last executing test programs: 1m44.419807978s ago: executing program 0 (id=1155): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x400}, 0xe) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) inotify_init1(0x800) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x8100010a) r2 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x2d766, 0x80, 0x0, 0x87}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0xffffffff, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FSYNC={0x3, 0x8, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r2, 0x3512, 0x0, 0x0, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x220d00, 0x0) socket$qrtr(0x2a, 0x2, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000540)=0xa61) sched_getaffinity(0x0, 0x8, &(0x7f0000000180)) r6 = fanotify_init(0xf00, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000280)={'#! ', './file0', [{0x20, '/dev/ppp\x00'}]}, 0x15) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x5b892000) r8 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x125) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000080), 0x2284402, &(0x7f0000000580)=ANY=[@ANYRES8, @ANYRES16=r1, @ANYRES8=r9, @ANYRES32=r8, @ANYBLOB=',\x00']) fanotify_mark(r6, 0x1, 0x10001011, r5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0xb5) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCSMAXCID(r10, 0x40047451, &(0x7f0000000200)=0x407) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) 1m44.284097016s ago: executing program 0 (id=1157): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_xfrm(r1, &(0x7f0000000880)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40002}, 0xc, &(0x7f0000000840)={&(0x7f0000000d80)=@updpolicy={0x388, 0x19, 0x20, 0x70bd28, 0x25dfdbff, {{@in=@broadcast, @in=@multicast1, 0x4e20, 0x5cca, 0x4e22, 0x401, 0xa, 0x0, 0x80, 0x63}, {0xffff, 0x8, 0xfffffffffffff3f9, 0x1, 0x10001, 0x1, 0xb, 0x6}, {0x0, 0xb, 0x10000, 0xb2}, 0x6, 0x0, 0x0, 0x1}, [@algo_crypt={0x120, 0x2, {{'chacha20-arm\x00'}, 0x6c0, "dc66151773223937803738d5f77e30e7f7d7f1a919243be0b8538ac3aa0497243e5ec9ae01d1edd2b006a16be9bb4e4526a2da59f39ef169232c909036fc53732daf5a0afdb6e526abee45a55ee78346baf228e030faa1accb8d002b421fcc92df974cfe4cea76bae6d0806b429cb348e8541d44c05446490306bb2fd36c2ba90bb431a24554ffc6c86d86d6af2f30e7eefe20aab5008827702b03193d04ff390f365c1511fdf5d1d1f5de52f03c2f72e702c5e246956f8163994f5dd6be89cb28a29026bc291ec126de65ee37d1300d88cb4e4753d531f2"}}, @algo_auth_trunc={0x68, 0x14, {{'sha512-generic\x00'}, 0xe0, 0x200, "90fbe9c01f5960ddbbd4a9c61b0ea49a0608e00aa2415802fdeb8881"}}, @encap={0x1c, 0x4, {0x2, 0x4e20, 0x4e24, @in=@remote}}, @algo_crypt={0x122, 0x2, {{'xts-serpent-sse2\x00'}, 0x6d0, "c6eba4cc249b3f7e964b8690681d31e85ce29dc96e8e477610ac528b6b0c1167f6e605072761e975ff4614afe636dc405fa9bd12b5edc400a6df9ef3ff9d52f3f905786a37ab4e69b2ead10f68ef2f7aa5fba295feea50dc9b30a9ddbc65a141eb2e471c5fbf776be90f947e987bce07a1ca80e226895c1363e0e5f1d6053e6f4b3324e8660b8570404c51737995ca105fdf3173987ebe27b5b7b309405d07b04776d000b2e42701694ecd3b1d775c49efdbf89d81f78a4da8b401749e8f1ce1048fd91541ed608b4b3226eeafca79fe9b8b149aa4c2ac151961"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0x388}, 0x1, 0x0, 0x0, 0x880}, 0x40) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x23, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000043630000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRES16=r7, @ANYBLOB="5daf012c576656", @ANYRES16=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r8}, 0x10) sendto$inet6(r6, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r9 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0xba7b, 0x0, 0x4, 0x2c}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0x0) writev(r0, &(0x7f00000009c0)=[{&(0x7f00000003c0)="34c41dbf1d6aa3fc109129ef516402b9bf96a47cbf9ed81e6720ae016273a1ffab4a6f53bd8faa0b2ece0e3d3434d084b3e0a78d74e1ed38bcf40bdcb3fcd9d4b051e1e9e95c14aa01d635b46d5c9ed5abb06c4decd9bd8385d02f1ed4e4e5736b1fd8de04704d6c8a930fd963e48d7e15f74fdaa45eba543c6e1adcd410ecfda76e501a6ef263a9487fefbf1891fab1435076c0141a0381b0a2da5a6c4a910cde88adf4", 0xa4}, {&(0x7f0000000240)="1c067d6c3d4152193077f7407483b84350b2447afce44ce98ff3948408ac627a798ebc9f06358fdc1e97f26dc761eb851c24d23ab54e4f101792cb9959141249ed4c39f70a9f96767ed5b0a91bd30100000000000000b237a7714322eb1f", 0x5e}], 0x2) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r1) r12 = syz_open_dev$media(&(0x7f0000000040), 0x7ffffffc, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e0600120c"], 0x9) ioctl$MEDIA_IOC_REQUEST_ALLOC(r12, 0x80047c05, &(0x7f0000000180)) 1m43.955468812s ago: executing program 0 (id=1159): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r2, 0x0, 0x9}, 0x18) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x33, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r1}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r6}) r7 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r7, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r7, &(0x7f0000000100)='./file1\x00', r7, &(0x7f0000000240)='./file0\x00', 0x1000) unlink(&(0x7f0000000280)='./file1\x00') syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000089}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc) 1m43.372042242s ago: executing program 0 (id=1161): prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0xffffffffffffffff) add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@private, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23bd0f4eb500"}, 0x3c) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x3125899, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000600)='./file0/file0\x00', 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x2000400c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r5 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, &(0x7f00000000c0), &(0x7f0000000100)=r5}, 0x20) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, 0x0, 0x0) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000100)=0x1, 0x4) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') 1m42.935021194s ago: executing program 0 (id=1163): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="67670fa0650f7f21ba4000ed0f01fbf2abb800008ed0baf80c66b89e62df8066efbafc0cb80000ef66b8bbb700000f23d00f21f86635200000070f23f836660f38df4b0a3ed148bb", 0x48}], 0x1, 0x2, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(r1, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r3, &(0x7f0000003480)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x8, 0xa, 0x1, 0x8200, r1, 0x9, '\x00', r2, 0xffffffffffffffff, 0x0, 0x1, 0x5, 0x0, @value=r3, @void, @void, @value}, 0x50) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m41.536808132s ago: executing program 0 (id=1167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3000000000240007800c00028008000140000080020c0001800800014004000000080006400000000c05000500020000010500010006000000e47b9b2f62e39da6b0efd63c02bd3010467cdc418f8f3a056264d170bc1c5a6dd0f5d9"], 0x70}}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f00000000c0)=0x32) ioctl$TCSETS(0xffffffffffffffff, 0xc0384707, 0x0) r2 = eventfd2(0x0, 0x800) read$eventfd(r2, &(0x7f0000003200), 0x8) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x1}]}}]}, 0x3c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r9, 0x2, &(0x7f0000000080)='discard', &(0x7f0000000200)='\t', 0x1) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x5, [@typedef={0xc, 0x0, 0x0, 0x8, 0x4}, @union={0xe, 0x2, 0x0, 0x5, 0x0, 0xffffff99, [{0x1, 0x3}, {0xf, 0x3}]}, @union={0x8, 0x1, 0x0, 0x5, 0x1, 0x4, [{0x6, 0x5, 0x2}]}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x3, 0x5}, @enum={0xa, 0x1, 0x0, 0x6, 0x4, [{0xe, 0x2}]}]}, {0x0, [0x0, 0x61, 0x5f]}}, &(0x7f0000000380)=""/68, 0x89, 0x44, 0x0, 0x9, 0x10000, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001505000008004e002d3501000000000095004100000000006916360000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf530000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r10, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m41.24832627s ago: executing program 32 (id=1167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3000000000240007800c00028008000140000080020c0001800800014004000000080006400000000c05000500020000010500010006000000e47b9b2f62e39da6b0efd63c02bd3010467cdc418f8f3a056264d170bc1c5a6dd0f5d9"], 0x70}}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f00000000c0)=0x32) ioctl$TCSETS(0xffffffffffffffff, 0xc0384707, 0x0) r2 = eventfd2(0x0, 0x800) read$eventfd(r2, &(0x7f0000003200), 0x8) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x1}]}}]}, 0x3c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r9, 0x2, &(0x7f0000000080)='discard', &(0x7f0000000200)='\t', 0x1) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x5, [@typedef={0xc, 0x0, 0x0, 0x8, 0x4}, @union={0xe, 0x2, 0x0, 0x5, 0x0, 0xffffff99, [{0x1, 0x3}, {0xf, 0x3}]}, @union={0x8, 0x1, 0x0, 0x5, 0x1, 0x4, [{0x6, 0x5, 0x2}]}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x3, 0x5}, @enum={0xa, 0x1, 0x0, 0x6, 0x4, [{0xe, 0x2}]}]}, {0x0, [0x0, 0x61, 0x5f]}}, &(0x7f0000000380)=""/68, 0x89, 0x44, 0x0, 0x9, 0x10000, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r10, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7.524270599s ago: executing program 3 (id=1636): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r1], 0x20}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r1], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800e00010069703665727370616e00000038000280140006002001000000000000000000000000000214000700fc020000000000000000000000000000040012"], 0x6c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000006d85500001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000ac55038014000080100001800a0001"], 0x565c}}, 0x0) 7.454845326s ago: executing program 3 (id=1637): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x3, 0x0, 0xce}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 7.396798876s ago: executing program 3 (id=1638): ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 6.018631274s ago: executing program 4 (id=1640): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0xffffbfff, '\x00', @p_u32=&(0x7f0000000040)=0x8cef}}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sed\x00', 0x1, 0x4, 0x72}, 0x2c) syslog(0x2, 0xffffffffffffffff, 0x4b) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x4e20, 0x4000003, 'wrr\x00', 0x8, 0x5, 0x26}, 0x2c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x48, 0x140b, 0xb08, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe) listen(r5, 0x3) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000080)=0x1, &(0x7f0000000140)=0x4) creat(&(0x7f0000000000)='./file0\x00', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa07, &(0x7f0000000380)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) sendmsg$nl_generic(r6, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000250001002cbd707aa0a900ffdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010010905"], 0x0) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_SEQ_SYNC(r8, 0x5101) 5.424157541s ago: executing program 1 (id=1646): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, &(0x7f00000006c0)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008", @ANYBLOB="f7", @ANYRESDEC], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x9403, 0x0, 0x2e0, 0x2c0, 0x410, 0x3d8, 0x3d8, 0x410, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@empty, @local, [], [], 'ip6erspan0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@remote}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="020000000000000014001280090001007665746800000000040002800a00010011a202d3900000398b000800048f71fe0859191552bb514d9f8d6df74d266ede1c6961101f18ed1cef15276067546f"], 0x48}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x300, r1, &(0x7f0000000140)={0xb0002010}) ioctl$UI_DEV_DESTROY(r0, 0x5502) 5.266056607s ago: executing program 5 (id=1648): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x3, 0x0, 0xce}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 5.011795984s ago: executing program 5 (id=1649): write$selinux_create(0xffffffffffffffff, &(0x7f0000000040)=@access={'system_u:object_r:gpg_helper_exec_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x0, 0x2b}, 0x4c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xb}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044004}, 0x20008804) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r9, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@link_local={0x3}, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x224, r1, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_SETUP={0x210, 0x70, [@NL80211_MESH_SETUP_IE={0xd4, 0x3, "555c7867fbe6b5980f3366ce7117df5f0e545f58bae033e0c4a80aa52a2087fe4bd26a217c7bfb7e59968aa8344bdb026cba9cd92d426d43809dd79afeeeeacbeb7e15f1ef8c58a8f3b61c193df0a2ec768a4a1108e884a7e04003d0a80bc9bb92722be7771141e2567f89be4c22e75794dbcbf672c60bea5bfb369d5b783c08fecce4819ed6beb026f5d97b6cc2ee25bb2ae786be73baa43c1664c707e24764d9e3b960b8f773d724020abecdc3b8d7c76360e5013862c7286afa0fa8e6d86996c74880c9ef089018137837bbbdbd4c"}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_IE={0xaf, 0x3, "a07b6f0259464b6c44ea707a9e1f37a87cdb7db08a883f743247c14e4f74810b5bc8ff0acdf5a52067a296a1bb793bc15a2b3c3c1f8f34e6f5064bbd7dd82e95ac22ed1f57649e5f93b39c39903b37275f9ada7449fcbd882b2f55cdad2330e1e0794e418cb8f1d8aac2521ece64c878d0077025bc312c445b655cda0ceb84e5a97614895fa014bc3275d994e3b1a656688e44c3a7fdc5ba9f09b3b46d385ccb7d5f71da93989e0bd7bae3"}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_IE={0x61, 0x3, "436b7f8d15f0c2a5463d1e8fd06a58ec42fa0bc3c73b12ed2b190d892456b7a80ca517cf10b3f32205d8c0d4f57a38e2eb59098ded7b54607cd29865266492857d5b3953470f9d7297488f96f7b5b1c153baab5b0b86458ff549ca32b0"}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x8004}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r6, &(0x7f00000001c0)="a6", 0x1, 0x840, 0x0, 0x0) recvmsg(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/243, 0x11000}], 0x1}, 0x142) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x84) 4.750251985s ago: executing program 5 (id=1651): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10001}], 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xae, &(0x7f0000000140)=""/174, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ASYNC_CANCEL) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}]}) r4 = syz_usb_connect(0x6, 0x24, &(0x7f0000000040)=ANY=[], 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) socket(0x8, 0x1, 0x0) 4.541455989s ago: executing program 3 (id=1652): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.964192191s ago: executing program 4 (id=1653): ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @bcast, @netrom={'nr', 0x0}, 0x7, 'syz0\x00', @default, 0x6, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.72213946s ago: executing program 1 (id=1655): sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fbdbdf252600000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900fc01000003000000000000001000122b000000000000000900010005000000000407e87eaf8b400059797370c6a2d8071965c876bdadb2e333f59c05007fe6d8ae2660e796ee76bbc41e6147fadd310a83cfea187b73d8022eed3dfd58f4315764359f105d2c"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x810) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000300)={0xaa, 0x110}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x420}, 0x1, 0x0, 0x0, 0x8000000}, 0x840) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000380)={&(0x7f0000bfd000/0x400000)=nil, &(0x7f0000bd1000/0x2000)=nil, 0x400000, 0x1}) epoll_create1(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) fsync(r2) 2.573107148s ago: executing program 2 (id=1657): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/netlink\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000002100004000000000ff"]) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="b9800000c00f3235000100000f3067a4b80b0000000f23c00f21f835000002000f23f8b90c0a00000f32c4c3616c2d060000000366b834010f00d8660f38808a00f000000fc79a00100000c4e279983f640f01ca", 0x54}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.505339718s ago: executing program 3 (id=1658): socket$inet6(0xa, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000006280)=[{&(0x7f0000006380)="6d3026944a2e97b1420a1ae5d07dc965", 0x10}], 0x1, 0x0, 0x0, 0x60008080}}], 0x1, 0x0) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, &(0x7f00000000c0)='.request_key_auth\x00', &(0x7f00000003c0)='/dev/\n\x00\x00\x00\x00\x00\x00\x00C#d\xa7\x19\xbe\xc6\xdc\xc9\xd9\xcf\x90\x0e}\xb7W=5V\xb9\xe3\xc5g\x90\xc3\x94\x9f\xa7\x96\xcd\xc7\xca\x10\xae2\xa9\x90l\x92S\x95:\xf0\\\x1d+\xf4\xfa$w\xb3\x87\xb5p9\xb1\xaa\xac\x02\xb7\'Mu\xed\x0eH\\\"\x96de\xaab\xe7\xc6S(\x19\x15\xb1waq<\xdea\x10\xc6;S7\xd9\xc1\x93\xf8f/\xcb\xdc\xdbw\x9d\x8b\xfb=\xe2\xc0s&\xaet\xe9h\r\x04\x91Ho0\x9d\x93WF[\x0f\xd4)nd]46I\x13\x80\xcc\xef\xe0\xc2\x1e6\xbeQ\x13\xe8&}\xac0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x3, 0x0, 0xce}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.36176032s ago: executing program 3 (id=1660): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9071, 0xffffffffffffffff, 0x0) setitimer(0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f00000003c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000180)=""/88, 0x58, 0x5, 0xa, 0xffff825b, 0x0, 0x3}}, 0x120) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.31635756s ago: executing program 1 (id=1661): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) recvmsg(r0, &(0x7f0000000ac0)={&(0x7f0000000980)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000a00)=""/48, 0x30}, {&(0x7f0000000600)=""/82, 0x52}, {&(0x7f0000000bc0)=""/71, 0x47}], 0x3, &(0x7f0000000a80)=""/24, 0x18}, 0x141) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ppoll(0x0, 0x0, &(0x7f0000001300)={0x0, 0x3938700}, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x110, r6, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r1, 0x20, &(0x7f0000000380)={&(0x7f0000000300)=""/104, 0x68, 0x0, &(0x7f00000004c0)=""/226, 0xe2}}, 0x10) r9 = open_tree(0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', 0x80000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000680)={{0x1, 0x1, 0x18, r2, {0x6, 0x8}}, './file0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x1d, 0x7, 0x0, &(0x7f0000000940)='GPL\x00', 0x101, 0x86, &(0x7f00000001c0)=""/134, 0x40f00, 0x3, '\x00', r7, 0x1b, r1, 0x8, &(0x7f0000000280)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, r8, 0x0, 0x1, &(0x7f0000000900)=[r1, r1, r9, r1, r10, r1], &(0x7f0000000700)=[{0x0, 