last executing test programs: 17m48.024078762s ago: executing program 2 (id=2157): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getuid() mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x38, 0x30, 0x2d, 0x39]}}}}]}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000000)=0x3500, 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r2, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) 17m46.17392334s ago: executing program 2 (id=2165): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB, @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8"], 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff3}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x80, 0x4b6, 0x401, 0x0, 0x12, 0xfffffff8}}, {0x4}}]}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd85", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 17m46.039997721s ago: executing program 2 (id=2167): mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x438, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x368, 0xffffffff, 0xffffffff, 0x368, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'hsr0\x00', 'gre0\x00'}, 0x0, 0x258, 0x298, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x0, 0x18}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x8001, 0x1, 0x9, 0x5897, 0x401, 0x4, 0x3, 0x101]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x498) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) shutdown(r2, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x84000) 17m45.099498505s ago: executing program 2 (id=2172): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000096c0)=[{{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000000)="3c77a420668117919b6aba2dc5d793946e4da3", 0x13}, {&(0x7f00000003c0)="65eba865da5787b824398b15107813dd66cb3918487baefcc5c71cfe30bcfe38883651f865333e98730004aa3302f9e066565384acfbfc6b78142a2eec722b09bcd696c6c07fc75578ee888271e0b683a7672931e7fda0b33803bebdbaa365c2b386a177", 0x64}, {&(0x7f0000000440)="dcd965885c53469ef6b355c218dffa3dc957868f9f793ee0b0fdc3551d148b7dcd2bbc130eb3a821652f20f94bf3faa4da779789f737e81802baf159eb88ffa9960fcdbd34c6d56a1f2bcad8f6f4fa379912f4110bd7790d8a6d0b646e3dd4ddf0f4bb4d81b97abbc7dcc8d0a659b0ddd25c0c211d9c2441b3054043e19ab0ac9f935474bd1d5e735680a715c3207c9295be85753bfb22ef", 0x98}, {&(0x7f0000000500)="e19fef9e08d9d324b5917a0667227e10a699ce9cb5de2ba4eb3c5d8a44ba0b5f5a70d273da664654c424792d04c30a88be16d8ffaf5ccec251585d1b464e9feaa3f2b6ecbe7075175cf038f68593f8c87df748ed60257a2f662c1a5e6b52324ba5", 0x61}, {&(0x7f0000000580)="f02e7a5845413039ba458203f1948ab427f16e648744128ff0f905b43d28e6a254172255a499be5065eaf015fb84a41dab7dd3d3229c8ee6215920b44dc359d6432828c790c86566434015c4ccc35913c17ff86416f1a9cdd988a6a441b02c7becb4f71af7a11eb1da6a10ad984d4dc82c4fae9ef85c40732e005c2bd05792e9488561a709e6a5acf76616ed2cab8bd6ae54e54185c2c895309f3783cfcd907c4e3fc75676e95d4a00bc3cbe3270774a554f7536afce078cdae0f234d33fca7e6ea7367ae997b63fed815ae8bb7a9c05654eb65c3d19437b7bf837d356fb9f", 0xdf}, {&(0x7f0000000200)="700b3af679c49c5edf3b545d207cc45105e465ff44", 0x15}, {&(0x7f0000000840)="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", 0x1000}], 0x7, &(0x7f0000001a00)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [r2, 0xffffffffffffffff, r3, r1, r1, r1, r0, r2, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98, 0x4080}}, {{&(0x7f0000001ac0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001b40), 0x0, &(0x7f0000001b80)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0, 0x40}}, {{&(0x7f0000001c80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002140)=[{&(0x7f0000001d00)="b0d740f897", 0x5}, {&(0x7f0000001d40)="b26ed194f6f7f6e8beb3246b615d8cb4ac971802e139c26b04d61e24d84d780619fff5c5355a016c0f377dd436fa9f421f236855eb24cf188e7c89cb5c37d357748efe49bfc6cb08298f4dcfe36755b7964742d9493e347f3ce5f415037872862cf1fdb740c66b51943331302761edf5e9d9268dc5ae5abb66216bfc9380ebc966729eef4ac8ddfd8de05bf43a76a0cc43ca2fe503cc2ff09d9343a0bfdfffc047d7ae969cd35d3e5d6160c9363dcb4fd8d2a56ca9", 0xb5}, {&(0x7f0000008300)="5d50d56da8ca4428e18d92cdd0119b2cb67d688ebac3c40c3ec42a07e1817c7664218e611a276c2454e15e3da67f4969fcce3c0081ff76375f01ccb58a0fdedd1d4b5a2fe5871c17e9fffcad2a927a4b5655a8a869f24345c516b143a2e34c40834aa5450543254f3bc4965c52d1cc5b5d4413e427224871b2b4a39ec33b08029c0b1c23b305361fc746cc1c811d8fcfa452e3165e2c282134b282d490a3a7a11c7035ec853d39a945168589227c7f204bc944d05c63d2bb787d5f3e8b1182238ed60155e1b3bf64b40361feede7c476ebd4095daa78afc9553d2b8b7d62799b0086eb982347f1290b475e3917384829c515bcf8b9f4d3c9c1bd1055f2d71c85488bf27cc664d1a63a7fa2bd27a9ddeba0915911bc8acaa4f3bafc336f31e373acfad63bff2038df35b33b81a335b0f2ee0c8f5b505879e35be4454561fb2835cf7ec6edc13ac7280cfa49807aabf635b3af98166ae9cb3cd7a724c45e14e73ac2adbc6f8d9b870a392a746ac0ac0efbafa7bdac702ff4b1e7a7422183cd317483b99a0b8cfb083046ad559ac4e83fbd6b6074177645f848953b3a82372a233fa7e44b7ab205e2db8f054679cc878b655441db974912f2e6405e1966c2e4e783f66aee1c1dd46aecbb6d4295998c7e915a0bab374f80f6df871d594c23bcff52f2759f66957ecf23585386ea51496aa32b4e55ceff78fe88704d20a7774bb8840eba2ac0702c7affbabf75501b5e29b1b879bc1addb359ba7f600c686b8164440c0c8dec92a853311691a946fb4d2e705408ef10b2a0ed7ca965993f4dd3254e8632ac4e3b5019c0ba0a7be118bf3a86973048fc2a8d899ffbb167f37c3e9d5385891c40e1ae11adca6974f4d6f9419eb82a3c763351a7c6cf643155eb3d23721c3e09d7d3dd53489345e5e9a1cd372d42bfb91c0a023367321263dfa9a2c55c09c58f599f935de14892e96514b17579944f8db56cf64aa8f24149e85c18c80faff987e1db6f612dabd6ba6c388f3f44c8094e163e66461ca05e0b06d0a28f1a9d762e5e3c86a0bd255339da6ab28ca4a4d68cfe93bda003d5da28178ef9eb8713613adb0b3922449ff5d74323f66c044e538a872343e7f27c1afd01629e82b788b9ce9dce9d170ebee15ffa502ff75018166a38644171a86e421d27a975e82ef63fa01258a4c9f8c4089fb07895fdeb63422a66420e19db7eca5f6eb93544821189ac0e60fb33c31f9e6e8e9c5a2a3ee4de9ad9caab520467c79de425b96dee988f663b976b31dd790be5d58a9c30117eab99592f4cc0ae2dd88b46e4c90306ac09ac7b56d12b3f627b93dd8a9fd8790ca1dcfa436bd034896d57477afcec382650bf1b50f40184d267ab0a956a1378b76ca6f710cf2049d5edf73e396904c3fd6314db1247968cc9f6f9cfee105ffb7b118ea5a435ce36f960d671058df13489f0503e0475992f091c53f49f195f40c8eff984eefd1f62a2b85c99270b7a636e3d6fa85b8e2fa360bfaf978de02fddc334f11e1ec47c9f2b172d82b75082e9c5b87dffb73464cafcf52d6e701318137d4c0da08b572c3946e4af16fc301a0ca58e029b92bd0dd39af41b7acde2e7fcfbcda48ac2bab6b3242b07da0f009e374b72cb2c811edd6996110d9831532ac1f787a019dc84e8db42134a33a8b0eab6432bfad4a9480d7ab9a8baa4051f509a36f405d708df7127f1ca6e101c28f35e0229e2bda854189b9efd612d40bc9aa56262c7f26df7bad1e803bc9747b8dd30b6c04379d56318b48fbad6980b70974782b77f1fde46afc99e2cd6a372b46d68c00a6b2e39011717c8e2c6ea227b06868417a5bd354f1d8c705304b00c67290e3a50d1d4f3502bca385d2494296750436dbd54ae0ea1aad0026bc680391dfacd54f2922ea4be82a2f364f2983544f426bf51b710bd57383aa5240cbb685b9b2c75b82818d9ad9bcc2f1d28d30d6934695f301526de7ab08aee98f57e194f9a70b6ca6a7227dac875948326570a0650b74db5aa306ef3c64bacb438b70e1a8221009799f8bda67dace3e2c4c3c8a59b4df96e923de3c2238c45191773da4aa16124e30366d33ca390c560580a6a4667d83d9d02ac69fb5980623be287e6aeaa3334c99e5e5e9ed534dccdd9473378ca5cdc4f1a73c69512458c1a01bb620f7743502f32d5f00a861144320961434b2d790a9d05ae990936a0841f2940e70fb32dd64332f5b236d3eff31b5e9a1b20dfe07be047e1a3149900b8309b5efe2d2a4ea6829866f5a52e74c6fb3bb591981876dee397376373f47c03c9d5f72526787e161090bb8657864256f818acd4c79b641c6e3c1616f90f3e848cb74fde88cca3a6ced970b50d1e104a9e2f835e482d5da4a7e98836a47af38cc206dda78cf0166fcbb56264d2bec241d922a9cb272e006d0d38254feadfc39192f9c0f3e3b141dbfc0925faf096be806194e455c2469d2fc86dc62089efc7bbcc3a680b097db24a08ca84ca4665f09170d413da1070a2bad4e27ae246791848270082f71e2e0e87d724c3bbd40fccee46be07dab2aaae3856063bb5613177dbb342268936a930a2ec5bae03b1a4d49ee64d6afd81b4158f9e369fed6c07bbf3b0b3a553f85195a0bf591c45bcc828bb8ec8a7ce9574ad0526a177ada46ecda09c9eae69fe01d9814a11d1387b8bbc5ec9b4f8732cadfc95bccec50ba3e3f7955ba92513fed6d5b4ed42306642c3489ba921e0b72ecc3960fb7ce8125fde207b101f68a05915814f37d68d47b9476d587f5a3b229cb2b06726dc73b99d0c63e74e948b046654a3b8952612d2eab60fe0b966062a284c1171f022e7a0ab7b855676dfad34f032fd679a3a95a0e8ff834be223446f5cc0cb68f5383878919212a4ca27e22d5d31703a54cd9f205ff25cfa0ceac928936b287c1a140786df6055e505b998517c14ce913cbcd97759f2f6d734beac6cf00ee6cda499c5a95d310610806d3319a8b5e9df2efc943dc2a1e489cdf8e71d1d542de5ba321fb258015543bd4a2bb746d8c4dc38fc928133b6b3ffaafee1f997770b7786f9abda6f1b0fdc880a9b0726598340c7b280fcde93d613f3f5c446f2de51b5fccfe644ff437c7837071f0ee17d73bbf962728d41d3a41bb7c6b001b9cff465e76f39003b354a372d7780629a1ac9c1f8e262ca40df625cfffa6952a0ca7011f5ac3d0be2283b9b9809458ff6cbf3df4b61d7f5bebbc52385f93ef6614dd7a55023713a1bdc8b4552c0cbd05f722f971d579d0a3654d3ebc773f20a5b5d9f7e727a1c8a002383eff3cddeacdad44724863f0ff81d9de1b679ea0f5b98194497ff02dc636620adc3119ccab6eaa259ee9729630c0f4dc377e4944844894a70bec1a9dfdbb7dae90b8a4ff0054c2bdc05097eeef4c124f09b01c425dd61f4111ae273b2f4b3aa916641d08717a2c719f7d234fc5c7f43b9f629f3071dbc3ce92176679fec039a8687c69948bd97887f110f1815a20d28fe0a41dfd6b5828e82995c700f16fb0e7441b9652fae0292503f76b8a7b58bf89414ec26eaac0f97b0868fbdee06ad3775be05250d6728757e5e5325137fcf2ac4e4bc79c0745b2f2cee5c337437d3de37d642ee99980be39d0f7bde6a2b8189340aa08de2688310d9567390103a17993b22805277595efe1635a5844c074110043c55faf706f9eb4538476edfba73a2f35795271e008d9581ded294a3c562ea6c90e7560b2676b50b4e27cfa1f59f21f28d9ec7c1a576fa84c48b61ca3fcd13d5f5f55477837074a8f6191105ce54170af5559a16a1f22f864dd7bcea0be6aa81c625ee3d78268994be9098de598e86533a635d0cb0d2a51b171e0ba5628ee724537fadb76612c56e3a442fcb6da4626bbc556c961c8d476bba95eff242ccae0d1f3f9b5ec7250e09d738219317d09bd41c1e872e100693d778380fb9cc99844a68b3ca6b00467a2b7a2d3a6a13c24ba2fcecdc87a2f1ceeb2550cfc0b50b78f9ee9cf2ef52670048847eb4dfa561cbc0618120f07d824dd1d139d65b51197af63b1ceaa41823cf100be2e3902e307cab9c459b89edd2eccb91991f639d7639c67950d41d804d653ad20144cfbea1ee30be50b2276b98a64c28a6c5dad749730db90091d11d021678f73ea8ebca625103c8c2d4005157b8982e352809226c36cd84df65f5aeba36c78550b320512c946d9362efa4271b7f772ce7f4a4eda752fd38ceaca295fa4264dcc1fde65c3d78f3afa36fb20492eeca77b833238d9294fd6d807a4af7119f624d2d47e3a5ec5e154ff0c7b3018e3f06dc0b357e125a8a92fe0f26a5ea4cefb54edfd7fcbd67200b1002fc870389c58c3a9342dc773bc156e4dbc2910a317368489560e6bcc480bab353cca1f2e5b83fbf3d266a6b9df5dfac886bcd001433d3608f27dc08888f38fc602951cd8da22d6431f5625f58f5616815060fe51dfeda28c40e56377cad0f0867ea6c2963ea74b5b06b6f5047d5f8d04c331aaa7b72fdc0b9b7fff17185958d0b78eb301c194b1e7b8baf2cdb668e59c2b9daf93d9df0df9c15e37cc55f8d63abfe6583443b15991af379823b982454e96e161bdc26ce9ffb89ea430f99df9cff8f51198f7f07ef3e8b3db46f126ee8031af323783ae5e489be0178a49c8a5308971c3c2797ed390a1853c94f6e253b3e2d3fd98a23fe9774e98e0d98aec4f55c1bd678906807d359843a8aa58b748bbeb96399c8f7ffd0695eb080d9a77dab5072df1f519c2efd3788a2b26ad29ffa4fb293c600ee8f78e1d13d3a077211fe34b67cd393ecab0b7049f4768dd2f7ecc6cc2a9847b91d5a9e9c0825aafbf14d449ca900b408242bf784c362b0759cacfb563dd329ac6ff36a8f11d01c08377af13cb19df84d4437971508196c68c0b177b0900fff2c242d010cb9dfa98703d4f44ca7ade6082e89fe00b259b58bd9de37c87eb3e97f0d17dee9b11b716c57750610d9aec1294f7464d56133b71c52e02ed1ad542f0876469729569f0673db30bc036c4adb11691b0c92e16dae71216ab9fe45d673ee1d3ded2a697f5dbc01882be3545b590250e68b19d6365f96e692a2feb1d1bbf545c8d140e07803983a17fb70bdf588936eb8038deb4214d714fe269a69f0beb4ea5c451a2d8f1180218fc202b3220607cb9bad5fe398c499712124daa1c9c2483a8ae36c065b9699e2fae84ecfb35dd3f4b09d7a1443e701dfcd0fd6a6da741c50b98bdd4088e26a29ef789c48228c696cad19d4faafc6fcb5c0e6be3cc5d0ccadd35e731d90a8a46421dbc97e1eb12c905623646b12d40aef18db0331c4acc130f39755382f06c59340c8a3f2e29e5d35be834d3af9f0693ca3a821bb5520beea092b64c7d3b94ca95e591901c96d7b26f2d24756310694cc9eea97fdaae8cbf10630f00fa6cd3bd5cd681f818a128888383067ada5178211ebf641fe318128a14b6f755ce5cf3f32e522f3184050c3e483530ff4508b71813d32ee9436306d77f876050590df9f2b1d9542d79188abeef47498e37dfd37bb60bc01dc3d46049e3f843c6d7c46888fcd3dfb523231ca1c930f1ef7ace70a24a0b34be897aa5da45d0f4dfaeeeb64ac2f3feff5f877a21a87422e90ab5a816578a20c6349111ce24d7e560f0121d8fbe9766291d0b27cd71d1d53e9ab62a0902bed0561c5d8ce872ef32b89160ec65734b58403e5cdd0ec28775bb7e8a4a2718f9606771b8f0e51a04d941e570128e42ee059beb4a264f5811e337d333b79fd200fea2800f692a928fe8c27ffb80969c0ea9245e3b21655", 0x1000}, {&(0x7f0000001e00)="49c531a61a0c95e7d26a0a20a06622e2821e116ef717fcd0efc05bd09d0621d0a91401221f61b6cf484748c6097cadaaaefac366a13e419f386f489988838a5773b3010009e41bdb194a80a6e8db1fde17413affbfe743115d363f96ea29585b72cc132c1b31cceecc0e277693eed4f096fa4422211f117141712a1915a8ebfb8f0fc6ff63d3caa9dfb4ac61ff60a26fbda22c7c11277b552e6950dcb78fad62eed39b92f91fc4182b5419ec07bb8a23af7f44459a7979bdb8bf99cc7f24a9076f7017ed93670a5c5e78011d8a7806b8e49953ce92e92cdf290485fbbb6a754843e553", 0xe3}, {&(0x7f0000001f00)="ec1d1f8f80503854f53cc426d79f9bd8ea8d09d92c86e9cc8c6a9efb0aa82144c41b56f2a4e309ed463e12508ac5e6e3b088c970c83fde23b45ddb73884e12a039b825107f45dac86ae9a46260ab81797ab799b5c36fb8dcc303dbb58f90048cd63f49203b399fb97499fe40efd6cd72039c662cd308de1943cc832fc34bebb5284242de5ee1e2599fb541420c45123d24e42e1dd10cfae7fdc840216bc560540da6a871dfa1118cadf08b6faff11df815a13a675f9a5674f886edbbd9e8dccd295793756dee1c3bcb1a", 0xca}, {&(0x7f0000002000)="2a60361b174b5d1f358016da81cf978a68e64ec46254621c3e2a8e72a4f55ad5c41dd3570054d61b1ca5cca796643e1bb84734f68f293b2067483ac1844a65bd4ea05f2d7eedd20b586e55a8dee726c768ca88de4b53e1a8b4b5dcf7", 0x5c}, {&(0x7f0000002080)="c262dcd7c8c80124c2910b8149fd26b7f3fc547de927a4597e19df2cb7d3b4dc9b6c7cf2faf76cc87474c6f8fce81cdfdc5ecc9163a2b88f486d97b768ea0393bef851ef1e1b23fb37902aa69cbd5e2fe70ae36359d607704c736f01fbc5eb959ebb63e78618029daffbe7042a49c943652ca6c90d6c2c77e3db88a791acc304880d04a2f34615f00a67259be420a48c70b8d638d42fecba0d4876765210c727ba98cf20de868dd20c571874", 0xac}, {&(0x7f0000004200)="f261785b2c25e82573d4b2245406707b14b9ab87f8c005d37f7b32e6158902b4bb5a3998e87c36b401381a7c483c653991ba2ce0c28a24f97a18d7f7f69db058e5f7b66e647859d306be1214f879575e2b6c61e14446960aedad27d95ee36687989a56cae733274003424d0a113a2d977a8686e6805d132b29543a845575fbb808928337690f1987ed18adc9bb34c10ef47f7737b61e6c7ce5163139242106e60e3be03c150b750ec7df417e70e4af0ee9f4cded94eb2346d0af2b96235ed63873e3b05b9c9fab2881e389c451edceac2aeee6a52181a622f0e69cb74cab6c6153958d99dae13c", 0xe7}], 0x8, 0x0, 0x0, 0x20040000}}, {{&(0x7f0000009300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000009580)=[{&(0x7f0000009380)="3874b580115305f680ce99221d4792e6da1aff959e6877b2218dbe9306147163ac7731ae89b79e149b8e8e75ce2a20127996fa09191d9a67693413c3107ce5b51058ed8a7bc4b6f23c3f29ee7a49eee99352afa6a69bf9272bd8b64b03d8c15c5db82921e787fd5b1fe71ab1a89f6bb332cdbbdc10864e4c919d7545d9c060765732e365e7fdec93458702719a1be8d55d4a001502724e2499cb0d313aa2b3a87018b704dd0c9ad059ebc2c76d0b6602e5484bd6bb8f7cc5ea8f584ef713b3d3e05fa355940c749df6aa81c1390aae8988bb7708c439356b5d7e531f37af00204be67cb8f605389ee2544fbe589411489e47a1", 0xf3}, {&(0x7f0000009480)="aaa83332ee5d7f2d6bde46d68dd51065bf14e89bf2db02f31be61fdf3dc3ed3ecbe9d109752acee14c1af4debdf3dbb459811a4728a3b4aba1e11b83af06dd7572ac5c1204e1859551dbab49b7d98fa7f0a6be81a9aa02f76e472d6b851272a1378aa46093305ef55da8941b4a70ac7a1a755912ed3f4db7941b96f6a0a6579b8835769b305716e13026df128f450109016623899312f632a6582dc5975bbeba04aaa5597f7bc9f94654373e8f46ab0d60fc4c722af198c13b4eff3affea2b1e10dc1e64fdfdf40585ec88cbc9a8e9e7b9d1006fe4cd4aaf1b455718c9", 0xdd}], 0x2, &(0x7f0000009600)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88, 0xc000}}], 0x4, 0x10) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) r5 = getpgid(r4) gettid() process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000180), 0x0, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000300), 0x20280, 0x0) ioctl$FBIOBLANK(r6, 0x4611, 0x8000000000003) ioctl$FBIO_WAITFORVSYNC(r6, 0x40044620, 0x0) sched_setattr(r5, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x13, &(0x7f0000006680)) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x279981, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) close(r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$BLKALIGNOFF(r7, 0x127a, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) r8 = fsopen(&(0x7f0000000800)='binfmt_misc\x00', 0x0) fsopen(&(0x7f0000000100)='fuse\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) 17m43.989109489s ago: executing program 2 (id=2182): syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) pwrite64(r2, &(0x7f0000000280)="386b36346f14af0cd421ecb35cb4160118aeb43e76af9d085d54616e0129f12b3f4ece2eb632ff25a11e30257c1378b008e5fcf5d341ea2e76bde9ad0f68b76e66057768a6735f91c1ec0218f55c04b880332b1718cd881d3d4d013f6c1745f7a99386beb65e193e129174a2665c3eb533ad4ab640c4978d34af4e15a7b5cc68c26a4487738e7b571b86e0ca00", 0x8d, 0x1) r3 = dup(r1) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000040)={0x6, @raw_data="e20d12b5106d6334ca3d88db4ac9519298f93658132eef30ac9fad56d34e80705d161196a991f8628b29fdd809218a051c0ac2b43af9f7abc76374ec19ed45ae12f8b3cc26301e139d1ba1adfa6408686a542ef604311a130d3c6c459c95c69831dddec2030cd01c2ac6d43240f11d6bb70fca4fbb47ad04e701c6a275c6d61eff0fbc935493435597c423d8204ba86411c2ce452558f186b4e36554d88d006f61f9be29c5186f938d8673c2cbba5438def1d7a2e08d0d8fd15dd14d220d05f1c4dd6204c6658f0b"}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000080071000040"]) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r8, r7, 0xc, 0xffffffffffffffff, 0xffffffffffffffff) write$UHID_INPUT(r3, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0xc1004111, &(0x7f00000000c0)={0x800, [0x4, 0x5, 0x7], [{0x6, 0x2, 0x0, 0x1}, {0x8001, 0x10000, 0x0, 0x0, 0x1}, {0x4, 0xffff0000, 0x1, 0x0, 0x1, 0x1}, {0xa, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x9, 0x1, 0x1, 0x1}, {0x3, 0x6}, {0x7, 0x373, 0x0, 0x0, 0x0, 0x1}, {0x3ff, 0x6329, 0x0, 0x0, 0x1, 0x1}, {0x5, 0x8, 0x0, 0x1}, {0x401, 0x200, 0x1}, {0x0, 0x8, 0x0, 0x1}, {0x9, 0x5, 0x1, 0x0, 0x1, 0x1}], 0x7}) 17m41.266064575s ago: executing program 2 (id=2192): mknod(&(0x7f0000000040)='./file0\x00', 0x200, 0xb) r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0xa00) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a959fc5ec5071900", "8e083700daf38a6d69e9b5e9c2f133d7", "e2739528", "12772541f8ebfebb"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_usb_connect(0x3, 0x319, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000855e642082050900766b01020301090207030100fd3180090468fa0baabf16fb0a2401ad2e070201020b240402"], 0x0) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff004) ioctl$CEC_ADAP_S_PHYS_ADDR(r0, 0x40026102, 0x0) r7 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) write$FUSE_IOCTL(r7, &(0x7f0000000100)={0x20, 0xffffffffffffffda, 0x0, {0x0, 0x0, 0x0, 0x6}}, 0x20) r8 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000023c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) read$FUSE(r7, &(0x7f0000000240)={0x2020}, 0x2020) 17m25.122892588s ago: executing program 32 (id=2192): mknod(&(0x7f0000000040)='./file0\x00', 0x200, 0xb) r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0xa00) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a959fc5ec5071900", "8e083700daf38a6d69e9b5e9c2f133d7", "e2739528", "12772541f8ebfebb"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_usb_connect(0x3, 0x319, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000855e642082050900766b01020301090207030100fd3180090468fa0baabf16fb0a2401ad2e070201020b240402"], 0x0) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff004) ioctl$CEC_ADAP_S_PHYS_ADDR(r0, 0x40026102, 0x0) r7 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) write$FUSE_IOCTL(r7, &(0x7f0000000100)={0x20, 0xffffffffffffffda, 0x0, {0x0, 0x0, 0x0, 0x6}}, 0x20) r8 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000023c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) read$FUSE(r7, &(0x7f0000000240)={0x2020}, 0x2020) 13m16.683346789s ago: executing program 4 (id=3290): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000140), 0x0, 0xfffffffffffffe05}) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x20000000000000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f086766c744240012e93bf96766c74424020100c5006766c744240600000000670f011c2466b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a930f01c40f019f09000f01c2", 0x6b}], 0x1, 0x7d, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001b80)={0x2, 0x6, 0xaf, 0x6, 0x7, 0x0, 0x70bd27, 0x25dfdbfd, [@sadb_x_filter={0x5, 0x1a, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@multicast1, 0x10, 0x10, 0x4}]}, 0x38}}, 0x4000014) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13m15.586747618s ago: executing program 4 (id=3303): arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f0000000140), 0x4) sendmsg$inet(r1, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x24008000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r4, @ANYRES32=r4, @ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r8 = syz_open_dev$evdev(&(0x7f0000000040), 0x991, 0x40c680) ioctl$EVIOCGRAB(r8, 0x40044590, &(0x7f0000000200)=0x7ffffffc) ioctl$EVIOCGRAB(r8, 0x40044590, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) listen(r3, 0xfffffffc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1e, 0x6, &(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYBLOB, @ANYRESDEC=r0, @ANYRES8=r6, @ANYRES32=r10, @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = socket(0x2000000000000021, 0x2, 0x10000000000002) r12 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r12, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x801c) dup2(r12, r11) 13m15.405582693s ago: executing program 4 (id=3305): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='6\x00\x00', @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8faa5cb28989108c94e95a12489c73629f24aaef11a6cafca29"], 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff3}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x80, 0x4b6, 0x401, 0x0, 0x12, 0xfffffff8}}, {0x4}}]}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0900000003000000040001000500000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c4"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd8500", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 13m15.313388691s ago: executing program 4 (id=3307): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xff}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x0, 0xb, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_COMPAT_NAME={0x7, 0x1, '^\x17\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x79902000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) (async) r5 = accept(r4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r5, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) 13m13.945795091s ago: executing program 4 (id=3316): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 13m13.436290673s ago: executing program 4 (id=3320): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='6\x00', @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8faa5cb28989108c94e95a12489c73629f24aaef11a6cafca29547a05f362658b"], 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff3}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x80, 0x4b6, 0x401, 0x0, 0x12, 0xfffffff8}}, {0x4}}]}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="09000000030000000400010005000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c476"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd8500", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}}, 