [ 183.457127][ T7681] hash_alloc_result+0xd7/0x150 [ 183.457142][ T7681] hash_recvmsg+0x198/0x920 [ 183.457159][ T7681] ____sys_recvmsg+0x5f6/0x6b0 [ 183.457177][ T7681] ? __pfx_____sys_recvmsg+0x10/0x10 [ 183.457197][ T7681] ? kfree+0x252/0x4d0 [ 183.457211][ T7681] ? __lock_acquire+0x5ca/0x1ba0 [ 183.457223][ T7681] ___sys_recvmsg+0x114/0x1a0 [ 183.457235][ T7681] ? __pfx____sys_recvmsg+0x10/0x10 [ 183.457255][ T7681] ? __pfx___might_resched+0x10/0x10 [ 183.457273][ T7681] do_recvmmsg+0x2fe/0x740 [ 183.457287][ T7681] ? __pfx_do_recvmmsg+0x10/0x10 [ 183.457302][ T7681] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 183.457321][ T7681] ? __fget_files+0x20e/0x3c0 [ 183.457334][ T7681] __x64_sys_recvmmsg+0x22a/0x280 [ 183.457348][ T7681] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 183.457360][ T7681] ? rcu_is_watching+0x12/0xc0 [ 183.457376][ T7681] do_syscall_64+0xcd/0x260 [ 183.457393][ T7681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.457403][ T7681] RIP: 0033:0x7f48bdd8e969 [ 183.457412][ T7681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.457422][ T7681] RSP: 002b:00007f48bec53038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 183.457431][ T7681] RAX: ffffffffffffffda RBX: 00007f48bdfb5fa0 RCX: 00007f48bdd8e969 [ 183.457438][ T7681] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000005 [ 183.457444][ T7681] RBP: 00007f48bec53090 R08: 0000000000000000 R09: 0000000000000000 [ 183.457449][ T7681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 183.457455][ T7681] R13: 0000000000000000 R14: 00007f48bdfb5fa0 R15: 00007fff8bffbb38 [ 183.457468][ T7681] [ 183.465680][ T6601] usb 6-1: config 4 has an invalid interface number: 118 but max is 0 [ 183.669123][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.720716][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.728975][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.740059][ T6601] usb 6-1: config 4 has no interface number 0 [ 183.750966][ T6601] usb 6-1: config 4 interface 118 has no altsetting 0 [ 183.757765][ T6601] usb 6-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=b0.71 [ 183.768101][ T6601] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.776357][ T7687] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 183.797301][ T30] audit: type=1400 audit(1745433896.635:418): avc: denied { connect } for pid=7685 comm="syz.2.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 183.897022][ T30] audit: type=1400 audit(1745433896.685:419): avc: denied { getopt } for pid=7689 comm="syz.1.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 183.967978][ T30] audit: type=1400 audit(1745433896.805:420): avc: denied { setattr } for pid=7696 comm="syz.0.399" name="" dev="pipefs" ino=14722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 184.033301][ T7699] FAULT_INJECTION: forcing a failure. [ 184.033301][ T7699] name failslab, interval 1, probability 0, space 0, times 0 [ 184.051097][ T7699] CPU: 0 UID: 0 PID: 7699 Comm: syz.4.400 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 184.051121][ T7699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 184.051131][ T7699] Call Trace: [ 184.051136][ T7699] [ 184.051142][ T7699] dump_stack_lvl+0x16c/0x1f0 [ 184.051171][ T7699] should_fail_ex+0x512/0x640 [ 184.051189][ T7699] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 184.051208][ T7699] should_failslab+0xc2/0x120 [ 184.051224][ T7699] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 184.051237][ T7699] ? __alloc_skb+0x2b2/0x380 [ 184.051256][ T7699] __alloc_skb+0x2b2/0x380 [ 184.051270][ T7699] ? __pfx___alloc_skb+0x10/0x10 [ 184.051287][ T7699] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 184.051308][ T7699] netlink_alloc_large_skb+0x69/0x130 [ 184.051327][ T7699] netlink_sendmsg+0x6a1/0xdd0 [ 184.051348][ T7699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.051373][ T7699] ____sys_sendmsg+0xa95/0xc70 [ 184.051393][ T7699] ? copy_msghdr_from_user+0x10a/0x160 [ 184.051408][ T7699] ? __pfx_____sys_sendmsg+0x10/0x10 [ 184.051436][ T7699] ___sys_sendmsg+0x134/0x1d0 [ 184.051453][ T7699] ? __pfx____sys_sendmsg+0x10/0x10 [ 184.051491][ T7699] __sys_sendmsg+0x16d/0x220 [ 184.051507][ T7699] ? __pfx___sys_sendmsg+0x10/0x10 [ 184.051528][ T7699] ? rcu_is_watching+0x12/0xc0 [ 184.051550][ T7699] do_syscall_64+0xcd/0x260 [ 184.051569][ T7699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.051583][ T7699] RIP: 0033:0x7f9044d8e969 [ 184.051594][ T7699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.051607][ T7699] RSP: 002b:00007f9045c60038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.051621][ T7699] RAX: ffffffffffffffda RBX: 00007f9044fb5fa0 RCX: 00007f9044d8e969 [ 184.051629][ T7699] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 184.051637][ T7699] RBP: 00007f9045c60090 R08: 0000000000000000 R09: 0000000000000000 [ 184.051644][ T7699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.051652][ T7699] R13: 0000000000000000 R14: 00007f9044fb5fa0 R15: 00007ffc13196a68 [ 184.051669][ T7699] [ 184.271228][ T30] audit: type=1400 audit(1745433896.895:421): avc: denied { map } for pid=7668 comm="syz.5.392" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 184.294776][ T30] audit: type=1400 audit(1745433896.895:422): avc: denied { execute } for pid=7668 comm="syz.5.392" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 184.365872][ T7701] netlink: 'syz.4.402': attribute type 4 has an invalid length. [ 184.373802][ T7701] netlink: 17 bytes leftover after parsing attributes in process `syz.4.402'. [ 184.390948][ T6601] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 184.571106][ T6601] usb 1-1: Using ep0 maxpacket: 16 [ 184.585141][ T6601] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 184.616193][ T5908] usb 6-1: USB disconnect, device number 4 [ 184.665531][ T6601] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 184.679864][ T6601] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 184.697458][ T6601] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 184.721365][ T6601] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.762845][ T7713] input: syz0 as /devices/virtual/input/input33 [ 185.143578][ T6601] usb 1-1: Product: Ь [ 185.159944][ T6601] usb 1-1: Manufacturer: 鞽齷ì¹åž·ì˜°é¨ä¥¾æ ³ã”ºî¯¦ç®¦ï½žêŽ«ï«Žìœ„䟼⇪ମæ£à¿„숭市ἤᚃ颥帄幾ꪵɮ祈ꥺî‡ë•‘䲷ňâ·æ®–莕賛ӌᴣ㔃떳ܲ촜ڵ涇뜓è¶âšˆà´»ã—ႅᩑ⅄赡ฯ緇æˆè›¶å½ŸÃ›å¤·î°©ê—³æ¨‰â‚‹â¦§æ½¸ï¸žã…¿äž”ê¡ë ‹ë¾«è›à ¡çˆ–⒤繮â’ꎈ诋爫㠘æ軲 [ 185.256878][ T6601] usb 1-1: SerialNumber: syz [ 185.431601][ T974] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 185.480656][ T30] audit: type=1400 audit(1745433898.315:423): avc: denied { getopt } for pid=7721 comm="syz.4.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 185.518438][ T7697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.527165][ T7697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.633870][ T30] audit: type=1400 audit(1745433898.345:424): avc: denied { lock } for pid=7696 comm="syz.0.399" path="/dev/ocfs2_control" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 185.657351][ C0] vkms_vblank_simulate: vblank timer overrun [ 185.747535][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 185.762299][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 185.765682][ T974] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 185.768989][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 185.875776][ T974] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.878182][ T6601] usb 1-1: 0:2 : does not exist [ 185.933492][ T974] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 185.936348][ T6601] usb 1-1: USB disconnect, device number 12 [ 186.021085][ T974] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 186.164682][ T974] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 186.198207][ T974] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 186.219358][ T7731] SET target dimension over the limit! [ 186.248605][ T30] audit: type=1400 audit(1745433899.075:425): avc: denied { append } for pid=7724 comm="syz.5.408" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 186.271501][ C0] vkms_vblank_simulate: vblank timer overrun [ 186.281737][ T974] usb 3-1: Product: syz [ 186.527756][ T30] audit: type=1400 audit(1745433899.075:426): avc: denied { write } for pid=7724 comm="syz.5.408" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 186.559702][ T974] usb 3-1: Manufacturer: syz [ 186.566426][ T30] audit: type=1400 audit(1745433899.395:427): avc: denied { read } for pid=7730 comm="syz.4.409" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 186.619081][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 186.635273][ T30] audit: type=1400 audit(1745433899.395:428): avc: denied { open } for pid=7730 comm="syz.4.409" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 186.760993][ T30] audit: type=1400 audit(1745433899.395:429): avc: denied { ioctl } for pid=7730 comm="syz.4.409" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 186.784560][ T974] usb 3-1: USB disconnect, device number 10 [ 186.877556][ T30] audit: type=1400 audit(1745433899.715:430): avc: denied { setopt } for pid=7742 comm="syz.4.