0x5, 0xc, 0x7}], 0x10, 0x80000000, @void, @value}, 0x94) acct(&(0x7f0000000000)='./file0\x00') memfd_secret(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) umount2(&(0x7f0000000140)='./file0\x00', 0xb) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r13 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r13, 0x8914, &(0x7f0000000000)) syz_init_net_socket$x25(0x9, 0x5, 0x0) ppoll(&(0x7f0000000b00)=[{r4, 0x502d}, {r3, 0x4023}, {r11, 0x8040}], 0x3, &(0x7f0000000b40), &(0x7f0000000b80)={[0x8]}, 0x8) r14 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r14, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) syz_init_net_socket$rose(0xb, 0x5, 0x0) 2.315074771s ago: executing program 2 (id=1662): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x48005, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r4}, 0x50) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r7, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x80000}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x2000000000, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x4, 0x2000, 0x7, r5, 0x0, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x115) 2.122148775s ago: executing program 2 (id=1663): ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @bcast, @netrom={'nr', 0x0}, 0x7, 'syz0\x00', @default, 0x6, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.612180552s ago: executing program 5 (id=1664): r0 = syz_open_dev$media(&(0x7f00000000c0), 0x1, 0x101080) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) r2 = dup3(r0, r1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000140)=""/210) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000a200000008000300", @ANYRES32=r6, @ANYBLOB="10005a800c00038005000700fe000000"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) sendmsg$NL80211_CMD_TESTMODE(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0x1244, r5, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x16, 0x45, "fbf4d83815d0f1dc5a17bc1c11c8fc5a22ba"}, @NL80211_ATTR_TESTDATA={0x4c, 0x45, "b26a27d01ca59b136770528b4c472a077d0869a06c37eb4984017eedf476e686c85435199925d2fc3fa5dd6986d8bee750756f7f023c4eb1cb74d1a5251741642ebb3df640528156"}, @NL80211_ATTR_TESTDATA={0xd7, 0x45, "fc39510584332c285988fdd01aec56106e38ff26fd110210dedd9cd61779ffa903688d2af360dc0ec3598ccdbc22b2454117646b6a3b395ac8318c195e314fae6bc69c6a4d04ca1702baa6ff59cd2e6205a9fdcd113a2a518b54d948bff2ed421d6d28d4a85354c7e598249689bbd59ea04c2ae2104e93172a93397cd3f1f680d85d0fc96b511cabb77cb8e479524ad6a773443fbf94e941e06f2b714e796010db9ae583b73d97ffbab120294cf3171274b1b4e2f85c3e8e68caf2e498b2ced643b0a55a19ded60905c52959fdcc3997b18319"}, @NL80211_ATTR_TESTDATA={0x4}, @NL80211_ATTR_TESTDATA={0xec, 0x45, "313eef470a4b1c452807d401a7235e26ea92c6e3bd146e0a9853cecf882de2867053e121c10c61b01438e43d6c6d9f4b673873104dfd176646c7968d756feef926a52cf78624ef7529f8fca307223bd29dcc5530c56fded0a9f5cd2ca641d3ac32715bb971587c199eb82a61561cc7b92af1d1a72b611d1a78b06ea54c7ff062fc2ff142b923da5a7b032fabf1d985c0f59ebc2aa3ec220e1cb5612dd640a06bafd99d7959a8099588f1f6d5e44effb141966bd2429ddfdb93036864f22f09fc5c7daf8c4ff1df463b8829e30ea49a851684e02ed8a4294431f7a1dd200908d41c55f87c8f476f2a"}]}, 0x1244}, 0x1, 0x0, 0x0, 0x5d51b569c0c615b0}, 0x8814) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 1.556491833s ago: executing program 1 (id=1665): syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a6a35a08460d1220364d0102030109021b00010000a00009"], 0x0) 1.352214347s ago: executing program 5 (id=1666): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101100, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109004d001280d09178d2da3477ec73a38ffffcd82caf103bc848e79022290bd6c0375f437b167f431ad24706d7263978db87dbaa159b0fdec8e129e835688cf370555aa8c6dffe261622b114299d6f0000001e0106"], 0x184}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000628000/0x4000)=nil, 0x4000, 0x2, 0x10, r3, 0xffffc000) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a0b000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000280)="b8a50000000f23c00f21f835030003000f23f80f7994460f000100c7442400da790000c744240210170000c7442406000000000f01142466baf80cb882f3058def66bafc0c66ed66ba6100b00ceeb963030000b800000000ba010000000f30640fc28d00000000cdb9b90900000f3266ba210066ed0f01df", 0x78}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.337270406s ago: executing program 2 (id=1667): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="78030000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r5], 0x378}}, 0x0) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) r7 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18}, 0x0) recvmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x12160) name_to_handle_at(r6, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000007000000050013000000000014000800000000000000000000000000000000000c00a700040040000000000005001400"], 0x44}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x60, r9, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7fffffffffffffff}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x400}, 0x100) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x60, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8002}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x60}}, 0x0) r10 = socket(0x40000000015, 0x5, 0x0) connect$inet(r10, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r10, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r10, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="67d8902400aa303e97380e90231bdbb7cdb7c26858c4e4fd783be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de33f0c14498396b28c7d1784d04aa3fe72230c20760b8ec43afb5468", 0x4f}, {&(0x7f0000000900)="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", 0x432}], 0x2, 0x0, 0x0, 0x40800}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(r10, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r11, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x43}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "25604512485b1b8ff0de54926c2e9463"}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004010}, 0x4000) 1.252793911s ago: executing program 2 (id=1668): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="00020000000000000708"], 0x20) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) 1.045356227s ago: executing program 2 (id=1669): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 860.154781ms ago: executing program 4 (id=1670): sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fbdbdf252600000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900fc01000003000000000000001000122b000000000000000900010005000000000407e87eaf8b400059797370c6a2d8071965c876bdadb2e333f59c05007fe6d8ae2660e796ee76bbc41e6147fadd310a83cfea187b73d8022eed3dfd58f4315764359f105d2c"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x810) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000300)={0xaa, 0x110}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x420}, 0x1, 0x0, 0x0, 0x8000000}, 0x840) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000380)={&(0x7f0000bfd000/0x400000)=nil, &(0x7f0000bd1000/0x2000)=nil, 0x400000, 0x1}) epoll_create1(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) fsync(r2) 586.19879ms ago: executing program 4 (id=1671): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x3, 0x0, 0xce}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 374.46877ms ago: executing program 4 (id=1672): socket$inet6(0xa, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000006280)=[{&(0x7f0000006380)="6d3026944a2e97b1420a1ae5d07dc965", 0x10}], 0x1, 0x0, 0x0, 0x60008080}}], 0x1, 0x0) socket(0x840000000002, 0x3, 0x100) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, &(0x7f00000000c0)='.request_key_auth\x00', &(0x7f00000003c0)='/dev/\n\x00\x00\x00\x00\x00\x00\x00C#d\xa7\x19\xbe\xc6\xdc\xc9\xd9\xcf\x90\x0e}\xb7W=5V\xb9\xe3\xc5g\x90\xc3\x94\x9f\xa7\x96\xcd\xc7\xca\x10\xae2\xa9\x90l\x92S\x95:\xf0\\\x1d+\xf4\xfa$w\xb3\x87\xb5p9\xb1\xaa\xac\x02\xb7\'Mu\xed\x0eH\\\"\x96de\xaab\xe7\xc6S(\x19\x15\xb1waq<\xdea\x10\xc6;S7\xd9\xc1\x93\xf8f/\xcb\xdc\xdbw\x9d\x8b\xfb=\xe2\xc0s&\xaet\xe9h\r\x04\x91Ho0\x9d\x93WF[\x0f\xd4)nd]46I\x13\x80\xcc\xef\xe0\xc2\x1e6\xbeQ\x13\xe8&}\xac0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ASYNC_CANCEL) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}]}) r4 = syz_usb_connect(0x6, 0x24, &(0x7f0000000040)=ANY=[], 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) socket(0x8, 0x1, 0x0) 0s ago: executing program 1 (id=1675): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f00000009c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @null, @bpq0, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) socket$inet6_udp(0xa, 0x2, 0x0) connect$rose(r0, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0c04d8ce000000002db8cb6740"], 0xf) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f00000000c0)={0x10002, 0x0, [0x33ec64e9, 0xd, 0x10000, 0x2, 0x6000000000000000, 0x7, 0x2, 0x732]}) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0x4018aee2, &(0x7f0000000240)=""/90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f0000000a40)={[0x4, 0x4, 0x9, 0x2, 0x8001, 0x5, 0x3, 0x1ff, 0x1, 0x100, 0x8, 0x2d, 0x7, 0x8, 0x2, 0x4, 0xc, 0x1, 0x3, 0x4, 0x8, 0x5, 0x0, 0x4, 0x1, 0x3, 0x5, 0x3ff, 0x4, 0xc1bf, 0x10, 0x5, 0x5, 0x59c4, 0x9, 0xec8, 0x40, 0x1ff, 0x8a, 0xfff80000, 0x5, 0x7f, 0x80000001, 0x7f, 0xfffffffd, 0xfff, 0x0, 0x40, 0x4710, 0x6, 0x2, 0x1, 0x7, 0xa, 0xffff8001, 0x9, 0x6, 0x2, 0xffffffff, 0x9, 0x9, 0x77, 0x80000001, 0x8004, 0xffff8001, 0x6, 0x8, 0x8, 0x2, 0x7fff, 0x324, 0x5d4, 0x5, 0x4, 0x3, 0x498, 0x8, 0x5, 0x2, 0x9, 0x161, 0x40, 0x2, 0x1, 0x3, 0x8, 0xffff, 0x8001, 0x2, 0x7, 0x9, 0x8000, 0x10, 0x6, 0x4aa, 0x8, 0x101, 0x6, 0x0, 0x4, 0x539, 0x3ff, 0x101, 0x1, 0x8, 0x5300000, 0x8, 0x5, 0x3ff, 0x6, 0x1, 0x1d8, 0x2, 0x5, 0x4, 0x5, 0x8, 0xb, 0x8001, 0x10000, 0x0, 0x3ff, 0x5, 0xb9, 0xfffffffb, 0x8, 0x4, 0xffffffff, 0xff, 0x7, 0x5, 0x6, 0x0, 0x200, 0x5, 0xa72b, 0x6, 0x4, 0x6c, 0x7, 0x7, 0x8, 0x7549, 0x2, 0x7, 0x9b6, 0xffff0000, 0xfffffffd, 0xd, 0x3ff, 0x0, 0x4, 0x8, 0x3, 0xe073, 0x0, 0x5, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x2, 0x0, 0x11, 0x3, 0xf3a, 0x10000, 0x2, 0x1, 0xa, 0x3, 0x8ea, 0x6, 0x4, 0xa0000000, 0xb435, 0x5, 0xbce0fd5, 0x6, 0x7f, 0x8, 0x8000, 0x72ae, 0x0, 0x0, 0x1, 0x321e35e3, 0x3, 0xa4, 0x1ff, 0x8a7b, 0x6, 0x5, 0x4, 0xb, 0x2, 0x8, 0x6, 0x80, 0x1000007, 0xf4, 0x4, 0x1000, 0x5, 0xf430, 0x0, 0xfffffffe, 0x10000, 0xd3d, 0xfffffffb, 0x8000, 0x69e, 0x7, 0x5, 0x5, 0x1de5, 0x2e9d, 0xb5, 0x0, 0xfffffff8, 0x8, 0x8, 0x3, 0x8, 0x3, 0x101, 0x2, 0x401, 0x9, 0x2, 0x2, 0x5, 0x7, 0x2, 0xffff, 0xffffffa4, 0x5, 0x7, 0x0, 0x2, 0x7, 0x4, 0x1, 0x0, 0x4, 0x80000000, 0x1800000, 0x200, 0x6, 0x6, 0x6, 0x1, 0x3, 0x2, 0x8, 0x8, 0xf, 0x6, 0x995, 0x7, 0x0, 0x400, 0xfffffffc, 0xa, 0xffffff81, 0x7, 0x0, 0x9, 0x2, 0x0, 0x8, 0x5, 0x80, 0x597, 0x2, 0x7, 0x10, 0x1, 0xf, 0x2b95, 0xf1, 0x2, 0xd9, 0x7, 0xffffff94, 0x1, 0x5, 0x3, 0x7, 0x68b, 0xfffffff9, 0x0, 0x2, 0x1, 0x3, 0x5, 0x2, 0x8, 0x1, 0x7d, 0xfffffe00, 0x8, 0x100, 0x6, 0x6, 0x6, 0x1000, 0xb520, 0xf361, 0x3fb, 0x9, 0x6, 0x3, 0xffffff00, 0x10001, 0x800, 0x8, 0x9, 0x0, 0x5, 0xcf, 0x6, 0x7, 0x3, 0x5f6, 0xa, 0x2, 0x6, 0x3, 0x0, 0x5, 0x93, 0x2, 0x4, 0x80000000, 0x1, 0x8, 0x55, 0x3, 0xacd, 0x6d, 0x40, 0x6, 0x4, 0x8, 0x10, 0xedff, 0xfffffff8, 0x3ff, 0x355d1aef, 0x6, 0x10, 0x3, 0x814, 0xad9, 0x4, 0x7, 0xf, 0xffff, 0x10000, 0x1000, 0x7, 0x9, 0x1, 0xdd, 0x1, 0x0, 0x3, 0xaf8, 0x2, 0xffff580f, 0x0, 0x5, 0x9, 0xff, 0x7f, 0x85e6, 0x2, 0x3ff, 0xcb, 0x5, 0x10c, 0x9, 0x7, 0x10000, 0x8, 0x3, 0x2, 0xff, 0x9c, 0x30000, 0x4, 0x1000, 0x6f, 0x1, 0x4, 0x6, 0x2, 0x4, 0x5d, 0x8, 0x4, 0x9, 0x5, 0x7f, 0x4, 0xd, 0x3, 0x3ff, 0x6, 0x4, 0x0, 0xedef, 0x20000000, 0x3, 0x6, 0x8, 0x101, 0x5, 0xf, 0x4, 0x2, 0x5, 0x4, 0x80000000, 0x0, 0xc, 0x6, 0xb, 0x10, 0xf62, 0x2, 0x7, 0xfffffff0, 0xf, 0x3, 0x6, 0x6, 0xff, 0x98, 0x2, 0x3, 0x4, 0x400, 0x80, 0x80, 0x6, 0x0, 0xfff, 0x0, 0x1, 0x3, 0x4, 0x3, 0x80000001, 0xc8f7, 0x3, 0x9, 0x71, 0x9, 0x11dc, 0x9ca, 0x6, 0x0, 0x3, 0x7fffffff, 0x4248, 0x1, 0x0, 0x7fe0000, 0x0, 0xbaea, 0x3ff, 0x2, 0x53d, 0xffffffff, 0x0, 0x7fff, 0xe9fa, 0x1, 0x9, 0x1fb, 0x9, 0x800, 0xe, 0x2, 0x81, 0x3, 0x40, 0xe, 0x8, 0x3, 0xa0, 0x9, 0x8001, 0x9ada, 0x8, 0x7f, 0x0, 0x200, 0x3, 0x0, 0x4, 0x50000000, 0x1ff, 0xf, 0x3, 0xfc, 0x8, 0x56, 0x1, 0x0, 0x0, 0x9, 0x3, 0x93c, 0x5, 0x3, 0x1, 0x5, 0x7, 0x6, 0x7fffffff, 0x3, 0x2, 0x1, 0x532915c6, 0xc9, 0x93bc, 0xfffffffc, 0x5, 0x5, 0x1, 0x7, 0x5, 0x100, 0x6af00000, 0x3, 0x6, 0x0, 0x2, 0x1ff, 0x9, 0x0, 0x8, 0x5b, 0x2e, 0xa, 0x800, 0x0, 0x5ad, 0x8, 0x7, 0x3, 0x6, 0x3, 0x49af, 0x3ff, 0x6, 0x6, 0x203a, 0x7d00000, 0xfff, 0x86a, 0x1, 0x10, 0x10001, 0xd2b9117, 0x8, 0x9, 0x8, 0x5, 0x80000000, 0xffff0001, 0x0, 0xfffffff9, 0x3, 0x4, 0x401, 0x8, 0x8, 0x7ff, 0x7f, 0x9, 0x889, 0xa7aa, 0x9ca1, 0x0, 0x9, 0x1, 0x4, 0x9aba, 0x6720, 0xad0, 0x1, 0x2, 0xfffffffd, 0x3ff, 0x8, 0x7, 0xdac9d38, 0x2, 0x2, 0xe90, 0x8, 0xff, 0x1f, 0x9, 0x200, 0x4, 0x10001, 0x9e69, 0x4, 0x8, 0x3, 0xfffffffd, 0x8, 0x1, 0x8, 0x8a, 0x5, 0x7, 0x1ff, 0x530ce2e7, 0x0, 0xffffffff, 0x3, 0x5, 0xe, 0x5, 0x8, 0x4, 0x79b, 0xfffffffd, 0xd1, 0x22, 0x828, 0x7f, 0x7e7c, 0xb, 0x1, 0x2, 0x3c, 0xe10, 0x7, 0x3, 0x6, 0x5, 0xffffff41, 0x7, 0x416, 0x9, 0x8001, 0x10001, 0x2, 0x1, 0x1, 0xda, 0x5, 0x80000003, 0x3, 0x8, 0x40000000, 0x3, 0x2, 0x9, 0xddb, 0x100, 0x5, 0x101, 0x5, 0x3, 0xfffffffb, 0x8, 0x8, 0x3, 0xff, 0x3, 0x401, 0x4, 0x2, 0xd61, 0x802, 0x8001, 0x4, 0xffffffff, 0x1, 0xbc, 0x3b200, 0x2, 0xb, 0x3, 0x0, 0xbc, 0x3, 0xaf4, 0x1, 0x4, 0xfffff55d, 0xfa0, 0x8, 0x8, 0x100, 0x8, 0x4, 0x6, 0x12c, 0x8, 0x96, 0x1, 0x4, 0x4, 0x5, 0x10, 0x800007, 0xa, 0x3f, 0xf, 0x3, 0xc1, 0xe51, 0x6, 0x1, 0x1, 0x3, 0x0, 0xc, 0x5, 0x7, 0x2, 0x4, 0xa6b4, 0x1, 0x1, 0x5, 0x9, 0xffff, 0x9, 0xb1, 0x100007, 0x3ff, 0x10, 0x1f61, 0x10, 0x4, 0x95, 0x0, 0xb7ff, 0x0, 0x2, 0x6e, 0x6, 0xd, 0x2, 0xa, 0x1, 0x64cb, 0x0, 0x8, 0x8, 0x80000001, 0x7a6, 0x1d, 0x5, 0x3, 0x4, 0x1000, 0x7, 0xb, 0x2, 0xff, 0x3, 0x2, 0x0, 0xfffffff7, 0x7, 0x3, 0xa, 0x5, 0x590, 0x8001, 0x0, 0x2, 0x8, 0xff, 0x0, 0x8, 0x3, 0x4, 0x81, 0x1, 0x400, 0x7, 0x8, 0x6, 0x400, 0x6, 0x4, 0x1, 0x0, 0x2, 0x5, 0x3, 0x36, 0x9, 0x0, 0x7, 0x5, 0x5, 0x8, 0xffff, 0x4, 0x3, 0x400, 0x2, 0x0, 0xe, 0xb0, 0x8287, 0xf0, 0x0, 0x101, 0x2, 0x3, 0xfffffff9, 0x7f, 0x6, 0xc35, 0x7, 0x8bb5, 0x101, 0xc, 0x3ff, 0x7f, 0x5, 0x10000, 0x9, 0x9, 0xc, 0x4, 0x8, 0x7, 0x43740b29, 0x800, 0x7, 0xa3e3, 0x6, 0x3, 0x8, 0x6, 0x1f7, 0x8, 0x7, 0x2, 0x7fffffff, 0x9, 0x3, 0x2, 0x5, 0x5a53, 0x7f, 0xff, 0x6, 0xed53, 0x0, 0x5, 0xc6a0, 0x101, 0x1, 0x4, 0xfffffff8, 0xfffffff8, 0x8, 0x9a1b, 0x127, 0xb0bc, 0x4, 0x6, 0x5, 0x3, 0xdddf, 0x7, 0x86a, 0xe0, 0xd, 0x7, 0x3, 0x3, 0xffffffff, 0x7, 0x8, 0x800, 0x2, 0x1, 0xd, 0xffff, 0xaf9b, 0xa, 0x89d2, 0x6a, 0x2, 0x40, 0x8, 0x6, 0x2, 0x9, 0x0, 0x4, 0x7, 0xef, 0x420, 0x5, 0x7, 0x5, 0x0, 0xfffffff8, 0x8, 0x412, 0x0, 0x8, 0x4c, 0xfffffff7, 0xfff, 0xfffffffd, 0x0, 0x1000, 0x0, 0x6, 0x7, 0x2, 0x3, 0x9, 0x5, 0x11, 0x11, 0x1, 0xc, 0x80000001, 0x80000000, 0x81, 0x9, 0x5f, 0x1, 0x2, 0x6, 0x7, 0x9, 0x5, 0x7, 0x1, 0x8a, 0x7, 0x2, 0x4, 0x4, 0x9, 0x2, 0xfffffc00, 0x80000004, 0x268, 0x80000001, 0x3, 0x5, 0x80, 0x2, 0x3, 0x7, 0xb5f, 0x9, 0x2, 0xb66, 0x6, 0x476a, 0x8, 0x7, 0x7, 0x7, 0x4, 0x1, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x5, 0x5, 0xe4, 0x2, 0x60000, 0x72e8, 0x5, 0x9, 0xe02, 0x10001, 0x5, 0x4, 0x1, 0xfffffffd, 0x400, 0x1, 0x9, 0x3, 0x1, 0x7ff, 0xff, 0x9, 0xffffffff, 0x200, 0x1, 0xa, 0x7, 0xffffffff, 0x6, 0x6, 0x0, 0x9fe4, 0x200, 0x70000000, 0x3ff, 0x8000, 0x0, 0x400]}) ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, &(0x7f0000000140)={0xfffffffffffff3b9, 0xb2}) sendmmsg$inet6(r2, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffff9}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="2400000000000000290000003200f90000000000000000000000ffffac1414aa", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}}], 0x1, 0x4004804) keyctl$clear(0x3, 0xfffffffffffffffd) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0x3, @loopback, 0x8}, 0x1c) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000140)=0x9) r4 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x400000000000000, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0xc0002) kernel console output (not intermixed with test programs): 3-1: no configurations [ 337.460246][ T9] usb 3-1: can't read configurations, error -22 [ 337.488270][ T9] usb usb3-port1: attempt power cycle [ 337.586276][ T5903] usb 4-1: USB disconnect, device number 70 [ 337.895476][ T5903] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 338.060701][ T9] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 338.327940][ T9] usb 3-1: no configurations [ 338.347782][ T5903] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 338.431264][ T10] usb 5-1: USB disconnect, device number 53 [ 338.450142][ T9] usb 3-1: can't read configurations, error -22 [ 338.474880][ T5903] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 338.522404][ T5903] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 338.551497][ T5903] keyspan 4-1:0.0: device disconnected [ 338.581909][T10697] mkiss: ax0: crc mode is auto. [ 338.590056][ T9] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 338.618030][ T9] usb 3-1: no configurations [ 338.641458][ T9] usb 3-1: can't read configurations, error -22 [ 338.673476][ T9] usb usb3-port1: unable to enumerate USB device [ 338.981048][ T9] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 339.001092][ T5903] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 339.185542][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.207572][ T5903] usb 4-1: Using ep0 maxpacket: 8 [ 339.267369][ T5903] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 339.281368][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.327559][ T5903] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 339.363949][ T9] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 339.407697][ T5903] usb 4-1: config 0 has no interface number 0 [ 339.456728][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.473848][ T5903] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 339.549325][ T9] usb 5-1: config 0 descriptor?? [ 339.578173][ T5903] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 339.720389][ T5903] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 339.762958][ T5903] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 339.773309][ T5903] usb 4-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 339.782178][ T5903] usb 4-1: Product: syz [ 339.794642][ T5903] usb 4-1: Manufacturer: syz [ 339.823363][ T5903] usb 4-1: config 0 