0x10) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 12m58.129854233s ago: executing program 33 (id=3320): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='6\x00', @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8faa5cb28989108c94e95a12489c73629f24aaef11a6cafca29547a05f362658b"], 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff3}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x80, 0x4b6, 0x401, 0x0, 0x12, 0xfffffff8}}, {0x4}}]}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="09000000030000000400010005000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c476"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd8500", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}}, 0x10) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 10.323764454s ago: executing program 5 (id=6595): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f00000005c0)=""/74, 0x10000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000640)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="a6b41f0500000000000000bacff3a50aa6fe814f6750c8521ed83838c6fe4baa3d7eaf770a688766439a89b9ae9e2d487d8eb466a695a5c2a69943b15ece3474a830396318ce8382be42f6af6daa2574c3f7188d3da18a5931e97b5e65687415095232bffaa1b2979609d02c5246ca65a1fd9a97c2e2f39df23e11c236bc2a953814a984ddec21f4cb779e6a740fc0b2b9b82f1a1ee27b89bcfb35302759fb21ef7d225279f108a833b13dd27ae3c1bb5c2d24ce9af63ef1322b33e56380ac4b9171cd086f042b3334"], 0x4c}, 0x1, 0xba01}, 0x0) 8.30321209s ago: executing program 0 (id=6606): gettid() madvise(&(0x7f0000bde000/0x1000)=nil, 0x1000, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x1000}, 0x38) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$kcm(0x10, 0x2, 0x10) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0x35, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r4, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r7 = socket$inet6(0xa, 0x80002, 0x0) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) readv(r8, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/89, 0x59}], 0x1) setsockopt$inet6_int(r7, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) fcntl$F_GET_FILE_RW_HINT(r6, 0x40d, &(0x7f0000000040)) 7.411264042s ago: executing program 6 (id=6607): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1250000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 7.113228018s ago: executing program 6 (id=6609): gettid() madvise(&(0x7f0000bde000/0x1000)=nil, 0x1000, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x1000}, 0x38) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$kcm(0x10, 0x2, 0x10) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0x35, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r4, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) socket$packet(0x11, 0x2, 0x300) readv(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/89, 0x59}], 0x1) syz_io_uring_setup(0x555c, &(0x7f00000000c0)={0x0, 0xba57, 0x80, 0x3, 0x388}, &(0x7f0000000200), &(0x7f0000000240)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) 7.021615017s ago: executing program 5 (id=6610): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0x4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000000580)=""/102400, 0x19000) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r3, r4, 0xfffffffffffffc03, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x867, 0x0, 0x1}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) setrlimit(0x7, &(0x7f0000000000)={0x4, 0x6}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) 5.249724169s ago: executing program 3 (id=6616): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000010"], 0x78}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @pic={0x81, 0x5, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106}}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000001c0009"], 0x38}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r5, &(0x7f00000002c0)={0x1f, 0xd, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pipe(&(0x7f0000000340)) 5.155712494s ago: executing program 5 (id=6618): fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f00000000c0), &(0x7f0000000100)=r2}, 0x20) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) 4.045237081s ago: executing program 5 (id=6621): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x2b101100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000001000000000000000a"], 0x7c}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r2 = syz_open_dev$vim2m(0x0, 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x7, 0x1, 0x0, "4a37f6c000190000000000000020000000000000000000000100", 0x31435641}) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x4, 0x5}}}, 0x24}}, 0x40004) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e00090000000000000800000300000004000400"], 0x34}}, 0x84) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$x25(r6, &(0x7f0000000240)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001800010000000004000000000a"], 0x2c}}, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000008, 0x110, 0xffffffffffffffff, 0xbe40000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000000000000000000000000000040000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000002114000000"], 0xffffffffffffffc3) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r7, &(0x7f0000001940)=[{{&(0x7f0000000380)={0xa, 0x4e27, 0x2, @mcast2={0xff, 0x5, '\x00', 0x0}, 0xffffff7f}, 0x1c, 0x0}}], 0x1, 0x4004) 3.175187105s ago: executing program 0 (id=6622): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x10000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 3.114985735s ago: executing program 5 (id=6623): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0x5000009) r3 = open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113) r4 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r4, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, r3, 0x0) (fail_nth: 1) 3.095209161s ago: executing program 0 (id=6624): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001200)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) sendmmsg$unix(r1, &(0x7f0000007a80)=[{{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000000c0)="6c942270cad2d40f96432c50e4a77a43aef5337015f1bf67eb57415539e2992cc813d086f5ebd7ebe36b04a1d4f4618fed35f3b25a7d77872ba38c415f4bd52f427c9b2e", 0x44}, {&(0x7f0000000140)="50b5faaf1725c0bfc2dbb8930ea04c00436419a43eb4d9e693207ad47e356259243666c814eab5fe530c53daed173f3bfa5970ebc968c4f9f70d2326ca65b47aac23832156", 0x45}, {&(0x7f00000001c0)="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", 0xff}, {&(0x7f00000002c0)="8976c2c9cd82b53a30566edac488389225444aeaab49064c2f495b9fa810538e0ddcc9aac3945a259c3acf0ea9f34535b18a9d83919197f9dd91c1675f7d4f92", 0x40}, {&(0x7f0000001240)="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", 0x1000}, {&(0x7f0000000300)="db066506b6d7119032575aeba92c84497b78a4b97f7888fc94caf781c41f779cad4acc6d75c437d6f53a2d2145261061f6f732e3846bdd1877b7eb6df36f955b10e8de725b5fd1e820b9139ae4a8d1fb1e7c9f52688a7b7ef0e0e4741cabc5a1e4804d5e9b5c2da97afda1c2248bfa6fb767cd8512797b369248cb5f0ddf4b5010c760e789cb92a7806e15fa7a38d6c1b1f9e3b3a4cceaa73dbeb0b9f2cbf77f84256fb3a4ecb274ba7404cb09e8e8545006b46f8dc705adcf0a4cc22ee4352f430e80b8ce5183133b9ff682bb3a", 0xce}, {&(0x7f0000000400)="230363f5956a0bbfed185a82e0fdfd445a6b82df5f46f3c7bd81aa26e94b5c6e72196f3a9721a653966918bfa6ba14608790e06628fb169a28b403fc5ad0335e1f4680d1cdd31b29f2cae7096c6ed1c6a1346abe970ee0eb212fd3694ed1fbcc5284143f79e9e0bf9a303d992e2c5255b6fd883b321cb4a381e5aea1f68a8d54b949f8fc", 0x84}, {&(0x7f00000004c0)="b6ff31fc16ee62a92dfebc49eb8053ff1dedc9bd94825d18fc20fbb01ec448dfefd301de422be2440bd6b9365ca055aca216f60ff69c099ced5330beca2349bf46f0c6fb829ac3045e4ee6d1ba53b9efeb9620fad52efda540bfcdeb9f13daeb3e942906e7d2dd32ee1813ea3e3b87af0b33aee7ab0b51ca65891b603117a1b0c2568bdbc61826f3dc041e7574af19ce8d6e16572867ea8fb9a0dfd31d7a9d874e6bee5ebd93491a8c195d774cd88522b22a2cd55de479e2197dca3f0abfb6cca1ad3c87c00d", 0xc6}, {&(0x7f0000002240)="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", 0x1000}], 0x9, &(0x7f0000000700)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r0, r0, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r1, r1]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0, 0x40010}}, {{&(0x7f00000007c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000840)="723cf53abe4be622264df593b4ea853113d336b3661190ef399585bf7c003283848c5613fd46ae0146cd0367fcba3b80300aedab997b98bd240e503ed7aab4577307464a62f3752b974e14bfe4b3b62aff1f8a1032837765eefe7e874edfb0de84f81c72a1dce386fe55ce4fa7798d78889c6436514ac5817aaa5794f900d9fe9df576190f117e58626135d4caab8cfa1efc0b827833333e6e718bbfd4f4a723bacb0d779778db3470f1315f643f7e3041e3e2dbe8a83f200e2993c6b851eadaf2864d212143905b0f75f75e7569c71fb0995531e1", 0xd5}, {&(0x7f0000000940)="4a4910d6f6520ddad65a8f61e617bc44a906b8d31b111f4a66ed10727ece8696cf399f31930465282df1563663e48bdb4b287579977c0ed2d4c99030d958906d51e5f5ec7bf172c44cebd9153e9167bf45a6453be5b05aecfa92143b4fd5", 0x5e}, {&(0x7f00000009c0)="7e69960f05c3b5554c34643a4d69b6052766d5759819e682d3887f63f8fe918de12faa6343a4213b959fb26f2f6ffeed042765f3dc7e67738ca9e739f481e43116126d471f38ce451cf8fa648409bdcc2c1a0e64bff465c962503a5743be37ef8203e11ef24d51a8651d34b4a71307ef0b53c85700705e81d59e363955a3f32ce95b282395997778298360026853292bbd5049d3cd4a4418aee0af52e13ecf8f0fe435e27214b45e693160e77d00ff0fe28a1c0e200b5a867d7a72cc38091053f3de84dae03025c105b0a63ee2c3980e6be3fa9d85d9f7b6feea4f5e2b4d0a4b9f14754d", 0xe4}], 0x3, &(0x7f0000000b00)=[@cred={{0x1c}}], 0x20, 0x40008004}}, {{&(0x7f0000000b40)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001040), 0x0, 0x5}}, {{&(0x7f00000010c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000800}}], 0x4, 0x48000) 3.045733523s ago: executing program 0 (id=6625): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001700)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000400)="1b", 0x1}], 0x1}}, {{&(0x7f0000000740)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001540)=[{&(0x7f0000001280)='W', 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000240)={0x0, 0x2}, 0x8) 2.995415588s ago: executing program 0 (id=6626): connect$inet(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x1c, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x3}}, 0x18) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r2, 0x800, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x10) 2.509604684s ago: executing program 3 (id=6627): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002e00000005002b00010000000a0001007770616e3100000005002e00f90000000c0005"], 0x3c}}, 0x0) 2.506166947s ago: executing program 6 (id=6628): r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000140)='%\n>.\x80\x16\xb7?](<\xe2\x9b\'\n\xd8\xa1\x97\xa7P\x05!\xd70\xc4^O\xb9\r\x10\x9c[\xe0\xc6\x10Z\xe9\xf8vMT\xf6l\x19\xc6A\x7f\xe8\xc9\xdf\a/H=9.\xe4\xdcb>9\xf0F\x189\xba\xd9*\x89\x8cm\xaaTS\xb6\xfb:o/u\x8cM\nz\x97b\xc3\x15\x92\x83\x16Y*+\xa6\x1e)\xba\xbb\xb5:\x8d\x8ff@\xf9\xc1\'s\xfd\xcd\xfb\xd9d\xf8\x91\xc3\xf8&@MB\xbb\n\'\xec\xbc\xaew\x87\xffM\x14\x03\\i\xb8\xd1$\xcf\xd6<\xeb\xea>\\\x15\x10\xff\xa4\xa6)\x05h;\x15\xd2\xcb*\xe4\xc2b\xc3\xacR\a\xd5n\xd4\xc5GKL\x9a\xe0\x99Rh\x7f\'\x8144RE\x96\x12\xa60R\x11\xd4\xa8\a$4\x90N\xa9\xd3\v? \x02J\x92\xcd\t\xe6X\x93\"\xd1`\xaeK\x9f\xc6\x00\r\xd5X\xbb\xf9\xd0M-!\xd2\xe0MR\xbd.\x1bj\x95\x84\xc9\xbd\'', 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="2b7069e21e9596218d2ead609e"], 0xd) getsockname$qrtr(r1, &(0x7f0000000040), &(0x7f00000000c0)=0xc) 2.315016717s ago: executing program 6 (id=6629): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0x4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000000580)=""/102400, 0x19000) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r3, r4, 0xfffffffffffffc03, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x867, 0x0, 0x1}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) setrlimit(0x7, &(0x7f0000000000)={0x4, 0x6}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) 2.305514855s ago: executing program 3 (id=6630): r0 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) r1 = gettid() ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0xc0405626, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioprio_set$pid(0x3, 0x0, 0x0) shmdt(0x0) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) 1.908818718s ago: executing program 3 (id=6631): fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f00000000c0), &(0x7f0000000100)=r2}, 0x20) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) 1.677608283s ago: executing program 5 (id=6632): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000d00)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x340, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xe, 0x80, 0x7, [{{0x9, 0x4, 0x0, 0xb1, 0x1, 0x3, 0x1, 0x2, 0xe, {0x9, 0x21, 0x8, 0x1, 0x1, {0x22, 0xdac}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1, 0x1, 0x5}}}}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x0, 0x5, 0x37, 0x20, 0x1}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0xa, [{0xd5, &(0x7f0000000780)=@string={0xd5, 0x3, "f5a2fa471d33048002443b13a1fe876d3edc521d09b2399a01b9a050279372933c92b3a2295d5b003a5b5d5d77dd6b0738fafba8ff6af3a63e2db97dd2afcd7043ed317046dfd22bfecc11f09735273da724c3e06c80e477a7737fc0fac461529e23aa236631e1f97e649a7e671202dcd0b66213ae9268d29055787fb1faadfb65ad783341620cb857990be261af86727a407f8e0d2d9dfcd0b05284d51882edcb2dd94e28c951e6b3e5333b23240da7c21e4a8f1ede0594986826802a538e5bc18d6939d60180abcd34894cf761e576312e3c"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x3f}}, {0xba, &(0x7f00000008c0)=@string={0xba, 0x3, "ef3d4351d66a9364e76e09fa945b7751b808d86fccbf7fd03a184e96724abf5cb3d6393740d87784517e2896e776595f24ed32b53c594643fbf9e8793ce9c81b3027d896ff8f8b604abdb7b2beaf43210fc4bdefc52551850837107ca060e122818d1982fd815c3ee97c5e9658340c6c8820a331cff57e9220987582113b6f5f75095c34e406c381929f10590f7d5b0b9f439ab069168e270dca1fd2001474b49196636321372249dfdc3e573ded9b2b71897c69681b0591"}}, {0xcb, &(0x7f0000000980)=@string={0xcb, 0x3, "3f40496fb2221174fdc7336e00973847836455ed4fbee608127cab96a258475193768faa79ca0bd936e0f4f5f3362d20f10e8d12b29338c84ebf79b4a7af467c6c504b59a9cb3540f3dd52550441ec644d20996768b0897a0e61283523cf55292cc10137d65b4ad6ef68b851a71aa7cf474e8736f99e447b5c1fff61fe71fb9534fd5606cec3d35e51798039e634d6d83769ba81410b08f9e0bf0f68ed07a4b04046c8b8d9bf862c393c620f08ab3027164214e8202aa68516d3ac07dc175339527b29a08ca1a5760b"}}, {0x39, &(0x7f0000000a80)=@string={0x39, 0x3, "b45f63597812aea45eed8456eb1504324cebc2208568fa44d40cc774050579d258ccfbbd741f843da290dbb5f4f8ad4d81456e5de20b43"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x408}}, {0x38, &(0x7f0000000b40)=@string={0x38, 0x3, "193e9c4963b94e646ead49854c43ca917373bcdfe03c6af3b3fc70920bdf03dc3539812589b7a56b7804a917614775a329d27bfa5ef3"}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0xc04}}, {0xeb, &(0x7f0000000c00)=@string={0xeb, 0x3, "42defebc4e04197921429e277f899fea44a3ee79e5a1a9ccb6f1fb2fe4304a25ea09fa5e4c7d3d15f672b8ae1e3e0139073b24ed199e715743a5b552dbe502ae758471b40c2c353db47e37b12796b626870fd049754f61082962b4b7fc470e2180b253d9c99eafdd6a7f3d726837bb85766d92829b956f2dfb2c8976c496d96c88d205d7653a4f7c591e69c7446a109b081a99adc7e6b2021039907d938a98229f5676eb59df27a58b1c24ea026659aa47432a94f16686420d23cd44c793d71def6eb9377e5dbe108df110791ed5a32928a7d8c78f278aa515f8f350754ac1a84d0defd4b47aca4cc7"}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x41b}}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0xc9, 0x4, 0x25, 0xe23}]}) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1c0000005e007f62516a071c02f8abc36f1d73dbe1ce84ebc7c4c1c9", 0x1c}], 0x1}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000100)='pim6reg1\x00') r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) recvmsg(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000d40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000b00)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000001040)={0x15, 0x110, 0xfa00, {r4, 0x8, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x10000, @mcast1, 0x204a7541}, @in6={0xa, 0x4e20, 0x1590, @dev={0xfe, 0x80, '\x00', 0x29}, 0x7}}}, 0x118) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a88000000060a0b040000000000000000020000005c00048018000180080001006c6f67000c0002800600044000070000400001800e000100627974656f726465720000002c000280080001400000000e080004400000009d080002400000000a08000140000000110800ea40000000030900010073797a30000000000900020073797a32"], 0xb0}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) syz_emit_ethernet(0x5f3, &(0x7f0000000180)={@local, @local, @void, {@mpls_mc={0x8848, {[{0xffffe}, {0xb8a2, 0x0, 0x1}, {0x1}, {0x4, 0x0, 0x1}, {0x8, 0x0, 0x1}], @ipv6=@gre_packet={0x5, 0x6, "d1abe9", 0x5a9, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @remote, {[@routing={0x2f, 0x8, 0x2, 0x9, 0x0, [@loopback, @empty, @private2, @local]}, @routing={0x88, 0xe, 0x1, 0x75, 0x0, [@mcast1, @local, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @remote]}, @dstopts={0x11, 0x1b, '\x00', [@pad1, @calipso={0x7, 0x18, {0x3, 0x4, 0x5, 0x8, [0x9, 0xa2e]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x9, 0xa6, "7eb5ecee290fc55ddf20ad5904f06f049ac3bc0b45cb3d472f8f5f648d9c694cf0c236fc3d10fbfc14a38379e429fe68e92f7ba7c7df44b941b44f15e068e97587c31f8c6a4c07096a4a0a696f650afd90d4337925ec74a908f5e6c1d87fcd381ccc8fbb4088766524ec845676904588536eba45d9bcacc21d68be5d8204f61635f538f850244c6522a414906a0090b861e285d19209dc9a13369388710fd04b440c5c70c17b"}, @hao={0xc9, 0x10, @remote}]}, @hopopts={0x33, 0xe, '\x00', [@ra={0x5, 0x2, 0x1}, @generic={0x8, 0x53, "de53e1bc0e0a78a4a931abad65e611d05ec69cd10f8149aac32181deee1dc7f70097417a0054ea40f83150f7ba8a6de328a71a8b3a44713f9226b750539eff1f1b78de225b77500f33628b9d39eb5ecdc2d9e3"}, @jumbo={0xc2, 0x4, 0x6}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x3c}}]}, @dstopts={0x27, 0x3, '\x00', [@pad1, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}, @enc_lim={0x4, 0x1, 0x80}, @ra={0x5, 0x2, 0x8}]}, @routing={0x84, 0x14, 0x0, 0x5, 0x0, [@local, @private2={0xfc, 0x2, '\x00', 0x3}, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @empty, @mcast2, @private0, @local, @ipv4={'\x00', '\xff\xff', @loopback}]}, @dstopts={0x2f, 0xa, '\x00', [@padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @mcast2}, @pad1, @hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0x401, [0x0]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x28, 0x2, [], "5d150cc9d0c201d72d4f0afa7f7ad3d2252ad30c686689b81e21eab87bdc94744bbed36dd037e473"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0xc65, 0x170], "ea8745aac144087a76c4ff0ccf24e8a4c49f8d8ef787b2f0df919bb7b5c8951a7ae7e2f96fc2022245d53d1321730bc1546536829b4440412b3029081437b8af95a6bc78fcaf1648728f9aacf8eb61414a3c79081657d4d1956e00a9ef0f191b5b3bdc5186d106c315171e70cc696b9961ac6b4a885f0fb86768688b08bd929f3c821676a8a964b5a01b6939e671e233f3fcbb50734d951997d4fc1996a5cf5aa1f0db4b2e8196cbc012421e03d5905c6391be6b7931264d99ab50fb3ec2687f94becb100fadb38c9d0e58156f927328c7a642983b9082acd8037e9c7ef017710e05e1ff39"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x1], "35371bd807644907572cc5c0ffb51ef86d5852a2fc3e6f852823a397e6cd58810d1748c992d66f4cf374095711b77c62aa38fe72593cfcc6d01636ba03b9864f3d670cb303f2a55df00d092869e846bc644c85764bd64df61016fcce31c151b1f52449fb95a3d6dab3f3742597aa78fb1272aec4735b01054742cc06a1f858c936ee02e2046e2cd4069dffc609067ba2b248a8b5c8bd5724d3295d5f68a8af2b1b6254b3ed9addba4b9ec70edd73c2"}, {0x8, 0x88be, 0x4, {{0x7, 0x1, 0x7, 0x1, 0x1, 0x0, 0x1, 0xe3}, 0x1, {0x81}}}, {0x8, 0x22eb, 0x1, {{0xf, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x2, {0x80, 0x8, 0x0, 0x6, 0x1, 0x1, 0x2, 0x1}}}, {0x8, 0x6558, 0x4, "eb1e8c500b67abb20fa5aef56e2f23726134946c409e0a032c903d6b61d21cf7b8541e7645f6c05d811a0deebf343064d23aa66504284530b0da07c93e5b3dfa750945ee4b76356cebaaf9c3376aa4af704add"}}}}}}}}, 0x0) 964.233384ms ago: executing program 3 (id=6633): mprotect(&(0x7f00005f6000/0x1000)=nil, 0x1000, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='mm_shrink_slab_end\x00', r4, 0x0, 0x3}, 0x18) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x64, 0x23b) 944.621164ms ago: executing program 1 (id=6634): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x10000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 716.081542ms ago: executing program 1 (id=6635): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = dup(r0) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d40000001b0001000000000000000000fe8000000000000000000000000000aafe88000000000000000000000000000100000008000000000200a00000a420f943203c7ead91cc53000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000800000000000000000000100000001000000000000000000000000000000000000000000000000000000000000000200000100000000000000000000000008001f00000000040a0010000000000000000000"], 0xd4}}, 0x4000084) 698.047335ms ago: executing program 6 (id=6636): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001200)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) sendmmsg$unix(r1, &(0x7f0000007a80)=[{{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000000c0)="6c942270cad2d40f96432c50e4a77a43aef5337015f1bf67eb57415539e2992cc813d086f5ebd7ebe36b04a1d4f4618fed35f3b25a7d77872ba38c415f4bd52f427c9b2e", 0x44}, {&(0x7f0000000140)="50b5faaf1725c0bfc2dbb8930ea04c00436419a43eb4d9e693207ad47e356259243666c814eab5fe530c53daed173f3bfa5970ebc968c4f9f70d2326ca65b47aac23832156", 0x45}, {&(0x7f00000001c0)="212aee3cae24c46a1a1bae8fb9fcbc72810ea0bc725fb94a2b6215fa4777c56a654ed767f703b4b4b7b2fac1b74bc3cde44d5d163f5fe9b6ca99c66d251f15e4a734f5e4c095ecac9c5bf42f246a8b874e4bed986d53f8abdd9bd39c594f75da0d16dcf6655bc4aef78e26b159853cfda5302209261107e1ffa1adf3e41343656a7e4cdde6cc10192626bc03ddf5d3446d9f315ab72d28eb19ad818c932d44aa3219d54d499bcfb4860ef29c991f0412bcf07c53ed9dd0631a669bfb17e97d8c5fb4e7c4394e933499203422b6cd02269de016dac4229e8e813373e0de7599cb24d4b65dff0b67f405ea94e18e6313e9d3e56532de03152f84d8c397871a0f", 0xff}, {&(0x7f00000002c0)="8976c2c9cd82b53a30566edac488389225444aeaab49064c2f495b9fa810538e0ddcc9aac3945a259c3acf0ea9f34535b18a9d83919197f9dd91c1675f7d4f92", 0x40}, {&(0x7f0000001240)="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", 0x1000}, {&(0x7f0000000300)="db066506b6d7119032575aeba92c84497b78a4b97f7888fc94caf781c41f779cad4acc6d75c437d6f53a2d2145261061f6f732e3846bdd1877b7eb6df36f955b10e8de725b5fd1e820b9139ae4a8d1fb1e7c9f52688a7b7ef0e0e4741cabc5a1e4804d5e9b5c2da97afda1c2248bfa6fb767cd8512797b369248cb5f0ddf4b5010c760e789cb92a7806e15fa7a38d6c1b1f9e3b3a4cceaa73dbeb0b9f2cbf77f84256fb3a4ecb274ba7404cb09e8e8545006b46f8dc705adcf0a4cc22ee4352f430e80b8ce5183133b9ff682bb3a", 0xce}, {&(0x7f0000000400)="230363f5956a0bbfed185a82e0fdfd445a6b82df5f46f3c7bd81aa26e94b5c6e72196f3a9721a653966918bfa6ba14608790e06628fb169a28b403fc5ad0335e1f4680d1cdd31b29f2cae7096c6ed1c6a1346abe970ee0eb212fd3694ed1fbcc5284143f79e9e0bf9a303d992e2c5255b6fd883b321cb4a381e5aea1f68a8d54b949f8fc", 0x84}, {&(0x7f00000004c0)="b6ff31fc16ee62a92dfebc49eb8053ff1dedc9bd94825d18fc20fbb01ec448dfefd301de422be2440bd6b9365ca055aca216f60ff69c099ced5330beca2349bf46f0c6fb829ac3045e4ee6d1ba53b9efeb9620fad52efda540bfcdeb9f13daeb3e942906e7d2dd32ee1813ea3e3b87af0b33aee7ab0b51ca65891b603117a1b0c2568bdbc61826f3dc041e7574af19ce8d6e16572867ea8fb9a0dfd31d7a9d874e6bee5ebd93491a8c195d774cd88522b22a2cd55de479e2197dca3f0abfb6cca1ad3c87c00d", 