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 187.111615][ T7755] FAULT_INJECTION: forcing a failure. [ 187.111615][ T7755] name failslab, interval 1, probability 0, space 0, times 0 [ 187.127807][ T7755] CPU: 0 UID: 0 PID: 7755 Comm: syz.5.412 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 187.127832][ T7755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 187.127842][ T7755] Call Trace: [ 187.127847][ T7755] [ 187.127854][ T7755] dump_stack_lvl+0x16c/0x1f0 [ 187.127881][ T7755] should_fail_ex+0x512/0x640 [ 187.127898][ T7755] ? fs_reclaim_acquire+0xae/0x150 [ 187.127923][ T7755] ? tomoyo_encode2+0x100/0x3e0 [ 187.127946][ T7755] should_failslab+0xc2/0x120 [ 187.127966][ T7755] __kmalloc_noprof+0xd2/0x510 [ 187.127982][ T7755] ? d_absolute_path+0x136/0x1a0 [ 187.128008][ T7755] tomoyo_encode2+0x100/0x3e0 [ 187.128034][ T7755] tomoyo_encode+0x29/0x50 [ 187.128055][ T7755] tomoyo_realpath_from_path+0x18f/0x6e0 [ 187.128085][ T7755] tomoyo_path_number_perm+0x245/0x580 [ 187.128104][ T7755] ? tomoyo_path_number_perm+0x237/0x580 [ 187.128126][ T7755] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 187.128153][ T7755] ? find_held_lock+0x2b/0x80 [ 187.128195][ T7755] ? find_held_lock+0x2b/0x80 [ 187.128215][ T7755] ? hook_file_ioctl_common+0x145/0x410 [ 187.128238][ T7755] ? __fget_files+0x20e/0x3c0 [ 187.128258][ T7755] security_file_ioctl+0x9b/0x240 [ 187.128283][ T7755] __x64_sys_ioctl+0xb7/0x200 [ 187.128308][ T7755] do_syscall_64+0xcd/0x260 [ 187.128333][ T7755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.128350][ T7755] RIP: 0033:0x7f3488d8e969 [ 187.128363][ T7755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.128379][ T7755] RSP: 002b:00007f3489b75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 187.128395][ T7755] RAX: ffffffffffffffda RBX: 00007f3488fb5fa0 RCX: 00007f3488d8e969 [ 187.128406][ T7755] RDX: 0000200000001ac0 RSI: 000000008038550a RDI: 0000000000000003 [ 187.128416][ T7755] RBP: 00007f3489b75090 R08: 0000000000000000 R09: 0000000000000000 [ 187.128425][ T7755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.128435][ T7755] R13: 0000000000000000 R14: 00007f3488fb5fa0 R15: 00007ffe5a70c6c8 [ 187.128457][ T7755] [ 187.128473][ T7755] ERROR: Out of memory at tomoyo_realpath_from_path. [ 187.220773][ T30] audit: type=1400 audit(1745433900.055:431): avc: denied { create } for pid=7757 comm="syz.1.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 187.261508][ T7755] usb usb8: usbfs: process 7755 (syz.5.412) did not claim interface 0 before use [ 187.367913][ T30] audit: type=1400 audit(1745433900.165:432): avc: denied { write } for pid=7757 comm="syz.1.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 187.410671][ T7763] netlink: 'syz.2.414': attribute type 4 has an invalid length. [ 187.426727][ T7763] netlink: 17 bytes leftover after parsing attributes in process `syz.2.414'. [ 187.866770][ T7777] netlink: 'syz.0.415': attribute type 10 has an invalid length. [ 188.052351][ T7777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.061076][ T7777] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 188.078168][ T81] net_ratelimit: 9 callbacks suppressed [ 188.078182][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.092180][ T6601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.697275][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.777141][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.995530][ T7795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.025944][ T7795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.036991][ T7795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.050872][ T7795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.059212][ T7795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.104860][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.600937][ T971] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 189.772541][ T971] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 189.781704][ T81] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 189.799620][ T971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.945986][ T971] usb 6-1: config 0 descriptor?? [ 189.952524][ T81] usb 1-1: Using ep0 maxpacket: 16 [ 190.012648][ T7795] syz.0.419 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 190.050717][ T971] cp210x 6-1:0.0: cp210x converter detected [ 190.448778][ T971] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 190.480694][ T971] usb 6-1: cp210x converter now attached to ttyUSB0 [ 190.688901][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 190.688912][ T30] audit: type=1400 audit(1745433903.525:436): avc: denied { listen } for pid=7793 comm="syz.5.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 190.721338][ T971] usb 6-1: USB disconnect, device number 5 [ 190.778360][ T971] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 190.789240][ T30] audit: type=1400 audit(1745433903.555:437): avc: denied { accept } for pid=7793 comm="syz.5.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 190.853167][ T971] cp210x 6-1:0.0: device disconnected [ 191.140605][ T7841] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 192.135490][ T7849] use of bytesused == 0 is deprecated and will be removed in the future, [ 192.144655][ T7849] use the actual size instead. [ 192.639432][ T81] usb 1-1: unable to get BOS descriptor or descriptor too short [ 192.698490][ T7857] netlink: 'syz.5.428': attribute type 4 has an invalid length. [ 192.701547][ T81] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 192.737210][ T7857] netlink: 17 bytes leftover after parsing attributes in process `syz.5.428'. [ 192.758683][ T81] usb 1-1: can't read configurations, error -71 [ 193.226651][ T7853] autofs: Unknown parameter 'fd' [ 193.241405][ T30] audit: type=1400 audit(1745433906.075:438): avc: denied { write } for pid=7852 comm="syz.0.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 193.271809][ T5908] net_ratelimit: 60 callbacks suppressed [ 193.271821][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.300973][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.441020][ T6601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.913897][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.920272][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.941980][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.006974][ T30] audit: type=1400 audit(1745433906.845:439): avc: denied { listen } for pid=7854 comm="syz.4.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 194.224405][ T30] audit: type=1400 audit(1745433906.905:440): avc: denied { write } for pid=7873 comm="syz.0.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 194.311323][ T6601] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 194.390692][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.462034][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.486585][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.511081][ T6601] usb 2-1: Using ep0 maxpacket: 16 [ 194.538183][ T6601] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 194.557277][ T6601] usb 2-1: config 0 has no interface number 0 [ 194.599267][ T6601] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 194.647943][ T6601] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 194.693314][ T6601] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 194.711426][ T6601] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.745670][ T6601] usb 2-1: Product: syz [ 194.749872][ T6601] usb 2-1: Manufacturer: syz [ 194.773485][ T6601] usb 2-1: SerialNumber: syz [ 194.777298][ T7892] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 194.786827][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.788691][ T6601] usb 2-1: config 0 descriptor?? [ 194.808225][ T5908] IPVS: starting estimator thread 0... [ 194.871380][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.911039][ T7896] IPVS: using max 39 ests per chain, 93600 per kthread [ 194.938856][ T7877] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 194.946777][ T7877] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 195.407790][ T7877] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 195.415110][ T7877] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 195.483785][ T30] audit: type=1400 audit(1745433908.325:441): avc: denied { ioctl } for pid=7902 comm="syz.4.439" path="/dev/ptyqc" dev="devtmpfs" ino=131 