descriptor?? [ 339.829222][T10704] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 339.874012][ T30] audit: type=1400 audit(1746631622.888:1240): avc: denied { setattr } for pid=10717 comm="syz.2.1368" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 340.020444][T10729] FAULT_INJECTION: forcing a failure. [ 340.020444][T10729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.078681][T10729] CPU: 0 UID: 0 PID: 10729 Comm: syz.1.1371 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 340.078709][T10729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 340.078720][T10729] Call Trace: [ 340.078726][T10729] [ 340.078733][T10729] dump_stack_lvl+0x16c/0x1f0 [ 340.078764][T10729] should_fail_ex+0x512/0x640 [ 340.078790][T10729] _copy_from_iter+0x2a4/0x15b0 [ 340.078816][T10729] ? _copy_from_iter+0x161/0x15b0 [ 340.078838][T10729] ? __pfx__copy_from_iter+0x10/0x10 [ 340.078863][T10729] ? __pfx__copy_from_iter+0x10/0x10 [ 340.078894][T10729] ? _copy_from_iter+0x161/0x15b0 [ 340.078920][T10729] copy_page_from_iter+0xa5/0x120 [ 340.078945][T10729] skb_copy_datagram_from_iter+0x2a0/0x740 [ 340.078980][T10729] packet_sendmsg+0x2232/0x56f0 [ 340.079018][T10729] ? sock_has_perm+0x259/0x2f0 [ 340.079038][T10729] ? __pfx_sock_has_perm+0x10/0x10 [ 340.079060][T10729] ? __pfx_packet_sendmsg+0x10/0x10 [ 340.079087][T10729] ? __might_fault+0x13b/0x190 [ 340.079109][T10729] ____sys_sendmsg+0xa95/0xc70 [ 340.079132][T10729] ? copy_msghdr_from_user+0x10a/0x160 [ 340.079148][T10729] ? __pfx_____sys_sendmsg+0x10/0x10 [ 340.079181][T10729] ___sys_sendmsg+0x134/0x1d0 [ 340.079199][T10729] ? __pfx____sys_sendmsg+0x10/0x10 [ 340.079247][T10729] __sys_sendmsg+0x16d/0x220 [ 340.079264][T10729] ? __pfx___sys_sendmsg+0x10/0x10 [ 340.079287][T10729] ? rcu_is_watching+0x12/0xc0 [ 340.079314][T10729] do_syscall_64+0xcd/0x260 [ 340.079339][T10729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.079356][T10729] RIP: 0033:0x7f4d91b8e969 [ 340.079370][T10729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.079386][T10729] RSP: 002b:00007f4d92a2b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 340.079403][T10729] RAX: ffffffffffffffda RBX: 00007f4d91db5fa0 RCX: 00007f4d91b8e969 [ 340.079414][T10729] RDX: 0000000020040851 RSI: 0000200000002ac0 RDI: 0000000000000003 [ 340.079424][T10729] RBP: 00007f4d92a2b090 R08: 0000000000000000 R09: 0000000000000000 [ 340.079434][T10729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 340.079444][T10729] R13: 0000000000000000 R14: 00007f4d91db5fa0 R15: 00007fff85327d18 [ 340.079467][T10729] [ 340.614013][ T5903] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input18 [ 340.998783][ T9] usb 5-1: string descriptor 0 read error: -71 [ 341.018599][ T5903] usb 4-1: USB disconnect, device number 71 [ 341.025420][ C0] keyspan_remote 4-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 341.037523][ T9] uclogic 0003:256C:006D.0026: failed retrieving string descriptor #200: -71 [ 341.046502][ T9] uclogic 0003:256C:006D.0026: failed retrieving pen parameters: -71 [ 341.361422][ T9] uclogic 0003:256C:006D.0026: failed probing pen v2 parameters: -71 [ 341.369781][ T9] uclogic 0003:256C:006D.0026: failed probing parameters: -71 [ 341.377953][ T9] uclogic 0003:256C:006D.0026: probe with driver uclogic failed with error -71 [ 341.445330][ T9] usb 5-1: USB disconnect, device number 54 [ 341.532604][T10745] 9pnet_fd: Insufficient options for proto=fd [ 342.223991][ T30] audit: type=1400 audit(1746631624.888:1241): avc: denied { write } for pid=10748 comm="syz.4.1379" name="attr" dev="proc" ino=39375 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 342.493959][ T30] audit: type=1400 audit(1746631624.888:1242): avc: denied { add_name } for pid=10748 comm="syz.4.1379" name="fscreate" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 342.524703][ T30] audit: type=1400 audit(1746631624.888:1243): avc: denied { create } for pid=10748 comm="syz.4.1379" name="fscreate" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 342.551301][ T5856] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 342.556939][ T30] audit: type=1400 audit(1746631624.888:1244): avc: denied { associate } for pid=10748 comm="syz.4.1379" name="fscreate" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 343.011426][ T5856] usb 3-1: no configurations [ 343.024646][ T5856] usb 3-1: can't read configurations, error -22 [ 343.278505][ T5856] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 343.460980][ T5856] usb 3-1: no configurations [ 343.465639][ T5856] usb 3-1: can't read configurations, error -22 [ 343.473388][ T5856] usb usb3-port1: attempt power cycle [ 343.676584][ T5858] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 343.684983][ T82] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 343.822460][ T5856] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 343.840539][ T5858] usb 6-1: Using ep0 maxpacket: 16 [ 343.851719][ T82] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.861735][ T5856] usb 3-1: no configurations [ 343.867670][ T5856] usb 3-1: can't read configurations, error -22 [ 343.875994][ T5858] usb 6-1: config 0 has an invalid interface number: 115 but max is 0 [ 343.882483][T10786] xt_hashlimit: max too large, truncated to 1048576 [ 343.889221][ T82] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.895615][T10786] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.902116][ T5858] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.927443][ T82] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 343.936911][ T5858] usb 6-1: config 0 has no interface number 0 [ 343.944137][ T82] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.953026][ T5858] usb 6-1: too many endpoints for config 0 interface 115 altsetting 116: 101, using maximum allowed: 30 [ 343.966676][ T82] usb 4-1: config 0 descriptor?? [ 343.973020][ T5858] usb 6-1: config 0 interface 115 altsetting 116 has 0 endpoint descriptors, different from the interface descriptor's value: 101 [ 343.990957][ T5858] usb 6-1: config 0 interface 115 has no altsetting 0 [ 344.001131][ T5856] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 344.001449][ T5858] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 344.018640][ T5858] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.027551][ T5858] usb 6-1: Product: syz [ 344.032408][ T5858] usb 6-1: Manufacturer: syz [ 344.032463][ T5856] usb 3-1: no configurations [ 344.037053][ T5858] usb 6-1: SerialNumber: syz [ 344.043501][ T5856] usb 3-1: can't read configurations, error -22 [ 344.051882][ T5858] usb 6-1: config 0 descriptor?? [ 344.061711][ T5856] usb usb3-port1: unable to enumerate USB device [ 344.104863][T10792] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1394'. [ 344.115887][ T30] audit: type=1400 audit(1746631627.128:1245): avc: denied { create } for pid=10791 comm="syz.4.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 344.138689][ T30] audit: type=1400 audit(1746631627.128:1246): avc: denied { write } for pid=10791 comm="syz.4.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 344.164366][ T9] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 344.302372][ T5858] usb 6-1: USB disconnect, device number 11 [ 344.320026][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 344.329496][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 344.342988][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.354695][ T9] usb 2-1: Product: syz [ 344.358874][ T9] usb 2-1: Manufacturer: syz [ 344.364001][ T9] usb 2-1: SerialNumber: syz [ 344.375418][ T9] r8152-cfgselector 2-1: Unknown version 0x0000 [ 344.383795][ T9] r8152-cfgselector 2-1: config 0 descriptor?? [ 344.598206][ T9] r8152-cfgselector 2-1: Needed 1 retries to read version [ 344.611855][ T9] r8152-cfgselector 2-1: Unknown version 0x0000 [ 344.619083][ T82] usb 4-1: string descriptor 0 read error: -71 [ 344.619447][ T9] r8152-cfgselector 2-1: bad CDC descriptors [ 344.630707][ T82] uclogic 0003:256C:006D.0027: failed retrieving string descriptor #200: -71 [ 344.635733][T10807] can0: slcan on ttyS3. [ 344.652919][ T82] uclogic 0003:256C:006D.0027: failed retrieving pen parameters: -71 [ 344.662348][ T82] uclogic 0003:256C:006D.0027: failed probing pen v2 parameters: -71 [ 344.686022][ T82] uclogic 0003:256C:006D.0027: failed probing parameters: -71 [ 344.702022][ T82] uclogic 0003:256C:006D.0027: probe with driver uclogic failed with error -71 [ 344.727717][ T82] usb 4-1: USB disconnect, device number 72 [ 344.741867][T10807] can0 (unregistered): slcan off ttyS3. [ 344.833121][ T30] audit: type=1400 audit(1746631627.838:1247): avc: denied { mount } for pid=10785 comm="syz.1.1391" name="/" dev="rpc_pipefs" ino=39605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 344.884620][ T30] audit: type=1400 audit(1746631627.898:1248): avc: denied { unmount } for pid=10785 comm="syz.1.1391" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 344.954569][ T9] r8152-cfgselector 2-1: USB disconnect, device number 86 [ 345.125483][T10833] FAULT_INJECTION: forcing a failure. [ 345.125483][T10833] name failslab, interval 1, probability 0, space 0, times 0 [ 345.138653][T10833] CPU: 0 UID: 0 PID: 10833 Comm: syz.2.1402 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 345.138678][T10833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 345.138689][T10833] Call Trace: [ 345.138695][T10833] [ 345.138702][T10833] dump_stack_lvl+0x16c/0x1f0 [ 345.138732][T10833] should_fail_ex+0x512/0x640 [ 345.138755][T10833] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 345.138786][T10833] should_failslab+0xc2/0x120 [ 345.138805][T10833] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 345.138831][T10833] ? __alloc_skb+0x2b2/0x380 [ 345.138852][T10833] __alloc_skb+0x2b2/0x380 [ 345.138868][T10833] ? __pfx___alloc_skb+0x10/0x10 [ 345.138886][T10833] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 345.138910][T10833] netlink_alloc_large_skb+0x69/0x130 [ 345.138931][T10833] netlink_sendmsg+0x6a1/0xdd0 [ 345.138955][T10833] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.138983][T10833] ____sys_sendmsg+0xa95/0xc70 [ 345.139007][T10833] ? copy_msghdr_from_user+0x10a/0x160 [ 345.139024][T10833] ? __pfx_____sys_sendmsg+0x10/0x10 [ 345.139058][T10833] ___sys_sendmsg+0x134/0x1d0 [ 345.139076][T10833] ? __pfx____sys_sendmsg+0x10/0x10 [ 345.139124][T10833] __sys_sendmsg+0x16d/0x220 [ 345.139146][T10833] ? __pfx___sys_sendmsg+0x10/0x10 [ 345.139172][T10833] ? rcu_is_watching+0x12/0xc0 [ 345.139199][T10833] do_syscall_64+0xcd/0x260 [ 345.139224][T10833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.139241][T10833] RIP: 0033:0x7f5872b8e969 [ 345.139256][T10833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.139272][T10833] RSP: 002b:00007f58739ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.139288][T10833] RAX: ffffffffffffffda RBX: 00007f5872db5fa0 RCX: 00007f5872b8e969 [ 345.139299][T10833] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000003 [ 345.139309][T10833] RBP: 00007f58739ab090 R08: 0000000000000000 R09: 0000000000000000 [ 345.139319][T10833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.139329][T10833] R13: 0000000000000000 R14: 00007f5872db5fa0 R15: 00007fff0a0f6898 [ 345.139352][T10833] [ 345.353944][ C0] vkms_vblank_simulate: vblank timer overrun [ 345.399462][ T30] audit: type=1400 audit(1746631628.408:1249): avc: denied { create } for pid=10834 comm="syz.3.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 345.444181][T10835] netdevsim netdevsim3 netdevsim0: Unsupported IPsec algorithm [ 345.531523][ T30] audit: type=1400 audit(1746631628.448:1250): avc: denied { write } for pid=10834 comm="syz.3.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 345.608317][T10849] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 345.624317][T10851] FAULT_INJECTION: forcing a failure. [ 345.624317][T10851] name failslab, interval 1, probability 0, space 0, times 0 [ 345.663703][T10849] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 345.687793][T10851] CPU: 0 UID: 0 PID: 10851 Comm: syz.4.1406 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 345.687822][T10851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 345.687833][T10851] Call Trace: [ 345.687838][T10851] [ 345.687846][T10851] dump_stack_lvl+0x16c/0x1f0 [ 345.687872][T10851] should_fail_ex+0x512/0x640 [ 345.687893][T10851] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 345.687922][T10851] should_failslab+0xc2/0x120 [ 345.687946][T10851] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 345.687968][T10851] ? find_held_lock+0x2b/0x80 [ 345.687987][T10851] ? __alloc_skb+0x2b2/0x380 [ 345.688004][T10851] __alloc_skb+0x2b2/0x380 [ 345.688019][T10851] ? __pfx___alloc_skb+0x10/0x10 [ 345.688035][T10851] ? __lock_acquire+0x5ca/0x1ba0 [ 345.688060][T10851] __ip_append_data+0x3102/0x41e0 [ 345.688078][T10851] ? __pfx_raw_getfrag+0x10/0x10 [ 345.688097][T10851] ? ip_dst_mtu_maybe_forward.constprop.0+0x311/0x6e0 [ 345.688113][T10851] ? __pfx___ip_append_data+0x10/0x10 [ 345.688128][T10851] ip_append_data+0x10f/0x1a0 [ 345.688141][T10851] ? __pfx_raw_getfrag+0x10/0x10 [ 345.688156][T10851] raw_sendmsg+0xeed/0x38b0 [ 345.688177][T10851] ? __pfx_raw_sendmsg+0x10/0x10 [ 345.688192][T10851] ? avc_has_perm_noaudit+0x149/0x3b0 [ 345.688206][T10851] ? __pfx_avc_has_perm+0x10/0x10 [ 345.688221][T10851] ? sock_has_perm+0x259/0x2f0 [ 345.688238][T10851] ? __import_iovec+0x1c8/0x660 [ 345.688253][T10851] ? __might_fault+0xe3/0x190 [ 345.688263][T10851] ? __might_fault+0x13b/0x190 [ 345.688273][T10851] ? __pfx_raw_sendmsg+0x10/0x10 [ 345.688288][T10851] inet_sendmsg+0x119/0x140 [ 345.688303][T10851] ____sys_sendmsg+0x973/0xc70 [ 345.688317][T10851] ? copy_msghdr_from_user+0x10a/0x160 [ 345.688328][T10851] ? __pfx_____sys_sendmsg+0x10/0x10 [ 345.688343][T10851] ? kfree+0x252/0x4d0 [ 345.688356][T10851] ? __pfx__kstrtoull+0x10/0x10 [ 345.688369][T10851] ___sys_sendmsg+0x134/0x1d0 [ 345.688380][T10851] ? __pfx____sys_sendmsg+0x10/0x10 [ 345.688403][T10851] ? __pfx___might_resched+0x10/0x10 [ 345.688420][T10851] __sys_sendmmsg+0x200/0x420 [ 345.688432][T10851] ? __pfx___sys_sendmmsg+0x10/0x10 [ 345.688447][T10851] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 345.688468][T10851] ? fput+0x70/0xf0 [ 345.688479][T10851] ? ksys_write+0x1b9/0x240 [ 345.688494][T10851] ? __pfx_ksys_write+0x10/0x10 [ 345.688508][T10851] ? rcu_is_watching+0x12/0xc0 [ 345.688522][T10851] __x64_sys_sendmmsg+0x9c/0x100 [ 345.688532][T10851] ? lockdep_hardirqs_on+0x7c/0x110 [ 345.688545][T10851] do_syscall_64+0xcd/0x260 [ 345.688562][T10851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.688578][T10851] RIP: 0033:0x7f9fd438e969 [ 345.688592][T10851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.688608][T10851] RSP: 002b:00007f9fd21f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 345.688624][T10851] RAX: ffffffffffffffda RBX: 00007f9fd45b5fa0 RCX: 00007f9fd438e969 [ 345.688635][T10851] RDX: 0000000004000095 RSI: 0000200000005240 RDI: 0000000000000003 [ 345.688642][T10851] RBP: 00007f9fd21f6090 R08: 0000000000000000 R09: 0000000000000000 [ 345.688648][T10851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 345.688654][T10851] R13: 0000000000000000 R14: 00007f9fd45b5fa0 R15: 00007ffe2d9955d8 [ 345.688668][T10851] [ 345.810582][ T9] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 345.980380][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.000296][ T9] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 346.000329][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.000348][ T9] usb 4-1: Product: syz [ 346.000362][ T9] usb 4-1: Manufacturer: syz [ 346.000375][ T9] usb 4-1: SerialNumber: syz [ 346.017166][ T9] usb 4-1: config 0 descriptor?? [ 346.028133][ T9] pegasus_notetaker 4-1:0.0: Invalid number of endpoints [ 346.028158][ T9] pegasus_notetaker 4-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 346.120063][ T24] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 346.236233][ T82] usb 4-1: USB disconnect, device number 73 [ 346.450605][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.450623][ T24] usb 2-1: config 0 has no interfaces? [ 346.453222][ T24] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 346.453241][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.453254][ T24] usb 2-1: Product: syz [ 346.453262][ T24] usb 2-1: Manufacturer: syz [ 346.453271][ T24] usb 2-1: SerialNumber: syz [ 346.456191][ T24] usb 2-1: config 0 descriptor?? [ 347.113386][T10885] FAULT_INJECTION: forcing a failure. [ 347.113386][T10885] name failslab, interval 1, probability 0, space 0, times 0 [ 347.126393][T10885] CPU: 0 UID: 0 PID: 10885 Comm: syz.4.1416 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 347.126419][T10885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 347.126429][T10885] Call Trace: [ 347.126435][T10885] [ 347.126442][T10885] dump_stack_lvl+0x16c/0x1f0 [ 347.126471][T10885] should_fail_ex+0x512/0x640 [ 347.126492][T10885] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 347.126520][T10885] should_failslab+0xc2/0x120 [ 347.126539][T10885] __kmalloc_cache_noprof+0x6a/0x3e0 [ 347.126563][T10885] ? ovl_encode_real_fh+0xca/0x420 [ 347.126591][T10885] ovl_encode_real_fh+0xca/0x420 [ 347.126614][T10885] ? __pfx_ovl_encode_real_fh+0x10/0x10 [ 347.126645][T10885] ovl_lookup_index+0xde/0x810 [ 347.126676][T10885] ? __pfx_ovl_lookup_index+0x10/0x10 [ 347.126703][T10885] ? ovl_get_fh+0x47f/0x710 [ 347.126742][T10885] ? ovl_lookup+0x1a81/0x2270 [ 347.126772][T10885] ovl_lookup+0xa7f/0x2270 [ 347.126796][T10885] ? avc_has_perm_noaudit+0x149/0x3b0 [ 347.126823][T10885] ? __pfx_ovl_lookup+0x10/0x10 [ 347.126849][T10885] ? selinux_determine_inode_label+0x238/0x330 [ 347.126878][T10885] ? may_create+0x205/0x380 [ 347.126901][T10885] ? ovl_revert_creds+0x13/0x50 [ 347.126918][T10885] ? __pfx_may_create+0x10/0x10 [ 347.126947][T10885] ? bpf_lsm_inode_permission+0x9/0x10 [ 347.126969][T10885] ? security_inode_permission+0xbf/0x260 [ 347.126997][T10885] ? __pfx_ovl_lookup+0x10/0x10 [ 347.127021][T10885] lookup_open.isra.0+0x4d7/0x1580 [ 347.127051][T10885] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 347.127087][T10885] ? __pfx_down_write+0x10/0x10 [ 347.127115][T10885] ? mnt_get_write_access+0x20c/0x300 [ 347.127142][T10885] path_openat+0x905/0x2d40 [ 347.127178][T10885] ? __pfx_path_openat+0x10/0x10 [ 347.127211][T10885] do_filp_open+0x20b/0x470 [ 347.127237][T10885] ? __pfx_do_filp_open+0x10/0x10 [ 347.127282][T10885] ? alloc_fd+0x471/0x7d0 [ 347.127315][T10885] do_sys_openat2+0x11b/0x1d0 [ 