0xc6}, {&(0x7f0000002240)="da76b5c80f00ec09c28e20d0ebf840e37fe65078dd2b4fb93a2edd9ff7bd76286642994f70f5f09b77bb31392bd0b75563989ad6bc5905346ce602c62fc46594b9c000d00d32ab1d11ebda299a38de21d2b83cc2747ce7ca156e8edc0c1e0b63c98d7075569a3d1a1cf44605528cd83c3eb93ea139b8cd648e83e97f8cf81984ccc68c1e9c0b6a785a8baaa45495e181fea14f5b36d2aacfd00b3ca69ad0e2268e1d6948ccbd55e9e0564e92e142949abb9e2564b97219f7d793bbc6f65b6291c671a42cc4be221ed75105149cdad8ecbfb7c3415f56568d3e2809221fe66eb5295483bfd0ef57fc5337f746a5e899214189eb3f5285552dfeed5bb99214bcf19a3598908dd3f16c9730f8c1d8b0e1d9c93e6c4a321abfda211d1100cee93c9b4e02c5afbfd0f30c3be455c6eb532be942d67c3171174887058f7ad8f440313fe643ffc2d1d2f42ee96fe25c97632385da3a92cea3285c9ee7f8f447976cff7f553c76d3d0546808f9e8d8dcad08eb5de7ddcdea5e375ad84a5a8d7431a5e28f39c6f570beee5c4e493c24df091a4dd3cec5c22e9863c269aa57a29906fdc3df3d488cd0af35f097998d9fbf03b3cc02213e3c2e91acad28eabe987a74264d6b54f1fac5b9651530ede68957d09249b6c2843cc775840513e4d3d49fd7a13826d3917216fa4e42edad38fd381fc4272d8315f39799bc2eec25591eca24d7d6b2342cc726c6019188dbe599660a5d7a460cfa67af323d9548f772f711e8cb8ce6f73eb31b6401a82ef1784578ea5ea3dc7a21203f4c461f5efb99a2e91006e04446b92254b694c973b4daec5f51d759ae09254ebe789e73a26a702ff0ba4c29fefb8f02a2ce90321e2c07c8e03fd84f7e65a5b553ff200ea236d688cf99243051a0812c3de04fd2d1937c94b945e9fb4627d39db1cac322c8344c0354a46eae0694ce95d0614380d35485803cd1e51f9598790a004d96ff0506276aacde0e16959091b392c8cec6ca1c30c4eb074d628b249293347e86caa3b4d765164fe917167c4ea3d8d3e0fc609e8f772835b82237c723eda9e8a41d13f8eade970802eab64aed5dbf55eea50e4274ec000cb97291505a908099e0f8681b97ac8fc26dee40b7b1262c6e555c6d99fc8694ebc0b84c9dba7f1272bb8ee656fa9a655f5814cc30fde1f02fa4427296f3e047d1aa2721cd31f875da0bc1c7600f937f740ec8f3e4a2b6db926a0a0bd3633208a09b25f23c68da35bd8e6b533c3e0897ca7b739e802a547424f22d49878c9d7323c40d72271db39d5528d7d8610e5488f97628e18a27966f84bff20c3717a89ab7c8f38941269c39f9bde168cc49cc18a9d06574d10e4ddb55b59ef9eedf0317b4c96cfe735d7c12c923a71125aaa5f590e9dc9c5219035122dbd514dfd9b76e309cbde5db3f7d3b3c9549a7b740287e26f898607f53f39cdfd93cb6a198a9e24ad4040bf5861bee6b031690ccdbee61265924c6824b1f49e6ae10e64fa5ee7c220c23b1c5f4799cb0746840406d9b5e3524e68bdd10d17a60b5a83b1f5432ba29878597e123957aac5d9068ccb4bd041fa75c5c4d9558bf766c949dadf9769edcef55d5ee4c52e91928b2027eca741ad32d811d31ef843f3765bd5ccb81b6f2f56d58eec0a06aa1ba445128e22976ad7a0309542c4a7169311e9b8bb24e6ea65f53253107d8e60f0ef8615d7d670862e6e1c6ef1944c86bca2bdc0e70942a0bf0f84fca1986624dfb6358d5cf76af9d3ce51b0d80a09b5c629bf43b8db964eade8b2f0470efcace1544a30a60e32e5bdddfa351b47110de7fbd699e2c387dfa63458d30da8a544032dfde43de0b4587f1616a949da819e4bd32ce33c090c7f6ae88e54858167f9ed0b052c5bdb5bc3e663922a0ff69cc4c7cadd407cfb796d116585baeaecbb9ba1f7ec9a126feeb3abc143dd0853ee3ea68526bd3dcb8b4cabe9138adb6dd15f29f6fd4b0345989390ccb2f0d861578c03e75954cfe055e5fda8b791fd8b001f6fac54c145766e6164b093988eca1919945fdb7e71cc2714757a225d78524bf4c75f3e6fc9b46cde2b5274709d4beb47879190334c0af6fa8fe0cd30257f47986fa357f184d782cf4876497d0f56efb873f28acdf616dead2624a57432a333ef08539735649e2425d61076db92b065f4e8d0751da21097de624d069e57850aa0a9c612535e8f85026cac8b95e3f2865aaf6d0d8cd22e123f9515e60ddf21abbe2076444f3de668658df8b2438625c68a179a5c5329e7423ecdb231ffee07ca409e2c6548c48f835bcc9afb9db02a26899935c356a3acfe0360fc1203257a02d4fed7fe238afcb1ada24e258bbf8d627fba1b055245623d6ab452f7cf501ffb22835a6b6d5ba9a639483c1175730aa2b62aca2016c688a20109dd1a11aac811c3df6d665839cdac791eeb4fe726cdee336b80a9094f611e5aad10afd355526a7cda02c1b81ff34c943d6802a04f2db33b0ecb7914a9a046b2261df5258716010b5cc91518f09d71a65d56b9e848d9c9d700f21c526a4b889a1b18639749211166d47ef65ce422a6b64c7eabf822941bc7436786f96ca1304411f1a93d3e5a275610d4ea5a843d17e60df6c6be07e8d771d7efc9fd2ad425065e30f9095282d2b7de61daf2515cdd000cc7f74d36ff15b24c64b6580c5c5f2990156e0936556e39a78729f13767f57d1987a56bedb7085eb82bbb3a3c976c2c863092bb1d27874f8acf37513d912613ce568d07c5ece4c2fd509ae868c506b7aecdf70c623ea644ae07544276a53c4dd25dba127598f6b859062aa423c50a486232761b45082d083a58dbbc5ee7f4af1760118844bcee7e543357919865d94a4ce4fa003b5f4d22d7638cbe9b0801ab72c9b683efa02fa55b383796d517a1f7207fb4324a84de81363f51e616c719a3fc9f8900d32468a8f864a24257eb1d36a719bed1777a3c7b6a9b591bd0ff6078ca6b7ea8942e029b489ba2e07152ea4e0aa36b09514bc7dfc57f252e9b5efa0b16c51c9bb9b877bb88537f8d12e92b3f4d13564ed2419fbf785ec804e7816ecbd62bbb51fbbcb01d96b503fc2f49a78a830f85848d896528c50c6af91094fcea15488428d0d3a19ee9d71251487fdff3d600566b1f903d72ef52996f67ec20d3529a5bb72688b83f8a616e07ef74b8ad49e460ef8c887df5904729a590e562bc8687be35a8a787e7133fbb112e8c42b9020f2f71984fdf61c8cf90a33b4eaf21866e6a7d0ade0567ed078a53373d191b888cdb614c01640f12c18061547190c0e26056daf028c83a11ef48a1472511c6c4ac62ee533d9132abca2cc235a48f4a9ea9ba0dff2ab53b36e3b002cc17b18696cf9105bea5296f546db4937df30937a4c48bb3e31b12c8c1e1c18f6a13f905238a5c55bcdb2f4c3a8ea063afb9af67ade91b88e2ee08e3270f5824b617d570cd7f58f9bc2302d0f2711f9839473fa58159bd9d6d550b4d089f0985cd459b5b2b1e41d6aba38b8000c4d973ae158fecbbcd5d8d5a254279d795ba95bbc705b0e8c0a3921c94c25fb6a462956fd4e1d224ef404e9694d726114b81563d0d01f8fd2942cb5d2ff702a64a80f8b244a0111f8f16f55e7d02ccb263a7f97841f64def8d6accbba122b37f4149f0f8738aeb69429f410a42b9bd053d65b4366ec9f2f3588b9be32d30f292ed9ba7894bd42926e624a79b41abf576035bc5381eeecc3f98b9f55d4c4d8caec3a24b0addb324404d4380a5ee4a84978bf489bb2ffa39a75906d638b19c590823c7d85683c7e5a4ac8b3f8a257417b0dcc1084ecce046715cca82f31f59737e702b291426809fdc3c17fd17bebe5b7c955180eb13854a48ec530ed92534c0bc2dbd94e4c750b22037ba0b9f136f13d38041fc5cc954ccf0021c2fcef9e4cad89faa92271a92ebdca4129f5ecca25914ca9081ef076f74d1ba63cdd80bbdac327c34a1fb39f72741714223aefecee0e9c8abd9688248761165fa26959bffe22f5bc31fd5991558d84b34815563e0ad14dd492975a110c4dfca222bc978384a043ee306a9992b408aa19e34436b0454325e0eba23dbf4e6385657bce77aa374b506b69703d730653aaa05b4c362b43a942916d98823e94ba12bae9f8219ed5d4627fd590b4be0dcaa0e24070f00fbbe3840c50f0d684a9c82079aee6d2b682fe1ddaf06acce077ef03b6ab9ada84a80573e82e730c5bd176f7d31d692312e12c92138df83f45b2a1ed4903629fbee06a28dbd17b8dddc743c8c9d76d6be6f999283e3f1b5fc3102b60b9aff0dd7dd0bca20c460aa0c9b505b359ddec251ad94da2452d9c91eace0ce8f47c122d358c63b3c0201e7969522458357edd72a7edfa5c33c49fef86ef4436ef3445bd805c787d9f18ee6eb5a0e198bed412617c3a7517772a90e577345b41018c8b0a0ae599595951013ab921879dd6ceb543a7daaaeb346c10ec3ed14755f4bb639fa3765d86cf02ee90a152ff2a566b165f626237bde1a1f5d031f428e407ca8e23bd6f28abbec33c7c54ee425259a172440039eabd3e85e4ae1917182a6bf26201910de233da2d7158b9a4717aa20b7f5fb34e953f9899db4f3e9fd64b2fde7b4dcc5b5aecdbaf3ff7e2e027315bad8f7c644f62a6a6603ab80b37120c7bc279c4ad61076638c32be9642b25f708e8e0e575b5b8be549d8873aac778c7322a58d70bd1a3a3bb54ded5e68f5dd119e20f657a404f3e8d0e6d94848b569ff8ee6f1464e525ff7bf991343b56f066f9ec24e3092ee67327c18a979c736a23c2b3c1dc870d861e20951b06ddc450027ede0d47e4cd0d5da37805a0ad2d399bbf11bea231b67734a9cbf43474a0e7a6f75d14239dc66b19b8cd5c80e52fd7b2736cc2556934b00b5079fc07dd7ef1cb06c46212a85eb217dc285dce315c985c359dd82289435ecaa8e1c2a4fc7d9c7da63a690c38dd5d4d9d4a6be55f0d4e12d6ef42aba25c9126ad301b19e3f9b2903427ff1a23a1bedac16b64fe04ac800a71cb9e9e3747d46ff79737bf61d4588bba61942f46ab7fe156a28f0c61532fdca3a3c3658e7a28a0ecc8aae34520be4ce59c4e6ab93763b730b4932487877da7d47b81ce45e4692b10099c4a5bc8531f76655a560efe0e633e9659554467b6a915e9c9a1b4c6d0f2b93261544ca226c300aed8dbb6d4b0cc4cbd2605d5e9ad457f900c42d44881cd7dc2f16ef2d1866e1a9d83668f2c12aaf948ba7b24b8d6d6db3d1b958016440a32a63c1120c7c7958685cd3e8fde4b2736e05f733c38bff25792ce6cf741b70b69dd6316efb8f96f2aebe180fd342f9336b9ce007543d291390ad90d8395632d508bdb0d375e37a57eec4fa50eda1a73c7a2014c0e0cdeb95bc34bbc894c4c7c9dfee8b8ec47ffd9ace30f9ed8210412f4dc4651d679ffc37d1c63253c29df590ec8fb49b0d2ced2e8230276b423bac139c717e9831b6bed2a61ea1ac614233e6670ab7504afb8d85563f7e61da88b108b4bc1a7816dd4cfe1ef2a07b8156446266980bd806a5fbf92f6cf3e566d85259042a50b1bc56a59ee5985e4ac5a776b202b920d9532bac6278ef6868323870fdcea5676fa48707e5d8ab1e84bb42b8ea48b7df6d1151ed0c3ff2125c366896bccbc3dd9848bea89484862554b15fd6cbd51e73c388c3b3ed165dab33a049e5a846e7e10442954b980e98d13367468d85e2bee42a05deacaef4e2d77d3eeaf1bfbac0bc03c0e11aa114041b8d9bee66becc3aadeca00d7e57ebdd5f31a3c6329a4facc191585a334778405", 0x1000}], 0x9, &(0x7f0000000700)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r0, r0, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r1, r1]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0, 0x40010}}, {{&(0x7f00000007c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000840)="723cf53abe4be622264df593b4ea853113d336b3661190ef399585bf7c003283848c5613fd46ae0146cd0367fcba3b80300aedab997b98bd240e503ed7aab4577307464a62f3752b974e14bfe4b3b62aff1f8a1032837765eefe7e874edfb0de84f81c72a1dce386fe55ce4fa7798d78889c6436514ac5817aaa5794f900d9fe9df576190f117e58626135d4caab8cfa1efc0b827833333e6e718bbfd4f4a723bacb0d779778db3470f1315f643f7e3041e3e2dbe8a83f200e2993c6b851eadaf2864d212143905b0f75f75e7569c71fb0995531e1", 0xd5}, {&(0x7f0000000940)="4a4910d6f6520ddad65a8f61e617bc44a906b8d31b111f4a66ed10727ece8696cf399f31930465282df1563663e48bdb4b287579977c0ed2d4c99030d958906d51e5f5ec7bf172c44cebd9153e9167bf45a6453be5b05aecfa92143b4fd5", 0x5e}, {&(0x7f00000009c0)="7e69960f05c3b5554c34643a4d69b6052766d5759819e682d3887f63f8fe918de12faa6343a4213b959fb26f2f6ffeed042765f3dc7e67738ca9e739f481e43116126d471f38ce451cf8fa648409bdcc2c1a0e64bff465c962503a5743be37ef8203e11ef24d51a8651d34b4a71307ef0b53c85700705e81d59e363955a3f32ce95b282395997778298360026853292bbd5049d3cd4a4418aee0af52e13ecf8f0fe435e27214b45e693160e77d00ff0fe28a1c0e200b5a867d7a72cc38091053f3de84dae03025c105b0a63ee2c3980e6be3fa9d85d9f7b6feea4f5e2b4d0a4b9f14754d", 0xe4}], 0x3, &(0x7f0000000b00)=[@cred={{0x1c}}], 0x20, 0x40008004}}, {{&(0x7f0000000b40)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x5}}, {{&(0x7f00000010c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000800}}], 0x4, 0x48000) 197.464716ms ago: executing program 1 (id=6637): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd2b, 0x10000, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1}, {0x9}, {0xe, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'team_slave_0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008004}, 0x48884) connect$can_bcm(r0, &(0x7f0000000000)={0x1d, r2}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x8e, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r4, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r3}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r5, 0x0, &(0x7f00000005c0)=""/255}, 0x20) 195.797667ms ago: executing program 0 (id=6638): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000010"], 0x78}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @pic={0x81, 0x5, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106}}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000001c0009"], 0x38}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r5, &(0x7f00000002c0)={0x1f, 0xd, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pipe(&(0x7f0000000340)) 192.011869ms ago: executing program 6 (id=6639): gettid() madvise(&(0x7f0000bde000/0x1000)=nil, 0x1000, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x1000}, 0x38) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$kcm(0x10, 0x2, 0x10) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0x35, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r4, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) readv(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/89, 0x59}], 0x1) syz_io_uring_setup(0x555c, &(0x7f00000000c0)={0x0, 0xba57, 0x80, 0x3, 0x388}, &(0x7f0000000200), &(0x7f0000000240)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) 142.640025ms ago: executing program 1 (id=6640): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002e00000005002b00010000000a0001007770616e3100000005002e00f90000000c0005"], 0x3c}}, 0x0) 108.301231ms ago: executing program 1 (id=6641): r0 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) r1 = gettid() ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0xc0405626, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioprio_set$pid(0x3, 0x0, 0x0) shmdt(0x0) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) 83.541596ms ago: executing program 1 (id=6642): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000d00)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x340, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xe, 0x80, 0x7, [{{0x9, 0x4, 0x0, 0xb1, 0x1, 0x3, 0x1, 0x2, 0xe, {0x9, 0x21, 0x8, 0x1, 0x1, {0x22, 0xdac}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1, 0x1, 0x5}}}}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x0, 0x5, 0x37, 0x20, 0x1}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0xa, [{0xd5, &(0x7f0000000780)=@string={0xd5, 0x3, "f5a2fa471d33048002443b13a1fe876d3edc521d09b2399a01b9a050279372933c92b3a2295d5b003a5b5d5d77dd6b0738fafba8ff6af3a63e2db97dd2afcd7043ed317046dfd22bfecc11f09735273da724c3e06c80e477a7737fc0fac461529e23aa236631e1f97e649a7e671202dcd0b66213ae9268d29055787fb1faadfb65ad783341620cb857990be261af86727a407f8e0d2d9dfcd0b05284d51882edcb2dd94e28c951e6b3e5333b23240da7c21e4a8f1ede0594986826802a538e5bc18d6939d60180abcd34894cf761e576312e3c"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x3f}}, {0xba, &(0x7f00000008c0)=@string={0xba, 0x3, "ef3d4351d66a9364e76e09fa945b7751b808d86fccbf7fd03a184e96724abf5cb3d6393740d87784517e2896e776595f24ed32b53c594643fbf9e8793ce9c81b3027d896ff8f8b604abdb7b2beaf43210fc4bdefc52551850837107ca060e122818d1982fd815c3ee97c5e9658340c6c8820a331cff57e9220987582113b6f5f75095c34e406c381929f10590f7d5b0b9f439ab069168e270dca1fd2001474b49196636321372249dfdc3e573ded9b2b71897c69681b0591"}}, {0xcb, &(0x7f0000000980)=@string={0xcb, 0x3, "3f40496fb2221174fdc7336e00973847836455ed4fbee608127cab96a258475193768faa79ca0bd936e0f4f5f3362d20f10e8d12b29338c84ebf79b4a7af467c6c504b59a9cb3540f3dd52550441ec644d20996768b0897a0e61283523cf55292cc10137d65b4ad6ef68b851a71aa7cf474e8736f99e447b5c1fff61fe71fb9534fd5606cec3d35e51798039e634d6d83769ba81410b08f9e0bf0f68ed07a4b04046c8b8d9bf862c393c620f08ab3027164214e8202aa68516d3ac07dc175339527b29a08ca1a5760b"}}, {0x39, &(0x7f0000000a80)=@string={0x39, 0x3, "b45f63597812aea45eed8456eb1504324cebc2208568fa44d40cc774050579d258ccfbbd741f843da290dbb5f4f8ad4d81456e5de20b43"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x408}}, {0x2, &(0x7f0000000b40)=@string={0x2}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0xc04}}, {0xeb, &(0x7f0000000c00)=@string={0xeb, 0x3, "42defebc4e04197921429e277f899fea44a3ee79e5a1a9ccb6f1fb2fe4304a25ea09fa5e4c7d3d15f672b8ae1e3e0139073b24ed199e715743a5b552dbe502ae758471b40c2c353db47e37b12796b626870fd049754f61082962b4b7fc470e2180b253d9c99eafdd6a7f3d726837bb85766d92829b956f2dfb2c8976c496d96c88d205d7653a4f7c591e69c7446a109b081a99adc7e6b2021039907d938a98229f5676eb59df27a58b1c24ea026659aa47432a94f16686420d23cd44c793d71def6eb9377e5dbe108df110791ed5a32928a7d8c78f278aa515f8f350754ac1a84d0defd4b47aca4cc7"}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x41b}}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0xc9, 0x4, 0x25, 0xe23}]}) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1c0000005e007f62516a071c02f8abc36f1d73dbe1ce84ebc7c4c1c9", 0x1c}], 0x1}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000100)='pim6reg1\x00') r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) recvmsg(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000d40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000b00)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000001040)={0x15, 0x110, 0xfa00, {r4, 0x8, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x10000, @mcast1, 0x204a7541}, @in6={0xa, 0x4e20, 0x1590, @dev={0xfe, 0x80, '\x00', 0x29}, 0x7}}}, 0x118) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a88000000060a0b040000000000000000020000005c00048018000180080001006c6f67000c0002800600044000070000400001800e000100627974656f726465720000002c000280080001400000000e080004400000009d080002400000000a08000140000000110800ea40000000030900010073797a30000000000900020073797a32"], 0xb0}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) syz_emit_ethernet(0x5f3, &(0x7f0000000180)={@local, @local, @void, {@mpls_mc={0x8848, {[{0xffffe}, {0xb8a2, 0x0, 0x1}, {0x1}, {0x4, 0x0, 0x1}, {0x8, 0x0, 0x1}], @ipv6=@gre_packet={0x5, 0x6, "d1abe9", 0x5a9, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @remote, {[@routing={0x2f, 0x8, 0x2, 0x9, 0x0, [@loopback, @empty, @private2, @local]}, @routing={0x88, 0xe, 0x1, 0x75, 0x0, [@mcast1, @local, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @remote]}, @dstopts={0x11, 0x1b, '\x00', [@pad1, @calipso={0x7, 0x18, {0x3, 0x4, 0x5, 0x8, [0x9, 0xa2e]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x9, 0xa6, "7eb5ecee290fc55ddf20ad5904f06f049ac3bc0b45cb3d472f8f5f648d9c694cf0c236fc3d10fbfc14a38379e429fe68e92f7ba7c7df44b941b44f15e068e97587c31f8c6a4c07096a4a0a696f650afd90d4337925ec74a908f5e6c1d87fcd381ccc8fbb4088766524ec845676904588536eba45d9bcacc21d68be5d8204f61635f538f850244c6522a414906a0090b861e285d19209dc9a13369388710fd04b440c5c70c17b"}, @hao={0xc9, 0x10, @remote}]}, @hopopts={0x33, 0xe, '\x00', [@ra={0x5, 0x2, 0x1}, @generic={0x8, 0x53, "de53e1bc0e0a78a4a931abad65e611d05ec69cd10f8149aac32181deee1dc7f70097417a0054ea40f83150f7ba8a6de328a71a8b3a44713f9226b750539eff1f1b78de225b77500f33628b9d39eb5ecdc2d9e3"}, @jumbo={0xc2, 0x4, 0x6}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x3c}}]}, @dstopts={0x27, 0x3, '\x00', [@pad1, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}, @enc_lim={0x4, 0x1, 0x80}, @ra={0x5, 0x2, 0x8}]}, @routing={0x84, 0x14, 0x0, 0x5, 0x0, [@local, @private2={0xfc, 0x2, '\x00', 0x3}, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @empty, @mcast2, @private0, @local, @ipv4={'\x00', '\xff\xff', @loopback}]}, @dstopts={0x2f, 0xa, '\x00', [@padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @mcast2}, @pad1, @hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0x401, [0x0]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x28, 0x2, [], "5d150cc9d0c201d72d4f0afa7f7ad3d2252ad30c686689b81e21eab87bdc94744bbed36dd037e473"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0xc65, 0x170], "ea8745aac144087a76c4ff0ccf24e8a4c49f8d8ef787b2f0df919bb7b5c8951a7ae7e2f96fc2022245d53d1321730bc1546536829b4440412b3029081437b8af95a6bc78fcaf1648728f9aacf8eb61414a3c79081657d4d1956e00a9ef0f191b5b3bdc5186d106c315171e70cc696b9961ac6b4a885f0fb86768688b08bd929f3c821676a8a964b5a01b6939e671e233f3fcbb50734d951997d4fc1996a5cf5aa1f0db4b2e8196cbc012421e03d5905c6391be6b7931264d99ab50fb3ec2687f94becb100fadb38c9d0e58156f927328c7a642983b9082acd8037e9c7ef017710e05e1ff39"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x1], "35371bd807644907572cc5c0ffb51ef86d5852a2fc3e6f852823a397e6cd58810d1748c992d66f4cf374095711b77c62aa38fe72593cfcc6d01636ba03b9864f3d670cb303f2a55df00d092869e846bc644c85764bd64df61016fcce31c151b1f52449fb95a3d6dab3f3742597aa78fb1272aec4735b01054742cc06a1f858c936ee02e2046e2cd4069dffc609067ba2b248a8b5c8bd5724d3295d5f68a8af2b1b6254b3ed9addba4b9ec70edd73c2"}, {0x8, 0x88be, 0x4, {{0x7, 0x1, 0x7, 0x1, 0x1, 0x0, 0x1, 0xe3}, 0x1, {0x81}}}, {0x8, 0x22eb, 0x1, {{0xf, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x2, {0x80, 0x8, 0x0, 0x6, 0x1, 0x1, 0x2, 0x1}}}, {0x8, 0x6558, 0x4, "eb1e8c500b67abb20fa5aef56e2f23726134946c409e0a032c903d6b61d21cf7b8541e7645f6c05d811a0deebf343064d23aa66504284530b0da07c93e5b3dfa750945ee4b76356cebaaf9c3376aa4af704add"}}}}}}}}, 0x0) 0s ago: executing program 3 (id=6643): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x2b101100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000001000000000000000a"], 0x7c}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r2 = syz_open_dev$vim2m(0x0, 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x7, 0x1, 0x0, "4a37f6c000190000000000000020000000000000000000000100", 0x31435641}) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x4, 0x5}}}, 0x24}}, 0x40004) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e00090000000000000800000300000004000400"], 0x34}}, 0x84) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$x25(r6, &(0x7f0000000240)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001800010000000004000000000a"], 0x2c}}, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000008, 0x110, 0xffffffffffffffff, 0xbe40000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000000000000000000000000000040000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000002114000000"], 0xffffffffffffffc3) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r7, &(0x7f0000001940)=[{{&(0x7f0000000380)={0xa, 0x4e27, 0x2, @mcast2={0xff, 0x5, '\x00', 0x0}, 0xffffff7f}, 0x1c, 0x0}}], 0x1, 0x4004) kernel console output (not intermixed with test programs): 9][ T1151] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.943584][ T5813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1614.946518][T26231] usb 1-1: config 0 descriptor?? [ 1614.966887][ T5813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1614.970141][T26231] gspca_main: tv8532-2.14.0 probing 0545:8333 [ 1614.981755][ T5813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1614.991692][ T5813] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1615.028583][ T30] audit: type=1400 audit(1746287360.365:1746): avc: denied { setopt } for pid=26696 comm="syz.1.6221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1615.065169][ T1151] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.081339][T26699] lo speed is unknown, defaulting to 1000 [ 1615.116514][ T5854] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1615.266466][ T5854] usb 6-1: device descriptor read/64, error -71 [ 1615.338560][T26231] usb 1-1: USB disconnect, device number 107 [ 1615.396286][ T5854] usb usb6-port1: attempt power cycle [ 1615.500571][ T1151] bridge_slave_1: left allmulticast mode [ 1615.510320][ T1151] bridge_slave_1: left promiscuous mode [ 1615.516613][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1615.541453][ T1151] bridge_slave_0: left promiscuous mode [ 1615.550682][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1616.196772][ T5854] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1616.234818][ T5854] usb 6-1: device descriptor read/8, error -71 [ 1616.485410][ T5854] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1616.639268][ T5854] usb 6-1: device descriptor read/8, error -71 [ 1616.748989][T26724] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.6227'. [ 1616.758743][ T5854] usb usb6-port1: unable to enumerate USB device [ 1616.849160][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1616.861953][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1616.871728][ T1151] bond0 (unregistering): Released all slaves [ 1616.888314][T26716] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6224'. [ 1616.907150][T26719] gtp1: entered promiscuous mode [ 1616.952446][T26699] chnl_net:caif_netlink_parms(): no params data found [ 1617.025352][ T5813] Bluetooth: hci1: command tx timeout [ 1617.348363][T18648] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1617.524408][T18648] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1617.552314][T18648] usb 7-1: New USB