ioctlcmd=0x5404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 195.535708][ T30] audit: type=1400 audit(1745433908.375:442): avc: denied { read write } for pid=7902 comm="syz.4.439" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 195.607520][ T30] audit: type=1400 audit(1745433908.375:443): avc: denied { open } for pid=7902 comm="syz.4.439" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 195.645358][ T6601] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 195.830709][ T7919] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 195.836431][ T6601] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 195.837235][ T7919] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 195.972854][ T7919] vhci_hcd vhci_hcd.0: Device attached [ 196.244969][ T5874] usb 44-1: SetAddress Request (2) to port 0 [ 196.277761][ T6601] asix 2-1:0.251: probe with driver asix failed with error -5 [ 196.290621][ T5874] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 196.310960][ T5872] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 196.317650][ T6601] usb 2-1: USB disconnect, device number 11 [ 196.482343][ T5872] usb 5-1: Using ep0 maxpacket: 16 [ 196.580621][ T5872] usb 5-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 196.590084][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.600681][ T5872] usb 5-1: Product: syz [ 196.604882][ T5872] usb 5-1: Manufacturer: syz [ 196.614361][ T5872] usb 5-1: SerialNumber: syz [ 196.631094][ T5908] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 196.701491][ T5872] usb 5-1: config 0 descriptor?? [ 196.744889][ T5872] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 196.748418][ T7932] netlink: 20 bytes leftover after parsing attributes in process `syz.1.445'. [ 196.801235][ T5908] usb 6-1: Using ep0 maxpacket: 8 [ 196.812435][ T5908] usb 6-1: config 0 has no interfaces? [ 196.827326][ T5908] usb 6-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 196.840560][ T7945] netlink: 'syz.0.446': attribute type 10 has an invalid length. [ 196.869438][ T7945] netlink: 'syz.0.446': attribute type 30 has an invalid length. [ 196.878000][ T7945] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 196.887231][ T7945] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 196.973111][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.053709][ T30] audit: type=1400 audit(1745433909.845:444): avc: denied { ioctl } for pid=7902 comm="syz.4.439" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 197.103398][ T5908] usb 6-1: Product: syz [ 197.127012][ T5908] usb 6-1: Manufacturer: syz [ 197.139525][ T5908] usb 6-1: SerialNumber: syz [ 197.143401][ T30] audit: type=1400 audit(1745433909.975:445): avc: denied { ioctl } for pid=7902 comm="syz.4.439" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 197.148534][ T5908] usb 6-1: config 0 descriptor?? [ 197.191144][ T971] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 197.225743][ T5872] gspca_sn9c2028: read1 error -71 [ 197.239557][ T5872] gspca_sn9c2028: read1 error -71 [ 197.249625][ T5872] gspca_sn9c2028: read1 error -71 [ 197.258750][ T5872] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -71 [ 197.291470][ T5872] usb 5-1: USB disconnect, device number 17 [ 197.351049][ T971] usb 3-1: Using ep0 maxpacket: 32 [ 197.359676][ T971] usb 3-1: config 0 has no interfaces? [ 197.365540][ T971] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 197.399650][ T971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.441781][ T971] usb 3-1: config 0 descriptor?? [ 197.461124][ T974] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 197.526908][ T5874] usb 44-1: device descriptor read/8, error -71 [ 197.751046][ T81] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 197.773279][ T5874] usb 44-1: SetAddress Request (3) to port 0 [ 197.773762][ T5872] usb 3-1: USB disconnect, device number 11 [ 197.779396][ T5874] usb 44-1: new SuperSpeed USB device number 3 using vhci_hcd [ 197.787339][ T974] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.981029][ T81] usb 1-1: Using ep0 maxpacket: 16 [ 197.991926][ T81] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 198.028050][ T81] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 198.060835][ T81] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 1024 [ 198.074901][ T81] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 198.085043][ T974] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 198.085210][ T81] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 198.106840][ T81] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 198.116683][ T974] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 198.116711][ T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 198.116728][ T974] usb 2-1: SerialNumber: syz [ 198.149186][ T81] usb 1-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 198.184299][ T81] usb 1-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 198.196697][ T81] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.239871][ T81] usb 1-1: Product: syz [ 198.252845][ T81] usb 1-1: Manufacturer: syz [ 198.333079][ T974] usb 2-1: 0:2 : does not exist [ 198.338172][ T974] usb 2-1: unit 5: unexpected type 0x0b [ 198.380676][ T81] usb 1-1: SerialNumber: syz [ 198.429554][ T81] usb 1-1: config 0 descriptor?? [ 198.434549][ T974] usb 2-1: USB disconnect, device number 12 [ 198.659825][ T6601] net_ratelimit: 10 callbacks suppressed [ 198.659843][ T6601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.861244][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.947757][ T7962] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 198.960531][ T81] iuu_phoenix 1-1:0.0: iuu_phoenix converter detected [ 198.980624][ T81] usb 1-1: iuu_phoenix converter now attached to ttyUSB0 [ 199.024795][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.146815][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 199.164211][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.291676][ T5908] usb 1-1: USB disconnect, device number 15 [ 199.318543][ T5908] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 199.360324][ T5908] iuu_phoenix 1-1:0.0: device disconnected [ 199.404606][ T7995] netlink: 'syz.4.450': attribute type 10 has an invalid length. [ 199.702880][ T8002] serio: Serial port ptm1 [ 200.040545][ T8006] Cannot find add_set index 0 as target [ 200.061216][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.069706][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.437050][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.445388][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.961320][ T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.377785][ T30] audit: type=1400 audit(1745433914.215:446): avc: denied { listen } for pid=8009 comm="syz.0.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 201.397820][ T30] audit: type=1400 audit(1745433914.215:447): avc: denied { setopt } for pid=8009 comm="syz.0.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 201.442113][ T5838] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 201.701094][ T30] audit: type=1400 audit(1745433914.535:448): avc: denied { getopt } for pid=8021 comm="syz.2.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 201.742401][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.821306][ T7920] vhci_hcd: connection reset by peer [ 201.831291][ T5876] usb 6-1: USB disconnect, device number 6 [ 201.845030][ T13] vhci_hcd: stop threads [ 201.863170][ T13] vhci_hcd: release socket [ 201.888956][ T13] vhci_hcd: disconnect device [ 201.984975][ T8022] kvm: kvm [8021]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 202.059390][ T30] audit: type=1400 audit(1745433914.895:449): avc: denied { getopt } for pid=8021 comm="syz.2.