347.127335][T10885] ? __pfx_do_sys_openat2+0x10/0x10 [ 347.127357][T10885] ? __fget_files+0x20e/0x3c0 [ 347.127387][T10885] __x64_sys_openat+0x174/0x210 [ 347.127407][T10885] ? __pfx___x64_sys_openat+0x10/0x10 [ 347.127425][T10885] ? ksys_write+0x1b9/0x240 [ 347.127449][T10885] ? rcu_is_watching+0x12/0xc0 [ 347.127477][T10885] do_syscall_64+0xcd/0x260 [ 347.127502][T10885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.127520][T10885] RIP: 0033:0x7f9fd438e969 [ 347.127535][T10885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.127551][T10885] RSP: 002b:00007f9fd21f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 347.127569][T10885] RAX: ffffffffffffffda RBX: 00007f9fd45b5fa0 RCX: 00007f9fd438e969 [ 347.127580][T10885] RDX: 0000000000004842 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 347.127590][T10885] RBP: 00007f9fd21f6090 R08: 0000000000000000 R09: 0000000000000000 [ 347.127600][T10885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 347.127609][T10885] R13: 0000000000000000 R14: 00007f9fd45b5fa0 R15: 00007ffe2d9955d8 [ 347.127633][T10885] [ 347.431489][ T24] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 347.592793][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.622554][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.684398][ T24] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 347.726366][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.761753][ T24] usb 4-1: config 0 descriptor?? [ 347.775031][T10899] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2248643489 (17989147912 ns) > initial count (11631199424 ns). Using initial count to start timer. [ 347.958362][T10912] tipc: Enabling not permitted [ 347.964255][T10912] tipc: Enabling of bearer rejected, failed to enable media [ 347.977718][T10914] tipc: Enabling not permitted [ 347.987184][T10914] tipc: Enabling of bearer rejected, failed to enable media [ 348.458506][ T24] usb 4-1: string descriptor 0 read error: -71 [ 348.466320][ T24] uclogic 0003:256C:006D.0028: failed retrieving string descriptor #200: -71 [ 348.486398][ T24] uclogic 0003:256C:006D.0028: failed retrieving pen parameters: -71 [ 348.508402][ T24] uclogic 0003:256C:006D.0028: failed probing pen v2 parameters: -71 [ 348.533071][ T24] uclogic 0003:256C:006D.0028: failed probing parameters: -71 [ 348.561688][ T24] uclogic 0003:256C:006D.0028: probe with driver uclogic failed with error -71 [ 348.586321][ T24] usb 4-1: USB disconnect, device number 74 [ 348.810200][ T5856] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 348.895084][ T9] usb 2-1: USB disconnect, device number 87 [ 349.000070][ T5856] usb 3-1: Using ep0 maxpacket: 32 [ 349.019846][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.043197][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.237300][ T5895] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 349.460772][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 349.541491][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.544848][ T5856] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 349.568227][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.572973][ T5856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.596565][ T5856] usb 3-1: config 0 descriptor?? [ 349.614300][ T5895] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 349.617855][ T5856] hub 3-1:0.0: USB hub found [ 349.646418][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.663797][ T5895] usb 5-1: config 0 descriptor?? [ 349.814580][T10981] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1433'. [ 349.828454][ T24] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 349.858286][T10981] openvswitch: netlink: Flow key attr not present in new flow. [ 349.858331][ T5856] hub 3-1:0.0: 1 port detected [ 349.870739][T10981] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1433'. [ 349.870775][T10981] openvswitch: netlink: Flow key attr not present in new flow. [ 349.870943][T10981] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1433'. [ 349.870955][T10981] openvswitch: netlink: Flow key attr not present in new flow. [ 349.871106][T10981] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1433'. [ 349.871117][T10981] openvswitch: netlink: Flow key attr not present in new flow. [ 349.871270][T10981] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1433'. [ 349.871281][T10981] openvswitch: netlink: Flow key attr not present in new flow. [ 349.871431][T10981] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1433'. [ 349.871443][T10981] openvswitch: netlink: Flow key attr not present in new flow. [ 349.871609][T10981] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1433'. [ 349.871619][T10981] openvswitch: netlink: Flow key attr not present in new flow. [ 349.871756][T10981] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1433'. [ 349.985764][T10981] openvswitch: netlink: Flow key attr not present in new flow. [ 350.010434][ T5815] Bluetooth: hci2: command 0x0405 tx timeout [ 350.053987][ T5856] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 350.061962][ T24] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 350.070231][ T5856] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 350.070966][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.081855][ T5856] usbhid 3-1:0.0: can't add hid device: -71 [ 350.089603][ T24] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 350.104560][ T24] usb 4-1: config 1 has no interface number 1 [ 350.121710][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 350.126340][ T5856] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 350.146450][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 350.161707][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.178856][ T24] usb 4-1: Product: syz [ 350.189632][ T5895] appleir 0003:05AC:8241.0029: unknown main item tag 0x0 [ 350.196975][ T5895] appleir 0003:05AC:8241.0029: unknown main item tag 0x0 [ 350.207376][ T24] usb 4-1: Manufacturer: syz [ 350.214793][ T5895] appleir 0003:05AC:8241.0029: unknown main item tag 0x0 [ 350.215222][ T5856] usb 3-1: USB disconnect, device number 67 [ 350.228005][ T24] usb 4-1: SerialNumber: syz [ 350.233276][ T5895] appleir 0003:05AC:8241.0029: unknown main item tag 0x0 [ 350.249184][ T5895] appleir 0003:05AC:8241.0029: No inputs registered, leaving [ 350.288402][ T5895] appleir 0003:05AC:8241.0029: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 350.392964][ T5903] usb 5-1: USB disconnect, device number 55 [ 350.494977][ T24] usb 4-1: USB disconnect, device number 75 [ 350.551810][ T5972] udevd[5972]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 350.886157][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 350.886172][ T30] audit: type=1400 audit(1746631633.898:1257): avc: denied { bind } for pid=11022 comm="syz.2.1440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 351.060069][ T5856] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 351.210499][ T9] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 351.265931][ T5856] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.338513][ T5856] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 351.435386][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.457228][ T5856] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.559296][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.642853][ T5856] usb 6-1: config 0 descriptor?? [ 351.691474][ T9] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 351.827883][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.950707][ T9] usb 5-1: config 0 descriptor?? [ 352.020868][ T5902] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 352.154784][ T5856] lg-g15 0003:046D:C222.002A: unbalanced collection at end of report description [ 352.172296][ T5856] lg-g15 0003:046D:C222.002A: probe with driver lg-g15 failed with error -22 [ 352.203495][ T5902] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 352.213455][ T5902] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 352.228593][ T5902] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 352.260316][ T5902] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 352.273769][ T5902] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 352.289782][ T5902] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 352.299292][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 352.307387][ T5902] usb 3-1: Product: syz [ 352.312170][ T5902] usb 3-1: Manufacturer: syz [ 352.320562][ T5902] cdc_wdm 3-1:1.0: skipping garbage [ 352.325887][ T5902] cdc_wdm 3-1:1.0: skipping garbage [ 352.333110][ T5902] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 352.339122][ T5902] cdc_wdm 3-1:1.0: Unknown control protocol [ 352.653204][T11047] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1438'. [ 352.803590][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 352.809619][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 352.820736][ T5902] usb 3-1: USB disconnect, device number 68 [ 352.830220][ T9] usb 5-1: USB disconnect, device number 56 [ 352.981039][ T30] audit: type=1804 audit(1746631635.998:1258): pid=11052 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.1449" name="/newroot/274/bus/file0" dev="overlay" ino=1555 res=1 errno=0 [ 353.079322][ T5902] usb 6-1: USB disconnect, device number 12 [ 353.188998][T11055] netlink: 'syz.3.1450': attribute type 16 has an invalid length. [ 353.219666][T11055] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1450'. [ 353.246952][T11055] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.435070][ T30] audit: type=1400 audit(1746631636.448:1259): avc: denied { getopt } for pid=11068 comm="syz.3.1454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 354.290902][ T5856] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 354.564185][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.577757][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.593342][ T5856] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 354.607226][ T5856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.945922][ T5856] usb 3-1: config 0 descriptor?? [ 355.208431][ T5856] usbhid 3-1:0.0: can't add hid device: -71 [ 355.230205][ T5856] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 355.249386][ T30] audit: type=1400 audit(1746631638.258:1260): avc: denied { ioctl } for pid=11105 comm="syz.3.1465" path="socket:[40385]" dev="sockfs" ino=40385 ioctlcmd=0x8931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 355.279296][ T5856] usb 3-1: USB disconnect, device number 69 [ 355.460243][ T5903] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 355.570353][ T5895] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 355.737825][ T5895] usb 2-1: Using ep0 maxpacket: 8 [ 355.749321][ T5895] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 355.761912][ T5895] usb 2-1: config 179 has no interface number 0 [ 355.783610][ T5895] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 355.841506][ T5895] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 355.892731][ T5895] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 355.948956][ T5895] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 355.965541][ T5903] usb 5-1: Using ep0 maxpacket: 8 [ 355.972998][ T5903] usb 5-1: config 6 has an invalid interface number: 156 but max is 1 [ 355.981401][ T5903] usb 5-1: config 6 has an invalid interface number: 247 but max is 1 [ 355.989586][ T5903] usb 5-1: config 6 has an invalid interface number: 11 but max is 1 [ 355.993352][ T5895] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 356.001617][ T5903] usb 5-1: config 6 has an invalid interface number: 39 but max is 1 [ 356.023404][ T5903] usb 5-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 356.025099][T11121] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1469'. [ 356.033370][ T5903] usb 5-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 356.050855][ T5903] usb 5-1: config 6 has 4 interfaces, different from the descriptor's value: 2 [ 356.059820][ T5903] usb 5-1: config 6 has no interface number 0 [ 356.076319][ T5895] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 356.080050][ T5903] usb 5-1: config 6 has no interface number 1 [ 356.098497][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.107488][ T5903] usb 5-1: config 6 has no interface number 2 [ 356.121958][T11123] FAULT_INJECTION: forcing a failure. [ 356.121958][T11123] name failslab, interval 1, probability 0, space 0, times 0 [ 356.122211][ T5903] usb 5-1: config 6 has no interface number 3 [ 356.141343][T11123] CPU: 1 UID: 0 PID: 11123 Comm: syz.3.1470 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 356.141366][T11123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 356.141376][T11123] Call Trace: [ 356.141382][T11123] [ 356.141388][T11123] dump_stack_lvl+0x16c/0x1f0 [ 356.141417][T11123] should_fail_ex+0x512/0x640 [ 356.141436][T11123] ? fs_reclaim_acquire+0xae/0x150 [ 356.141460][T11123] ? tomoyo_encode2+0x100/0x3e0 [ 356.141479][T11123] should_failslab+0xc2/0x120 [ 356.141497][T11123] __kmalloc_noprof+0xd2/0x510 [ 356.141522][T11123] ? d_absolute_path+0x136/0x1a0 [ 356.141551][T11123] tomoyo_encode2+0x100/0x3e0 [ 356.141576][T11123] tomoyo_encode+0x29/0x50 [ 356.141597][T11123] tomoyo_realpath_from_path+0x18f/0x6e0 [ 356.141628][T11123] tomoyo_path2_perm+0x2a1/0x710 [ 356.141646][T11123] ? tomoyo_path2_perm+0x293/0x710 [ 356.141666][T11123] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 356.141718][T11123] ? do_raw_spin_lock+0x12c/0x2b0 [ 356.141737][T11123] tomoyo_path_rename+0x168/0x1a0 [ 356.141761][T11123] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 356.141795][T11123] security_path_rename+0x18e/0x3c0 [ 356.141817][T11123] do_renameat2+0x735/0xc90 [ 356.141843][T11123] ? __pfx_do_renameat2+0x10/0x10 [ 356.141862][T11123] ? find_held_lock+0x2b/0x80 [ 356.141881][T11123] ? __might_fault+0xe3/0x190 [ 356.141898][T11123] ? __might_fault+0x13b/0x190 [ 356.141926][T11123] ? getname_flags.part.0+0x1c5/0x550 [ 356.141951][T11123] __x64_sys_renameat2+0xe7/0x130 [ 356.141971][T11123] do_syscall_64+0xcd/0x260 [ 356.141996][T11123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.142013][T11123] RIP: 0033:0x7f078e58e969 [ 356.142028][T11123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.142045][T11123] RSP: 002b:00007f078f49f038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 356.142062][T11123] RAX: ffffffffffffffda RBX: 00007f078e7b5fa0 RCX: 00007f078e58e969 [ 356.142073][T11123] RDX: ffffffffffffff9c RSI: 0000200000000480 RDI: ffffffffffffff9c [ 356.142084][T11123] RBP: 00007f078f49f090 R08: 0000000000000002 R09: 0000000000000000 [ 356.142102][T11123] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000002 [ 356.142112][T11123] R13: 0000000000000000 R14: 00007f078e7b5fa0 R15: 00007fffb9831ec8 [ 356.142135][T11123] [ 356.142232][T11123] ERROR: Out of memory at tomoyo_realpath_from_path. [ 356.170272][ T5903] usb 5-1: config 6 interface 156 altsetting 255 endpoint 0x7 has invalid wMaxPacketSize 0 [ 356.178751][T11113] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 356.188359][ T5903] usb 5-1: config 6 interface 156 altsetting 255 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 356.575756][T11125] syz!: rxe_newlink: already configured on team_slave_0 [ 356.661792][ T5903] usb 5-1: config 6 interface 156 altsetting 255 endpoint 0x4 has an invalid bInterval 44, changing to 9 [ 356.674215][ T5903] usb 5-1: config 6 interface 156 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 356.685652][ T5903] usb 5-1: config 6 interface 156 altsetting 255 has a duplicate endpoint with address 0x8, skipping [ 356.696638][ T5903] usb 5-1: config 6 interface 156 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 356.720344][ T30] audit: type=1400 audit(1746631639.728:1261): avc: denied { ioctl } for pid=11112 comm="syz.1.1467" path="socket:[41522]" dev="sockfs" ino=41522 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 356.720565][T11113] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1467'. [ 356.765150][ T5903] usb 5-1: too many endpoints for config 6 interface 247 altsetting 80: 148, using maximum allowed: 30 [ 356.786838][ T5902] usb 2-1: USB disconnect, device number 88 [ 356.786914][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 356.795191][ T5903] usb 5-1: config 6 interface 247 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 148 [ 356.801881][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 356.885984][ T5903] usb 5-1: config 6 interface 11 altsetting 40 has an invalid descriptor for endpoint zero, skipping [ 356.900348][ T5903] usb 5-1: config 6 interface 11 altsetting 40 has a duplicate endpoint with address 0x4, skipping [ 356.933440][ T5903] usb 5-1: config 6 interface 11 altsetting 40 has 3 endpoint descriptors, different from the interface descriptor's value: 15 [ 356.947099][ T5903] usb 5-1: too many endpoints for config 6 interface 39 altsetting 68: 181, using maximum allowed: 30 [ 356.959420][ T5903] usb 5-1: config 6 interface 39 altsetting 68 has a duplicate endpoint with address 0x8, skipping [ 356.970490][ T5903] usb 5-1: config 6 interface 39 altsetting 68 has a duplicate endpoint with address 0xF, skipping [ 356.982199][ T5903] usb 5-1: config 6 interface 39 altsetting 68 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 357.024739][ T5903] usb 5-1: config 6 interface 39 altsetting 68 has a duplicate endpoint with address 0x85, skipping [ 357.044116][ T5903] usb 5-1: config 6 interface 39 altsetting 68 has a duplicate endpoint with address 0xC, skipping [ 357.060729][ T5903] usb 5-1: config 6 interface 39 altsetting 68 has a duplicate endpoint with address 0x5, skipping [ 357.072369][ T5903] usb 5-1: config 6 interface 39 altsetting 68 has a duplicate endpoint with address 0x1, skipping [ 357.083274][ T5903] usb 5-1: config 6 interface 39 altsetting 68 has a duplicate endpoint with address 0x3, skipping [ 357.094226][ T5903] usb 5-1: config 6 interface 39 altsetting 68 has 12 endpoint descriptors, different from the interface descriptor's value: 181 [ 357.108488][ T5903] usb 5-1: config 6 interface 156 has no altsetting 0 [ 357.115432][ T5903] usb 5-1: config 6 interface 247 has no altsetting 0 [ 357.122319][ T5903] usb 5-1: config 6 interface 11 has no altsetting 0 [ 357.129013][ T5903] usb 5-1: config 6 interface 39 has no altsetting 0 [ 357.190583][T11136] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1474'. [ 357.293133][ T5903] usb 5-1: New USB device found, idVendor=1fb9, idProduct=0301, bcdDevice=1c.b7 [ 