device found, idVendor=05ac, idProduct=0340, bcdDevice= 0.40 [ 1617.568788][T18648] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1617.580024][T18648] usb 7-1: Product: 㷯元櫖撓滧降宔具ࢸ濘뿌큿ᠺ陎䩲岿횳㜹葷繑阨盧彙딲夼䍆炙秨ᯈ✰雘迿悋뵊늷꾾⅃쐏◅蕑㜈簐悠⋡趁舙臽㹜糩陞㑘氌₈ㆣ鉾頠艵㬑彯ॵ㑜ۤ臃龒夐紏୛䎟낚ᙩ➎쨍툟᐀둴隑捣㜡䤢圾⮛襱楼᭨鄅 [ 1617.611309][T18648] usb 7-1: Manufacturer: ? [ 1617.632517][T18648] usb 7-1: SerialNumber: 䀿潉⊲琑쟽渳需䜸撃빏ࣦ簒隫墢兇皓ꪏ쩹㛳‭໱ኍ鎲져뽎둹꾧籆偬奋쮩䀵啒䄄擬⁍枙끨窉愎㔨켣⥕섬㜁寖홊棯冸ᪧ쾧乇㚇黹筄὜懿燾闻ﴴٖ쏎廓祑㦀㓦椷膺ୁ龜뿠栏߭낤䙀룈뿙Ⲇ㰹ར꬈✰䈖⨠薦팖ެៜ㥓筒ꀩꆌ皥 [ 1618.048209][T26699] bridge0: port 1(bridge_slave_0) entered blocking state [ 1618.175836][T26699] bridge0: port 1(bridge_slave_0) entered disabled state [ 1618.233071][T26699] bridge_slave_0: entered allmulticast mode [ 1618.245583][T26699] bridge_slave_0: entered promiscuous mode [ 1618.258693][T26699] bridge0: port 2(bridge_slave_1) entered blocking state [ 1618.266058][T26699] bridge0: port 2(bridge_slave_1) entered disabled state [ 1618.273395][T26699] bridge_slave_1: entered allmulticast mode [ 1618.280999][T26699] bridge_slave_1: entered promiscuous mode [ 1618.291443][ T1151] hsr_slave_0: left promiscuous mode [ 1618.300819][ T1151] hsr_slave_1: left promiscuous mode [ 1618.306680][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1618.314185][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1618.324301][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1618.333334][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1618.361182][ T1151] veth1_macvtap: left promiscuous mode [ 1618.367654][ T1151] veth0_macvtap: left promiscuous mode [ 1618.373496][ T1151] veth1_vlan: left promiscuous mode [ 1618.378976][ T1151] veth0_vlan: left promiscuous mode [ 1618.858243][ T30] audit: type=1400 audit(1746287364.115:1747): avc: denied { shutdown } for pid=26757 comm="syz.1.6237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1618.978829][T26767] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.6239'. [ 1619.157418][ T5813] Bluetooth: hci1: command tx timeout [ 1619.757330][T26778] FAULT_INJECTION: forcing a failure. [ 1619.757330][T26778] name failslab, interval 1, probability 0, space 0, times 0 [ 1619.770090][T26778] CPU: 1 UID: 0 PID: 26778 Comm: syz.1.6241 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1619.770117][T26778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1619.770127][T26778] Call Trace: [ 1619.770135][T26778] [ 1619.770142][T26778] dump_stack_lvl+0x16c/0x1f0 [ 1619.770173][T26778] should_fail_ex+0x512/0x640 [ 1619.770194][T26778] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1619.770224][T26778] should_failslab+0xc2/0x120 [ 1619.770242][T26778] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1619.770273][T26778] ? sock_alloc_inode+0x25/0x1c0 [ 1619.770297][T26778] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1619.770316][T26778] sock_alloc_inode+0x25/0x1c0 [ 1619.770334][T26778] alloc_inode+0x61/0x240 [ 1619.770355][T26778] sock_alloc+0x40/0x280 [ 1619.770374][T26778] __sock_create+0xc1/0x8d0 [ 1619.770395][T26778] ? irqentry_exit+0x3b/0x90 [ 1619.770419][T26778] __sys_socket+0x14d/0x260 [ 1619.770441][T26778] ? __pfx___sys_socket+0x10/0x10 [ 1619.770470][T26778] __x64_sys_socket+0x72/0xb0 [ 1619.770490][T26778] ? lockdep_hardirqs_on+0x7c/0x110 [ 1619.770511][T26778] do_syscall_64+0xcd/0x260 [ 1619.770534][T26778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1619.770552][T26778] RIP: 0033:0x7fe03f38e969 [ 1619.770566][T26778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1619.770582][T26778] RSP: 002b:00007fe040144038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1619.770600][T26778] RAX: ffffffffffffffda RBX: 00007fe03f5b6160 RCX: 00007fe03f38e969 [ 1619.770611][T26778] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 1619.770621][T26778] RBP: 00007fe040144090 R08: 0000000000000000 R09: 0000000000000000 [ 1619.770631][T26778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1619.770642][T26778] R13: 0000000000000001 R14: 00007fe03f5b6160 R15: 00007ffe0db42048 [ 1619.770664][T26778] [ 1619.770702][T26778] socket: no more sockets [ 1620.286774][ T1151] team0 (unregistering): Port device team_slave_1 removed [ 1620.439642][ T1151] team0 (unregistering): Port device team_slave_0 removed [ 1621.193526][ T5813] Bluetooth: hci1: command tx timeout [ 1621.707983][T26699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1621.744972][T26699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1621.875553][T26699] team0: Port device team_slave_0 added [ 1621.894226][T26772] lo speed is unknown, defaulting to 1000 [ 1621.917362][T26699] team0: Port device team_slave_1 added [ 1621.983314][T18648] usb 7-1: USB disconnect, device number 77 [ 1622.249911][T26699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1622.285724][T26699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1622.311658][ C0] vkms_vblank_simulate: vblank timer overrun [ 1622.387398][ T30] audit: type=1400 audit(1746287367.665:1748): avc: denied { create } for pid=26794 comm="syz.1.6245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1622.421386][T26798] vcan0: tx drop: invalid sa for name 0x0000000000000006 [ 1622.470942][ T30] audit: type=1400 audit(1746287367.665:1749): avc: denied { ioctl } for pid=26794 comm="syz.1.6245" path="socket:[110284]" dev="sockfs" ino=110284 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1622.623845][T26699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1622.789784][T26699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1622.800726][T26802] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6248'. [ 1622.817008][T26699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1622.842922][ C0] vkms_vblank_simulate: vblank timer overrun [ 1622.853072][T26699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1622.911932][T26802] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1623.064748][T26699] hsr_slave_0: entered promiscuous mode [ 1623.089230][T26699] hsr_slave_1: entered promiscuous mode [ 1623.116355][T26699] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1623.123977][T26699] Cannot create hsr debugfs directory [ 1623.256396][ T5813] Bluetooth: hci1: command tx timeout [ 1623.775086][T26699] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1623.781891][T26231] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1623.791961][T26699] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1623.801116][T26699] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1623.811533][T26699] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1623.868721][T26699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1623.886603][T26699] 8021q: adding VLAN 0 to HW filter on device team0 [ 1623.899133][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1623.906318][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1623.925455][ T1031] bridge0: port 2(bridge_slave_1) entered blocking state [ 1623.932660][ T1031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1623.950335][T26231] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1623.960269][T26231] usb 1-1: New USB device found, idVendor=05ac, idProduct=0340, bcdDevice= 0.40 [ 1623.969547][T26231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.978036][T26231] usb 1-1: Product: 㷯元櫖撓滧降宔具ࢸ濘뿌큿ᠺ陎䩲岿횳㜹葷繑阨盧彙딲夼䍆炙秨ᯈ✰雘迿悋뵊늷꾾⅃쐏◅蕑㜈簐悠⋡趁舙臽㹜糩陞㑘氌₈ㆣ鉾頠艵㬑彯ॵ㑜ۤ臃龒夐紏୛䎟낚ᙩ➎쨍툟᐀둴隑捣㜡䤢圾⮛襱楼᭨鄅 [ 1624.005468][T18648] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1624.014355][T26699] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1624.017280][T26231] usb 1-1: Manufacturer: ? [ 1624.026755][T26699] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1624.043636][T26231] usb 1-1: SerialNumber: 䀿潉⊲琑쟽渳需䜸撃빏ࣦ簒隫墢兇皓ꪏ쩹㛳‭໱ኍ鎲져뽎둹꾧籆偬奋쮩䀵啒䄄擬⁍枙끨窉愎㔨켣⥕섬㜁寖홊棯冸ᪧ쾧乇㚇黹筄὜懿燾闻ﴴٖ쏎廓祑㦀㓦椷膺ୁ龜뿠栏߭낤䙀룈뿙Ⲇ㰹ར꬈✰䈖⨠薦팖ެៜ㥓筒ꀩꆌ皥 [ 1624.103209][ T30] audit: type=1400 audit(1746287369.435:1750): avc: denied { setattr } for pid=26818 comm="syz.5.6256" name="tun" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 1624.126642][ C0] vkms_vblank_simulate: vblank timer overrun [ 1624.184534][T18648] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1624.216507][T18648] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1624.246730][T18648] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1624.257619][T18648] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1624.283305][T18648] usb 7-1: Product: syz [ 1624.293443][T18648] usb 7-1: Manufacturer: syz [ 1624.329632][T18648] usb 7-1: SerialNumber: syz [ 1624.426793][T26830] trusted_key: encrypted_key: master key parameter 'IBԴ' is invalid [ 1624.429978][T18648] usb 7-1: config 0 descriptor?? [ 1624.645500][T26231] usb 1-1: USB disconnect, device number 108 [ 1624.646409][T18648] usb 7-1: selecting invalid altsetting 0 [ 1624.810257][T26699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1624.943561][T18648] usb 7-1: USB disconnect, device number 78 [ 1624.958219][T26699] veth0_vlan: entered promiscuous mode [ 1625.018423][T26699] veth1_vlan: entered promiscuous mode [ 1625.046088][T26817] lo speed is unknown, defaulting to 1000 [ 1625.140926][T26699] veth0_macvtap: entered promiscuous mode [ 1625.172336][T26699] veth1_macvtap: entered promiscuous mode [ 1625.239242][T26699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1625.309360][T26699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.345505][T26699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1625.359043][T26699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.378156][T26699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1625.395368][T26699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.415526][T26699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1625.426124][T26699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.449911][T26699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1625.558878][T26699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.586344][T26699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1625.604608][T26699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1625.615649][T26231] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1625.626077][T26699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.646549][T26699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1625.665287][T26699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.686704][T26699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1625.698304][T26699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.710205][T26699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1625.723234][T26699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.733256][T26699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1625.744190][T26699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.759054][T26699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1625.772227][T26699] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1625.781351][T26699] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1625.786973][T26231] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1625.790837][T26699] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1625.811578][T26699] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1625.822978][T26231] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1625.856511][T26231] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1625.880990][T26231] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1625.902385][T26231] usb 6-1: Product: syz [ 1625.915255][T26231] usb 6-1: Manufacturer: syz [ 1625.930727][T26231] usb 6-1: SerialNumber: syz [ 1625.959106][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1625.972386][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1625.982658][T26231] usb 6-1: config 0 descriptor?? [ 1626.000499][T26231] usb 6-1: selecting invalid altsetting 0 [ 1627.187349][ T9] usb 6-1: USB disconnect, device number 126 [ 1627.304367][T26872] overlayfs: missing 'lowerdir' [ 1627.456975][T23089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1627.465042][T23089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1627.570495][T26876] overlayfs: missing 'lowerdir' [ 1628.354292][T26868] lo speed is unknown, defaulting to 1000 [ 1629.535516][T25816] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1629.745949][T25816] usb 1-1: Using ep0 maxpacket: 8 [ 1629.859876][T25816] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1630.068730][T25816] usb 1-1: config 179 has no interface number 0 [ 1630.075059][T25816] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1630.086372][T25816] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1630.105351][T25816] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1630.123092][T25816] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1630.139865][T25816] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1630.153431][T25816] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1630.169583][T25816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1630.228617][T26881] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1630.377743][T26909] overlayfs: missing 'workdir' [ 1630.383287][ T5852] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1630.656133][T26881] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1630.662718][T26881] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1630.737414][T26881] vhci_hcd vhci_hcd.0: Device attached [ 1630.788003][ T9] usb 1-1: USB disconnect, device number 109 [ 1630.788055][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1630.799259][T26912] vhci_hcd: connection closed [ 1630.802587][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1630.804709][ T12] vhci_hcd: stop threads [ 1631.204145][T18648] usb 34-1: SetAddress Request (6) to port 0 [ 1631.602049][T18648] usb 34-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1631.613085][ T5852] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1631.622053][ T5852] usb 6-1: New USB device found, idVendor=05ac, idProduct=0340, bcdDevice= 0.40 [ 1631.631338][ T5852] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.639384][ T5852] usb 6-1: Product: 㷯元櫖撓滧降宔具ࢸ濘뿌큿ᠺ陎䩲岿횳㜹葷繑阨盧彙딲夼䍆炙秨ᯈ✰雘迿悋뵊늷꾾⅃쐏◅蕑㜈簐悠⋡趁舙臽㹜糩陞㑘氌₈ㆣ鉾頠艵㬑彯ॵ㑜ۤ臃龒夐紏୛䎟낚ᙩ➎쨍툟᐀둴隑捣㜡䤢圾⮛襱楼᭨鄅 [ 1631.669048][ T5852] usb 6-1: Manufacturer: ? [ 1631.670319][ T12] vhci_hcd: release socket [ 1631.673485][ T5852] usb 6-1: SerialNumber: 䀿潉⊲琑쟽渳需䜸撃빏ࣦ簒隫墢兇皓ꪏ쩹㛳‭໱ኍ鎲져뽎둹꾧籆偬奋쮩䀵啒䄄擬⁍枙끨窉愎㔨켣⥕섬㜁寖홊棯冸ᪧ쾧乇㚇黹筄὜懿燾闻ﴴٖ쏎廓祑㦀㓦椷膺ୁ龜뿠栏߭낤䙀룈뿙Ⲇ㰹ར꬈✰䈖⨠薦팖ެៜ㥓筒ꀩꆌ皥 [ 1631.732528][ T12] vhci_hcd: disconnect device [ 1631.781083][T26923] cgroup: release_agent respecified [ 1631.993092][ T6553] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 1632.603432][T26407] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 1632.624601][ T5852] usb 6-1: USB disconnect, device number 127 [ 1632.686990][ T6553] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1632.697220][ T6553] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1632.755558][ T6553] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1632.764953][ T6553] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1632.773736][ T6553] usb 7-1: Product: syz [ 1632.782447][ T6553] usb 7-1: Manufacturer: syz [ 1632.788722][T26407] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1632.800148][ T6553] usb 7-1: SerialNumber: syz [ 1632.806458][T26407] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1632.821048][ T6553] usb 7-1: config 0 descriptor?? [ 1632.827325][T26407] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1632.867544][ T6553] usb 7-1: selecting invalid altsetting 0 [ 1632.874981][T26935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6290'. [ 1632.876787][T26407] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.885274][T26935] bridge_slave_1: left allmulticast mode [ 1632.899144][T26935] bridge_slave_1: left promiscuous mode [ 1632.908250][T26935] bridge0: port 2(bridge_slave_1) entered disabled state [ 1632.908768][T26407] usb 2-1: config 0 descriptor?? [ 1633.012566][T26935] bridge_slave_0: left allmulticast mode [ 1633.014252][T26936] hub 6-0:1.0: USB hub found [ 1633.018610][T26935] bridge_slave_0: left promiscuous mode [ 1633.029921][T26935] bridge0: port 1(bridge_slave_0) entered disabled state [ 1633.258696][ T6553] usb 7-1: USB disconnect, device number 79 [ 1633.328661][T26936] hub 6-0:1.0: 1 port detected [ 1633.360555][T26943] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6291'. [ 1633.579767][T26947] netlink: 'syz.0.6292': attribute type 10 has an invalid length. [ 1633.650989][T26407] elan 0003:04F3:0755.0046: failed to start in urb: -90 [ 1633.659542][T26407] elan 0003:04F3:0755.0046: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 1633.660511][T26947] team0: Device hsr_slave_0 failed to register rx_handler [ 1633.749869][T26939] lo speed is unknown, defaulting to 1000 [ 1633.990107][T26952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6284'. [ 1634.005503][T26407] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 1634.250240][T26952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1634.254407][T26407] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 1634.258317][T26952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1634.287945][T26951] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6293'. [ 1634.311556][T26952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1634.326112][T26952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1634.341143][T26407] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1634.364091][T26407] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 1634.420321][T26407] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 134, setting to 64 [ 1634.442509][T26951] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1634.461136][T26407] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1634.482975][ T30] audit: type=1400 audit(1746287379.815:1751): avc: denied { firmware_load } for pid=26950 comm="syz.3.6293" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1634.505020][T26407] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1634.513582][T26951] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1634.522987][T26407] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 1634.544076][T26407] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 134, setting to 64 [ 1634.556055][T26407] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1634.568249][T26407] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1634.570253][T23437] usb 2-1: USB disconnect, device number 5 [ 1634.577258][T26407] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 1634.577290][T26407] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 134, setting to 64 [ 1634.605059][T26407] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1634.619407][T26407] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1634.629974][T26407] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 1634.648783][T26407] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 134, setting to 64 [ 1634.660246][T26407] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1634.668032][T26407] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1634.677132][T26407] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 1634.688143][T26407] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 134, setting to 64 [ 1634.718699][T26407] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1634.740877][T26407] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1634.810062][T26407] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 1634.821696][T26407] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 134, setting to 64 [ 1634.834939][T26407] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1634.843041][T26407] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1634.858405][T26407] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 1635.298227][T26407] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 134, setting to 64 [ 1635.309160][T26407] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1635.317023][T26407] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1635.380829][T26407] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 1635.411959][T26407] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 134, setting to 64 [ 1635.458752][T26407] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1635.481093][T26407] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1635.536153][T26407] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1635.554769][T26407] usb 6-1: Product: syz [ 1635.568216][T26407] usb 6-1: Manufacturer: syz [ 1635.574385][T26407] usb 6-1: SerialNumber: syz [ 1635.591292][T26407] usb 6-1: config 0 descriptor?? [ 1635.643402][T26948] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1635.665962][T26407] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 1636.097616][T26407] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1636.228836][T26978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6303'. [ 1636.238607][T26978] bridge_slave_1: left allmulticast mode [ 1636.244421][T26978] bridge_slave_1: left promiscuous mode [ 1636.252938][T26978] bridge0: port 2(bridge_slave_1) entered disabled state [ 1636.306535][T26978] bridge_slave_0: left allmulticast mode [ 1636.321822][T26978] bridge_slave_0: left promiscuous mode [ 1636.327975][T26978] bridge0: port 1(bridge_slave_0) entered disabled state [ 1636.346195][T26976] usb 6-1: USB disconnect, device number 2 [ 1636.356486][T26976] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 1636.401558][T26407] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1636.414747][T26407] usb 1-1: New USB device found, idVendor=05ac, idProduct=0340, bcdDevice= 0.40 [ 1636.432981][T26407] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.441413][T26407] usb 1-1: Product: 㷯元櫖撓滧降宔具ࢸ濘뿌큿ᠺ陎䩲岿횳㜹葷繑阨盧彙딲夼䍆炙秨ᯈ✰雘迿悋뵊늷꾾⅃쐏◅蕑㜈簐悠⋡趁舙臽㹜糩陞㑘氌₈ㆣ鉾頠艵㬑彯ॵ㑜ۤ臃龒夐紏୛䎟낚ᙩ➎쨍툟᐀둴隑捣㜡䤢圾⮛襱楼᭨鄅 [ 1636.472023][T26976] hub 6-0:1.0: USB hub found [ 1636.477813][T26976] hub 6-0:1.0: 1 port detected [ 1636.514250][T26407] usb 1-1: Manufacturer: ? [ 1636.521384][T26407] usb 1-1: SerialNumber: 䀿潉⊲琑쟽渳需䜸撃빏ࣦ簒隫墢兇皓ꪏ쩹㛳‭໱ኍ鎲져뽎둹꾧籆偬奋쮩䀵啒䄄擬⁍枙끨窉愎㔨켣⥕섬㜁寖홊棯冸ᪧ쾧乇㚇黹筄὜懿燾闻ﴴٖ쏎廓祑㦀㓦椷膺ୁ龜뿠栏߭낤䙀룈뿙Ⲇ㰹ར꬈✰䈖⨠薦팖ެៜ㥓筒ꀩꆌ皥 [ 1636.617300][ T6553] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 1636.700344][T18648] usb 34-1: device descriptor read/8, error -110 [ 1636.770440][T26986] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6304'. [ 1636.836730][T26986] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6304'. [ 1636.893466][T26407] usb 1-1: USB disconnect, device number 110 [ 1637.106245][T18648] usb usb34-port1: attempt power cycle [ 1637.245634][T26996] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1638.245777][ T6553] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 1638.354263][T27013] FAULT_INJECTION: forcing a failure. [ 1638.354263][T27013] name failslab, interval 1, probability 0, space 0, times 0 [ 1638.370230][T27013] CPU: 1 UID: 0 PID: 27013 Comm: syz.6.6313 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1638.370257][T27013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1638.370267][T27013] Call Trace: [ 1638.370273][T27013] [ 1638.370280][T27013] dump_stack_lvl+0x16c/0x1f0 [ 1638.370306][T27013] should_fail_ex+0x512/0x640 [ 1638.370325][T27013] ? fs_reclaim_acquire+0xae/0x150 [ 1638.370348][T27013] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1638.370370][T27013] should_failslab+0xc2/0x120 [ 1638.370387][T27013] __kmalloc_noprof+0xd2/0x510 [ 