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 202.525293][ T24] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 202.933000][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 203.021035][ T5874] usb 44-1: device descriptor read/8, error -110 [ 203.212924][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 203.283030][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 203.311228][ T5874] usb usb44-port1: attempt power cycle [ 203.328898][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.361039][ T5877] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 203.591625][ T24] usb 2-1: usb_control_msg returned -32 [ 203.597242][ T24] usbtmc 2-1:16.0: can't read capabilities [ 204.119492][ T5877] usb 6-1: Using ep0 maxpacket: 16 [ 204.145649][ T24] net_ratelimit: 5 callbacks suppressed [ 204.145663][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.145757][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.169008][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.177600][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.180695][ T5877] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.200108][ T5877] usb 6-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 204.242102][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.250792][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.264027][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.274717][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.283814][ T8068] syz.1.453: attempt to access beyond end of device [ 204.283814][ T8068] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 204.323611][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.348124][ T5874] usb usb44-port1: unable to enumerate USB device [ 204.354810][ T8068] MINIX-fs: unable to read superblock [ 204.372252][ T5877] usb 6-1: Product: syz [ 204.376511][ T5877] usb 6-1: Manufacturer: syz [ 204.387937][ T5877] usb 6-1: SerialNumber: syz [ 204.402716][ T5877] usb 6-1: config 0 descriptor?? [ 204.416758][ T5877] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 204.586003][ T30] audit: type=1400 audit(1745433917.375:450): avc: denied { setopt } for pid=8073 comm="syz.4.465" lport=54312 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 204.617223][ T8040] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.460'. [ 204.626849][ T8040] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 204.781078][ T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 204.945206][ T5877] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 205.035037][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.045157][ T5877] gspca_pac7302 6-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 205.191827][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 205.200554][ T24] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 205.213753][ T24] usb 5-1: config 0 has no interface number 0 [ 205.224557][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 205.233947][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.242435][ T24] usb 5-1: Product: syz [ 205.246807][ T24] usb 5-1: Manufacturer: syz [ 205.252057][ T24] usb 5-1: SerialNumber: syz [ 205.373783][ T24] usb 5-1: config 0 descriptor?? [ 205.472820][ T5877] usb 2-1: USB disconnect, device number 13 [ 205.599161][ T8098] netlink: 16 bytes leftover after parsing attributes in process `syz.1.467'. [ 205.632331][ T24] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 205.650964][ T5938] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 205.722882][ T5874] usb 6-1: USB disconnect, device number 7 [ 205.744356][ T24] usb 5-1: No streaming interface found for terminal 6. [ 205.749597][ T8101] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 205.797058][ T24] usb 5-1: USB disconnect, device number 18 [ 205.824956][ T5938] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.847175][ T5938] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.902255][ T5938] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 205.919574][ T5938] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 50824, setting to 1024 [ 205.937859][ T5938] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 205.953414][ T5938] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 205.976411][ T30] audit: type=1400 audit(1745433918.805:451): avc: denied { write } for pid=5180 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.015671][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.056727][ T5938] usb 3-1: Product: syz [ 206.504459][ T5938] usb 3-1: Manufacturer: syz [ 206.509100][ T5938] usb 3-1: SerialNumber: syz [ 206.513850][ T30] audit: type=1400 audit(1745433918.805:452): avc: denied { remove_name } for pid=5180 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.541558][ T30] audit: type=1400 audit(1745433918.805:453): avc: denied { add_name } for pid=5180 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.751486][ T8093] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 206.934527][ T8121] delete_channel: no stack [ 207.458305][ T8093] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 207.506634][ T8119] netlink: 'syz.5.474': attribute type 3 has an invalid length. [ 207.558172][ T8119] netlink: 'syz.5.474': attribute type 3 has an invalid length. [ 207.568809][ T8124] input: syz0 as /devices/virtual/input/input35 [ 207.664670][ T8119] netlink: 'syz.5.474': attribute type 3 has an invalid length. [ 207.718310][ T8119] netlink: 'syz.5.474': attribute type 3 has an invalid length. [ 207.718476][ T5938] cdc_ncm 3-1:1.0: bind() failure [ 207.731330][ T8119] netlink: 'syz.5.474': attribute type 3 has an invalid length. [ 207.739034][ T8119] netlink: 'syz.5.474': attribute type 3 has an invalid length. [ 207.771268][ T5938] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 207.794921][ T5938] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 207.805237][ T8119] netlink: 'syz.5.474': attribute type 3 has an invalid length. [ 207.821007][ T5938] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 207.831012][ T8119] netlink: 'syz.5.474': attribute type 3 has an invalid length. [ 207.877709][ T8119] netlink: 'syz.5.474': attribute type 3 has an invalid length. [ 207.899941][ T5938] usb 3-1: USB disconnect, device number 12 [ 207.931380][ T8119] netlink: 'syz.5.474': attribute type 3 has an invalid length. [ 208.028261][ T8148] Cannot find add_set index 0 as target [ 208.433802][ T8149] netlink: 28 bytes leftover after parsing attributes in process `syz.4.477'. [ 208.839129][ T8153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.478'. [ 208.878216][ T8154] FAULT_INJECTION: forcing a failure. [ 208.878216][ T8154] name failslab, interval 1, probability 0, space 0, times 0 [ 208.887677][ T8156] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 208.892064][ T8153] kernel profiling enabled (shift: 63) [ 208.907461][ T8154] CPU: 0 UID: 0 PID: 8154 Comm: syz.5.479 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 208.907486][ T8154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 208.907496][ T8154] Call Trace: [ 208.907502][ T8154] [ 208.907507][ T8154] dump_stack_lvl+0x16c/0x1f0 [ 208.907533][ T8154] should_fail_ex+0x512/0x640 [ 208.907553][ T8154] should_failslab+0xc2/0x120 [ 208.907572][ T8154] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 208.907591][ T8154] ? sidtab_sid2str_get+0x17a/0x680 [ 208.907618][ T8154] kmemdup_noprof+0x29/0x60 [ 208.907639][ T8154] sidtab_sid2str_get+0x17a/0x680 [ 208.907665][ T8154] sidtab_entry_to_string+0x33/0x110 [ 208.907691][ T8154] security_sid_to_context_core+0x35c/0x640 [ 208.907718][ T8154] avc_audit_post_callback+0x109/0x8f0 [ 208.907743][ T8154] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 208.907764][ T8154] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 208.907791][ T8154] ? skb_put+0x138/0x1b0 [ 208.907816][ T8154] ? audit_log_n_string+0x253/0x540 [ 208.907847][ T8154] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 208.907869][ T8154] common_lsm_audit+0x24b/0x300 [ 208.907890][ T8154] ? __pfx_common_lsm_audit+0x10/0x10 [ 208.907911][ T8154] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 208.907930][ T8154] ? avc_update_node.isra.0+0x4c0/0xb60 [ 208.907948][ T8154] slow_avc_audit+0x186/0x210 [ 208.907965][ T8154] ? __pfx_slow_avc_audit+0x10/0x10 [ 208.907984][ T8154] ? avc_denied+0x14a/0x190 [ 208.908001][ T8154] ? avc_has_perm_noaudit+0x306/0x3b0 [ 208.908022][ T8154] avc_has_perm+0x18b/0x1c0 [ 208.908040][ T8154] ? __pfx_avc_has_perm+0x10/0x10 [ 208.908059][ T8154] ? find_held_lock+0x2b/0x80 [ 208.908081][ T8154] sock_has_perm+0x252/0x2f0 [ 208.908099][ T8154] ? __pfx_sock_has_perm+0x10/0x10 [ 208.908118][ T8154] ? proc_fail_nth_write+0x9f/0x250 [ 208.908147][ T8154] ? find_held_lock+0x2b/0x80 [ 208.908168][ T8154] security_socket_getsockopt+0x211/0x240 [ 208.908187][ T8154] do_sock_getsockopt+0xf4/0x800 [ 208.908208][ T8154] ? __print_lock_name+0xb0/0xe0 [ 208.908228][ T8154] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 208.908248][ T8154] ? __fget_files+0x204/0x3c0 [ 208.908266][ T8154] __sys_getsockopt+0x12f/0x260 [ 208.908282][ T8154] __x64_sys_getsockopt+0xbd/0x160 [ 208.908293][ T8154] ? do_syscall_64+0x91/0x260 [ 208.908307][ T8154] ? lockdep_hardirqs_on+0x7c/0x110 [ 208.908321][ T8154] do_syscall_64+0xcd/0x260 [ 208.908336][ T8154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.908347][ T8154] RIP: 0033:0x7f3488d8e969 [ 208.908357][ T8154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.908367][ T8154] RSP: 002b:00007f3489b75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 208.908377][ T8154] RAX: ffffffffffffffda RBX: 00007f3488fb5fa0 RCX: 00007f3488d8e969 [ 208.908383][ T8154] RDX: 000000000000001c RSI: 0000000000000001 RDI: 0000000000000003 [ 208.908389][ T8154] RBP: 00007f3489b75090 R08: 0000200000000100 R09: 0000000000000000 [ 208.908395][ T8154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.908401][ T8154] R13: 0000000000000000 R14: 00007f3488fb5fa0 R15: 00007ffe5a70c6c8 [ 208.908414][ T8154] [ 208.910526][ T30] audit: type=1400 audit(1745433921.715:454): avc: denied { getopt } for pid=8151 comm="syz.5.479" ssid=146 tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 209.061106][ T8153] profiling shift: 63 too large [ 209.091378][ T8158] syz_tun: entered allmulticast mode [ 209.261902][ C0] net_ratelimit: 11 callbacks suppressed [ 209.261922][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.377093][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.709163][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.718758][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.727132][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.730620][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.744194][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.745152][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.764330][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.771443][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.907705][ T8153] lo: entered allmulticast mode [ 209.987233][ T30] audit: type=1400 audit(1745433922.825:455): avc: denied { read } for pid=8177 comm="syz.4.