357.305966][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.343707][ T5903] usb 5-1: Product: 䕘᭷י赽퇃섑왃孚频ꋽ詞ࢾ蘛経⤊뫼飵㋅㾋㮲땞邦횦éŒë‹¾ã ¼ê…ª [ 357.368836][ T5903] usb 5-1: Manufacturer: â ‰ [ 357.415847][ T30] audit: type=1400 audit(1746631640.428:1262): avc: denied { append } for pid=11139 comm="syz.1.1476" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 357.438285][ T5903] usb 5-1: SerialNumber: ijå½ï†£å•°ï”¦æ­¨æ³œì­–à©‹ë¯à¡Ð¥á’·ï¤‚Ê·êŠŽé¸¬èº£ä´ [ 358.205602][ T5903] cp210x 5-1:6.156: cp210x converter detected [ 358.218343][ T5903] cp210x 5-1:6.156: failed to get vendor val 0x370b size 1: -71 [ 358.227415][ T5903] cp210x 5-1:6.156: querying part number failed [ 358.256324][ T5903] usb 5-1: cp210x converter now attached to ttyUSB0 [ 358.285666][ T5903] cp210x 5-1:6.247: cp210x converter detected [ 358.313525][ T5903] cp210x 5-1:6.247: failed to get vendor val 0x370b size 1: -71 [ 358.330054][ T5903] cp210x 5-1:6.247: querying part number failed [ 358.347221][ T5903] usb 5-1: cp210x converter now attached to ttyUSB1 [ 358.370400][ T5903] cp210x 5-1:6.11: cp210x converter detected [ 358.388373][ T5903] cp210x 5-1:6.11: failed to get vendor val 0x370b size 1: -71 [ 358.398316][ T5903] cp210x 5-1:6.11: querying part number failed [ 358.407641][ T5903] usb 5-1: cp210x converter now attached to ttyUSB2 [ 358.424363][ T5903] cp210x 5-1:6.39: cp210x converter detected [ 358.436709][ T5903] cp210x 5-1:6.39: failed to get vendor val 0x370b size 1: -71 [ 358.487758][T11160] netlink: 'syz.5.1483': attribute type 10 has an invalid length. [ 358.508700][ T5903] cp210x 5-1:6.39: querying part number failed [ 358.517799][ T5903] usb 5-1: cp210x converter now attached to ttyUSB3 [ 358.525054][T11160] team0: Device ipvlan1 failed to register rx_handler [ 358.548018][ T5903] usb 5-1: USB disconnect, device number 57 [ 358.584024][T11160] FAULT_INJECTION: forcing a failure. [ 358.584024][T11160] name failslab, interval 1, probability 0, space 0, times 0 [ 358.586869][T11165] loop2: detected capacity change from 0 to 7 [ 358.597122][ T5903] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 358.614622][T11165] FAULT_INJECTION: forcing a failure. [ 358.614622][T11165] name failslab, interval 1, probability 0, space 0, times 0 [ 358.628557][T11165] CPU: 1 UID: 0 PID: 11165 Comm: syz.4.1484 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 358.628580][T11165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 358.628589][T11165] Call Trace: [ 358.628594][T11165] [ 358.628600][T11165] dump_stack_lvl+0x16c/0x1f0 [ 358.628624][T11165] should_fail_ex+0x512/0x640 [ 358.628643][T11165] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 358.628667][T11165] should_failslab+0xc2/0x120 [ 358.628682][T11165] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 358.628701][T11165] ? find_held_lock+0x2b/0x80 [ 358.628718][T11165] ? skb_clone+0x190/0x3f0 [ 358.628735][T11165] skb_clone+0x190/0x3f0 [ 358.628749][T11165] netlink_broadcast_filtered+0xb19/0xf10 [ 358.628771][T11165] ? sprintf+0xcc/0x100 [ 358.628786][T11165] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 358.628807][T11165] ? netlink_has_listeners+0x20f/0x430 [ 358.628824][T11165] netlink_broadcast+0x39/0x50 [ 358.628840][T11165] kobject_uevent_env+0xc6a/0x1870 [ 358.628869][T11165] loop_configure+0x13dd/0x1910 [ 358.628904][T11165] ? __pfx_loop_configure+0x10/0x10 [ 358.628920][T11165] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 358.628958][T11165] lo_ioctl+0xea8/0x27e0 [ 358.628980][T11165] ? __lock_acquire+0x5ca/0x1ba0 [ 358.629005][T11165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.629026][T11165] ? __pfx_lo_ioctl+0x10/0x10 [ 358.629043][T11165] ? find_held_lock+0x2b/0x80 [ 358.629058][T11165] ? avc_has_extended_perms+0x33a/0x1090 [ 358.629076][T11165] ? avc_has_extended_perms+0x47c/0x1090 [ 358.629095][T11165] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 358.629118][T11165] ? kasan_quarantine_put+0x10a/0x240 [ 358.629145][T11165] ? lockdep_hardirqs_on+0x7c/0x110 [ 358.629164][T11165] ? find_held_lock+0x2b/0x80 [ 358.629185][T11165] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 358.629208][T11165] ? blkdev_common_ioctl+0x1dd/0x2480 [ 358.629255][T11165] ? __pfx_lo_ioctl+0x10/0x10 [ 358.629273][T11165] blkdev_ioctl+0x274/0x6d0 [ 358.629287][T11165] ? __pfx_blkdev_ioctl+0x10/0x10 [ 358.629299][T11165] ? selinux_file_ioctl+0x180/0x270 [ 358.629324][T11165] ? selinux_file_ioctl+0xb4/0x270 [ 358.629344][T11165] ? __pfx_blkdev_ioctl+0x10/0x10 [ 358.629364][T11165] __x64_sys_ioctl+0x190/0x200 [ 358.629388][T11165] do_syscall_64+0xcd/0x260 [ 358.629413][T11165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.629431][T11165] RIP: 0033:0x7f9fd438e969 [ 358.629448][T11165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.629462][T11165] RSP: 002b:00007f9fd21f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 358.629475][T11165] RAX: ffffffffffffffda RBX: 00007f9fd45b5fa0 RCX: 00007f9fd438e969 [ 358.629484][T11165] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 358.629493][T11165] RBP: 00007f9fd21f6090 R08: 0000000000000000 R09: 0000000000000000 [ 358.629501][T11165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 358.629509][T11165] R13: 0000000000000000 R14: 00007f9fd45b5fa0 R15: 00007ffe2d9955d8 [ 358.629527][T11165] [ 358.629868][T11160] CPU: 0 UID: 0 PID: 11160 Comm: syz.5.1483 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 358.629898][T11160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 358.629908][T11160] Call Trace: [ 358.629914][T11160] [ 358.629920][T11160] dump_stack_lvl+0x16c/0x1f0 [ 358.629947][T11160] should_fail_ex+0x512/0x640 [ 358.629967][T11160] ? fs_reclaim_acquire+0xae/0x150 [ 358.629986][T11160] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 358.630006][T11160] should_failslab+0xc2/0x120 [ 358.630022][T11160] __kmalloc_noprof+0xd2/0x510 [ 358.630049][T11160] tomoyo_realpath_from_path+0xc2/0x6e0 [ 358.630071][T11160] ? tomoyo_profile+0x47/0x60 [ 358.630096][T11160] tomoyo_path_number_perm+0x245/0x580 [ 358.630113][T11160] ? tomoyo_path_number_perm+0x237/0x580 [ 358.630132][T11160] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 358.630151][T11160] ? find_held_lock+0x2b/0x80 [ 358.630188][T11160] ? find_held_lock+0x2b/0x80 [ 358.630204][T11160] ? hook_file_ioctl_common+0x145/0x410 [ 358.630223][T11160] ? __fget_files+0x20e/0x3c0 [ 358.630249][T11160] security_file_ioctl+0x9b/0x240 [ 358.630271][T11160] __x64_sys_ioctl+0xb7/0x200 [ 358.630292][T11160] do_syscall_64+0xcd/0x260 [ 358.630312][T11160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.630328][T11160] RIP: 0033:0x7f536258e969 [ 358.630340][T11160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.630354][T11160] RSP: 002b:00007f5363336038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 358.630368][T11160] RAX: ffffffffffffffda RBX: 00007f53627b5fa0 RCX: 00007f536258e969 [ 358.630378][T11160] RDX: 00002000000007c0 RSI: 000000000000890b RDI: 000000000000000d [ 358.630387][T11160] RBP: 00007f5363336090 R08: 0000000000000000 R09: 0000000000000000 [ 358.630395][T11160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.630404][T11160] R13: 0000000000000000 R14: 00007f53627b5fa0 R15: 00007fffe0693d48 [ 358.630424][T11160] [ 358.638118][T11160] ERROR: Out of memory at tomoyo_realpath_from_path. [ 358.647174][T11165] loop2: [ 358.656291][ T5903] cp210x 5-1:6.156: device disconnected [ 358.668742][T11165] loop2: partition table partially beyond EOD, [ 358.692324][ T5903] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 358.757858][T11165] truncated [ 358.784782][ T5903] cp210x 5-1:6.247: device disconnected [ 359.195319][ T5903] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2 [ 359.220696][ T5903] cp210x 5-1:6.11: device disconnected [ 359.232331][ T5903] cp210x ttyUSB3: cp210x converter now disconnected from ttyUSB3 [ 359.307560][ T5903] cp210x 5-1:6.39: device disconnected [ 359.681135][ T5902] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 359.851735][T11193] macsec1: entered promiscuous mode [ 359.854501][ T5902] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 359.856973][T11193] macsec1: entered allmulticast mode [ 359.876675][ T5902] usb 2-1: config 0 interface 0 has no altsetting 0 [ 359.890117][ T5902] usb 2-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 359.899496][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.911610][ T5902] usb 2-1: config 0 descriptor?? [ 359.917574][T11178] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 360.199001][T11199] syz.5.1499 (11199): drop_caches: 2 [ 360.213398][T11199] syz.5.1499 (11199): drop_caches: 2 [ 360.605249][ T5902] usbhid 2-1:0.0: can't add hid device: -71 [ 360.657614][ T5902] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 360.833341][ T5902] usb 2-1: USB disconnect, device number 89 [ 361.097277][ T30] audit: type=1400 audit(1746631644.098:1263): avc: denied { setopt } for pid=11207 comm="syz.2.1501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 361.152478][ T30] audit: type=1400 audit(1746631644.098:1264): avc: denied { connect } for pid=11207 comm="syz.2.1501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 361.223018][ T30] audit: type=1400 audit(1746631644.098:1265): avc: denied { getopt } for pid=11207 comm="syz.2.1501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 361.249349][T11210] netlink: 'syz.4.1502': attribute type 21 has an invalid length. [ 361.259133][T11210] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1502'. [ 361.271016][T11210] netlink: 'syz.4.1502': attribute type 21 has an invalid length. [ 361.278899][T11210] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1502'. [ 361.300827][ T9] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 361.581064][ T9] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 361.589406][ T9] usb 4-1: config 0 has no interface number 0 [ 361.603070][ T9] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 361.614119][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.622253][ T9] usb 4-1: Product: syz [ 361.626547][ T9] usb 4-1: Manufacturer: syz [ 361.631990][ T9] usb 4-1: SerialNumber: syz [ 361.639386][ T9] usb 4-1: config 0 descriptor?? [ 362.149083][ T9] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 362.168623][ T9] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 362.178647][ T9] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 362.189220][ T9] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 362.201334][ T9] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 362.254686][ T9] usb 4-1: USB disconnect, device number 76 [ 362.271609][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 362.290702][ T9] keyspan 4-1:0.133: device disconnected [ 362.544912][T11241] lo speed is unknown, defaulting to 1000 [ 362.994634][T11242] netlink: 'syz.4.1509': attribute type 1 has an invalid length. [ 363.002573][T11242] netlink: 'syz.4.1509': attribute type 2 has an invalid length. [ 363.620064][T11242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1509'. [ 363.717086][T11253] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1513'. [ 363.808229][T11250] lo speed is unknown, defaulting to 1000 [ 363.893795][T11257] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1515'. [ 364.431581][T11252] tmpfs: Unknown parameter '}id2Õ’‘Cõç†0x0000000000004000' [ 364.441284][ T30] audit: type=1400 audit(1746631647.458:1266): avc: denied { getopt } for pid=11273 comm="syz.4.1521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 364.452154][T11271] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2248643489 (17989147912 ns) > initial count (11631199424 ns). Using initial count to start timer. [ 364.810206][ T5815] Bluetooth: hci2: command 0x0405 tx timeout [ 364.858673][T11283] @: renamed from vlan0 (while UP) [ 365.560768][ T5903] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 365.618460][T11289] kvm: kvm [11288]: vcpu0, guest rIP: 0x18f Unhandled WRMSR(0xc2) = 0x3e [ 365.637318][T11289] kvm: kvm [11288]: vcpu0, guest rIP: 0x18f Unhandled WRMSR(0x11e) = 0x41 [ 365.691031][T11289] kvm: kvm [11288]: vcpu0, guest rIP: 0x18f Unhandled WRMSR(0x11e) = 0xa4 [ 365.721123][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 365.721650][T11289] kvm: kvm [11288]: vcpu0, guest rIP: 0x18f Unhandled WRMSR(0x11e) = 0x3f [ 365.761054][ T5903] usb 5-1: Using ep0 maxpacket: 8 [ 365.769419][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.793038][ T5903] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 365.810909][ T5903] usb 5-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 365.823171][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.833212][ T5903] usb 5-1: Product: syz [ 365.837475][ T5903] usb 5-1: Manufacturer: syz [ 365.844257][ T5903] usb 5-1: SerialNumber: syz [ 365.874741][ T5903] usb 5-1: config 0 descriptor?? [ 365.915247][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.938865][ T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 365.982005][ T9] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 366.004293][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.040867][ T9] usb 6-1: Product: syz [ 366.061821][ T9] usb 6-1: Manufacturer: syz [ 366.078520][ T9] usb 6-1: SerialNumber: syz [ 366.100409][ T5856] usb 5-1: USB disconnect, device number 58 [ 366.119172][ T9] usb 6-1: config 0 descriptor?? [ 366.193028][T11304] FAULT_INJECTION: forcing a failure. [ 366.193028][T11304] name failslab, interval 1, probability 0, space 0, times 0 [ 366.241561][ T30] audit: type=1326 audit(1746631649.248:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11305 comm="syz.2.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5872b8e969 code=0x7ffc0000 [ 366.275976][T11304] CPU: 1 UID: 0 PID: 11304 Comm: syz.1.1530 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 366.276001][T11304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 366.276012][T11304] Call Trace: [ 366.276018][T11304] [ 366.276024][T11304] dump_stack_lvl+0x16c/0x1f0 [ 366.276051][T11304] should_fail_ex+0x512/0x640 [ 366.276072][T11304] ? __kmalloc_noprof+0xbf/0x510 [ 366.276104][T11304] ? ovl_get_index_name_fh+0x55/0x190 [ 366.276130][T11304] should_failslab+0xc2/0x120 [ 366.276146][T11304] __kmalloc_noprof+0xd2/0x510 [ 366.276168][T11304] ? __pfx_ovl_encode_real_fh+0x10/0x10 [ 366.276194][T11304] ovl_get_index_name_fh+0x55/0x190 [ 366.276220][T11304] ovl_lookup_index+0x10f/0x810 [ 366.276244][T11304] ? __pfx_ovl_lookup_index+0x10/0x10 [ 366.276268][T11304] ? ovl_get_fh+0x47f/0x710 [ 366.276286][T11304] ? ovl_lookup+0x1a81/0x2270 [ 366.276311][T11304] ovl_lookup+0xa7f/0x2270 [ 366.276334][T11304] ? avc_has_perm_noaudit+0x149/0x3b0 [ 366.276358][T11304] ? __pfx_ovl_lookup+0x10/0x10 [ 366.276381][T11304] ? selinux_determine_inode_label+0x238/0x330 [ 366.276409][T11304] ? may_create+0x205/0x380 [ 366.276430][T11304] ? ovl_revert_creds+0x13/0x50 [ 366.276444][T11304] ? __pfx_may_create+0x10/0x10 [ 366.276470][T11304] ? bpf_lsm_inode_permission+0x9/0x10 [ 366.276488][T11304] ? security_inode_permission+0xbf/0x260 [ 366.276513][T11304] ? __pfx_ovl_lookup+0x10/0x10 [ 366.276534][T11304] lookup_open.isra.0+0x4d7/0x1580 [ 366.276559][T11304] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 366.276589][T11304] ? __pfx_down_write+0x10/0x10 [ 366.276609][T11304] ? mnt_get_write_access+0x20c/0x300 [ 366.276632][T11304] path_openat+0x905/0x2d40 [ 366.276662][T11304] ? __pfx_path_openat+0x10/0x10 [ 366.276690][T11304] do_filp_open+0x20b/0x470 [ 366.276714][T11304] ? __pfx_do_filp_open+0x10/0x10 [ 366.276754][T11304] ? alloc_fd+0x471/0x7d0 [ 366.276785][T11304] do_sys_openat2+0x11b/0x1d0 [ 366.276804][T11304] ? __pfx_do_sys_openat2+0x10/0x10 [ 366.276824][T11304] ? __fget_files+0x20e/0x3c0 [ 366.276852][T11304] __x64_sys_openat+0x174/0x210 [ 366.276871][T11304] ? __pfx___x64_sys_openat+0x10/0x10 [ 366.276888][T11304] ? ksys_write+0x1b9/0x240 [ 366.276909][T11304] ? rcu_is_watching+0x12/0xc0 [ 366.276936][T11304] do_syscall_64+0xcd/0x260 [ 366.276959][T11304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.276976][T11304] RIP: 0033:0x7f4d91b8e969 [ 366.276990][T11304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.277007][T11304] RSP: 002b:00007f4d92a2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 366.277023][T11304] RAX: ffffffffffffffda RBX: 00007f4d91db5fa0 RCX: 00007f4d91b8e969 [ 366.277035][T11304] RDX: 0000000000004842 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 366.277046][T11304] RBP: 00007f4d92a2b090 R08: 0000000000000000 R09: 0000000000000000 [ 366.277056][T11304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 366.277065][T11304] R13: 0000000000000000 R14: 00007f4d91db5fa0 R15: 00007fff85327d18 [ 366.277089][T11304] [ 366.589044][ T30] audit: type=1326 audit(1746631649.248:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11305 comm="syz.2.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5872b8e969 code=0x7ffc0000 [ 366.612831][ T30] audit: type=1326 audit(1746631649.248:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11305 comm="syz.2.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5872b8d2d0 code=0x7ffc0000 [ 366.636645][ T30] audit: type=1326 audit(1746631649.248:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11305 comm="syz.2.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5872b8d2d0 code=0x7ffc0000 [ 366.661516][ T30] audit: type=1326 audit(1746631649.258:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11305 comm="syz.2.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5872b8e969 code=0x7ffc0000 [ 366.685337][ T30] audit: type=1326 audit(1746631649.258:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11305 comm="syz.2.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5872b8e969 code=0x7ffc0000 [ 366.709326][ T30] audit: type=1326 audit(1746631649.258:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11305 comm="syz.2.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5872b8e969 code=0x7ffc0000 [ 366.733391][ T30] audit: type=1326 audit(1746631649.258:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11305 comm="syz.2.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5872b8e969 code=0x7ffc0000 [ 366.756978][ T30] audit: type=1326 audit(1746631649.258:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11305 comm="syz.2.