1638.370415][T27013] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1638.370439][T27013] ? tomoyo_profile+0x47/0x60 [ 1638.370467][T27013] tomoyo_path_number_perm+0x245/0x580 [ 1638.370486][T27013] ? tomoyo_path_number_perm+0x237/0x580 [ 1638.370508][T27013] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1638.370529][T27013] ? find_held_lock+0x2b/0x80 [ 1638.370571][T27013] ? find_held_lock+0x2b/0x80 [ 1638.370589][T27013] ? hook_file_ioctl_common+0x145/0x410 [ 1638.370610][T27013] ? __fget_files+0x20e/0x3c0 [ 1638.370640][T27013] security_file_ioctl+0x9b/0x240 [ 1638.370664][T27013] __x64_sys_ioctl+0xb7/0x200 [ 1638.370689][T27013] do_syscall_64+0xcd/0x260 [ 1638.370713][T27013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1638.370731][T27013] RIP: 0033:0x7fb15738e969 [ 1638.370746][T27013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1638.370762][T27013] RSP: 002b:00007fb158130038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1638.370779][T27013] RAX: ffffffffffffffda RBX: 00007fb1575b5fa0 RCX: 00007fb15738e969 [ 1638.370790][T27013] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1638.370799][T27013] RBP: 00007fb158130090 R08: 0000000000000000 R09: 0000000000000000 [ 1638.370808][T27013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1638.370818][T27013] R13: 0000000000000000 R14: 00007fb1575b5fa0 R15: 00007ffc1f9cffd8 [ 1638.370838][T27013] [ 1638.370844][T27013] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1638.445604][T23437] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1638.452263][T27013] input: syz0 as /devices/virtual/input/input113 [ 1638.595318][T18648] usb usb34-port1: unable to enumerate USB device [ 1638.606612][ T6553] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1638.617631][ T6553] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.629093][ T6553] usb 6-1: config 0 descriptor?? [ 1638.696205][ T6553] cp210x 6-1:0.0: cp210x converter detected [ 1638.894998][ T81] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1639.100232][ T6553] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1639.144707][ T81] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1639.180213][ T81] usb 2-1: New USB device found, idVendor=05ac, idProduct=0340, bcdDevice= 0.40 [ 1639.205182][ T81] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1639.266569][ T6553] usb 6-1: USB disconnect, device number 4 [ 1639.289520][ T81] usb 2-1: Product: 㷯元櫖撓滧降宔具ࢸ濘뿌큿ᠺ陎䩲岿횳㜹葷繑阨盧彙딲夼䍆炙秨ᯈ✰雘迿悋뵊늷꾾⅃쐏◅蕑㜈簐悠⋡趁舙臽㹜糩陞㑘氌₈ㆣ鉾頠艵㬑彯ॵ㑜ۤ臃龒夐紏୛䎟낚ᙩ➎쨍툟᐀둴隑捣㜡䤢圾⮛襱楼᭨鄅 [ 1639.321629][ T6553] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1639.345079][T23437] usb 1-1: Using ep0 maxpacket: 16 [ 1639.394649][ T6553] cp210x 6-1:0.0: device disconnected [ 1639.396234][T23437] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1639.402624][ T81] usb 2-1: Manufacturer: ? [ 1639.415882][ T81] usb 2-1: SerialNumber: 䀿潉⊲琑쟽渳需䜸撃빏ࣦ簒隫墢兇皓ꪏ쩹㛳‭໱ኍ鎲져뽎둹꾧籆偬奋쮩䀵啒䄄擬⁍枙끨窉愎㔨켣⥕섬㜁寖홊棯冸ᪧ쾧乇㚇黹筄὜懿燾闻ﴴٖ쏎廓祑㦀㓦椷膺ୁ龜뿠栏߭낤䙀룈뿙Ⲇ㰹ར꬈✰䈖⨠薦팖ެៜ㥓筒ꀩꆌ皥 [ 1639.423105][T23437] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1639.458327][T23437] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1639.469315][T23437] usb 1-1: config 0 descriptor?? [ 1640.227718][T23437] mcp2221 0003:04D8:00DD.0047: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 1640.409785][T27034] ubi: mtd0 is already attached to ubi31 [ 1640.804538][ T81] usb 2-1: USB disconnect, device number 6 [ 1641.032231][ T81] usb 1-1: USB disconnect, device number 111 [ 1642.087968][T27057] 9pnet_fd: Insufficient options for proto=fd [ 1643.022261][T27065] overlayfs: missing 'lowerdir' [ 1643.435732][T18648] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1643.597088][T18648] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1643.683056][T18648] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1643.714894][T18648] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1643.726212][T18648] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1643.754856][T18648] usb 6-1: Product: syz [ 1643.761065][T18648] usb 6-1: Manufacturer: syz [ 1643.775299][T18648] usb 6-1: SerialNumber: syz [ 1643.782184][T18648] usb 6-1: config 0 descriptor?? [ 1643.905988][T18648] usb 6-1: selecting invalid altsetting 0 [ 1644.175615][ T9] usb 6-1: USB disconnect, device number 5 [ 1644.266599][T27084] lo speed is unknown, defaulting to 1000 [ 1644.422949][T27087] FAULT_INJECTION: forcing a failure. [ 1644.422949][T27087] name failslab, interval 1, probability 0, space 0, times 0 [ 1644.450849][T27087] CPU: 1 UID: 0 PID: 27087 Comm: syz.6.6333 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1644.450881][T27087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1644.450891][T27087] Call Trace: [ 1644.450898][T27087] [ 1644.450905][T27087] dump_stack_lvl+0x16c/0x1f0 [ 1644.450935][T27087] should_fail_ex+0x512/0x640 [ 1644.450955][T27087] ? fs_reclaim_acquire+0xae/0x150 [ 1644.450977][T27087] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1644.451001][T27087] should_failslab+0xc2/0x120 [ 1644.451020][T27087] __kmalloc_noprof+0xd2/0x510 [ 1644.451050][T27087] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1644.451076][T27087] ? tomoyo_profile+0x47/0x60 [ 1644.451103][T27087] tomoyo_path_number_perm+0x245/0x580 [ 1644.451122][T27087] ? tomoyo_path_number_perm+0x237/0x580 [ 1644.451144][T27087] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1644.451165][T27087] ? find_held_lock+0x2b/0x80 [ 1644.451208][T27087] ? find_held_lock+0x2b/0x80 [ 1644.451226][T27087] ? hook_file_ioctl_common+0x145/0x410 [ 1644.451249][T27087] ? __fget_files+0x20e/0x3c0 [ 1644.451279][T27087] security_file_ioctl+0x9b/0x240 [ 1644.451304][T27087] __x64_sys_ioctl+0xb7/0x200 [ 1644.451332][T27087] do_syscall_64+0xcd/0x260 [ 1644.451356][T27087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1644.451374][T27087] RIP: 0033:0x7fb15738e969 [ 1644.451389][T27087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1644.451406][T27087] RSP: 002b:00007fb158130038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1644.451423][T27087] RAX: ffffffffffffffda RBX: 00007fb1575b5fa0 RCX: 00007fb15738e969 [ 1644.451434][T27087] RDX: 0000200000000040 RSI: 00000000c0845658 RDI: 0000000000000003 [ 1644.451444][T27087] RBP: 00007fb158130090 R08: 0000000000000000 R09: 0000000000000000 [ 1644.451455][T27087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1644.451464][T27087] R13: 0000000000000000 R14: 00007fb1575b5fa0 R15: 00007ffc1f9cffd8 [ 1644.451485][T27087] [ 1644.451492][T27087] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1645.017718][T18648] usb 1-1: new full-speed USB device number 112 using dummy_hcd [ 1645.338277][T18648] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1645.427245][T18648] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1645.527915][T18648] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1645.648604][T18648] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.840748][T18648] usb 1-1: config 0 descriptor?? [ 1646.082757][T27108] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6341'. [ 1646.402047][T27112] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.6344'. [ 1646.493843][T18648] elan 0003:04F3:0755.0048: failed to start in urb: -90 [ 1646.506081][T18648] elan 0003:04F3:0755.0048: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 1647.447533][T27132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6336'. [ 1647.457234][T27132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1647.464946][T27132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1647.532833][ T5852] usb 7-1: new full-speed USB device number 80 using dummy_hcd [ 1647.578561][T18648] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1647.711578][T27132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1647.737887][T27132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1647.912657][ T5852] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1647.963335][T18648] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1647.999456][ T5852] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1648.196275][T18648] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1648.216282][T26407] usb 1-1: USB disconnect, device number 112 [ 1648.243533][ T5852] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1648.255423][T18648] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1648.264636][ T5852] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.274033][T18648] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.283766][ T5852] usb 7-1: config 0 descriptor?? [ 1648.290466][T18648] usb 6-1: config 0 descriptor?? [ 1648.388297][T27141] FAULT_INJECTION: forcing a failure. [ 1648.388297][T27141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1648.409353][T27141] CPU: 0 UID: 0 PID: 27141 Comm: syz.1.6354 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1648.409383][T27141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1648.409391][T27141] Call Trace: [ 1648.409397][T27141] [ 1648.409406][T27141] dump_stack_lvl+0x16c/0x1f0 [ 1648.409436][T27141] should_fail_ex+0x512/0x640 [ 1648.409463][T27141] _copy_from_user+0x2e/0xd0 [ 1648.409483][T27141] copy_msghdr_from_user+0x98/0x160 [ 1648.409495][T27141] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1648.409511][T27141] ___sys_sendmsg+0xfe/0x1d0 [ 1648.409522][T27141] ? __pfx____sys_sendmsg+0x10/0x10 [ 1648.409566][T27141] __sys_sendmsg+0x16d/0x220 [ 1648.409582][T27141] ? __pfx___sys_sendmsg+0x10/0x10 [ 1648.409606][T27141] ? rcu_is_watching+0x12/0xc0 [ 1648.409627][T27141] do_syscall_64+0xcd/0x260 [ 1648.409642][T27141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1648.409654][T27141] RIP: 0033:0x7fe03f38e969 [ 1648.409663][T27141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1648.409673][T27141] RSP: 002b:00007fe040186038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1648.409686][T27141] RAX: ffffffffffffffda RBX: 00007fe03f5b5fa0 RCX: 00007fe03f38e969 [ 1648.409698][T27141] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1648.409712][T27141] RBP: 00007fe040186090 R08: 0000000000000000 R09: 0000000000000000 [ 1648.409721][T27141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1648.409730][T27141] R13: 0000000000000000 R14: 00007fe03f5b5fa0 R15: 00007ffe0db42048 [ 1648.409752][T27141] [ 1648.672873][T18648] pyra 0003:1E7D:2CF6.0049: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 1648.792584][ T5852] elan 0003:04F3:0755.004A: failed to start in urb: -90 [ 1648.847096][ T5852] elan 0003:04F3:0755.004A: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0 [ 1648.931969][T27153] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.6358'. [ 1649.702893][T18648] pyra 0003:1E7D:2CF6.0049: couldn't init struct pyra_device [ 1649.710643][ T5852] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1649.718805][T18648] pyra 0003:1E7D:2CF6.0049: couldn't install mouse [ 1649.775612][T18648] pyra 0003:1E7D:2CF6.0049: probe with driver pyra failed with error -71 [ 1649.795775][T27164] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6351'. [ 1649.797885][T18648] usb 6-1: USB disconnect, device number 6 [ 1649.958858][ T5852] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1650.014943][ T5852] usb 4-1: New USB device found, idVendor=05ac, idProduct=0340, bcdDevice= 0.40 [ 1650.029416][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.044467][ T5852] usb 4-1: Product: 㷯元櫖撓滧降宔具ࢸ濘뿌큿ᠺ陎䩲岿횳㜹葷繑阨盧彙딲夼䍆炙秨ᯈ✰雘迿悋뵊늷꾾⅃쐏◅蕑㜈簐悠⋡趁舙臽㹜糩陞㑘氌₈ㆣ鉾頠艵㬑彯ॵ㑜ۤ臃龒夐紏୛䎟낚ᙩ➎쨍툟᐀둴隑捣㜡䤢圾⮛襱楼᭨鄅 [ 1650.244185][T27174] overlayfs: failed to resolve './file1': -2 [ 1650.265997][T27175] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6365'. [ 1650.307194][T27174] overlayfs: failed to resolve './file1': -2 [ 1650.324949][T23437] usb 7-1: USB disconnect, device number 80 [ 1650.356702][ T5852] usb 4-1: Manufacturer: ? [ 1650.361196][ T5852] usb 4-1: SerialNumber: 䀿潉⊲琑쟽渳需䜸撃빏ࣦ簒隫墢兇皓ꪏ쩹㛳‭໱ኍ鎲져뽎둹꾧籆偬奋쮩䀵啒䄄擬⁍枙끨窉愎㔨켣⥕섬㜁寖홊棯冸ᪧ쾧乇㚇黹筄὜懿燾闻ﴴٖ쏎廓祑㦀㓦椷膺ୁ龜뿠栏߭낤䙀룈뿙Ⲇ㰹ར꬈✰䈖⨠薦팖ެៜ㥓筒ꀩꆌ皥 [ 1650.481701][T27179] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 1650.595302][T18648] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 1650.634846][T27183] FAULT_INJECTION: forcing a failure. [ 1650.634846][T27183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1650.648291][T27183] CPU: 1 UID: 0 PID: 27183 Comm: syz.5.6370 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1650.648320][T27183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1650.648331][T27183] Call Trace: [ 1650.648338][T27183] [ 1650.648345][T27183] dump_stack_lvl+0x16c/0x1f0 [ 1650.648373][T27183] should_fail_ex+0x512/0x640 [ 1650.648398][T27183] _copy_from_user+0x2e/0xd0 [ 1650.648422][T27183] copy_msghdr_from_user+0x98/0x160 [ 1650.648440][T27183] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1650.648469][T27183] ___sys_sendmsg+0xfe/0x1d0 [ 1650.648486][T27183] ? __pfx____sys_sendmsg+0x10/0x10 [ 1650.648533][T27183] __sys_sendmsg+0x16d/0x220 [ 1650.648550][T27183] ? __pfx___sys_sendmsg+0x10/0x10 [ 1650.648584][T27183] do_syscall_64+0xcd/0x260 [ 1650.648607][T27183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1650.648624][T27183] RIP: 0033:0x7f0567d8e969 [ 1650.648638][T27183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1650.648654][T27183] RSP: 002b:00007f0568bf2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1650.648671][T27183] RAX: ffffffffffffffda RBX: 00007f0567fb5fa0 RCX: 00007f0567d8e969 [ 1650.648682][T27183] RDX: 0000000020000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 1650.648697][T27183] RBP: 00007f0568bf2090 R08: 0000000000000000 R09: 0000000000000000 [ 1650.648707][T27183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1650.648717][T27183] R13: 0000000000000000 R14: 00007f0567fb5fa0 R15: 00007ffccce975c8 [ 1650.648740][T27183] [ 1650.851793][T27185] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1650.855049][ T5852] usb 4-1: USB disconnect, device number 103 [ 1650.931060][T18648] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1650.959201][T18648] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1650.969358][T18648] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1650.981774][T18648] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1651.001684][T18648] usb 2-1: config 0 descriptor?? [ 1651.812798][T18648] elan 0003:04F3:0755.004B: failed to start in urb: -90 [ 1651.826130][T18648] elan 0003:04F3:0755.004B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 1652.166609][ T9] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 1652.448780][ T9] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1652.465561][T18648] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 1652.465706][ T9] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1652.503944][T27211] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6380'. [ 1652.735122][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1652.736793][ T5861] usb 2-1: USB disconnect, device number 7 [ 1652.742493][ T9] usb 4-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 1652.787622][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1652.811212][ T9] usb 4-1: config 0 descriptor?? [ 1652.852525][T27214] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1652.898460][T18648] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1652.908659][T18648] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1652.916958][T18648] usb 7-1: Product: syz [ 1652.921224][T18648] usb 7-1: Manufacturer: syz [ 1652.926385][T18648] usb 7-1: SerialNumber: syz [ 1652.933317][T18648] usb 7-1: config 0 descriptor?? [ 1653.085344][T26407] usb 1-1: new full-speed USB device number 113 using dummy_hcd [ 1653.226616][ T9] waltop 0003:172F:0038.004C: unknown main item tag 0x0 [ 1653.233696][ T9] waltop 0003:172F:0038.004C: unknown main item tag 0x0 [ 1653.236935][T26407] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1653.240927][ T9] waltop 0003:172F:0038.004C: unknown main item tag 0x0 [ 1653.258948][T26407] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1653.282800][ T9] waltop 0003:172F:0038.004C: unknown main item tag 0x0 [ 1653.291293][ T9] waltop 0003:172F:0038.004C: unknown main item tag 0x0 [ 1653.295288][T26407] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1653.303264][ T9] waltop 0003:172F:0038.004C: hidraw0: USB HID v0.00 Device [HID 172f:0038] on usb-dummy_hcd.3-1/input0 [ 1653.321819][T26407] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1653.332865][T27221] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6384'. [ 1653.343544][T26407] usb 1-1: config 0 descriptor?? [ 1653.351309][T18648] usb 7-1: Firmware: major: 209, minor: 254, hardware type: UNKNOWN (192) [ 1653.505026][ T5861] usb 4-1: USB disconnect, device number 104 [ 1654.028705][T18648] usb 7-1: Firmware: build icHvm~hHmJۓ(U ǫS2z Wڪ؞# [ 1654.723443][T18648] usb 7-1: failed to fetch extended address, random address set [ 1654.764534][T18648] usb 7-1: atusb_probe: initialization failed, error = -524 [ 1654.793460][T18648] atusb 7-1:0.0: probe with driver atusb failed with error -524 [ 1654.858751][T26407] elan 0003:04F3:0755.004D: failed to start in urb: -90 [ 1654.894183][T18648] usb 7-1: USB disconnect, device number 81 [ 1654.955027][T26407] elan 0003:04F3:0755.004D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 1655.604663][T27231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6381'. [ 1655.707997][T26231] usb 1-1: USB disconnect, device number 113 [ 1655.875360][T18648] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 1656.028534][T27245] FAULT_INJECTION: forcing a failure. [ 1656.028534][T27245] name failslab, interval 1, probability 0, space 0, times 0 [ 1656.049682][T27245] CPU: 0 UID: 0 PID: 27245 Comm: syz.3.6388 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1656.049709][T27245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1656.049720][T27245] Call Trace: [ 1656.049726][T27245] [ 1656.049733][T27245] dump_stack_lvl+0x16c/0x1f0 [ 1656.049761][T27245] should_fail_ex+0x512/0x640 [ 1656.049783][T27245] ? __kvmalloc_node_noprof+0x122/0x600 [ 1656.049810][T27245] should_failslab+0xc2/0x120 [ 1656.049827][T27245] __kvmalloc_node_noprof+0x135/0x600 [ 1656.049851][T27245] ? seq_read_iter+0x826/0x12c0 [ 1656.049885][T27245] ? seq_read_iter+0x826/0x12c0 [ 1656.049907][T27245] seq_read_iter+0x826/0x12c0 [ 1656.049931][T27245] ? register_lock_class+0x41/0x4c0 [ 1656.049965][T27245] seq_read+0x39e/0x4e0 [ 1656.049988][T27245] ? __pfx_seq_read+0x10/0x10 [ 1656.050016][T27245] ? avc_policy_seqno+0x9/0x20 [ 1656.050039][T27245] ? rw_verify_area+0xcf/0x680 [ 1656.050060][T27245] ? __pfx_seq_read+0x10/0x10 [ 1656.050084][T27245] vfs_read+0x1de/0xc70 [ 1656.050111][T27245] ? __pfx___mutex_lock+0x10/0x10 [ 1656.050133][T27245] ? __pfx_vfs_read+0x10/0x10 [ 1656.050163][T27245] ? __fget_files+0x20e/0x3c0 [ 1656.050196][T27245] ksys_read+0x12a/0x240 [ 1656.050219][T27245] ? __pfx_ksys_read+0x10/0x10 [ 1656.050250][T27245] do_syscall_64+0xcd/0x260 [ 1656.050274][T27245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1656.050291][T27245] RIP: 0033:0x7f4bc738e969 [ 1656.050306][T27245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1656.050322][T27245] RSP: 002b:00007f4bc825a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1656.050339][T27245] RAX: ffffffffffffffda RBX: 00007f4bc75b6080 RCX: 00007f4bc738e969 [ 1656.050350][T27245] RDX: 0000000000002020 RSI: 0000200000000080 RDI: 0000000000000007 [ 1656.050360][T27245] RBP: 00007f4bc825a090 R08: 0000000000000000 R09: 0000000000000000 [ 1656.050371][T27245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1656.050380][T27245] R13: 0000000000000000 R14: 00007f4bc75b6080 R15: 00007ffe011998e8 [ 1656.050402][T27245] [ 1656.353390][T18648] usb 7-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 1656.365052][T18648] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1656.374249][T18648] usb 7-1: Product: syz [ 1656.564471][T18648] usb 7-1: Manufacturer: syz [ 1656.569189][T18648] usb 7-1: SerialNumber: syz [ 1656.578251][T18648] usb 7-1: config 0 descriptor?? [ 1656.589493][ T5813] Bluetooth: hci5: urb ffff88814531c100 submission failed (2) [ 1656.665648][T27250] FAULT_INJECTION: forcing a failure. [ 1656.665648][T27250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1656.678794][T27250] CPU: 1 UID: 0 PID: 27250 Comm: syz.0.6391 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1656.678818][T27250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1656.678827][T27250] Call Trace: [ 1656.678834][T27250] [ 1656.678842][T27250] dump_stack_lvl+0x16c/0x1f0 [ 1656.678868][T27250] should_fail_ex+0x512/0x640 [ 1656.678898][T27250] _copy_from_user+0x2e/0xd0 [ 1656.678923][T27250] copy_msghdr_from_user+0x98/0x160 [ 1656.678941][T27250] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1656.678965][T27250] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 1656.678991][T27250] ___sys_sendmsg+0xfe/0x1d0 [ 1656.679009][T27250] ? __pfx____sys_sendmsg+0x10/0x10 [ 1656.679055][T27250] __sys_sendmsg+0x16d/0x220 [ 1656.679072][T27250] ? __pfx___sys_sendmsg+0x10/0x10 [ 1656.679105][T27250] do_syscall_64+0xcd/0x260 [ 1656.679128][T27250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1656.679146][T27250] RIP: 0033:0x7f80e978e969 [ 1656.679160][T27250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1656.679177][T27250] RSP: 002b:00007f80e75f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1656.679193][T27250] RAX: ffffffffffffffda RBX: 00007f80e99b6160 RCX: 00007f80e978e969 [ 1656.679204][T27250] RDX: 0000000000000000 RSI: 0000200000001780 RDI: 0000000000000006 [ 1656.679214][T27250] RBP: 00007f80e75f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1656.679224][T27250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1656.679235][T27250] R13: 0000000000000000 R14: 00007f80e99b6160 R15: 00007ffd9b168fd8 [ 1656.679257][T27250] [ 1656.917626][T18648] usb 7-1: USB disconnect, device number 82 [ 1656.998688][T27252] Bluetooth: MGMT ver 1.23 [ 1657.231986][T27256] lo speed is unknown, defaulting to 1000 [ 1657.250613][T27256] lo speed is unknown, defaulting to 1000 [ 1657.261661][T27256] lo speed is unknown, defaulting to 1000 [ 1657.638520][T27256] infiniband syz0: set active [ 1657.643238][T27256] infiniband syz0: added lo [ 1657.694363][T18648] lo speed is unknown, defaulting to 1000 [ 1657.752319][T27256] RDS/IB: syz0: added [ 1657.756392][T27256] smc: adding ib device syz0 with port count 1 [ 1657.762552][T27256] smc: ib device syz0 port 1 has pnetid [ 1657.770516][T27256] lo speed is unknown, defaulting to 1000 [ 1657.853215][T27256] lo speed is unknown, defaulting to 1000 [ 1657.934824][T27256] lo speed is unknown, defaulting to 1000 [ 1658.020993][T27256] lo speed is unknown, defaulting to 1000 [ 1658.102444][T27256] lo speed is unknown, defaulting to 1000 [ 1658.185573][T27256] lo speed is unknown, defaulting to 1000 [ 1658.265712][T27256] lo speed is unknown, defaulting to 1000 [ 1658.355319][T18648] lo speed is unknown, defaulting to 1000 [ 1658.493618][T27263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6395'. [ 1658.504309][T27263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6395'. [ 1658.735335][T18648] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 1658.750572][T27273] FAULT_INJECTION: forcing a failure. [ 