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 210.030524][ T8152] syz_tun: left allmulticast mode [ 210.047992][ T5938] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 210.059163][ T8152] lo: left allmulticast mode [ 210.101037][ T5874] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 210.232578][ T5938] usb 1-1: Using ep0 maxpacket: 32 [ 210.244857][ T5938] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.261134][ T5938] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.286818][ T5874] usb 6-1: Using ep0 maxpacket: 16 [ 210.298528][ T5874] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.319079][ T5874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 210.419071][ T5938] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 210.443069][ T5938] usb 1-1: config 0 interface 0 has no altsetting 0 [ 210.460110][ T5938] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 210.474933][ T8192] delete_channel: no stack [ 210.480988][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.505618][ T5874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 210.515972][ T5874] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 210.525765][ T5874] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.543306][ T5938] usb 1-1: config 0 descriptor?? [ 210.549564][ T5874] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 210.561274][ T5874] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 210.569288][ T5874] usb 6-1: Manufacturer: syz [ 210.582041][ T5874] usb 6-1: config 0 descriptor?? [ 211.073217][ T5874] rc_core: IR keymap rc-hauppauge not found [ 211.079151][ T5874] Registered IR keymap rc-empty [ 211.105568][ T5874] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 211.201803][ T5874] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 211.225022][ T5874] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 211.240166][ T5938] usbhid 1-1:0.0: can't add hid device: -71 [ 211.242463][ T5874] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input36 [ 211.251834][ T5938] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 211.269580][ T5874] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 211.291679][ T5938] usb 1-1: USB disconnect, device number 16 [ 211.306313][ T5874] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 211.363490][ T5874] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 211.411343][ T5874] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 211.454160][ T5874] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 211.509304][ T5874] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 211.671504][ T5874] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 211.831900][ T5874] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 211.962171][ T5874] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 212.011389][ T5874] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 212.167423][ T5874] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 212.177406][ T5874] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 212.189305][ T5874] usb 6-1: USB disconnect, device number 8 [ 212.715291][ T8217] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 212.755709][ T30] audit: type=1400 audit(1745433925.595:456): avc: denied { map } for pid=8215 comm="syz.5.494" path="socket:[16656]" dev="sockfs" ino=16656 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 212.795611][ T30] audit: type=1400 audit(1745433925.595:457): avc: denied { read write accept } for pid=8215 comm="syz.5.494" path="socket:[16656]" dev="sockfs" ino=16656 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 213.054453][ T30] audit: type=1400 audit(1745433925.885:458): avc: denied { setopt } for pid=8227 comm="syz.0.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 213.084873][ T8229] overlayfs: failed to resolve './file0': -2 [ 213.096217][ T30] audit: type=1400 audit(1745433925.885:459): avc: denied { connect } for pid=8227 comm="syz.0.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 213.191915][ T30] audit: type=1400 audit(1745433926.015:460): avc: denied { getopt } for pid=8232 comm="syz.5.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 213.260362][ T8233] lo speed is unknown, defaulting to 1000 [ 213.488536][ T30] audit: type=1400 audit(1745433926.325:461): avc: denied { getopt } for pid=8239 comm="syz.4.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 213.508376][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.769239][ T8243] validate_nla: 43 callbacks suppressed [ 213.769259][ T8243] netlink: 'syz.0.501': attribute type 10 has an invalid length. [ 213.789790][ T8249] Cannot find add_set index 0 as target [ 213.939577][ C1] hrtimer: interrupt took 26298 ns [ 213.951013][ T5874] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 214.142705][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.154719][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.166260][ T5874] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 214.175995][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.202888][ T5874] usb 3-1: config 0 descriptor?? [ 214.384123][ T8257] net_ratelimit: 18 callbacks suppressed [ 214.384141][ T8257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.398555][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.683788][ T5938] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 214.901330][ T5938] usb 5-1: Using ep0 maxpacket: 16 [ 214.910843][ T5938] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.923178][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 214.935472][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 214.946322][ T5938] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 214.956205][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.964939][ T5938] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.979062][ T5938] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 214.988332][ T5938] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 214.996503][ T5938] usb 5-1: Manufacturer: syz [ 215.030622][ T5938] usb 5-1: config 0 descriptor?? [ 215.058460][ T6601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.078593][ T5874] uclogic 0003:256C:006D.0005: failed retrieving Huion firmware version: -71 [ 215.091345][ T5872] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 215.093685][ T5874] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 215.114705][ T5874] uclogic 0003:256C:006D.0005: probe with driver uclogic failed with error -71 [ 215.122274][ T8262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.133479][ T8262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.134249][ T5874] usb 3-1: USB disconnect, device number 13 [ 215.142566][ T8262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.164047][ T8262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.174394][ T8262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.184657][ T8262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.252449][ T5872] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 215.266673][ T5872] usb 2-1: config 0 interface 0 has no altsetting 0 [ 215.275813][ T5872] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 215.285568][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 215.294044][ T5872] usb 2-1: Product: syz [ 215.298344][ T5872] usb 2-1: Manufacturer: syz [ 215.303105][ T5938] rc_core: IR keymap rc-hauppauge not found [ 215.309285][ T5938] Registered IR keymap rc-empty [ 215.314984][ T5872] usb 2-1: SerialNumber: syz [ 215.319777][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 215.332210][ T5872] usb 2-1: config 0 descriptor?? [ 215.348151][ T5872] usb 2-1: selecting invalid altsetting 0 [ 215.354617][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 215.385065][ T5938] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 215.411836][ T5938] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input37 [ 215.451579][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 215.473262][ C0] mceusb 5-1:0.0: short-range (0x5a) receiver active [ 215.481179][ T5874] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 215.505293][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 215.531048][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 215.540069][ T5872] usb 2-1: USB disconnect, device number 14 [ 215.551654][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 215.592469][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 215.612786][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 215.631192][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 215.643098][ T5874] usb 3-1: device descriptor read/64, error -71 [ 215.651017][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 215.671271][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 215.691032][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 215.715392][ T5938] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 215.724363][ T5938] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x5a active) [ 215.747250][ T5938] usb 5-1: USB disconnect, device number 19 [ 215.902089][ T5874] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 216.040998][ T5874] usb 3-1: device descriptor read/64, error -71 [ 216.150354][ T8275] tmpfs: Bad value for 'mpol' [ 216.156057][ T5874] usb usb3-port1: attempt power cycle [ 216.277807][ T8278] capability: warning: `syz.0.511' uses 32-bit capabilities (legacy support in use) [ 216.340961][ T30] audit: type=1400 audit(1745433929.165:462): avc: denied { setopt } for pid=8279 comm="syz.4.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 216.437246][ T8286] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 216.440459][ T30] audit [ 216.443789][ T8286] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 216.451238][ T8286] vhci_hcd vhci_hcd.0: Device attached [ 216.721118][ T6601] usb 44-1: SetAddress Request (6) to port 0 [ 216.743595][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 216.751780][ T6601] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 216.811146][ T5874] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 216.837921][ T8293] Cannot find add_set index 0 as target [ 216.921253][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 216.948346][ T24] usb 6-1: config 0 has no interfaces? [ 216.991809][ T5874] usb 3-1: device descriptor read/8, error -71 [ 217.035225][ T24] usb 6-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 217.133807][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.193406][ T24] usb 6-1: Product: syz [ 217.197767][ T24] usb 6-1: Manufacturer: syz [ 217.202955][ T24] usb 6-1: SerialNumber: syz [ 217.213080][ T24] usb 6-1: config 0 descriptor?? [ 217.305677][ T30] audit: type=1400 audit(1745433930.145:464): avc: denied { connect } for pid=8294 comm="syz.4.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 217.331328][ T5874] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 217.376960][ T30] audit: type=1400 audit(1745433930.165:465): avc: denied { setopt } for pid=8294 comm="syz.4.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 217.482088][ T8287] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 217.502570][ T5874] usb 3-1: device descriptor read/8, error -71 [ 217.513896][ T971] usb 6-1: USB disconnect, device number 9 [ 217.520477][ T13] vhci_hcd: stop threads [ 217.895708][ T5874] usb usb3-port1: unable to enumerate USB device [ 217.905597][ T13] vhci_hcd: release socket [ 217.911727][ T13] vhci_hcd: disconnect device [ 218.199671][ T8310] netlink: 'syz.4.519': attribute type 10 has an invalid length. [ 218.790761][ T8316] delete_channel: no stack [ 218.851057][ T81] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 219.245473][ T81] usb 6-1: Using ep0 maxpacket: 16 [ 219.257789][ T8323] FAULT_INJECTION: forcing a failure. [ 219.257789][ T8323] name failslab, interval 1, probability 0, space 0, times 0 [ 219.270818][ T8323] CPU: 1 UID: 0 PID: 8323 Comm: syz.0.524 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 219.270844][ T8323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 219.270855][ T8323] Call Trace: [ 219.270861][ T8323] [ 219.270871][ T8323] dump_stack_lvl+0x16c/0x1f0 [ 219.270898][ T8323] should_fail_ex+0x512/0x640 [ 219.270916][ T8323] ? fs_reclaim_acquire+0xae/0x150 [ 219.270940][ T8323] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 219.270962][ T8323] should_failslab+0xc2/0x120 [ 219.270981][ T8323] __kmalloc_noprof+0xd2/0x510 [ 219.271006][ T8323] tomoyo_realpath_from_path+0xc2/0x6e0 [ 219.271031][ T8323] ? tomoyo_profile+0x47/0x60 [ 219.271049][ T8323] tomoyo_path_number_perm+0x245/0x580 [ 219.271068][ T8323] ? tomoyo_path_number_perm+0x237/0x580 [ 219.271090][ T8323] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 219.271143][ T8323] ? from_kuid+0x8d/0xd0 [ 219.271161][ T8323] ? __pfx_from_kuid+0x10/0x10 [ 219.271177][ T8323] ? lock_acquire+0x62/0x350 [ 219.271197][ T8323] tomoyo_path_chown+0x173/0x1b0 [ 219.271212][ T8323] ? __pfx_tomoyo_path_chown+0x10/0x10 [ 219.271231][ T8323] ? from_vfsuid+0xea/0x140 [ 219.271253][ T8323] ? __pfx_from_vfsuid+0x10/0x10 [ 219.271272][ T8323] ? __lock_acquire+0x5ca/0x1ba0 [ 219.271291][ T8323] security_path_chown+0x12a/0x2e0 [ 219.271315][ T8323] chown_common+0x3bb/0x670 [ 219.271341][ T8323] ? __pfx_chown_common+0x10/0x10 [ 219.271384][ T8323] ksys_fchown+0x11f/0x170 [ 219.271405][ T8323] __x64_sys_fchown+0x72/0xb0 [ 219.271424][ T8323] ? lockdep_hardirqs_on+0x7c/0x110 [ 219.271446][ T8323] do_syscall_64+0xcd/0x260 [ 219.271471][ T8323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.271489][ T8323] RIP: 0033:0x7f48bdd8e969 [ 219.271504][ T8323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.271520][ T8323] RSP: 002b:00007f48bec11038 EFLAGS: 00000246 ORIG_RAX: 000000000000005d [ 219.271537][ T8323] RAX: ffffffffffffffda RBX: 00007f48bdfb6160 RCX: 00007f48bdd8e969 [ 219.271549][ T8323] RDX: 0000000000000000 RSI: 000000000000ee01 RDI: 0000000000000006 [ 219.271559][ T8323] RBP: 00007f48bec11090 R08: 0000000000000000 R09: 0000000000000000 [ 219.271569][ T8323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.271578][ T8323] R13: 0000000000000000 R14: 00007f48bdfb6160 R15: 00007fff8bffbb38 [ 219.271602][ T8323] [ 219.522671][ T8323] ERROR: Out of memory at tomoyo_realpath_from_path. [ 220.071212][ T5908] net_ratelimit: 603 callbacks suppressed [ 220.071230][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.115606][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.124182][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.138182][ T81] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.156171][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.165593][ T81] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 220.201757][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.211454][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.222561][ T81] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 220.235426][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.245020][ T8331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.526'. [ 220.255492][ T81] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 220.257463][ T8331] netlink: 20 bytes leftover after parsing attributes in process `syz.0.526'. [ 220.287506][ T81] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.410161][ T81] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 220.414637][ T30] audit: type=1400 audit(1745433933.245:466): avc: denied { write } for pid=8330 comm="syz.1.