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5872b8e969 code=0x7ffc0000 [ 366.940949][ T5903] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 367.131294][ T5903] usb 3-1: Using ep0 maxpacket: 16 [ 367.140221][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.153680][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.183012][ T5903] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 367.207523][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.370050][ T5902] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 367.381412][ T5903] usb 3-1: config 0 descriptor?? [ 367.616148][T11310] SELinux: policydb magic number 0x100008c does not match expected magic number 0xf97cff8c [ 367.689382][T11310] SELinux: failed to load policy [ 367.934328][ T5902] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.949865][ T5902] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 367.960983][ T5902] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 367.976831][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.989497][ T5902] usb 2-1: config 0 descriptor?? [ 368.477923][ T5902] usb 6-1: USB disconnect, device number 13 [ 369.718882][T11336] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 369.726412][T11336] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 369.739213][T11336] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 369.853590][ T5903] usbhid 3-1:0.0: can't add hid device: -71 [ 369.862394][ T5903] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 369.880209][ T5903] usb 3-1: USB disconnect, device number 70 [ 369.947414][ T5902] usb 2-1: USB disconnect, device number 90 [ 370.024160][ T5858] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 370.076409][T11354] FAULT_INJECTION: forcing a failure. [ 370.076409][T11354] name failslab, interval 1, probability 0, space 0, times 0 [ 370.097951][T11354] CPU: 0 UID: 0 PID: 11354 Comm: syz.1.1544 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 370.097979][T11354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 370.097989][T11354] Call Trace: [ 370.097995][T11354] [ 370.098002][T11354] dump_stack_lvl+0x16c/0x1f0 [ 370.098031][T11354] should_fail_ex+0x512/0x640 [ 370.098053][T11354] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 370.098082][T11354] should_failslab+0xc2/0x120 [ 370.098101][T11354] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 370.098127][T11354] ? __kernfs_new_node+0xd2/0x8a0 [ 370.098148][T11354] __kernfs_new_node+0xd2/0x8a0 [ 370.098168][T11354] ? __pfx___kernfs_new_node+0x10/0x10 [ 370.098191][T11354] ? find_held_lock+0x2b/0x80 [ 370.098213][T11354] ? kernfs_root+0xee/0x2a0 [ 370.098235][T11354] kernfs_new_node+0x13c/0x1e0 [ 370.098259][T11354] __kernfs_create_file+0x53/0x350 [ 370.098285][T11354] sysfs_add_file_mode_ns+0x207/0x3c0 [ 370.098318][T11354] sysfs_merge_group+0x1aa/0x340 [ 370.098337][T11354] ? __pfx_sysfs_merge_group+0x10/0x10 [ 370.098358][T11354] ? __pfx_dev_add_physical_location+0x10/0x10 [ 370.098377][T11354] ? bus_to_subsys+0x131/0x160 [ 370.098402][T11354] dpm_sysfs_add+0x237/0x280 [ 370.098423][T11354] device_add+0x9a6/0x1a70 [ 370.098445][T11354] ? __pfx_device_add+0x10/0x10 [ 370.098464][T11354] ? lockdep_init_map_type+0x5c/0x280 [ 370.098489][T11354] ? __init_waitqueue_head+0xca/0x150 [ 370.098515][T11354] tty_register_device_attr+0x38e/0x7c0 [ 370.098545][T11354] ? __pfx_tty_register_device_attr+0x10/0x10 [ 370.098579][T11354] ? tty_port_init+0x156/0x1c0 [ 370.098600][T11354] gsm_activate_mux+0x157/0x2e0 [ 370.098621][T11354] gsmld_ioctl+0x8cb/0x1550 [ 370.098650][T11354] ? __pfx_gsmld_ioctl+0x10/0x10 [ 370.098673][T11354] ? __ldsem_down_read_nested+0xf3/0x8d0 [ 370.098698][T11354] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 370.098727][T11354] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 370.098760][T11354] ? __pfx_gsmld_ioctl+0x10/0x10 [ 370.098779][T11354] tty_ioctl+0x6f6/0x1610 [ 370.098798][T11354] ? __pfx_tty_ioctl+0x10/0x10 [ 370.098821][T11354] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 370.098856][T11354] ? hook_file_ioctl_common+0x145/0x410 [ 370.098880][T11354] ? selinux_file_ioctl+0x180/0x270 [ 370.098903][T11354] ? selinux_file_ioctl+0xb4/0x270 [ 370.098928][T11354] ? __pfx_tty_ioctl+0x10/0x10 [ 370.098947][T11354] __x64_sys_ioctl+0x190/0x200 [ 370.098971][T11354] do_syscall_64+0xcd/0x260 [ 370.098996][T11354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.099014][T11354] RIP: 0033:0x7f4d91b8e969 [ 370.099029][T11354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.099046][T11354] RSP: 002b:00007f4d92a2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 370.099063][T11354] RAX: ffffffffffffffda RBX: 00007f4d91db5fa0 RCX: 00007f4d91b8e969 [ 370.099074][T11354] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000003 [ 370.099084][T11354] RBP: 00007f4d92a2b090 R08: 0000000000000000 R09: 0000000000000000 [ 370.099094][T11354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 370.099103][T11354] R13: 0000000000000000 R14: 00007f4d91db5fa0 R15: 00007fff85327d18 [ 370.099127][T11354] [ 370.311680][ T5858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 1 [ 370.407223][ T54] Bluetooth: hci2: command 0x0405 tx timeout [ 370.585313][ T5858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.595585][ T5858] usb 5-1: New USB device found, idVendor=1532, idProduct=0116, bcdDevice= 0.00 [ 370.604840][ T5858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.621053][ T5858] usb 5-1: config 0 descriptor?? [ 370.780044][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 370.781141][ T30] audit: type=1400 audit(1746631653.788:1283): avc: denied { mount } for pid=11362 comm="syz.2.1548" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 370.816273][ T5902] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 371.000647][ T5902] usb 6-1: Using ep0 maxpacket: 8 [ 371.088485][ T5902] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.140920][ T30] audit: type=1800 audit(1746631654.128:1284): pid=11335 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1538" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 371.163285][ T5902] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 371.190884][ T5858] usbhid 5-1:0.0: can't add hid device: -71 [ 371.196905][ T5858] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 371.204707][ T5902] usb 6-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 371.204736][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.204756][ T5902] usb 6-1: Product: syz [ 371.204770][ T5902] usb 6-1: Manufacturer: syz [ 371.204784][ T5902] usb 6-1: SerialNumber: syz [ 371.206808][ T5902] usb 6-1: config 0 descriptor?? [ 371.293118][ T5858] usb 5-1: USB disconnect, device number 59 [ 371.465729][ T5903] usb 6-1: USB disconnect, device number 14 [ 371.480777][ T9] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 371.500214][ T5902] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 371.643351][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.663168][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 371.680297][ T5902] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 371.711060][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 371.730852][ T5902] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 371.750040][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.760830][ T5902] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 371.782995][ T9] usb 2-1: config 0 descriptor?? [ 371.800065][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.826108][ T5902] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 371.843659][ T5902] usb 4-1: invalid MIDI out EP 0 [ 371.906271][T11378] loop8: detected capacity change from 0 to 1 [ 371.913049][ T5902] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 371.965273][T11378] Dev loop8: unable to read RDB block 1 [ 372.004230][T11378] loop8: unable to read partition table [ 372.036385][T11367] kvm: kvm [11366]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x4c [ 372.058003][ T5902] usb 4-1: USB disconnect, device number 77 [ 372.074353][T11367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.094986][T11367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.103934][T11378] loop8: partition table beyond EOD, truncated [ 372.129769][T11378] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 372.490150][ T54] Bluetooth: hci2: command 0x0405 tx timeout [ 372.521685][ T5895] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 372.694829][ T5858] usb 2-1: USB disconnect, device number 91 [ 372.740808][ T5895] usb 6-1: Using ep0 maxpacket: 16 [ 372.753632][ T5895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.773287][ T5895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.783357][ T5895] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 372.794396][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.812433][ T5895] usb 6-1: config 0 descriptor?? [ 372.990781][ T5856] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 373.425781][ T5895] appleir 0003:05AC:8241.002B: unknown main item tag 0x0 [ 373.454681][ T5895] appleir 0003:05AC:8241.002B: unknown main item tag 0x0 [ 373.472900][ T5895] appleir 0003:05AC:8241.002B: unknown main item tag 0x0 [ 373.487375][ T5895] appleir 0003:05AC:8241.002B: unknown main item tag 0x0 [ 373.501055][ T5856] usb 4-1: Using ep0 maxpacket: 16 [ 373.503697][ T5895] appleir 0003:05AC:8241.002B: No inputs registered, leaving [ 373.512097][ T5856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.535034][ T5856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.555832][ T5895] appleir 0003:05AC:8241.002B: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.5-1/input0 [ 373.558649][ T5856] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 373.600533][ T5856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.613687][ T5895] usb 6-1: USB disconnect, device number 15 [ 373.622338][ T5856] usb 4-1: config 0 descriptor?? [ 374.044733][ T30] audit: type=1400 audit(1746631657.058:1285): avc: denied { shutdown } for pid=11396 comm="syz.1.1561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 374.066877][ T5856] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 374.082730][ T5856] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 374.099206][ T5856] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 374.118694][ T5856] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 374.138689][ T5856] appleir 0003:05AC:8241.002C: No inputs registered, leaving [ 374.165454][ T5856] appleir 0003:05AC:8241.002C: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 374.387528][ T5856] usb 4-1: USB disconnect, device number 78 [ 374.551402][T11413] FAULT_INJECTION: forcing a failure. [ 374.551402][T11413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.570511][ T5815] Bluetooth: hci2: command 0x0405 tx timeout [ 374.606065][T11413] CPU: 0 UID: 0 PID: 11413 Comm: syz.2.1567 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 374.606093][T11413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 374.606104][T11413] Call Trace: [ 374.606111][T11413] [ 374.606118][T11413] dump_stack_lvl+0x16c/0x1f0 [ 374.606152][T11413] should_fail_ex+0x512/0x640 [ 374.606178][T11413] _copy_from_user+0x2e/0xd0 [ 374.606203][T11413] kvm_arch_vm_ioctl+0xb95/0x1cf0 [ 374.606231][T11413] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 374.606257][T11413] ? __lock_acquire+0x5ca/0x1ba0 [ 374.606287][T11413] ? __lock_acquire+0x5ca/0x1ba0 [ 374.606318][T11413] ? __lock_acquire+0x5ca/0x1ba0 [ 374.606347][T11413] ? __lock_acquire+0x5ca/0x1ba0 [ 374.606390][T11413] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 374.606413][T11413] ? is_bpf_text_address+0x94/0x1a0 [ 374.606433][T11413] ? kernel_text_address+0x8d/0x100 [ 374.606452][T11413] ? __kernel_text_address+0xd/0x40 [ 374.606469][T11413] ? unwind_get_return_address+0x59/0xa0 [ 374.606490][T11413] ? arch_stack_walk+0xa6/0x100 [ 374.606520][T11413] ? stack_trace_save+0x8e/0xc0 [ 374.606540][T11413] ? __pfx_stack_trace_save+0x10/0x10 [ 374.606560][T11413] ? stack_depot_save_flags+0x28/0xa50 [ 374.606582][T11413] ? __lock_acquire+0xaa4/0x1ba0 [ 374.606614][T11413] ? kasan_save_stack+0x42/0x60 [ 374.606639][T11413] ? kasan_save_stack+0x33/0x60 [ 374.606662][T11413] ? kasan_save_track+0x14/0x30 [ 374.606684][T11413] ? kasan_save_free_info+0x3b/0x60 [ 374.606723][T11413] ? __kasan_slab_free+0x51/0x70 [ 374.606737][T11413] ? kfree+0x2b6/0x4d0 [ 374.606757][T11413] ? tomoyo_path_number_perm+0x470/0x580 [ 374.606777][T11413] ? security_file_ioctl+0x9b/0x240 [ 374.606798][T11413] ? __x64_sys_ioctl+0xb7/0x200 [ 374.606818][T11413] ? do_syscall_64+0xcd/0x260 [ 374.606842][T11413] kvm_vm_ioctl+0x1985/0x3d40 [ 374.606871][T11413] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 374.606903][T11413] ? kasan_quarantine_put+0x10a/0x240 [ 374.606927][T11413] ? lockdep_hardirqs_on+0x7c/0x110 [ 374.606950][T11413] ? find_held_lock+0x2b/0x80 [ 374.606970][T11413] ? tomoyo_path_number_perm+0x295/0x580 [ 374.606994][T11413] ? tomoyo_path_number_perm+0x18d/0x580 [ 374.607017][T11413] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 374.607037][T11413] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 374.607066][T11413] ? do_vfs_ioctl+0x512/0x1990 [ 374.607091][T11413] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 374.607119][T11413] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 374.607152][T11413] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 374.607184][T11413] ? hook_file_ioctl_common+0x145/0x410 [ 374.607208][T11413] ? selinux_file_ioctl+0x180/0x270 [ 374.607231][T11413] ? selinux_file_ioctl+0xb4/0x270 [ 374.607256][T11413] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 374.607275][T11413] __x64_sys_ioctl+0x190/0x200 [ 374.607299][T11413] do_syscall_64+0xcd/0x260 [ 374.607322][T11413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.607340][T11413] RIP: 0033:0x7f5872b8e969 [ 374.607353][T11413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.607370][T11413] RSP: 002b:00007f58739ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 374.607387][T11413] RAX: ffffffffffffffda RBX: 00007f5872db5fa0 RCX: 00007f5872b8e969 [ 374.607398][T11413] RDX: 0000200000000000 RSI: 000000004018aebd RDI: 0000000000000004 [ 374.607408][T11413] RBP: 00007f58739ab090 R08: 0000000000000000 R09: 0000000000000000 [ 374.607418][T11413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.607427][T11413] R13: 0000000000000000 R14: 00007f5872db5fa0 R15: 00007fff0a0f6898 [ 374.607449][T11413] [ 374.966355][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.167355][ T24] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 376.198151][ T30] audit: type=1400 audit(1746631658.588:1286): avc: denied { connect } for pid=11425 comm="syz.5.1571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 376.355751][T11440] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1575'. [ 376.480122][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 376.521531][ T30] audit: type=1400 audit(1746631659.498:1287): avc: denied { read write } for pid=11430 comm="syz.2.1572" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 376.798761][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 376.810009][ T54] Bluetooth: hci2: command 0x0405 tx timeout [ 376.837151][ T30] audit: type=1400 audit(1746631659.508:1288): avc: denied { open } for pid=11430 comm="syz.2.1572" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 376.862713][ T30] audit: type=1400 audit(1746631659.508:1289): avc: denied { ioctl } for pid=11430 comm="syz.2.1572" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 376.870772][ T5856] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 376.898448][ T24] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 376.907744][ T24] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 376.919673][ T24] usb 5-1: Product: syz [ 376.928036][ T24] usb 5-1: Manufacturer: syz [ 376.932799][ T24] usb 5-1: SerialNumber: syz [ 376.955323][ T24] usb 5-1: config 0 descriptor?? [ 376.959445][T11446] FAULT_INJECTION: forcing a failure. [ 376.959445][T11446] name failslab, interval 1, probability 0, space 0, times 0 [ 376.974903][T11421] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 376.986373][T11446] CPU: 0 UID: 0 PID: 11446 Comm: syz.5.1577 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 376.986400][T11446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 376.986411][T11446] Call Trace: [ 376.986417][T11446] [ 376.986424][T11446] dump_stack_lvl+0x16c/0x1f0 [ 376.986450][T11446] should_fail_ex+0x512/0x640 [ 376.986471][T11446] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 376.986493][T11446] should_failslab+0xc2/0x120 [ 376.986511][T11446] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 376.986528][T11446] ? mark_held_locks+0x49/0x80 [ 376.986551][T11446] ? kstrdup_const+0x63/0x80 [ 376.986573][T11446] kstrdup+0x53/0x100 [ 376.986589][T11446] kstrdup_const+0x63/0x80 [ 376.986603][T11446] kvasprintf_const+0x10f/0x1a0 [ 376.986626][T11446] kobject_set_name_vargs+0x5a/0x140 [ 376.986650][T11446] dev_set_name+0xc7/0x100 [ 376.986674][T11446] ? __pfx_dev_set_name+0x10/0x10 [ 376.986710][T11446] ? lockdep_init_map_type+0x5c/0x280 [ 376.986736][T11446] ? __init_waitqueue_head+0xca/0x150 [ 376.986762][T11446] netdev_register_kobject+0xc5/0x3a0 [ 376.986788][T11446] register_netdevice+0x13dc/0x2270 [ 376.986814][T11446] ? __pfx_register_netdevice+0x10/0x10 [ 376.986844][T11446] ? __pfx_macsec_newlink+0x10/0x10 [ 376.986870][T11446] macsec_newlink+0x512/0x1d70 [ 376.986893][T11446] ? __pfx_macsec_handle_frame+0x10/0x10 [ 376.986918][T11446] ? __pfx_macsec_newlink+0x10/0x10 [ 376.986940][T11446] ? rcu_is_watching+0x12/0xc0 [ 376.986958][T11446] ? trace_kmalloc+0x2b/0xd0 [ 376.986976][T11446] ? __kvmalloc_node_noprof+0x296/0x600 [ 376.987000][T11446] ? alloc_netdev_mqs+0xfbe/0x1570 [ 376.987017][T11446] ? validate_linkmsg+0x57c/0xb60 [ 376.987036][T11446] ? __pfx_validate_linkmsg+0x10/0x10 [ 376.987053][T11446] ? alloc_netdev_mqs+0xe7e/0x1570 [ 376.987074][T11446] ? rtnl_create_link+0xa52/0xfa0 [ 376.987091][T11446] ? __pfx_macsec_newlink+0x10/0x10 [ 376.987114][T11446] rtnl_newlink+0xc42/0x2000 [ 376.987140][T11446] ? __pfx_rtnl_newlink+0x10/0x10 [ 376.987156][T11446] ? find_held_lock+0x2b/0x80 [ 376.987175][T11446] ? avc_has_perm_noaudit+0x117/0x3b0 [ 376.987196][T11446] ? avc_has_perm_noaudit+0x149/0x3b0 [ 376.987235][T11446] ? find_held_lock+0x2b/0x80 [ 376.987252][T11446] ? __pfx_rtnl_newlink+0x10/0x10 [ 376.987268][T11446] ? __pfx_rtnl_newlink+0x10/0x10 [ 376.987284][T11446] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 376.987302][T11446] ? __pfx_rtnl_newlink+0x10/0x10 [ 376.987320][T11446] rtnetlink_rcv_msg+0x95b/0xe90 [ 376.987340][T11446] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 376.987371][T11446] netlink_rcv_skb+0x16a/0x440 [ 376.987391][T11446] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 376.987411][T11446] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 376.987445][T11446] ? netlink_deliver_tap+0x1ae/0xd30 [ 376.987469][T11446] netlink_unicast+0x53a/0x7f0 [ 376.987490][T11446] ? __pfx_netlink_unicast+0x10/0x10 [ 376.987515][T11446] netlink_sendmsg+0x8d1/0xdd0 [ 376.987539][T11446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.987568][T11446] ____sys_sendmsg+0xa95/0xc70 [ 376.987591][T11446] ? copy_msghdr_from_user+0x10a/0x160 [ 376.987608][T11446] ? __pfx_____sys_sendmsg+0x10/0x10 [ 376.987642][T11446] ___sys_sendmsg+0x134/0x1d0 [ 376.987662][T11446] ? __pfx____sys_sendmsg+0x10/0x10 [ 376.987711][T11446] __sys_sendmsg+0x16d/0x220 [ 376.987729][T11446] ? __pfx___sys_sendmsg+0x10/0x10 [ 376.987753][T11446] ? rcu_is_watching+0x12/0xc0 [ 376.987779][T11446] do_syscall_64+0xcd/0x260 [ 376.987803][T11446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.987826][T11446] RIP: 0033:0x7f536258e969 [ 376.987841][T11446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.987857][T11446] RSP: 002b:00007f5363336038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.987875][T11446] RAX: ffffffffffffffda RBX: 00007f53627b5fa0 RCX: 00007f536258e969 [ 376.987886][T11446] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 376.987896][T11446] RBP: 00007f5363336090 R08: 0000000000000000 R09: 0000000000000000 [ 376.987907][T11446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 376.987916][T11446] R13: 0000000000000000 R14: 00007f53627b5fa0 R15: 00007fffe0693d48 [ 376.987941][T11446] [ 377.050032][ T5858] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 377.161742][ T5856] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 377.369140][ T5858] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.486424][ T9] usb 5-1: USB disconnect, device number 60 [ 377.496758][ T5856] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 377.508605][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.524314][ T5856] usb 2-1: Product: syz [ 377.529505][ T5856] usb 2-1: Manufacturer: syz [ 377.534524][ T5858] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 377.536187][ T5856] usb 2-1: SerialNumber: syz [ 377.559509][ T5858] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 377.581655][ T5856] usb 2-1: config 0 descriptor?? [ 377.596972][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 377.610306][ T5858] usb 3-1: SerialNumber: syz [ 378.514566][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.523595][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.110226][ T24] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 379.307697][ T5858] usb 3-1: 0:2 : does not exist [ 379.320141][ T5858] usb 3-1: unit 5: unexpected type 0x09 [ 379.353728][ T5895] usb 2-1: USB disconnect, device number 92 [ 379.390401][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 379.401111][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.816531][ T24] usb 5-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 379.854918][ T5858] usb 3-1: USB disconnect, device number 71 [ 379.862292][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.874825][ T24] usb 5-1: Product: syz [ 379.880219][ T24] usb 5-1: Manufacturer: syz [ 379.887495][ T24] usb 5-1: SerialNumber: syz [ 379.899522][ T24] usb 5-1: config 0 descriptor?? [ 379.909051][ T24] kobil_sct 5-1:0.0: required endpoints missing [ 380.179759][ T9] usb 5-1: USB disconnect, device number 61 [ 380.232183][T11500] FAULT_INJECTION: forcing a failure. [ 380.232183][T11500] name failslab, interval 1, probability 0, space 0, times 0 [ 380.247765][T11500] CPU: 0 UID: 0 PID: 11500 Comm: syz.2.1593 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 380.247791][T11500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 380.247801][T11500] Call Trace: [ 380.247807][T11500] [ 380.247814][T11500] dump_stack_lvl+0x16c/0x1f0 [ 380.247843][T11500] should_fail_ex+0x512/0x640 [ 380.247865][T11500] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 380.247895][T11500] should_failslab+0xc2/0x120 [ 380.247914][T11500] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 380.247941][T11500] ? security_file_alloc+0x34/0x2b0 [ 380.247969][T11500] security_file_alloc+0x34/0x2b0 [ 380.247994][T11500] init_file+0x93/0x4c0 [ 380.248013][T11500] alloc_empty_file+0x73/0x1e0 [ 380.248031][T11500] path_openat+0xe0/0x2d40 [ 380.248053][T11500] ? __x64_sys_open+0x153/0x1e0 [ 380.248076][T11500] ? do_syscall_64+0xcd/0x260 [ 380.248097][T11500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.248122][T11500] ? __pfx_path_openat+0x10/0x10 [ 380.248149][T11500] ? __lock_acquire+0xaa4/0x1ba0 [ 380.248177][T11500] do_filp_open+0x20b/0x470 [ 380.248202][T11500] ? __pfx_do_filp_open+0x10/0x10 [ 380.248245][T11500] ? _raw_spin_unlock+0x28/0x50 [ 380.248262][T11500] ? alloc_fd+0x471/0x7d0 [ 380.248295][T11500] do_sys_openat2+0x11b/0x1d0 [ 380.248314][T11500] ? __pfx_do_sys_openat2+0x10/0x10 [ 380.248336][T11500] ? __fget_files+0x20e/0x3c0 [ 380.248366][T11500] __x64_sys_open+0x153/0x1e0 [ 380.248385][T11500] ? __pfx___x64_sys_open+0x10/0x10 [ 380.248409][T11500] ? rcu_is_watching+0x12/0xc0 [ 380.248431][T11500] do_syscall_64+0xcd/0x260 [ 380.248454][T11500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.248470][T11500] RIP: 0033:0x7f5872b8e969 [ 380.248486][T11500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.248502][T11500] RSP: 002b:00007f58739ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 380.248520][T11500] RAX: ffffffffffffffda RBX: 00007f5872db5fa0 RCX: 00007f5872b8e969 [ 380.248531][T11500] RDX: 0000000000000129 RSI: 0000000000000300 RDI: 0000200000000080 [ 380.248542][T11500] RBP: 00007f58739ab090 R08: 0000000000000000 R09: 0000000000000000 [ 380.248551][T11500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.248561][T11500] R13: 0000000000000000 R14: 00007f5872db5fa0 R15: 00007fff0a0f6898 [ 380.248583][T11500] [ 380.484707][ C0] vkms_vblank_simulate: vblank timer overrun [ 380.620498][ T5895] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 380.813483][ T5895] usb 6-1: device descriptor read/64, error -71 [ 381.070331][ T5895] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 381.220362][ T5895] usb 6-1: device descriptor read/64, error -71 [ 381.340230][ T9] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 381.442584][ T5858] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 381.450915][ T5895] usb usb6-port1: attempt power cycle [ 381.514272][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 381.535568][ T9] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 381.554820][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.572511][ T9] usb 2-1: Product: syz [ 381.583066][ T9] usb 2-1: Manufacturer: syz [ 381.592837][ T9] usb 2-1: SerialNumber: syz [ 381.606728][ T9] usb 2-1: config 0 descriptor?? [ 381.611515][ T5858] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 381.624483][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.635917][ T5858] usb 3-1: config 0 descriptor?? [ 381.791724][ T5895] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 381.833590][ T5895] usb 6-1: device descriptor read/8, error -71 [ 381.846609][T11524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.855638][T11524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.070387][ T5895] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 382.100964][ T5895] usb 6-1: device descriptor read/8, error -71 [ 382.128424][ T5858] ath6kl: Failed to submit usb control message: -71 [ 382.150073][ T5858] ath6kl: unable to send the bmi data to the device: -71 [ 382.157171][ T5858] ath6kl: Unable to send get target info: -71 [ 382.189431][ T5858] ath6kl: Failed to init ath6kl core: -71 [ 382.203112][ T5858] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 382.220425][ T5895] usb usb6-port1: unable to enumerate USB device [ 382.235353][ T5858] usb 3-1: USB disconnect, device number 72 [ 382.677340][T11544] FAULT_INJECTION: forcing a failure. [ 382.677340][T11544] name failslab, interval 1, probability 0, space 0, times 0 [ 382.695235][T11544] CPU: 0 UID: 0 PID: 11544 Comm: syz.2.1608 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 382.695266][T11544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 382.695277][T11544] Call Trace: [ 382.695283][T11544] [ 382.695291][T11544] dump_stack_lvl+0x16c/0x1f0 [ 382.695321][T11544] should_fail_ex+0x512/0x640 [ 382.695348][T11544] should_failslab+0xc2/0x120 [ 382.695367][T11544] __kmalloc_cache_noprof+0x6a/0x3e0 [ 382.695393][T11544] ? sctp_add_bind_addr+0xae/0x3f0 [ 382.695417][T11544] sctp_add_bind_addr+0xae/0x3f0 [ 382.695438][T11544] sctp_copy_local_addr_list+0x39d/0x5a0 [ 382.695464][T11544] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 382.695489][T11544] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 382.695517][T11544] ? sctp_bind_addr_copy+0xe0/0x530 [ 382.695535][T11544] sctp_bind_addr_copy+0xe0/0x530 [ 382.695559][T11544] sctp_connect_new_asoc+0x1d7/0x790 [ 382.695578][T11544] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 382.695593][T11544] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 382.695625][T11544] __sctp_connect+0x3f3/0xc60 [ 382.695642][T11544] ? do_raw_spin_lock+0x12c/0x2b0 [ 382.695660][T11544] ? __pfx___sctp_connect+0x10/0x10 [ 382.695677][T11544] ? __pfx_sctp_inet_connect+0x10/0x10 [ 382.695694][T11544] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 382.695721][T11544] ? __pfx_sctp_inet_connect+0x10/0x10 [ 382.695734][T11544] sctp_inet_connect+0x15f/0x200 [ 382.695751][T11544] __sys_connect_file+0x13e/0x1a0 [ 382.695776][T11544] __sys_connect+0x14d/0x170 [ 382.695798][T11544] ? __pfx___sys_connect+0x10/0x10 [ 382.695829][T11544] ? rcu_is_watching+0x12/0xc0 [ 382.695853][T11544] __x64_sys_connect+0x72/0xb0 [ 382.695873][T11544] ? lockdep_hardirqs_on+0x7c/0x110 [ 382.695893][T11544] do_syscall_64+0xcd/0x260 [ 382.695917][T11544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.695935][T11544] RIP: 0033:0x7f5872b8e969 [ 382.695950][T11544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.695967][T11544] RSP: 002b:00007f58739ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 382.695984][T11544] RAX: ffffffffffffffda RBX: 00007f5872db5fa0 RCX: 00007f5872b8e969 [ 382.695995][T11544] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 382.696006][T11544] RBP: 00007f58739ab090 R08: 0000000000000000 R09: 0000000000000000 [ 382.696015][T11544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.696025][T11544] R13: 0000000000000000 R14: 00007f5872db5fa0 R15: 00007fff0a0f6898 [ 382.696049][T11544] [ 382.953906][ C0] vkms_vblank_simulate: vblank timer overrun [ 383.235809][T11548] block device autoloading is deprecated and will be removed. [ 383.247636][T11548] syz.2.1609: attempt to access beyond end of device [ 383.247636][T11548] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 383.870852][ T5856] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 383.991400][ T30] audit: type=1326 audit(1746631667.008:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.5.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536258e969 code=0x7ffc0000 [ 384.051025][ T5856] usb 4-1: Using ep0 maxpacket: 8 [ 384.062849][ T30] audit: type=1326 audit(1746631667.008:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.5.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536258e969 code=0x7ffc0000 [ 384.068251][ T5856] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.153979][ T5858] usb 2-1: USB disconnect, device number 93 [ 384.162581][ T5856] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 384.174209][ T30] audit: type=1326 audit(1746631667.028:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.5.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f536258e969 code=0x7ffc0000 [ 384.225630][ T5856] usb 4-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 384.245475][ T30] audit: type=1326 audit(1746631667.028:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.5.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536258e969 code=0x7ffc0000 [ 384.269012][ C0] vkms_vblank_simulate: vblank timer overrun [ 384.277163][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.289780][ T5856] usb 4-1: Product: syz [ 384.301228][ T5856] usb 4-1: Manufacturer: syz [ 384.310272][ T5856] usb 4-1: SerialNumber: syz [ 384.389290][ T30] audit: type=1326 audit(1746631667.028:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.5.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536258e969 code=0x7ffc0000 [ 384.425758][ T5856] usb 4-1: config 0 descriptor?? [ 384.500252][ T5895] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 384.565299][ T30] audit: type=1326 audit(1746631667.028:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.5.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f536258e969 code=0x7ffc0000 [ 384.588792][ C0] vkms_vblank_simulate: vblank timer overrun [ 384.640755][ T30] audit: type=1326 audit(1746631667.028:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.5.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536258e969 code=0x7ffc0000 [ 384.652347][ T5895] usb 3-1: Using ep0 maxpacket: 16 [ 384.670884][ T30] audit: type=1326 audit(1746631667.028:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.5.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536258e969 code=0x7ffc0000 [ 384.714400][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.730882][ T30] audit: type=1326 audit(1746631667.038:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.5.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f536258e969 code=0x7ffc0000 [ 384.737830][ T5817] usb 4-1: USB disconnect, device number 79 [ 384.754274][ C0] vkms_vblank_simulate: vblank timer overrun [ 384.755637][ T30] audit: type=1326 audit(1746631667.038:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.5.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536258e969 code=0x7ffc0000 [ 384.791013][ C0] vkms_vblank_simulate: vblank timer overrun [ 384.802454][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.831617][ T5895] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 384.854315][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.069663][ T5895] usb 3-1: config 0 descriptor?? [ 385.121382][T11583] netlink: 2048 bytes leftover after parsing attributes in process `syz.5.1619'. [ 385.130763][T11583] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1619'. [ 385.312678][T11592] ip6t_srh: unknown srh match flags 4000 [ 385.485122][ T5895] appleir 0003:05AC:8241.002D: unknown main item tag 0x0 [ 385.502029][ T5895] appleir 0003:05AC:8241.002D: unknown main item tag 0x0 [ 385.509115][ T5895] appleir 0003:05AC:8241.002D: unknown main item tag 0x0 [ 385.530457][ T5895] appleir 0003:05AC:8241.002D: unknown main item tag 0x0 [ 385.538239][ T5895] appleir 0003:05AC:8241.002D: No inputs registered, leaving [ 385.572510][ T5895] appleir 0003:05AC:8241.002D: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 385.692542][ T5895] usb 3-1: USB disconnect, device number 73 [ 386.000178][ T5856] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 386.181352][ T5856] usb 4-1: Using ep0 maxpacket: 16 [ 386.316233][ T5856] usb 4-1: config 0 has an invalid interface number: 145 but max is 0 [ 386.421198][ T5856] usb 4-1: config 0 has no interface number 0 [ 386.571487][ T5856] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 386.940339][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.953248][ T5856] usb 4-1: Product: syz [ 386.957456][ T5856] usb 4-1: Manufacturer: syz [ 386.971561][ T5856] usb 4-1: SerialNumber: syz [ 386.982485][ T5856] usb 4-1: config 0 descriptor?? [ 386.989147][ T5856] hub 4-1:0.145: bad descriptor, ignoring hub [ 387.018951][ T5856] hub 4-1:0.145: probe with driver hub failed with error -5 [ 387.111897][ T5856] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.145/input/input20 [ 387.230160][ T9] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 387.280219][ T5817] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 387.391360][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 387.412501][ T9] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 387.420235][ T5817] usb 6-1: device descriptor read/64, error -71 [ 387.432669][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.453932][ T9] usb 3-1: Product: syz [ 387.464193][ T9] usb 3-1: Manufacturer: syz [ 387.474232][ T9] usb 3-1: SerialNumber: syz [ 387.488046][ T9] usb 3-1: config 0 descriptor?? [ 387.660446][ T5817] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 387.800113][ T5817] usb 6-1: device descriptor read/64, error -71 [ 387.920363][ T5817] usb usb6-port1: attempt power cycle [ 388.080145][ T9] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 388.240936][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 388.249220][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.261944][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 388.271831][ T5817] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 388.275041][ T9] usb 2-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 388.290917][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.299132][ T9] usb 2-1: Product: syz [ 388.305162][ T5817] usb 6-1: device descriptor read/8, error -71 [ 388.305365][ T9] usb 2-1: Manufacturer: syz [ 388.317598][ T9] usb 2-1: SerialNumber: syz [ 388.326880][ T9] usb 2-1: config 0 descriptor?? [ 388.526975][T11625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1636'. [ 388.550017][ T5817] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 388.555196][ T5856] usb 2-1: USB disconnect, device number 94 [ 388.571275][ T9] usb 4-1: USB disconnect, device number 80 [ 388.591404][ T5817] usb 6-1: device descriptor read/8, error -71 [ 388.711182][ T5817] usb usb6-port1: unable to enumerate USB device [ 388.940155][ T9] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 389.102481][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 389.115614][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.198195][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.023398][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 390.064959][ T5903] usb 3-1: USB disconnect, device number 74 [ 390.075612][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.161254][ T9] usb 4-1: config 0 descriptor?? [ 390.214629][T11640] FAULT_INJECTION: forcing a failure. [ 390.214629][T11640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.258750][T11640] CPU: 0 UID: 0 PID: 11640 Comm: syz.2.1641 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 390.258779][T11640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 390.258789][T11640] Call Trace: [ 390.258796][T11640] [ 390.258803][T11640] dump_stack_lvl+0x16c/0x1f0 [ 390.258831][T11640] should_fail_ex+0x512/0x640 [ 390.258861][T11640] _copy_from_iter+0x2a4/0x15b0 [ 390.258893][T11640] ? _copy_from_iter+0x161/0x15b0 [ 390.258915][T11640] ? __pfx__copy_from_iter+0x10/0x10 [ 390.258940][T11640] ? __pfx__copy_from_iter+0x10/0x10 [ 390.258963][T11640] ? _copy_from_iter+0x161/0x15b0 [ 390.258989][T11640] copy_page_from_iter+0xa5/0x120 [ 390.259014][T11640] skb_copy_datagram_from_iter+0x2a0/0x740 [ 390.259050][T11640] packet_sendmsg+0x2232/0x56f0 [ 390.259088][T11640] ? sock_has_perm+0x259/0x2f0 [ 390.259107][T11640] ? __pfx_sock_has_perm+0x10/0x10 [ 390.259129][T11640] ? __pfx_packet_sendmsg+0x10/0x10 [ 390.259155][T11640] ? __might_fault+0x13b/0x190 [ 390.259180][T11640] ____sys_sendmsg+0xa95/0xc70 [ 390.259203][T11640] ? copy_msghdr_from_user+0x10a/0x160 [ 390.259219][T11640] ? __pfx_____sys_sendmsg+0x10/0x10 [ 390.259252][T11640] ___sys_sendmsg+0x134/0x1d0 [ 390.259271][T11640] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.259317][T11640] __sys_sendmsg+0x16d/0x220 [ 390.259334][T11640] ? __pfx___sys_sendmsg+0x10/0x10 [ 390.259358][T11640] ? rcu_is_watching+0x12/0xc0 [ 390.259386][T11640] do_syscall_64+0xcd/0x260 [ 390.259411][T11640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.259428][T11640] RIP: 0033:0x7f5872b8e969 [ 390.259442][T11640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.259458][T11640] RSP: 002b:00007f58739ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.259476][T11640] RAX: ffffffffffffffda RBX: 00007f5872db5fa0 RCX: 00007f5872b8e969 [ 390.259487][T11640] RDX: 0000000020040851 RSI: 0000200000002ac0 RDI: 0000000000000003 [ 390.259497][T11640] RBP: 00007f58739ab090 R08: 0000000000000000 R09: 0000000000000000 [ 390.259506][T11640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 390.259516][T11640] R13: 0000000000000000 R14: 00007f5872db5fa0 R15: 00007fff0a0f6898 [ 390.259539][T11640] [ 390.320047][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 390.320064][ T30] audit: type=1326 audit(1746631673.318:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11636 comm="syz.5.