1658.750572][T27273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1658.763690][T26407] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1658.772476][T27273] CPU: 0 UID: 0 PID: 27273 Comm: syz.5.6399 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1658.772501][T27273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1658.772512][T27273] Call Trace: [ 1658.772518][T27273] [ 1658.772525][T27273] dump_stack_lvl+0x16c/0x1f0 [ 1658.772553][T27273] should_fail_ex+0x512/0x640 [ 1658.772579][T27273] _copy_from_user+0x2e/0xd0 [ 1658.772602][T27273] copy_msghdr_from_user+0x98/0x160 [ 1658.772620][T27273] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1658.772647][T27273] ___sys_sendmsg+0xfe/0x1d0 [ 1658.772663][T27273] ? __pfx____sys_sendmsg+0x10/0x10 [ 1658.772704][T27273] __sys_sendmsg+0x16d/0x220 [ 1658.772719][T27273] ? __pfx___sys_sendmsg+0x10/0x10 [ 1658.772738][T27273] ? rcu_is_watching+0x12/0xc0 [ 1658.772759][T27273] do_syscall_64+0xcd/0x260 [ 1658.772778][T27273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1658.772792][T27273] RIP: 0033:0x7f0567d8e969 [ 1658.772804][T27273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1658.772817][T27273] RSP: 002b:00007f0568bb0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1658.772831][T27273] RAX: ffffffffffffffda RBX: 00007f0567fb6160 RCX: 00007f0567d8e969 [ 1658.772840][T27273] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 1658.772848][T27273] RBP: 00007f0568bb0090 R08: 0000000000000000 R09: 0000000000000000 [ 1658.772855][T27273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1658.772863][T27273] R13: 0000000000000000 R14: 00007f0567fb6160 R15: 00007ffccce975c8 [ 1658.772881][T27273] [ 1659.020171][T18648] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 1659.028718][T18648] usb 4-1: config 0 has no interface number 0 [ 1659.036116][T26407] usb 1-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 1659.045162][T26407] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.045386][T26231] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 1659.065013][T26407] usb 1-1: Product: syz [ 1659.071210][T26407] usb 1-1: Manufacturer: syz [ 1659.077934][T18648] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1659.088820][T26407] usb 1-1: SerialNumber: syz [ 1659.096069][T18648] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.106953][T18648] usb 4-1: Product: syz [ 1659.111694][T18648] usb 4-1: Manufacturer: syz [ 1659.116816][T18648] usb 4-1: SerialNumber: syz [ 1659.147763][T26407] usb 1-1: config 0 descriptor?? [ 1659.153785][T18648] usb 4-1: config 0 descriptor?? [ 1659.250436][ T5813] Bluetooth: hci5: urb ffff8880794c3e00 submission failed (2) [ 1659.317907][T26231] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1659.331307][T26231] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1659.343637][T26231] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1659.352812][T26231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1659.363183][T26231] usb 2-1: config 0 descriptor?? [ 1659.394401][ T9] usb 1-1: USB disconnect, device number 114 [ 1660.060011][T27281] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.6402'. [ 1660.193366][T24665] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1660.199676][T18648] usb 4-1: Firmware version (0.0) predates our first public release. [ 1660.209546][T24665] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1660.215874][T18648] usb 4-1: Please update to version 0.2 or newer [ 1660.223217][T24665] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1660.692396][T24665] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1660.700008][T24665] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1660.749963][T18648] usb 4-1: USB disconnect, device number 105 [ 1660.754094][T27279] lo speed is unknown, defaulting to 1000 [ 1660.763951][T27279] lo speed is unknown, defaulting to 1000 [ 1661.275684][T27298] syz.3.6405 (27298): drop_caches: 2 [ 1661.291992][T27298] syz.3.6405 (27298): drop_caches: 2 [ 1661.501479][T27299] overlayfs: missing 'lowerdir' [ 1661.542086][T26407] usb 1-1: new full-speed USB device number 115 using dummy_hcd [ 1661.641242][ T8023] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1661.673278][ T8023] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1661.713273][T26231] usbhid 2-1:0.0: can't add hid device: -71 [ 1661.728217][T26231] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1661.789254][T27301] overlayfs: missing 'lowerdir' [ 1661.933985][T26231] usb 2-1: USB disconnect, device number 8 [ 1661.987086][T26407] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1662.002730][T26407] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1662.013009][T26407] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1662.022191][T26407] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1662.023552][ T8023] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1662.032233][T26407] usb 1-1: config 0 descriptor?? [ 1662.046798][ T8023] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1662.148565][ T8023] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1662.159170][ T8023] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1662.179148][T27311] xt_ipcomp: unknown flags 12 [ 1662.333059][ T8023] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1662.354829][ T8023] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1662.422989][ T30] audit: type=1400 audit(1746287407.755:1752): avc: denied { connect } for pid=27320 comm="syz.5.6415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1662.429907][T27279] chnl_net:caif_netlink_parms(): no params data found [ 1662.487479][T26407] elan 0003:04F3:0755.004E: failed to start in urb: -90 [ 1662.518000][T26407] elan 0003:04F3:0755.004E: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 1662.630214][T27279] bridge0: port 1(bridge_slave_0) entered blocking state [ 1662.639016][T27279] bridge0: port 1(bridge_slave_0) entered disabled state [ 1662.646484][T27279] bridge_slave_0: entered allmulticast mode [ 1662.654014][T27279] bridge_slave_0: entered promiscuous mode [ 1662.777677][ T5813] Bluetooth: hci5: command tx timeout [ 1663.367750][ T30] audit: type=1400 audit(1746287408.125:1753): avc: denied { ioctl } for pid=27328 comm="syz.5.6417" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1663.486398][T27279] bridge0: port 2(bridge_slave_1) entered blocking state [ 1663.504963][T27279] bridge0: port 2(bridge_slave_1) entered disabled state [ 1663.514557][T27279] bridge_slave_1: entered allmulticast mode [ 1663.574904][T27335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6403'. [ 1663.643048][T27279] bridge_slave_1: entered promiscuous mode [ 1663.898464][T27339] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6418'. [ 1663.970706][ T9] usb 1-1: USB disconnect, device number 115 [ 1664.347461][T27350] FAULT_INJECTION: forcing a failure. [ 1664.347461][T27350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1664.362594][T27350] CPU: 1 UID: 0 PID: 27350 Comm: syz.3.6421 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1664.362625][T27350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1664.362635][T27350] Call Trace: [ 1664.362640][T27350] [ 1664.362646][T27350] dump_stack_lvl+0x16c/0x1f0 [ 1664.362671][T27350] should_fail_ex+0x512/0x640 [ 1664.362693][T27350] _copy_from_user+0x2e/0xd0 [ 1664.362716][T27350] copy_from_sockptr_offset.constprop.0+0x153/0x1a0 [ 1664.362736][T27350] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 1664.362755][T27350] ? __pfx_avc_has_perm+0x10/0x10 [ 1664.362775][T27350] packet_setsockopt+0x861/0x3360 [ 1664.362801][T27350] ? __pfx_packet_setsockopt+0x10/0x10 [ 1664.362822][T27350] ? selinux_netlbl_socket_setsockopt+0x183/0x470 [ 1664.362844][T27350] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 1664.362865][T27350] ? proc_fail_nth_write+0x9f/0x250 [ 1664.362892][T27350] ? __lock_acquire+0x5ca/0x1ba0 [ 1664.362921][T27350] ? selinux_socket_setsockopt+0x6a/0x80 [ 1664.362941][T27350] ? __pfx_packet_setsockopt+0x10/0x10 [ 1664.362961][T27350] do_sock_setsockopt+0x221/0x470 [ 1664.362980][T27350] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1664.363007][T27350] __sys_setsockopt+0x1a0/0x230 [ 1664.363033][T27350] __x64_sys_setsockopt+0xbd/0x160 [ 1664.363054][T27350] ? do_syscall_64+0x91/0x260 [ 1664.363073][T27350] ? lockdep_hardirqs_on+0x7c/0x110 [ 1664.363090][T27350] do_syscall_64+0xcd/0x260 [ 1664.363112][T27350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1664.363129][T27350] RIP: 0033:0x7f4bc738e969 [ 1664.363144][T27350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1664.363160][T27350] RSP: 002b:00007f4bc827b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1664.363176][T27350] RAX: ffffffffffffffda RBX: 00007f4bc75b5fa0 RCX: 00007f4bc738e969 [ 1664.363187][T27350] RDX: 0000000000000002 RSI: 0000000000000107 RDI: 0000000000000003 [ 1664.363197][T27350] RBP: 00007f4bc827b090 R08: 0000000000000010 R09: 0000000000000000 [ 1664.363207][T27350] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1664.363216][T27350] R13: 0000000000000000 R14: 00007f4bc75b5fa0 R15: 00007ffe011998e8 [ 1664.363238][T27350] [ 1664.621200][T27352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6422'. [ 1664.692547][T27356] overlayfs: missing 'lowerdir' [ 1664.858919][ T5813] Bluetooth: hci5: command 0x041b tx timeout [ 1664.981205][T27360] overlayfs: missing 'workdir' [ 1665.159050][ T8023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1665.326058][ T8023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1665.355584][ T8023] bond0 (unregistering): Released all slaves [ 1665.420476][T27346] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6420'. [ 1665.459274][T27279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1665.483921][T27366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=27366 comm=syz.0.6427 [ 1665.509268][ T8023] tipc: Left network mode [ 1665.521332][T27279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1665.612982][T27365] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1665.683275][T27371] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.6428'. [ 1665.759787][T27279] team0: Port device team_slave_0 added [ 1665.789017][T27279] team0: Port device team_slave_1 added [ 1665.823008][T27379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6432'. [ 1665.902036][T27279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1665.923887][T27279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1665.951663][T27279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1666.010358][T27279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1666.023709][T27279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1666.051182][T18648] usb 1-1: new full-speed USB device number 116 using dummy_hcd [ 1666.065876][T27390] overlayfs: missing 'lowerdir' [ 1666.073567][T27279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1666.203518][T27391] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6438'. [ 1666.291088][T27395] overlayfs: missing 'workdir' [ 1666.827366][T18648] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1666.839333][T18648] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1666.854396][ T8023] hsr_slave_0: left promiscuous mode [ 1666.879589][ T8023] hsr_slave_1: left promiscuous mode [ 1666.903579][ T8023] veth1_macvtap: left promiscuous mode [ 1666.917396][ T8023] veth1_vlan: left promiscuous mode [ 1666.928055][T18648] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1666.937604][T18648] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.948024][T24665] Bluetooth: hci5: command 0x041b tx timeout [ 1666.951124][T18648] usb 1-1: config 0 descriptor?? [ 1667.009544][T27401] FAULT_INJECTION: forcing a failure. [ 1667.009544][T27401] name failslab, interval 1, probability 0, space 0, times 0 [ 1667.023345][T27401] CPU: 0 UID: 0 PID: 27401 Comm: syz.3.6440 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1667.023372][T27401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1667.023382][T27401] Call Trace: [ 1667.023388][T27401] [ 1667.023395][T27401] dump_stack_lvl+0x16c/0x1f0 [ 1667.023422][T27401] should_fail_ex+0x512/0x640 [ 1667.023442][T27401] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1667.023467][T27401] should_failslab+0xc2/0x120 [ 1667.023484][T27401] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1667.023508][T27401] ? __pfx__kstrtoull+0x10/0x10 [ 1667.023524][T27401] ? refill_pi_state_cache+0x89/0x250 [ 1667.023553][T27401] refill_pi_state_cache+0x89/0x250 [ 1667.023578][T27401] futex_lock_pi+0x228/0x7b0 [ 1667.023614][T27401] ? __lock_acquire+0x5ca/0x1ba0 [ 1667.023640][T27401] ? __pfx_futex_lock_pi+0x10/0x10 [ 1667.023673][T27401] ? find_held_lock+0x2b/0x80 [ 1667.023702][T27401] ? proc_fail_nth_write+0x9f/0x250 [ 1667.023730][T27401] ? __pfx_futex_wake_mark+0x10/0x10 [ 1667.023758][T27401] ? ksys_write+0x190/0x240 [ 1667.023787][T27401] do_futex+0x11a/0x350 [ 1667.023810][T27401] ? __pfx_do_futex+0x10/0x10 [ 1667.023838][T27401] __x64_sys_futex+0x1e0/0x4c0 [ 1667.023862][T27401] ? fput+0x70/0xf0 [ 1667.023879][T27401] ? __pfx___x64_sys_futex+0x10/0x10 [ 1667.023899][T27401] ? ksys_write+0x1b9/0x240 [ 1667.023922][T27401] ? __pfx_ksys_write+0x10/0x10 [ 1667.023944][T27401] ? rcu_is_watching+0x12/0xc0 [ 1667.023972][T27401] do_syscall_64+0xcd/0x260 [ 1667.023997][T27401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1667.024015][T27401] RIP: 0033:0x7f4bc738e969 [ 1667.024030][T27401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1667.024045][T27401] RSP: 002b:00007f4bc825a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1667.024062][T27401] RAX: ffffffffffffffda RBX: 00007f4bc75b6080 RCX: 00007f4bc738e969 [ 1667.024074][T27401] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000020000000cffc [ 1667.024084][T27401] RBP: 00007f4bc825a090 R08: 0000000000000000 R09: 0000000000000000 [ 1667.024094][T27401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1667.024104][T27401] R13: 0000000000000000 R14: 00007f4bc75b6080 R15: 00007ffe011998e8 [ 1667.024127][T27401] [ 1667.249731][ C0] vkms_vblank_simulate: vblank timer overrun [ 1667.291160][ T30] audit: type=1326 audit(1746287412.625:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27403 comm="syz.1.6441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe03f38e969 code=0x7ffc0000 [ 1667.317209][ T30] audit: type=1326 audit(1746287412.625:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27403 comm="syz.1.6441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe03f38e969 code=0x7ffc0000 [ 1667.381275][ T30] audit: type=1326 audit(1746287412.625:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27403 comm="syz.1.6441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe03f38e969 code=0x7ffc0000 [ 1667.515345][ T30] audit: type=1326 audit(1746287412.625:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27403 comm="syz.1.6441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe03f38e969 code=0x7ffc0000 [ 1667.519649][T18648] elan 0003:04F3:0755.004F: failed to start in urb: -90 [ 1667.538832][ C0] vkms_vblank_simulate: vblank timer overrun [ 1667.539751][ T30] audit: type=1326 audit(1746287412.625:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27403 comm="syz.1.6441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe03f38e969 code=0x7ffc0000 [ 1667.575458][ C0] vkms_vblank_simulate: vblank timer overrun [ 1667.593996][ T30] audit: type=1326 audit(1746287412.625:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27403 comm="syz.1.6441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe03f38e969 code=0x7ffc0000 [ 1667.602727][T18648] elan 0003:04F3:0755.004F: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 1667.650339][ T30] audit: type=1326 audit(1746287412.625:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27403 comm="syz.1.6441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe03f38e969 code=0x7ffc0000 [ 1667.673825][ C0] vkms_vblank_simulate: vblank timer overrun [ 1667.680580][ T30] audit: type=1326 audit(1746287412.625:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27403 comm="syz.1.6441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe03f38e969 code=0x7ffc0000 [ 1667.704093][ C0] vkms_vblank_simulate: vblank timer overrun [ 1667.837818][T27416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6431'. [ 1668.096828][ T30] audit: type=1326 audit(1746287412.625:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27403 comm="syz.1.6441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe03f38e969 code=0x7ffc0000 [ 1668.127558][ T30] audit: type=1326 audit(1746287412.625:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27403 comm="syz.1.6441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe03f38e969 code=0x7ffc0000 [ 1668.700357][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.015569][T24665] Bluetooth: hci5: command 0x041b tx timeout [ 1669.163341][T27279] hsr_slave_0: entered promiscuous mode [ 1669.171315][T27279] hsr_slave_1: entered promiscuous mode [ 1669.196257][T18648] usb 1-1: USB disconnect, device number 116 [ 1669.438624][ T30] audit: type=1400 audit(1746287414.775:1764): avc: denied { read } for pid=27433 comm="syz.5.6446" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1669.533984][ T30] audit: type=1400 audit(1746287414.775:1765): avc: denied { open } for pid=27433 comm="syz.5.6446" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1670.149613][T27450] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6452'. [ 1670.371733][T27463] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.6456'. [ 1670.492792][T27279] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1670.518953][T27279] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1670.551879][T27279] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1670.576884][T27279] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1670.684016][ T6553] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1670.825437][T18648] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1670.928393][ T6553] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1670.953389][ T6553] usb 4-1: New USB device found, idVendor=05ac, idProduct=0340, bcdDevice= 0.40 [ 1670.969093][T27279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1670.972963][ T6553] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1670.990976][T27279] 8021q: adding VLAN 0 to HW filter on device team0 [ 1670.997630][ T6553] usb 4-1: Product: 㷯元櫖撓滧降宔具ࢸ濘뿌큿ᠺ陎䩲岿횳㜹葷繑阨盧彙딲夼䍆炙秨ᯈ✰雘迿悋뵊늷꾾⅃쐏◅蕑㜈簐悠⋡趁舙臽㹜糩陞㑘氌₈ㆣ鉾頠艵㬑彯ॵ㑜ۤ臃龒夐紏୛䎟낚ᙩ➎쨍툟᐀둴隑捣㜡䤢圾⮛襱楼᭨鄅 [ 1670.997665][ T6553] usb 4-1: Manufacturer: ? [ 1670.997679][ T6553] usb 4-1: SerialNumber: 䀿潉⊲琑쟽渳需䜸撃빏ࣦ簒隫墢兇皓ꪏ쩹㛳‭໱ኍ鎲져뽎둹꾧籆偬奋쮩䀵啒䄄擬⁍枙끨窉愎㔨켣⥕섬㜁寖홊棯冸ᪧ쾧乇㚇黹筄὜懿燾闻ﴴٖ쏎廓祑㦀㓦椷膺ୁ龜뿠栏߭낤䙀룈뿙Ⲇ㰹ར꬈✰䈖⨠薦팖ެៜ㥓筒ꀩꆌ皥 [ 1671.051736][T27279] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1671.070442][T27279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1671.089698][T26231] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1671.097672][T24665] Bluetooth: hci5: command 0x041b tx timeout [ 1671.105032][ T8023] bridge0: port 1(bridge_slave_0) entered blocking state [ 1671.112224][ T8023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1671.122525][ T8023] bridge0: port 2(bridge_slave_1) entered blocking state [ 1671.123070][T18648] usb 6-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 1671.129682][ T8023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1671.159547][T18648] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.169078][T18648] usb 6-1: Product: syz [ 1671.174297][T18648] usb 6-1: Manufacturer: syz [ 1671.182499][T18648] usb 6-1: SerialNumber: syz [ 1671.197588][T18648] usb 6-1: config 0 descriptor?? [ 1671.217343][T24665] Bluetooth: hci4: urb ffff8880345c3500 submission failed (2) [ 1671.267190][T26231] usb 1-1: Using ep0 maxpacket: 16 [ 1671.281726][T26231] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1671.299729][T26231] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1671.309029][T26231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1671.321138][T26231] usb 1-1: config 0 descriptor?? [ 1671.366055][T27279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1671.474680][T18648] usb 6-1: USB disconnect, device number 7 [ 1671.544933][ T6553] usb 4-1: USB disconnect, device number 106 [ 1672.537995][T26231] mcp2221 0003:04D8:00DD.0050: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 1672.641227][T27279] veth0_vlan: entered promiscuous mode [ 1672.659181][T27279] veth1_vlan: entered promiscuous mode [ 1672.689794][T27279] veth0_macvtap: entered promiscuous mode [ 1672.700451][T27279] veth1_macvtap: entered promiscuous mode [ 1672.717007][T27279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1672.728948][T27279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1672.739126][T27279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1672.749680][T27279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1672.771146][T27279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1672.797532][T27279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1672.807786][T27279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1672.819012][T27279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1672.830778][T27279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1672.925277][ T5852] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 1672.925887][T27279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1672.973621][T26231] usb 1-1: USB disconnect, device number 117 [ 1673.054275][T27279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1673.761138][T27279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1673.774455][T27279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1673.784352][T27279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1673.796880][T27279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1673.807857][T27279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1673.847821][T27279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1673.876649][T27279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1673.886863][ T5852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1673.915359][ T5852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1673.928585][T27279] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1673.937663][T27279] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1673.955255][ T5852] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1673.964345][ T5852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1673.972420][T27279] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1673.995253][T27279] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1674.015972][ T5852] usb 2-1: config 0 descriptor?? [ 1674.451240][ T5852] elan 0003:04F3:0755.0051: failed to start in urb: -90 [ 1674.476660][ T5852] elan 0003:04F3:0755.0051: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 1674.786048][T27508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6463'. [ 1675.140531][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1675.161889][ T36] bond_slave_0: left allmulticast mode [ 1675.172829][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1675.193389][ T36] bond_slave_1: left allmulticast mode [ 1675.204584][ T36] bond0 (unregistering): Released all slaves [ 1675.572179][ T36] bond1 (unregistering): Released all slaves [ 