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 220.488600][ T81] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 220.583903][ T81] usb 6-1: Manufacturer: syz [ 220.610346][ T81] usb 6-1: config 0 descriptor?? [ 220.656361][ T8341] netlink: 'syz.0.530': attribute type 4 has an invalid length. [ 220.665446][ T8341] netlink: 17 bytes leftover after parsing attributes in process `syz.0.530'. [ 220.685884][ T8339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.531'. [ 220.789493][ T8339] ipvlan2: entered promiscuous mode [ 220.815636][ T8350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.824150][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.901706][ T8339] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 220.922692][ T30] audit: type=1400 audit(1745433933.715:467): avc: denied { mount } for pid=8347 comm="syz.0.532" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 220.965740][ T8339] team0: Device ipvlan2 is already an upper device of the team interface [ 221.023983][ T81] rc_core: IR keymap rc-hauppauge not found [ 221.029911][ T81] Registered IR keymap rc-empty [ 221.042666][ T81] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 221.073320][ T81] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 221.113051][ T8359] netlink: 12 bytes leftover after parsing attributes in process `syz.4.533'. [ 221.147588][ T81] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 221.195062][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.210023][ T81] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input38 [ 221.606264][ T81] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 221.662491][ T81] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 221.692271][ T81] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 221.733453][ T81] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 221.761103][ T81] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 221.792707][ T81] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 221.821830][ T6601] usb 44-1: device descriptor read/8, error -110 [ 221.831753][ T81] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 221.881309][ T81] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 221.901072][ T81] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 221.911244][ T971] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 221.921021][ T81] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 221.944835][ T81] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 221.953803][ T81] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 221.979662][ T81] usb 6-1: USB disconnect, device number 10 [ 222.066099][ T971] usb 1-1: Using ep0 maxpacket: 16 [ 222.072117][ T8378] netlink: 'syz.4.538': attribute type 4 has an invalid length. [ 222.078510][ T971] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.080748][ T8378] netlink: 17 bytes leftover after parsing attributes in process `syz.4.538'. [ 222.091517][ T971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 222.112406][ T971] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 222.126598][ T971] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 222.136345][ T971] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 222.144939][ T971] usb 1-1: Manufacturer: syz [ 222.152455][ T971] usb 1-1: config 0 descriptor?? [ 222.281007][ T5908] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 222.441442][ T5908] usb 3-1: Using ep0 maxpacket: 16 [ 222.467453][ T5908] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 222.510828][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.540294][ T5908] usb 3-1: Product: syz [ 222.549984][ T5908] usb 3-1: Manufacturer: syz [ 222.565779][ T5908] usb 3-1: SerialNumber: syz [ 222.581793][ T5908] usb 3-1: config 0 descriptor?? [ 222.598080][ T6601] usb usb44-port1: attempt power cycle [ 222.608777][ T5908] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 222.968204][ T8394] input: syz0 as /devices/virtual/input/input39 [ 223.967664][ T6601] usb usb44-port1: unable to enumerate USB device [ 224.213635][ T8411] syz.1.547: attempt to access beyond end of device [ 224.213635][ T8411] loop1: rw=0, sector=2, nr_sectors = 1 limit=0 [ 224.230413][ T8411] hfs: can't find a HFS filesystem on dev loop1 [ 224.281325][ T5872] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 224.610983][ T5872] usb 6-1: Using ep0 maxpacket: 32 [ 224.633210][ T5872] usb 6-1: config 0 has no interfaces? [ 224.639240][ T5872] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 224.649400][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.672848][ T8419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.548'. [ 224.682583][ T974] usb 1-1: USB disconnect, device number 17 [ 224.699937][ T5872] usb 6-1: config 0 descriptor?? [ 225.058722][ T8424] netlink: 28 bytes leftover after parsing attributes in process `syz.5.545'. [ 225.335272][ T5872] usb 6-1: USB disconnect, device number 11 [ 225.341572][ T5908] usb 3-1: clie_3_5_startup: get config number failed: -71 [ 225.350460][ T5908] visor 3-1:0.0: probe with driver visor failed with error -71 [ 225.397885][ T5908] usb 3-1: USB disconnect, device number 18 [ 225.571146][ T6601] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 225.585479][ T8432] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 225.592027][ T8432] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 225.604090][ T8432] vhci_hcd vhci_hcd.0: Device attached [ 225.792178][ T6601] usb 2-1: Using ep0 maxpacket: 16 [ 225.799095][ T6601] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.809401][ T6601] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 225.820339][ T6601] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 225.830124][ T6601] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 226.262685][ T6601] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.275804][ T5877] net_ratelimit: 14 callbacks suppressed [ 226.275817][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.290967][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.307173][ T6601] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 226.316642][ T6601] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 226.324818][ T971] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 226.332576][ T6601] usb 2-1: Manufacturer: syz [ 226.338591][ T81] usb 34-1: SetAddress Request (2) to port 0 [ 226.346956][ T6601] usb 2-1: config 0 descriptor?? [ 226.352098][ T81] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 226.387137][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.396667][ T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.641049][ T971] usb 1-1: Using ep0 maxpacket: 8 [ 226.658423][ T971] usb 1-1: config 0 has no interfaces? [ 226.749191][ T8451] input: syz0 as /devices/virtual/input/input42 [ 227.256118][ T971] usb 1-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 227.407023][ T971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.472393][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.480681][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.492014][ T971] usb 1-1: Product: syz [ 227.500054][ T971] usb 1-1: Manufacturer: syz [ 227.507063][ T971] usb 1-1: SerialNumber: syz [ 227.611135][ T971] usb 1-1: config 0 descriptor?? [ 227.968797][ T6601] rc_core: IR keymap rc-hauppauge not found [ 227.970644][ T30] audit: type=1400 audit(1745433940.805:468): avc: denied { append } for pid=8460 comm="syz.2.558" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 228.001326][ T6601] Registered IR keymap rc-empty [ 228.023078][ T6601] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 228.081832][ T6601] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 228.122116][ T6601] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 228.148273][ T6601] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input41 [ 228.177339][ T6601] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 228.203099][ T6601] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 228.350451][ T81] usb 34-1: device descriptor read/8, error -71 [ 228.361506][ T6601] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 228.391066][ T6601] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 228.730718][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.739147][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.746952][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.769798][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.779486][ T6601] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 228.801024][ T6601] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 228.814410][ T8433] vhci_hcd: connection reset by peer [ 228.823735][ T971] usb 1-1: USB disconnect, device number 18 [ 228.835167][ T7101] vhci_hcd: stop threads [ 228.838404][ T8475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.561'. [ 228.853927][ T7101] vhci_hcd: release socket [ 228.864810][ T6601] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 228.881024][ T7101] vhci_hcd: disconnect device [ 228.902488][ T81] usb 34-1: SetAddress Request (3) to port 0 [ 228.908513][ T81] ================================================================== [ 228.916573][ T81] BUG: KASAN: slab-use-after-free in kobject_put+0x4ed/0x5a0 [ 228.923959][ T81] Read of size 1 at addr ffff8880277330ec by task kworker/1:1/81 [ 228.931662][ T81] [ 228.933972][ T81] CPU: 1 UID: 0 PID: 81 Comm: kworker/1:1 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 228.933989][ T81] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 228.933999][ T81] Workqueue: usb_hub_wq