1675.880091][T26231] usb 2-1: USB disconnect, device number 9 [ 1676.125048][T23490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1676.149214][T23490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1676.307463][T23089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1676.326400][T27534] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6476'. [ 1676.573431][T27535] hub 6-0:1.0: USB hub found [ 1676.577084][T23089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1676.601200][T27535] hub 6-0:1.0: 1 port detected [ 1676.800853][T27539] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6477'. [ 1677.072606][T27543] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1677.078457][ T30] audit: type=1400 audit(1746287422.405:1766): avc: denied { setopt } for pid=27542 comm="syz.3.6479" lport=37731 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1677.111361][T27543] VFS: Can't find a romfs filesystem on dev nullb0. [ 1677.111361][T27543] [ 1677.161837][T23252] Bluetooth: hci4: Frame reassembly failed (-84) [ 1677.178221][ T36] hsr_slave_0: left promiscuous mode [ 1677.203660][ T36] hsr_slave_1: left promiscuous mode [ 1677.216427][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1677.226743][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1677.266447][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1677.273912][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1677.319231][ T36] veth1_macvtap: left promiscuous mode [ 1677.326254][ T36] veth1_vlan: left promiscuous mode [ 1677.333309][ T36] veth0_vlan: left promiscuous mode [ 1677.475012][T27561] FAULT_INJECTION: forcing a failure. [ 1677.475012][T27561] name failslab, interval 1, probability 0, space 0, times 0 [ 1677.488577][ T6553] usb 7-1: new full-speed USB device number 83 using dummy_hcd [ 1677.500156][T27561] CPU: 1 UID: 0 PID: 27561 Comm: syz.0.6486 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1677.500183][T27561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1677.500198][T27561] Call Trace: [ 1677.500204][T27561] [ 1677.500211][T27561] dump_stack_lvl+0x16c/0x1f0 [ 1677.500238][T27561] should_fail_ex+0x512/0x640 [ 1677.500258][T27561] ? fs_reclaim_acquire+0xae/0x150 [ 1677.500282][T27561] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1677.500305][T27561] should_failslab+0xc2/0x120 [ 1677.500323][T27561] __kmalloc_noprof+0xd2/0x510 [ 1677.500355][T27561] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1677.500380][T27561] ? tomoyo_profile+0x47/0x60 [ 1677.500408][T27561] tomoyo_path_number_perm+0x245/0x580 [ 1677.500432][T27561] ? tomoyo_path_number_perm+0x237/0x580 [ 1677.500453][T27561] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1677.500474][T27561] ? find_held_lock+0x2b/0x80 [ 1677.500517][T27561] ? find_held_lock+0x2b/0x80 [ 1677.500535][T27561] ? hook_file_ioctl_common+0x145/0x410 [ 1677.500556][T27561] ? __fget_files+0x20e/0x3c0 [ 1677.500584][T27561] security_file_ioctl+0x9b/0x240 [ 1677.500608][T27561] __x64_sys_ioctl+0xb7/0x200 [ 1677.500633][T27561] do_syscall_64+0xcd/0x260 [ 1677.500656][T27561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1677.500672][T27561] RIP: 0033:0x7f80e978e969 [ 1677.500686][T27561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1677.500701][T27561] RSP: 002b:00007f80ea539038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1677.500718][T27561] RAX: ffffffffffffffda RBX: 00007f80e99b5fa0 RCX: 00007f80e978e969 [ 1677.500730][T27561] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 1677.500740][T27561] RBP: 00007f80ea539090 R08: 0000000000000000 R09: 0000000000000000 [ 1677.500750][T27561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1677.500759][T27561] R13: 0000000000000000 R14: 00007f80e99b5fa0 R15: 00007ffd9b168fd8 [ 1677.500782][T27561] [ 1677.501450][T27561] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1677.713753][ T5852] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1677.799767][ T6553] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1677.819860][ T6553] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1677.850927][ T6553] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1677.873294][ T5852] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1677.891403][ T6553] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1677.908347][ T5852] usb 4-1: New USB device found, idVendor=05ac, idProduct=0340, bcdDevice= 0.40 [ 1677.925513][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1677.937039][ T6553] usb 7-1: config 0 descriptor?? [ 1677.945323][ T5852] usb 4-1: Product: 㷯元櫖撓滧降宔具ࢸ濘뿌큿ᠺ陎䩲岿횳㜹葷繑阨盧彙딲夼䍆炙秨ᯈ✰雘迿悋뵊늷꾾⅃쐏◅蕑㜈簐悠⋡趁舙臽㹜糩陞㑘氌₈ㆣ鉾頠艵㬑彯ॵ㑜ۤ臃龒夐紏୛䎟낚ᙩ➎쨍툟᐀둴隑捣㜡䤢圾⮛襱楼᭨鄅 [ 1678.005259][ T5852] usb 4-1: Manufacturer: ? [ 1678.009938][ T5852] usb 4-1: SerialNumber: 徴奣ቸ꒮嚄ᗫ㈄⃂梅䓺೔瓇ԅ퉹챘뷻ὴ㶄邢뗛䶭䖁嵮௢ [ 1678.225321][T26407] usb 1-1: new full-speed USB device number 118 using dummy_hcd [ 1678.388550][T26407] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1678.413780][ T6553] elan 0003:04F3:0755.0052: failed to start in urb: -90 [ 1678.424205][T26407] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1678.453202][ T6553] elan 0003:04F3:0755.0052: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0 [ 1678.472276][T26407] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1678.499652][T26407] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1678.528332][T26407] usb 1-1: config 0 descriptor?? [ 1678.655595][T27575] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6400'. [ 1679.024356][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1679.180522][ T5813] Bluetooth: hci4: command 0x1003 tx timeout [ 1679.249197][T24665] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1679.365352][T26407] elan 0003:04F3:0755.0053: failed to start in urb: -90 [ 1679.443127][T26407] elan 0003:04F3:0755.0053: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 1679.532600][T27582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6487'. [ 1679.744929][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1679.891256][T27587] overlayfs: missing 'lowerdir' [ 1680.286296][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1680.470128][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1680.479279][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1680.491891][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1680.512473][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1680.523653][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1680.547941][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1680.557428][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1680.568635][ T9] usb 2-1: Product: syz [ 1680.572875][ T9] usb 2-1: Manufacturer: syz [ 1680.598299][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 1680.604670][T27575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1680.615267][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 1680.625009][T27575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1680.647572][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1680.654284][T27575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1680.662382][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 1680.668440][T27575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1680.699652][T27579] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6488'. [ 1680.716823][T26407] usb 1-1: USB disconnect, device number 118 [ 1680.787941][ T5852] usb 4-1: USB disconnect, device number 107 [ 1680.800822][T23437] usb 7-1: USB disconnect, device number 83 [ 1680.866072][T27595] FAULT_INJECTION: forcing a failure. [ 1680.866072][T27595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1681.041022][T27595] CPU: 0 UID: 0 PID: 27595 Comm: syz.5.6491 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1681.041053][T27595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1681.041063][T27595] Call Trace: [ 1681.041070][T27595] [ 1681.041078][T27595] dump_stack_lvl+0x16c/0x1f0 [ 1681.041106][T27595] should_fail_ex+0x512/0x640 [ 1681.041132][T27595] _copy_from_user+0x2e/0xd0 [ 1681.041157][T27595] io_submit_one+0xbb/0x1da0 [ 1681.041185][T27595] ? __lock_acquire+0xaa4/0x1ba0 [ 1681.041214][T27595] ? __pfx_io_submit_one+0x10/0x10 [ 1681.041247][T27595] ? __might_fault+0xe3/0x190 [ 1681.041263][T27595] ? __might_fault+0x13b/0x190 [ 1681.041284][T27595] ? __x64_sys_io_submit+0x1a9/0x350 [ 1681.041308][T27595] __x64_sys_io_submit+0x1a9/0x350 [ 1681.041335][T27595] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 1681.041359][T27595] ? fput+0x70/0xf0 [ 1681.041387][T27595] do_syscall_64+0xcd/0x260 [ 1681.041417][T27595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1681.041435][T27595] RIP: 0033:0x7f0567d8e969 [ 1681.041449][T27595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1681.041462][T27595] RSP: 002b:00007f0568bd0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1681.041477][T27595] RAX: ffffffffffffffda RBX: 00007f0567fb6080 RCX: 00007f0567d8e969 [ 1681.041488][T27595] RDX: 00002000000000c0 RSI: 00000000000000ca RDI: 00007f0568bd1000 [ 1681.041499][T27595] RBP: 00007f0568bd0090 R08: 0000000000000000 R09: 0000000000000000 [ 1681.041509][T27595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1681.041519][T27595] R13: 0000000000000000 R14: 00007f0567fb6080 R15: 00007ffccce975c8 [ 1681.041539][T27595] [ 1681.838577][T27605] netlink: 'syz.1.6490': attribute type 13 has an invalid length. [ 1682.118144][T27605] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1682.138437][T26407] lo speed is unknown, defaulting to 1000 [ 1682.141031][T27613] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6494'. [ 1682.925603][T24665] Bluetooth: hci5: unexpected event for opcode 0x0419 [ 1683.926486][T27632] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6501'. [ 1685.208947][T27640] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6503'. [ 1685.277970][T27640] hub 6-0:1.0: USB hub found [ 1685.283491][T27640] hub 6-0:1.0: 1 port detected [ 1685.418192][ T5852] usb 2-1: USB disconnect, device number 10 [ 1685.661208][T27652] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 1685.693118][T27652] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 1686.555247][T23437] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 1686.662431][ T5852] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 1686.707698][T23437] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1686.716150][T23437] usb 7-1: New USB device found, idVendor=05ac, idProduct=0340, bcdDevice= 0.40 [ 1686.728336][T23437] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1686.737133][T23437] usb 7-1: Product: 㷯元櫖撓滧降宔具ࢸ濘뿌큿ᠺ陎䩲岿횳㜹葷繑阨盧彙딲夼䍆炙秨ᯈ✰雘迿悋뵊늷꾾⅃쐏◅蕑㜈簐悠⋡趁舙臽㹜糩陞㑘氌₈ㆣ鉾頠艵㬑彯ॵ㑜ۤ臃龒夐紏୛䎟낚ᙩ➎쨍툟᐀둴隑捣㜡䤢圾⮛襱楼᭨鄅 [ 1686.822577][T23437] usb 7-1: Manufacturer: ? [ 1686.827181][T23437] usb 7-1: SerialNumber: 䀿潉⊲琑쟽渳需䜸撃빏ࣦ簒隫墢兇皓ꪏ쩹㛳‭໱ኍ鎲져뽎둹꾧籆偬奋쮩䀵啒䄄擬⁍枙끨窉愎㔨켣⥕섬㜁寖홊棯冸ᪧ쾧乇㚇黹筄὜懿燾闻ﴴٖ쏎廓祑㦀㓦椷膺ୁ龜뿠栏߭낤䙀룈뿙Ⲇ㰹ར꬈✰䈖⨠薦팖ެៜ㥓筒ꀩꆌ皥 [ 1687.248552][T24665] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1687.258448][T24665] Bluetooth: hci5: Injecting HCI hardware error event [ 1687.269041][ T5813] Bluetooth: hci5: hardware error 0x00 [ 1687.276794][ T5861] usb 1-1: new full-speed USB device number 119 using dummy_hcd [ 1687.308975][ T5852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1687.320267][ T5852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1687.330344][ T5852] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1687.347468][ T5852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1687.366960][T27674] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6515'. [ 1687.417447][ T5852] usb 2-1: config 0 descriptor?? [ 1687.438474][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1687.468446][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1687.472198][T23437] usb 7-1: USB disconnect, device number 84 [ 1687.478730][ T5861] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1687.493384][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1687.524426][ T5861] usb 1-1: config 0 descriptor?? [ 1687.936549][ T5861] elan 0003:04F3:0755.0054: failed to start in urb: -90 [ 1687.948073][ T5861] elan 0003:04F3:0755.0054: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 1687.963955][ T5852] elan 0003:04F3:0755.0055: failed to start in urb: -90 [ 1687.976611][ T5852] elan 0003:04F3:0755.0055: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 1688.156642][T26407] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1688.322479][T27687] syz.6.6520 (27687): drop_caches: 2 [ 1688.331166][T27687] syz.6.6520 (27687): drop_caches: 2 [ 1688.839434][T27690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6513'. [ 1689.146608][T26407] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1689.173276][T26407] usb 4-1: New USB device found, idVendor=05ac, idProduct=0340, bcdDevice= 0.40 [ 1689.352449][T27693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6505'. [ 1689.441847][T26407] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1689.445295][ T5813] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1689.544038][T26407] usb 4-1: Product: 㷯元櫖撓滧降宔具ࢸ濘뿌큿ᠺ陎䩲岿횳㜹葷繑阨盧彙딲夼䍆炙秨ᯈ✰雘迿悋뵊늷꾾⅃쐏◅蕑㜈簐悠⋡趁舙臽㹜糩陞㑘氌₈ㆣ鉾頠艵㬑彯ॵ㑜ۤ臃龒夐紏୛䎟낚ᙩ➎쨍툟᐀둴隑捣㜡䤢圾⮛襱楼᭨鄅 [ 1689.571348][ C1] vkms_vblank_simulate: vblank timer overrun [ 1689.651679][T26231] usb 1-1: USB disconnect, device number 119 [ 1689.688853][ T5854] usb 2-1: USB disconnect, device number 11 [ 1689.690445][T26407] usb 4-1: Manufacturer: ? [ 1689.700504][T26407] usb 4-1: SerialNumber: 䀿潉⊲琑쟽渳需䜸撃빏ࣦ簒隫墢兇皓ꪏ쩹㛳‭໱ኍ鎲져뽎둹꾧籆偬奋쮩䀵啒䄄擬⁍枙끨窉愎㔨켣⥕섬㜁寖홊棯冸ᪧ쾧乇㚇黹筄὜懿燾闻ﴴٖ쏎廓祑㦀㓦椷膺ୁ龜뿠栏߭낤䙀룈뿙Ⲇ㰹ར꬈✰䈖⨠薦팖ެៜ㥓筒ꀩꆌ皥 [ 1689.878259][T27708] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1690.008386][T26407] usb 4-1: USB disconnect, device number 108 [ 1690.727129][T27723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6532'. [ 1690.748813][T24665] Bluetooth: hci1: unexpected event for opcode 0x0419 [ 1690.955345][T26407] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1691.120458][T26407] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1691.505952][ T5861] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 1691.525906][T26407] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1691.537397][T26407] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1691.635658][T26407] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1691.657056][T26407] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1691.678406][T26407] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1691.691903][T26407] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1691.701281][T26407] usb 6-1: Product: syz [ 1691.706388][T26407] usb 6-1: Manufacturer: syz [ 1691.714406][ T5861] usb 7-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 1691.726423][ T5861] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.734622][ T5861] usb 7-1: Product: syz [ 1691.741730][T27741] 9pnet_fd: Insufficient options for proto=fd [ 1691.748604][ T5861] usb 7-1: Manufacturer: syz [ 1691.753213][ T5861] usb 7-1: SerialNumber: syz [ 1691.768380][T26407] cdc_wdm 6-1:1.0: skipping garbage [ 1691.784065][T26407] cdc_wdm 6-1:1.0: skipping garbage [ 1691.794883][ T5861] usb 7-1: config 0 descriptor?? [ 1691.811962][T26407] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1691.826911][T26407] cdc_wdm 6-1:1.0: Unknown control protocol [ 1691.840841][T24665] Bluetooth: hci4: urb ffff888058e05f00 submission failed (2) [ 1692.036900][ T9] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1692.053369][T26407] usb 6-1: USB disconnect, device number 8 [ 1692.079956][ T5861] usb 7-1: USB disconnect, device number 85 [ 1692.144639][ T30] audit: type=1400 audit(1746287437.475:1767): avc: denied { execmod } for pid=27745 comm="syz.0.6540" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=116381 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1692.228406][ T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1692.237282][ T9] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1692.267010][ T30] audit: type=1400 audit(1746287437.515:1768): avc: denied { map } for pid=27745 comm="syz.0.6540" path="/dev/bus/usb/005/001" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1692.299472][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1692.315259][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1692.326308][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1692.338974][ T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1692.348316][ T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1692.356362][ T9] usb 4-1: Product: syz [ 1692.360636][ T9] usb 4-1: Manufacturer: syz [ 1692.369328][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 1692.374668][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 1692.383412][ T9] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1692.389558][ T9] cdc_wdm 4-1:1.0: Unknown control protocol [ 1692.620835][ T5854] usb 4-1: USB disconnect, device number 109 [ 1693.182941][T27765] syz.6.6546 (27765): drop_caches: 2 [ 1693.191211][T27765] syz.6.6546 (27765): drop_caches: 2 [ 1693.205858][ T6553] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1693.757285][ T6553] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1693.811765][ T6553] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1693.825818][ T6553] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1693.835026][ T6553] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1693.860964][ T6553] usb 6-1: config 0 descriptor?? [ 1693.873717][T27776] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6551'. [ 1693.889223][T26407] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 1694.345001][T26407] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1694.365268][T26407] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1694.378627][T26407] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1694.389940][T26407] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1694.411922][T26407] usb 4-1: config 0 descriptor?? [ 1694.431722][ T6553] elan 0003:04F3:0755.0056: failed to start in urb: -90 [ 1694.444768][ T6553] elan 0003:04F3:0755.0056: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 1694.775302][ T5813] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1695.019114][ T5813] Bluetooth: hci1: Injecting HCI hardware error event [ 1695.029519][ T5813] Bluetooth: hci1: hardware error 0x00 [ 1695.332333][T26407] elan 0003:04F3:0755.0057: failed to start in urb: -90 [ 1695.379773][T26407] elan 0003:04F3:0755.0057: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 1695.534870][T27787] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6543'. [ 1695.544134][T27787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1695.551997][T27787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1695.809919][T27791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6548'. [ 1695.889253][T27787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1695.898117][T27787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1696.177006][ T6553] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 1696.381013][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 1696.421157][ T6553] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1696.459050][ T6553] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1696.473813][ T6553] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1696.490453][T27787] bond0: (slave batadv0): Releasing backup interface [ 1696.536833][ T6553] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1696.977756][ T6553] usb 2-1: config 0 descriptor?? [ 1697.013163][T27791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1697.022345][T27791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1697.031114][T27791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1697.040322][T27791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1697.094213][ T5861] usb 6-1: USB disconnect, device number 9 [ 1697.100283][T27801] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6558'. [ 1697.210873][T27810] overlayfs: missing 'lowerdir' [ 1697.246723][T27777] usb 4-1: USB disconnect, device number 110 [ 1697.423104][ T5813] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1697.458565][ T6553] elan 0003:04F3:0755.0058: failed to start in urb: -90 [ 1697.485403][ T6553] elan 0003:04F3:0755.0058: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 1697.581258][T27818] syz.6.6563 (27818): drop_caches: 2 [ 1697.589342][T27818] syz.6.6563 (27818): drop_caches: 2 [ 1698.189080][T27822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6557'. [ 1698.237030][T27819] xt_cgroup: invalid path, errno=-2 [ 1698.848002][ T5861] usb 2-1: USB disconnect, device number 12 [ 1699.234733][T27841] FAULT_INJECTION: forcing a failure. [ 1699.234733][T27841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1699.260937][T27841] CPU: 1 UID: 0 PID: 27841 Comm: syz.5.6570 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1699.260967][T27841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1699.260978][T27841] Call Trace: [ 1699.260984][T27841] [ 1699.260992][T27841] dump_stack_lvl+0x16c/0x1f0 [ 1699.261019][T27841] should_fail_ex+0x512/0x640 [ 1699.261044][T27841] _copy_from_user+0x2e/0xd0 [ 1699.261068][T27841] copy_msghdr_from_user+0x98/0x160 [ 1699.261086][T27841] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1699.261115][T27841] ___sys_sendmsg+0xfe/0x1d0 [ 1699.261133][T27841] ? __pfx____sys_sendmsg+0x10/0x10 [ 1699.261180][T27841] __sys_sendmsg+0x16d/0x220 [ 1699.261198][T27841] ? __pfx___sys_sendmsg+0x10/0x10 [ 1699.261222][T27841] ? rcu_is_watching+0x12/0xc0 [ 1699.261249][T27841] do_syscall_64+0xcd/0x260 [ 1699.261273][T27841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1699.261291][T27841] RIP: 0033:0x7f0567d8e969 [ 1699.261305][T27841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1699.261329][T27841] RSP: 002b:00007f0568bf2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1699.261347][T27841] RAX: ffffffffffffffda RBX: 00007f0567fb5fa0 RCX: 00007f0567d8e969 [ 1699.261358][T27841] RDX: 00000000000000c0 RSI: 0000200000000040 RDI: 0000000000000003 [ 1699.261369][T27841] RBP: 00007f0568bf2090 R08: 0000000000000000 R09: 0000000000000000 [ 1699.261379][T27841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1699.261389][T27841] R13: 0000000000000000 R14: 00007f0567fb5fa0 R15: 00007ffccce975c8 [ 1699.261412][T27841] [ 1699.554343][T27847] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1699.663801][T27856] overlayfs: missing 'lowerdir' [ 1700.185718][ T5906] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1700.313868][T27871] syz.6.6583 (27871): drop_caches: 2 [ 1700.319750][T27871] syz.6.6583 (27871): drop_caches: 2 [ 1700.855389][ T5906] usb 6-1: Using ep0 maxpacket: 8 [ 1700.862874][ T5906] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1700.865988][T27882] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1700.871721][ T5906] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1700.897899][ T5906] usb 6-1: config 179 has no interface number 0 [ 1700.905338][ T6553] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 1700.908560][ T5906] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1700.925099][ T5906] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1700.940455][ T5906] usb 6-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 1700.953801][ T5906] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1700.962909][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.975025][T27857] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1701.069217][ T6553] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1701.082621][ T6553] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1701.085252][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1701.095071][ T6553] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1701.110256][ T6553] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1701.148270][ T6553] usb 4-1: config 0 descriptor?? [ 1701.474992][T27857] vhci_hcd vhci_hcd.0: port 0 already used [ 1701.484456][ T5861] usb 6-1: USB disconnect, device number 10 [ 1701.575282][ T5813] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1701.589434][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1701.598682][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1701.608929][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1701.618503][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1701.629429][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1701.640948][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1701.643612][ T6553] elan 0003:04F3:0755.0059: failed to start in urb: -90 [ 1701.650246][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1701.659021][ T6553] elan 0003:04F3:0755.0059: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 1701.665464][ T9] usb 2-1: Product: syz [ 1701.665487][ T9] usb 2-1: Manufacturer: syz [ 1701.677910][ T5906] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1701.695762][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 1701.702910][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 1701.709593][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1701.715589][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 1701.865302][ T5906] usb 1-1: Using ep0 maxpacket: 16 [ 1701.878623][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1701.898802][ T5906] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1702.006489][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1702.033763][T27896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6581'. [ 1702.110735][ T5906] usb 1-1: config 0 descriptor?? [ 1702.343681][T27900] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1702.380217][T27900] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1702.393553][ T6553] usb 4-1: USB disconnect, device number 111 [ 1702.505893][T27905] netlink: 'syz.1.6584': attribute type 13 has an invalid length. [ 1702.554743][T27905] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1702.597703][ T5906] mcp2221 0003:04D8:00DD.005A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 1703.399934][T27915] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6593'. [ 1703.750653][ T6553] usb 1-1: USB disconnect, device number 120 [ 1704.028352][T27926] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1704.218878][ T5906] usb 2-1: USB disconnect, device number 13 [ 1706.545276][ T6553] usb 1-1: new full-speed USB device number 121 using dummy_hcd [ 1706.867192][ T6553] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1706.899896][T27964] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1706.910914][ T6553] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1706.937780][T27964] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1706.946179][ T6553] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1706.969262][ T6553] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.985966][ T6553] usb 1-1: config 0 descriptor?? [ 1707.311350][T27971] syz.3.6611 (27971): drop_caches: 2 [ 1707.318725][T27971] syz.3.6611 (27971): drop_caches: 2 [ 1707.884583][ T5861] usb 7-1: new full-speed USB device number 86 using dummy_hcd [ 1707.999071][T27972] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6612'. [ 1708.109843][ T5861] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1708.241838][ T5861] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1708.298380][ T5861] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1708.310564][ T5861] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.330671][ T5861] usb 7-1: config 0 descriptor?? [ 1708.380521][T27974] FAULT_INJECTION: forcing a failure. [ 1708.380521][T27974] name failslab, interval 1, probability 0, space 0, times 0 [ 1708.393710][T27974] CPU: 0 UID: 0 PID: 27974 Comm: syz.3.6613 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1708.393736][T27974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1708.393745][T27974] Call Trace: [ 1708.393751][T27974] [ 1708.393758][T27974] dump_stack_lvl+0x16c/0x1f0 [ 1708.393786][T27974] should_fail_ex+0x512/0x640 [ 1708.393806][T27974] ? fs_reclaim_acquire+0xae/0x150 [ 1708.393826][T27974] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1708.393848][T27974] should_failslab+0xc2/0x120 [ 1708.393866][T27974] __kmalloc_noprof+0xd2/0x510 [ 1708.393896][T27974] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1708.393920][T27974] ? tomoyo_profile+0x47/0x60 [ 1708.393945][T27974] tomoyo_path_number_perm+0x245/0x580 [ 1708.393958][T27974] ? tomoyo_path_number_perm+0x237/0x580 [ 1708.393972][T27974] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1708.393985][T27974] ? find_held_lock+0x2b/0x80 [ 1708.394024][T27974] ? find_held_lock+0x2b/0x80 [ 1708.394041][T27974] ? hook_file_ioctl_common+0x145/0x410 [ 1708.394061][T27974] ? __fget_files+0x20e/0x3c0 [ 1708.394085][T27974] security_file_ioctl+0x9b/0x240 [ 1708.394106][T27974] __x64_sys_ioctl+0xb7/0x200 [ 1708.394122][T27974] do_syscall_64+0xcd/0x260 [ 1708.394138][T27974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1708.394155][T27974] RIP: 0033:0x7f4bc738e969 [ 1708.394169][T27974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1708.394184][T27974] RSP: 002b:00007f4bc827b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1708.394199][T27974] RAX: ffffffffffffffda RBX: 00007f4bc75b5fa0 RCX: 00007f4bc738e969 [ 1708.394209][T27974] RDX: 0000200000000040 RSI: 00000000c028aa05 RDI: 0000000000000003 [ 1708.394219][T27974] RBP: 00007f4bc827b090 R08: 0000000000000000 R09: 0000000000000000 [ 1708.394227][T27974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1708.394233][T27974] R13: 0000000000000000 R14: 00007f4bc75b5fa0 R15: 00007ffe011998e8 [ 1708.394247][T27974] [ 1708.394509][T27974] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1708.606689][ T6553] elan 0003:04F3:0755.005B: failed to start in urb: -90 [ 1708.634219][ T6553] elan 0003:04F3:0755.005B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 1708.939624][ T5861] elan 0003:04F3:0755.005C: failed to start in urb: -90 [ 1708.956718][ T5861] elan 0003:04F3:0755.005C: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0 [ 1709.606864][T27995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6606'. [ 1710.055649][T27998] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6609'. [ 1710.348998][T25816] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 1710.374782][T28002] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6621'. [ 1710.647135][T25816] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1710.699340][ T5854] usb 1-1: USB disconnect, device number 121 [ 1710.705237][T25816] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1710.779724][ T9] usb 7-1: USB disconnect, device number 86 [ 1710.787443][ T5813] Bluetooth: hci2: command 0x0406 tx timeout [ 1710.802662][T25816] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1710.825392][T25816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1710.865310][T25816] usb 2-1: config 0 descriptor?? [ 1710.985350][T28017] FAULT_INJECTION: forcing a failure. [ 1710.985350][T28017] name failslab, interval 1, probability 0, space 0, times 0 [ 1710.998729][T28017] CPU: 1 UID: 0 PID: 28017 Comm: syz.5.6623 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1710.998756][T28017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1710.998766][T28017] Call Trace: [ 1710.998773][T28017] [ 1710.998780][T28017] dump_stack_lvl+0x16c/0x1f0 [ 1710.998811][T28017] should_fail_ex+0x512/0x640 [ 1710.998833][T28017] ? fs_reclaim_acquire+0xae/0x150 [ 1710.998858][T28017] should_failslab+0xc2/0x120 [ 1710.998876][T28017] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1710.998904][T28017] ? ima_inode_get+0x120/0x580 [ 1710.998931][T28017] ima_inode_get+0x120/0x580 [ 1710.998956][T28017] process_measurement+0x585/0x23e0 [ 1710.998985][T28017] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1710.999002][T28017] ? __pfx_process_measurement+0x10/0x10 [ 1710.999029][T28017] ? __pfx_avc_has_perm+0x10/0x10 [ 1710.999047][T28017] ? find_held_lock+0x2b/0x80 [ 1710.999093][T28017] ? file_map_prot_check+0x1eb/0x360 [ 1710.999117][T28017] ima_file_mmap+0x1a8/0x1d0 [ 1710.999140][T28017] ? __pfx_ima_file_mmap+0x10/0x10 [ 1710.999175][T28017] security_mmap_file+0x88c/0x990 [ 1710.999201][T28017] vm_mmap_pgoff+0xec/0x450 [ 1710.999225][T28017] ? find_held_lock+0x2b/0x80 [ 1710.999244][T28017] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1710.999269][T28017] ? __fget_files+0x20e/0x3c0 [ 1710.999300][T28017] ksys_mmap_pgoff+0x32c/0x5c0 [ 1710.999322][T28017] ? __pfx_ksys_write+0x10/0x10 [ 1710.999346][T28017] ? rcu_is_watching+0x12/0xc0 [ 1710.999369][T28017] __x64_sys_mmap+0x125/0x190 [ 1710.999391][T28017] do_syscall_64+0xcd/0x260 [ 1710.999415][T28017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.999432][T28017] RIP: 0033:0x7f0567d8e969 [ 1710.999447][T28017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1710.999464][T28017] RSP: 002b:00007f0568bb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1710.999481][T28017] RAX: ffffffffffffffda RBX: 00007f0567fb6160 RCX: 00007f0567d8e969 [ 1710.999492][T28017] RDX: 00000000037fffee RSI: 0000000000600000 RDI: 0000200000000000 [ 1710.999503][T28017] RBP: 00007f0568bb0090 R08: 0000000000000006 R09: 0000000000000000 [ 1710.999514][T28017] R10: 0000000004002011 R11: 0000000000000246 R12: 0000000000000001 [ 1710.999524][T28017] R13: 0000000000000000 R14: 00007f0567fb6160 R15: 00007ffccce975c8 [ 1710.999548][T28017] [ 1711.433489][T28020] kAFS: unable to lookup cell ' [ 1711.433489][T28020] >.?](<' [ 1711.433489][T28020] ءP!0^O[ZvMTlA/H=9.b>9F9*mTS' [ 1711.452736][T25816] elan 0003:04F3:0755.005D: failed to start in urb: -90 [ 1711.509420][T25816] elan 0003:04F3:0755.005D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 1711.525262][ T30] audit: type=1400 audit(1746287456.855:1769): avc: denied { read write } for pid=28019 comm="syz.6.6628" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1711.576622][ T30] audit: type=1400 audit(1746287456.865:1770): avc: denied { open } for pid=28019 comm="syz.6.6628" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1711.775238][T28027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6620'. [ 1712.071618][ T9] usb 2-1: USB disconnect, device number 14 [ 1712.765275][ T5906] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1712.945014][ T5906] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1712.973507][ T5906] usb 6-1: New USB device found, idVendor=05ac, idProduct=0340, bcdDevice= 0.40 [ 1712.984829][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.992967][ T5906] usb 6-1: Product: 㷯元櫖撓滧降宔具ࢸ濘뿌큿ᠺ陎䩲岿횳㜹葷繑阨盧彙딲夼䍆炙秨ᯈ✰雘迿悋뵊늷꾾⅃쐏◅蕑㜈簐悠⋡趁舙臽㹜糩陞㑘氌₈ㆣ鉾頠艵㬑彯ॵ㑜ۤ臃龒夐紏୛䎟낚ᙩ➎쨍툟᐀둴隑捣㜡䤢圾⮛襱楼᭨鄅 [ 1713.020864][ T5906] usb 6-1: Manufacturer: ? [ 1713.025840][ T5906] usb 6-1: SerialNumber: 䀿潉⊲琑쟽渳需䜸撃빏ࣦ簒隫墢兇皓ꪏ쩹㛳‭໱ኍ鎲져뽎둹꾧籆偬奋쮩䀵啒䄄擬⁍枙끨窉愎㔨켣⥕섬㜁寖홊棯冸ᪧ쾧乇㚇黹筄὜懿燾闻ﴴٖ쏎廓祑㦀㓦椷膺ୁ龜뿠栏߭낤䙀룈뿙Ⲇ㰹ར꬈✰䈖⨠薦팖ެៜ㥓筒ꀩꆌ皥 [ 1713.287483][T28044] syz.3.6633 (28044): drop_caches: 2 [ 1713.295051][T28044] syz.3.6633 (28044): drop_caches: 2 [ 1713.510509][T28046] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6635'. [ 1713.706722][ T5906] usb 6-1: USB disconnect, device number 11 [ 1714.043334][T28065] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6643'. [ 1714.053548][ T6553] usb 7-1: new full-speed USB device number 87 using dummy_hcd [ 1714.105343][T25816] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1714.136358][ T31] INFO: task kworker/0:3:5806 blocked for more than 143 seconds. [ 1714.144814][ T31] Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 [ 1714.164572][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1714.173674][ T31] task:kworker/0:3 state:D stack:21656 pid:5806 tgid:5806 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1714.201937][ T31] Workqueue: usb_hub_wq hub_event [ 1714.207875][ T31] Call Trace: [ 1714.211859][ T31] [ 1714.215067][ T31] __schedule+0x116f/0x5de0 [ 1714.224670][ T31] ? __lock_acquire+0x9e1/0x1ba0 [ 1714.230481][ T31] ? __pfx___schedule+0x10/0x10 [ 1714.239249][ T6553] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1714.251407][ T31] ? find_held_lock+0x2b/0x80 [ 1714.257851][ T31] ? schedule+0x2d7/0x3a0 [ 1714.263140][ T6553] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1714.275096][ T31] schedule+0xe7/0x3a0 [ 1714.318494][ T31] schedule_preempt_disabled+0x13/0x30 [ 1714.328225][T25816] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1714.341593][ T6553] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1714.351814][ T31] __mutex_lock+0x6c7/0xb90 [ 1714.376073][ T31] ? hub_event+0x292b/0x4fa0 [ 1714.376573][ T6553] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1714.390387][T25816] usb 2-1: New USB device found, idVendor=05ac, idProduct=0340, bcdDevice= 0.40 [ 1714.412130][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1714.414840][T25816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1714.452015][T25816] usb 2-1: Product: 㷯元櫖撓滧降宔具ࢸ濘뿌큿ᠺ陎䩲岿횳㜹葷繑阨盧彙딲夼䍆炙秨ᯈ✰雘迿悋뵊늷꾾⅃쐏◅蕑㜈簐悠⋡趁舙臽㹜糩陞㑘氌₈ㆣ鉾頠艵㬑彯ॵ㑜ۤ臃龒夐紏୛䎟낚ᙩ➎쨍툟᐀둴隑捣㜡䤢圾⮛襱楼᭨鄅 [ 1714.482792][ T6553] usb 7-1: config 0 descriptor?? [ 1714.489660][T25816] usb 2-1: Manufacturer: ? [ 1714.497572][T25816] usb 2-1: SerialNumber: 䀿潉⊲琑쟽渳需䜸撃빏ࣦ簒隫墢兇皓ꪏ쩹㛳‭໱ኍ鎲져뽎둹꾧籆偬奋쮩䀵啒䄄擬⁍枙끨窉愎㔨켣⥕섬㜁寖홊棯冸ᪧ쾧乇㚇黹筄὜懿燾闻ﴴٖ쏎廓祑㦀㓦椷膺ୁ龜뿠栏߭낤䙀룈뿙Ⲇ㰹ར꬈✰䈖⨠薦팖ެៜ㥓筒ꀩꆌ皥 [ 1714.530272][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1714.540440][ T31] ? hub_ext_port_status+0x1fa/0x670 [ 1714.560784][ T31] ? hub_event+0x292b/0x4fa0 [ 1714.583834][ T31] hub_event+0x292b/0x4fa0 [ 1714.592910][ T31] ? __pfx_hub_event+0x10/0x10 [ 1714.598264][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 1714.606041][ T31] ? rcu_is_watching+0x12/0xc0 [ 1714.610994][ T31] process_one_work+0x9cc/0x1b70 [ 1714.616167][ T31] ? __pfx_hcd_resume_work+0x10/0x10 [ 1714.621570][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1714.627150][ T31] ? assign_work+0x1a0/0x250 [ 1714.631855][ T31] worker_thread+0x6c8/0xf10 [ 1714.636589][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1714.641823][ T31] kthread+0x3c2/0x780 [ 1714.646171][ T31] ? __pfx_kthread+0x10/0x10 [ 1714.650817][ T31] ? __pfx_kthread+0x10/0x10 [ 1714.655517][ T31] ? __pfx_kthread+0x10/0x10 [ 1714.660139][ T31] ? __pfx_kthread+0x10/0x10 [ 1714.664764][ T31] ? rcu_is_watching+0x12/0xc0 [ 1714.669644][ T31] ? __pfx_kthread+0x10/0x10 [ 1714.674231][ T31] ret_from_fork+0x45/0x80 [ 1714.678652][ T31] ? __pfx_kthread+0x10/0x10 [ 1714.683262][ T31] ret_from_fork_asm+0x1a/0x30 [ 1714.688071][ T31] [ 1714.691189][ T31] [ 1714.691189][ T31] Showing all locks held in the system: [ 1714.699997][ T31] 1 lock held by khungtaskd/31: [ 1714.706422][ T31] #0: ffffffff8e3bf5c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1714.716832][ T31] 5 locks held by kworker/u8:6/1151: [ 1714.722160][ T31] 2 locks held by getty/5569: [ 1714.727628][ T31] #0: ffff8880328f20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1714.737495][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1714.747719][ T31] 5 locks held by kworker/0:3/5806: [ 1714.752984][ T31] #0: ffff8881446bb948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1714.764005][ T31] #1: ffffc90003187d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1714.795229][ T31] #2: ffff88802a785198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 1714.804327][ T31] #3: ffff888145f89510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2906/0x4fa0 [ 1714.814975][ T31] #4: ffff888145f9d468 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x292b/0x4fa0 [ 1714.824700][ T31] 3 locks held by kworker/u9:5/5813: [ 1714.830174][ T31] #0: ffff888036394148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1714.840589][ T31] #1: ffffc90003127d18 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1714.852958][ T31] #2: ffff888033174d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x430 [ 1714.863115][ T31] 3 locks held by kworker/u8:9/6375: [ 1714.868481][ T31] 5 locks held by kworker/1:7/6553: [ 1714.873675][ T31] #0: ffff8881446bb948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1714.884588][ T31] #1: ffffc9000ba9fd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1714.895903][ T31] #2: ffff88802992e198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 1714.904816][ T31] #3: ffff888034de8198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 1714.915355][ T31] #4: ffff888034dec160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 1714.918182][ T6553] elan 0003:04F3:0755.005E: failed to start in urb: -90 [ 1714.924624][ T31] 5 locks held by kworker/0:1/10798: [ 1714.924642][ T31] #0: ffff8881446bb948 [ 1714.937430][ T6553] elan 0003:04F3:0755.005E: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0 [ 1714.937494][ T31] ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1714.961555][ T31] #1: ffffc9001af7fd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1714.972879][ T31] #2: ffff88814632c198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 1714.981797][ T31] #3: ffff88814632f510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2906/0x4fa0 [ 1714.991758][ T31] #4: ffff888145f9d468 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x292b/0x4fa0 [ 1715.001502][ T31] 4 locks held by kworker/1:0/25816: [ 1715.006810][ T31] #0: ffff8881446bb948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1715.018079][ T31] #1: ffffc9000f857d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1715.029359][ T31] #2: ffff8880296e6198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 1715.038286][ T31] #3: ffff888034de9198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 1715.047543][ T31] 1 lock held by syz.0.6638/28054: [ 1715.052644][ T31] #0: ffffffff8e3ca9c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 1715.062611][ T31] 2 locks held by syz.1.6642/28062: [ 1715.067837][ T31] #0: ffff88805cbeacd8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x33/0x130 [ 1715.078781][ T31] #1: ffffffff8e3caaf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x280/0x3c0 [ 1715.088898][ T31] [ 1715.091249][ T31] ============================================= [ 1715.091249][ T31] [ 1715.102187][ T31] NMI backtrace for cpu 0 [ 1715.102204][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1715.102225][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1715.102236][ T31] Call Trace: [ 1715.102242][ T31] [ 1715.102248][ T31] dump_stack_lvl+0x116/0x1f0 [ 1715.102275][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1715.102291][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1715.102310][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1715.102328][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1715.102347][ T31] watchdog+0xf70/0x12c0 [ 1715.102366][ T31] ? __pfx_watchdog+0x10/0x10 [ 1715.102380][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1715.102402][ T31] ? __kthread_parkme+0x19e/0x250 [ 1715.102427][ T31] ? __pfx_watchdog+0x10/0x10 [ 1715.102442][ T31] kthread+0x3c2/0x780 [ 1715.102458][ T31] ? __pfx_kthread+0x10/0x10 [ 1715.102472][ T31] ? __pfx_kthread+0x10/0x10 [ 1715.102486][ T31] ? __pfx_kthread+0x10/0x10 [ 1715.102500][ T31] ? __pfx_kthread+0x10/0x10 [ 1715.102514][ T31] ? rcu_is_watching+0x12/0xc0 [ 1715.102534][ T31] ? __pfx_kthread+0x10/0x10 [ 1715.102549][ T31] ret_from_fork+0x45/0x80 [ 1715.102563][ T31] ? __pfx_kthread+0x10/0x10 [ 1715.102577][ T31] ret_from_fork_asm+0x1a/0x30 [ 1715.102612][ T31] [ 1715.102617][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1715.242569][ C1] NMI backtrace for cpu 1 [ 1715.242588][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1715.242604][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1715.242611][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1715.242631][ C1] Code: 15 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 1a 1d 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1715.242643][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 1715.242654][ C1] RAX: 00000000090fb2bb RBX: 0000000000000001 RCX: ffffffff8b6cd419 [ 1715.242663][ C1] RDX: 0000000000000000 RSI: ffffffff8dbe0f79 RDI: ffffffff8bf482e0 [ 1715.242671][ C1] RBP: ffffed1003b59488 R08: 0000000000000001 R09: ffffed10170a65bd [ 1715.242678][ C1] R10: ffff8880b8532deb R11: 0000000000000000 R12: 0000000000000001 [ 1715.242686][ C1] R13: ffff88801daca440 R14: ffffffff90850210 R15: 0000000000000000 [ 1715.242694][ C1] FS: 0000000000000000(0000) GS:ffff888124ae1000(0000) knlGS:0000000000000000 [ 1715.242708][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1715.242716][ C1] CR2: 0000001b2c4f2ff8 CR3: 0000000064c72000 CR4: 00000000003526f0 [ 1715.242724][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1715.242732][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1715.242739][ C1] Call Trace: [ 1715.242744][ C1] [ 1715.242748][ C1] default_idle+0x13/0x20 [ 1715.242766][ C1] default_idle_call+0x6d/0xb0 [ 1715.242782][ C1] do_idle+0x391/0x510 [ 1715.242800][ C1] ? __pfx_do_idle+0x10/0x10 [ 1715.242815][ C1] ? do_idle+0x1c/0x510 [ 1715.242830][ C1] cpu_startup_entry+0x4f/0x60 [ 1715.242844][ C1] start_secondary+0x21d/0x2b0 [ 1715.242863][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1715.242883][ C1] common_startup_64+0x13e/0x148 [ 1715.242902][ C1] [ 1715.434333][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1715.441218][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1715.453032][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1715.463088][ T31] Call Trace: [ 1715.466355][ T31] [ 1715.469276][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1715.473858][ T31] panic+0x71c/0x800 [ 1715.477745][ T31] ? __pfx_panic+0x10/0x10 [ 1715.482154][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1715.487517][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1715.493493][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1715.498853][ T31] ? watchdog+0xdda/0x12c0 [ 1715.503256][ T31] ? watchdog+0xdcd/0x12c0 [ 1715.507657][ T31] watchdog+0xdeb/0x12c0 [ 1715.511890][ T31] ? __pfx_watchdog+0x10/0x10 [ 1715.516549][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1715.521739][ T31] ? __kthread_parkme+0x19e/0x250 [ 1715.526758][ T31] ? __pfx_watchdog+0x10/0x10 [ 1715.531422][ T31] kthread+0x3c2/0x780 [ 1715.535478][ T31] ? __pfx_kthread+0x10/0x10 [ 1715.540050][ T31] ? __pfx_kthread+0x10/0x10 [ 1715.544625][ T31] ? __pfx_kthread+0x10/0x10 [ 1715.549202][ T31] ? __pfx_kthread+0x10/0x10 [ 1715.553778][ T31] ? rcu_is_watching+0x12/0xc0 [ 1715.558530][ T31] ? __pfx_kthread+0x10/0x10 [ 1715.563110][ T31] ret_from_fork+0x45/0x80 [ 1715.567534][ T31] ? __pfx_kthread+0x10/0x10 [ 1715.572114][ T31] ret_from_fork_asm+0x1a/0x30 [ 1715.576879][ T31] [ 1715.580131][ T31] Kernel Offset: disabled [ 1715.584443][ T31] Rebooting in 86400 seconds..