hub_event [ 228.934016][ T81] Call Trace: [ 228.934021][ T81] [ 228.934025][ T81] dump_stack_lvl+0x116/0x1f0 [ 228.934045][ T81] print_report+0xc3/0x670 [ 228.934059][ T81] ? __virt_addr_valid+0x5e/0x590 [ 228.934079][ T81] ? __phys_addr+0xc6/0x150 [ 228.934097][ T81] ? kobject_put+0x4ed/0x5a0 [ 228.934115][ T81] kasan_report+0xe0/0x110 [ 228.934128][ T81] ? kobject_put+0x4ed/0x5a0 [ 228.934148][ T81] kobject_put+0x4ed/0x5a0 [ 228.934166][ T81] put_device+0x1f/0x30 [ 228.934181][ T81] usb_put_dev+0x23/0x30 [ 228.934194][ T81] vhci_urb_enqueue+0x9b0/0xe00 [ 228.934219][ T81] usb_hcd_submit_urb+0x258/0x1c60 [ 228.934236][ T81] usb_submit_urb+0x87c/0x1730 [ 228.934255][ T81] ? __init_swait_queue_head+0xca/0x150 [ 228.934272][ T81] usb_start_wait_urb+0x104/0x4b0 [ 228.934290][ T81] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 228.934316][ T81] ? __asan_memset+0x23/0x50 [ 228.934335][ T81] usb_control_msg+0x326/0x4a0 [ 228.934353][ T81] ? __pfx_usb_control_msg+0x10/0x10 [ 228.934372][ T81] hub_port_init+0x1d3f/0x3a70 [ 228.934395][ T81] hub_event+0x2c67/0x4fa0 [ 228.934413][ T81] ? __pfx_hub_event+0x10/0x10 [ 228.934424][ T81] ? debug_object_deactivate+0x1ec/0x3a0 [ 228.934445][ T81] ? rcu_is_watching+0x12/0xc0 [ 228.934462][ T81] process_one_work+0x9cc/0x1b70 [ 228.934480][ T81] ? __pfx_hcd_resume_work+0x10/0x10 [ 228.934493][ T81] ? __pfx_process_one_work+0x10/0x10 [ 228.934509][ T81] ? assign_work+0x1a0/0x250 [ 228.934523][ T81] worker_thread+0x6c8/0xf10 [ 228.934540][ T81] ? __pfx_worker_thread+0x10/0x10 [ 228.934555][ T81] kthread+0x3c2/0x780 [ 228.934569][ T81] ? __pfx_kthread+0x10/0x10 [ 228.934580][ T81] ? __pfx_kthread+0x10/0x10 [ 228.934592][ T81] ? __pfx_kthread+0x10/0x10 [ 228.934604][ T81] ? __pfx_kthread+0x10/0x10 [ 228.934616][ T81] ? rcu_is_watching+0x12/0xc0 [ 228.934631][ T81] ? __pfx_kthread+0x10/0x10 [ 228.934643][ T81] ret_from_fork+0x45/0x80 [ 228.934657][ T81] ? __pfx_kthread+0x10/0x10 [ 228.934669][ T81] ret_from_fork_asm+0x1a/0x30 [ 228.934693][ T81] [ 228.934697][ T81] [ 229.162271][ T81] Allocated by task 81: [ 229.166404][ T81] kasan_save_stack+0x33/0x60 [ 229.171062][ T81] kasan_save_track+0x14/0x30 [ 229.175716][ T81] __kasan_kmalloc+0xaa/0xb0 [ 229.180280][ T81] usb_alloc_dev+0x55/0xde0 [ 229.184772][ T81] hub_event+0x2953/0x4fa0 [ 229.189164][ T81] process_one_work+0x9cc/0x1b70 [ 229.194079][ T81] worker_thread+0x6c8/0xf10 [ 229.198648][ T81] kthread+0x3c2/0x780 [ 229.202694][ T81] ret_from_fork+0x45/0x80 [ 229.207086][ T81] ret_from_fork_asm+0x1a/0x30 [ 229.211834][ T81] [ 229.214134][ T81] Freed by task 7101: [ 229.218085][ T81] kasan_save_stack+0x33/0x60 [ 229.222738][ T81] kasan_save_track+0x14/0x30 [ 229.227388][ T81] kasan_save_free_info+0x3b/0x60 [ 229.232401][ T81] __kasan_slab_free+0x51/0x70 [ 229.237140][ T81] kfree+0x2b6/0x4d0 [ 229.241023][ T81] device_release+0xa1/0x240 [ 229.245601][ T81] kobject_put+0x1e4/0x5a0 [ 229.249998][ T81] put_device+0x1f/0x30 [ 229.254137][ T81] usb_put_dev+0x23/0x30 [ 229.258357][ T81] vhci_device_reset+0xd9/0x230 [ 229.263191][ T81] event_handler+0x29b/0x540 [ 229.267760][ T81] process_one_work+0x9cc/0x1b70 [ 229.272675][ T81] worker_thread+0x6c8/0xf10 [ 229.277242][ T81] kthread+0x3c2/0x780 [ 229.281287][ T81] ret_from_fork+0x45/0x80 [ 229.285687][ T81] ret_from_fork_asm+0x1a/0x30 [ 229.290435][ T81] [ 229.292738][ T81] The buggy address belongs to the object at ffff888027733000 [ 229.292738][ T81] which belongs to the cache kmalloc-2k of size 2048 [ 229.306781][ T81] The buggy address is located 236 bytes inside of [ 229.306781][ T81] freed 2048-byte region [ffff888027733000, ffff888027733800) [ 229.320639][ T81] [ 229.322939][ T81] The buggy address belongs to the physical page: [ 229.329324][ T81] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27730 [ 229.338062][ T81] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 229.346539][ T81] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 229.354070][ T81] page_type: f5(slab) [ 229.358115][ T81] raw: 00fff00000000040 ffff88801b442000 dead000000000100 dead000000000122 [ 229.366677][ T81] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 229.375258][ T81] head: 00fff00000000040 ffff88801b442000 dead000000000100 dead000000000122 [ 229.383937][ T81] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 229.392602][ T81] head: 00fff00000000003 ffffea00009dcc01 00000000ffffffff 00000000ffffffff [ 229.401292][ T81] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 229.409940][ T81] page dumped because: kasan: bad access detected [ 229.416328][ T81] page_owner tracks the page as allocated [ 229.422019][ T81] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 7454763374, free_ts 0 [ 229.441627][ T81] post_alloc_hook+0x181/0x1b0 [ 229.446379][ T81] get_page_from_freelist+0x135c/0x3920 [ 229.451901][ T81] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 229.457769][ T81] alloc_pages_mpol+0x1fb/0x550 [ 229.462596][ T81] new_slab+0x244/0x340 [ 229.466732][ T81] ___slab_alloc+0xd9c/0x1940 [ 229.471392][ T81] __slab_alloc.constprop.0+0x56/0xb0 [ 229.476745][ T81] __kmalloc_cache_noprof+0xfb/0x3e0 [ 229.482019][ T81] nvmem_register+0xae/0x2240 [ 229.486677][ T81] mtd_nvmem_add+0x1ab/0x2f0 [ 229.491260][ T81] add_mtd_device+0x9b9/0x1720 [ 229.496020][ T81] mtd_device_parse_register+0x7c2/0xb10 [ 229.501643][ T81] mtdram_init_device+0x298/0x350 [ 229.506650][ T81] init_mtdram+0xba/0x1b0 [ 229.510965][ T81] do_one_initcall+0x120/0x6e0 [ 229.515713][ T81] kernel_init_freeable+0x5c2/0x900 [ 229.520895][ T81] page_owner free stack trace missing [ 229.526247][ T81] [ 229.528546][ T81] Memory state around the buggy address: [ 229.534152][ T81] ffff888027732f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 229.542188][ T81] ffff888027733000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 229.550224][ T81] >ffff888027733080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 229.558258][ T81] ^ [ 229.565702][ T81] ffff888027733100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 229.573738][ T81] ffff888027733180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 229.581774][ T81] ================================================================== [ 229.589809][ T81] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 229.596981][ T81] CPU: 1 UID: 0 PID: 81 Comm: kworker/1:1 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 229.608847][ T81] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 229.618882][ T81] Workqueue: usb_hub_wq hub_event [ 229.623889][ T81] Call Trace: [ 229.627152][ T81] [ 229.630061][ T81] dump_stack_lvl+0x3d/0x1f0 [ 229.634641][ T81] panic+0x71c/0x800 [ 229.638513][ T81] ? __pfx_panic+0x10/0x10 [ 229.642908][ T81] ? __pfx__printk+0x10/0x10 [ 229.647476][ T81] ? end_report+0x4c/0x170 [ 229.651882][ T81] ? check_panic_on_warn+0x1f/0xb0 [ 229.656972][ T81] ? kobject_put+0x4ed/0x5a0 [ 229.661544][ T81] check_panic_on_warn+0xab/0xb0 [ 229.666461][ T81] end_report+0x107/0x170 [ 229.670768][ T81] kasan_report+0xee/0x110 [ 229.675177][ T81] ? kobject_put+0x4ed/0x5a0 [ 229.679863][ T81] kobject_put+0x4ed/0x5a0 [ 229.684286][ T81] put_device+0x1f/0x30 [ 229.688516][ T81] usb_put_dev+0x23/0x30 [ 229.692740][ T81] vhci_urb_enqueue+0x9b0/0xe00 [ 229.697578][ T81] usb_hcd_submit_urb+0x258/0x1c60 [ 229.702763][ T81] usb_submit_urb+0x87c/0x1730 [ 229.707540][ T81] ? __init_swait_queue_head+0xca/0x150 [ 229.713085][ T81] usb_start_wait_urb+0x104/0x4b0 [ 229.718099][ T81] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 229.723640][ T81] ? __asan_memset+0x23/0x50 [ 229.728219][ T81] usb_control_msg+0x326/0x4a0 [ 229.732966][ T81] ? __pfx_usb_control_msg+0x10/0x10 [ 229.738236][ T81] hub_port_init+0x1d3f/0x3a70 [ 229.742999][ T81] hub_event+0x2c67/0x4fa0 [ 229.747411][ T81] ? __pfx_hub_event+0x10/0x10 [ 229.752161][ T81] ? debug_object_deactivate+0x1ec/0x3a0 [ 229.757788][ T81] ? rcu_is_watching+0x12/0xc0 [ 229.762537][ T81] process_one_work+0x9cc/0x1b70 [ 229.767457][ T81] ? __pfx_hcd_resume_work+0x10/0x10 [ 229.772721][ T81] ? __pfx_process_one_work+0x10/0x10 [ 229.778074][ T81] ? assign_work+0x1a0/0x250 [ 229.782655][ T81] worker_thread+0x6c8/0xf10 [ 229.787236][ T81] ? __pfx_worker_thread+0x10/0x10 [ 229.792326][ T81] kthread+0x3c2/0x780 [ 229.796372][ T81] ? __pfx_kthread+0x10/0x10 [ 229.800958][ T81] ? __pfx_kthread+0x10/0x10 [ 229.805539][ T81] ? __pfx_kthread+0x10/0x10 [ 229.810104][ T81] ? __pfx_kthread+0x10/0x10 [ 229.814671][ T81] ? rcu_is_watching+0x12/0xc0 [ 229.819414][ T81] ? __pfx_kthread+0x10/0x10 [ 229.823982][ T81] ret_from_fork+0x45/0x80 [ 229.828378][ T81] ? __pfx_kthread+0x10/0x10 [ 229.832955][ T81] ret_from_fork_asm+0x1a/0x30 [ 229.837710][ T81] [ 229.840941][ T81] Kernel Offset: disabled [ 229.845246][ T81] Rebooting in 86400 seconds..