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536258e969 code=0x7ffc0000 [ 390.597550][ T30] audit: type=1326 audit(1746631673.318:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11636 comm="syz.5.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536258e969 code=0x7ffc0000 [ 390.608166][ T9] appleir 0003:05AC:8241.002E: unknown main item tag 0x0 [ 390.650737][ T9] appleir 0003:05AC:8241.002E: unknown main item tag 0x0 [ 390.657853][ T9] appleir 0003:05AC:8241.002E: unknown main item tag 0x0 [ 390.687275][ T9] appleir 0003:05AC:8241.002E: unknown main item tag 0x0 [ 390.697964][ T30] audit: type=1326 audit(1746631673.318:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11636 comm="syz.5.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f536258e969 code=0x7ffc0000 [ 390.708834][ T9] appleir 0003:05AC:8241.002E: No inputs registered, leaving [ 390.766485][ T9] appleir 0003:05AC:8241.002E: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 390.800318][ T30] audit: type=1326 audit(1746631673.318:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11636 comm="syz.5.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536258e969 code=0x7ffc0000 [ 390.827878][ T30] audit: type=1326 audit(1746631673.318:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11636 comm="syz.5.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536258e969 code=0x7ffc0000 [ 390.844335][ T9] usb 4-1: USB disconnect, device number 81 [ 390.853885][ T30] audit: type=1326 audit(1746631673.318:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11636 comm="syz.5.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f536258e969 code=0x7ffc0000 [ 390.887525][ T30] audit: type=1326 audit(1746631673.318:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11636 comm="syz.5.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536258e969 code=0x7ffc0000 [ 390.913216][ T5858] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 390.920943][ T5817] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 390.942762][ T30] audit: type=1326 audit(1746631673.318:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11636 comm="syz.5.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536258e969 code=0x7ffc0000 [ 390.967876][ T30] audit: type=1326 audit(1746631673.318:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11636 comm="syz.5.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f536258e969 code=0x7ffc0000 [ 391.001243][ T30] audit: type=1326 audit(1746631673.318:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11636 comm="syz.5.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536258e969 code=0x7ffc0000 [ 391.091913][ T5817] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 391.103563][ T5858] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 391.115065][ T5817] usb 2-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 391.135296][ T5858] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 391.157070][ T5817] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 391.166393][ T5858] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 391.186930][ T5817] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 391.201034][ T5858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.219011][ T5858] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 391.227113][ T5817] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 391.242844][ T5858] usb 5-1: invalid MIDI out EP 0 [ 391.248607][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 391.264006][ T5817] usb 2-1: Product: syz [ 391.268223][ T5817] usb 2-1: Manufacturer: syz [ 391.289780][ T5817] cdc_wdm 2-1:1.0: skipping garbage [ 391.304513][ T5858] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 391.313813][ T5817] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 391.330023][ T82] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 391.443307][ T5858] usb 5-1: USB disconnect, device number 62 [ 391.480284][ T82] usb 3-1: Using ep0 maxpacket: 8 [ 391.488481][ T82] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.520010][T11647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1646'. [ 391.549696][ T82] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 391.572476][ T82] usb 3-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 391.582381][ T82] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.594283][ T82] usb 3-1: Product: syz [ 391.598791][ T82] usb 3-1: Manufacturer: syz [ 391.610776][ T82] usb 3-1: SerialNumber: syz [ 391.612080][T11665] random: crng reseeded on system resumption [ 391.617517][ T82] usb 3-1: config 0 descriptor?? [ 391.878813][ T9] usb 3-1: USB disconnect, device number 75 [ 391.970209][ T5903] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 392.175790][ T5903] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 392.186714][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.196306][ T5903] usb 4-1: Product: syz [ 392.202095][ T5903] usb 4-1: Manufacturer: syz [ 392.207901][ T5903] usb 4-1: SerialNumber: syz [ 392.216379][ T5903] usb 4-1: config 0 descriptor?? [ 392.225643][ T5903] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 392.255690][ T5902] usb 2-1: USB disconnect, device number 95 [ 392.481705][ T5856] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 392.669684][ T5903] gspca_sq905c: sq905c_read: usb_control_msg failed (-32) [ 392.681531][ T5856] usb 5-1: device descriptor read/64, error -71 [ 392.763752][ T5903] sq905c 4-1:0.0: Reading version command failed [ 392.978980][ T5903] sq905c 4-1:0.0: probe with driver sq905c failed with error -32 [ 393.304964][ T5856] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 393.324649][ T5903] usb 4-1: USB disconnect, device number 82 [ 393.460489][ T5856] usb 5-1: device descriptor read/64, error -71 [ 393.571736][ T5856] usb usb5-port1: attempt power cycle [ 393.875396][T11691] netlink: 'syz.1.1661': attribute type 10 has an invalid length. [ 393.924290][T11691] team0: Device ipvlan1 failed to register rx_handler [ 393.932491][ T5856] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 393.956999][T11692] syz.3.1660 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 394.006227][ T5856] usb 5-1: device descriptor read/8, error -71 [ 394.145591][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 394.158510][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 394.167113][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 394.218160][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 394.470484][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 394.497765][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 394.516251][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 394.520920][ T5903] kernel write not supported for file /media1 (pid: 5903 comm: kworker/0:8) [ 394.533543][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 394.533593][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 394.533612][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 394.533630][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 394.533648][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 394.533667][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 394.533685][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 394.533702][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 394.533720][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 394.533738][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 394.533756][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 394.533773][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 394.533790][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 394.533807][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 394.533825][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 394.533843][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 394.543771][ T5856] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 394.557321][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 394.652271][ T5856] usb 5-1: device descriptor read/8, error -71 [ 394.669109][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 394.766519][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 394.786236][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 394.794285][ T5817] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 394.821507][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 394.822616][ T5856] usb usb5-port1: unable to enumerate USB device [ 394.842248][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 394.861536][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 394.869350][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 394.901746][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 394.925546][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 394.941503][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 394.950008][ T5817] usb 2-1: Using ep0 maxpacket: 8 [ 394.957735][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 394.976386][ T5817] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.997259][ T5817] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 395.008378][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 395.022173][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 395.042491][ T5817] usb 2-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 395.052157][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.062304][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 395.080405][ T5817] usb 2-1: Product: syz [ 395.084873][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 395.094658][ T5817] usb 2-1: Manufacturer: syz [ 395.109797][ T5817] usb 2-1: SerialNumber: syz [ 395.116393][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 395.126930][ T5817] usb 2-1: config 0 descriptor?? [ 395.144191][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 395.171748][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 395.189759][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 395.201700][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 395.219827][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 395.236483][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 395.263055][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 395.370711][ T5856] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 395.415383][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 395.415400][ T30] audit: type=1326 audit(1746631678.428:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11712 comm="syz.4.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd438e969 code=0x7ffc0000 [ 395.447257][ T5817] usb 2-1: USB disconnect, device number 96 [ 395.456791][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 395.477064][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 395.495676][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 395.506795][ T30] audit: type=1326 audit(1746631678.428:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11712 comm="syz.4.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd438e969 code=0x7ffc0000 [ 395.544322][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 395.553609][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 395.562125][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 395.570060][ T30] audit: type=1326 audit(1746631678.428:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11712 comm="syz.4.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9fd438e969 code=0x7ffc0000 [ 395.579128][ T5856] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 395.604987][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 395.627542][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 395.646203][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 395.657275][ T30] audit: type=1326 audit(1746631678.428:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11712 comm="syz.4.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd438e969 code=0x7ffc0000 [ 395.679973][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.689179][ T5856] usb 3-1: Product: syz [ 395.691844][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 395.699961][ T5856] usb 3-1: Manufacturer: syz [ 395.705653][ T5856] usb 3-1: SerialNumber: syz [ 395.711644][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 395.729715][ T30] audit: type=1326 audit(1746631678.428:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11712 comm="syz.4.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9fd438e969 code=0x7ffc0000 [ 395.755446][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 395.763596][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 395.771858][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 395.779625][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 395.788130][ T30] audit: type=1326 audit(1746631678.428:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11712 comm="syz.4.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd438e969 code=0x7ffc0000 [ 395.790990][ T5856] usb 3-1: config 0 descriptor?? [ 395.823396][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 395.842283][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 395.860082][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 395.868084][ T30] audit: type=1326 audit(1746631678.428:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11712 comm="syz.4.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f9fd438e969 code=0x7ffc0000 [ 395.874022][ T5856] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 395.898633][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 395.915037][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 396.064531][ T30] audit: type=1326 audit(1746631678.428:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11712 comm="syz.4.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd438e969 code=0x7ffc0000 [ 396.088819][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 396.096942][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 396.105609][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 396.113913][ T30] audit: type=1326 audit(1746631678.428:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11712 comm="syz.4.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f9fd438e969 code=0x7ffc0000 [ 396.137495][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 396.153637][ T5858] hid-generic 0005:000A:FFFF825B.002F: unknown main item tag 0x0 [ 396.164062][T11724] ================================================================== [ 396.172165][T11724] BUG: KASAN: slab-use-after-free in rose_get_neigh+0x549/0x640 [ 396.179825][T11724] Read of size 1 at addr ffff888023750430 by task syz.1.1675/11724 [ 396.187730][T11724] [ 396.190063][T11724] CPU: 1 UID: 0 PID: 11724 Comm: syz.1.1675 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 396.190094][T11724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 396.190106][T11724] Call Trace: [ 396.190114][T11724] [ 396.190122][T11724] dump_stack_lvl+0x116/0x1f0 [ 396.190149][T11724] print_report+0xc3/0x670 [ 396.190169][T11724] ? __virt_addr_valid+0x5e/0x590 [ 396.190194][T11724] ? __phys_addr+0xc6/0x150 [ 396.190218][T11724] ? rose_get_neigh+0x549/0x640 [ 396.190243][T11724] kasan_report+0xe0/0x110 [ 396.190261][T11724] ? rose_get_neigh+0x549/0x640 [ 396.190285][T11724] rose_get_neigh+0x549/0x640 [ 396.190310][T11724] rose_connect+0x2d4/0x1540 [ 396.190329][T11724] ? __pfx_rose_connect+0x10/0x10 [ 396.190345][T11724] ? selinux_netlbl_socket_connect+0x30/0x40 [ 396.190370][T11724] ? rcu_is_watching+0x12/0xc0 [ 396.190390][T11724] ? __local_bh_enable_ip+0xa4/0x120 [ 396.190410][T11724] ? lockdep_hardirqs_on+0x7c/0x110 [ 396.190434][T11724] ? selinux_netlbl_socket_connect+0x30/0x40 [ 396.190455][T11724] ? __local_bh_enable_ip+0xa4/0x120 [ 396.190476][T11724] ? selinux_netlbl_socket_connect+0x30/0x40 [ 396.190499][T11724] ? selinux_socket_connect+0x6b/0x80 [ 396.190522][T11724] ? __pfx_rose_connect+0x10/0x10 [ 396.190537][T11724] __sys_connect_file+0x13e/0x1a0 [ 396.190566][T11724] __sys_connect+0x14d/0x170 [ 396.190590][T11724] ? __pfx___sys_connect+0x10/0x10 [ 396.190619][T11724] ? rcu_is_watching+0x12/0xc0 [ 396.190641][T11724] __x64_sys_connect+0x72/0xb0 [ 396.190665][T11724] ? lockdep_hardirqs_on+0x7c/0x110 [ 396.190685][T11724] do_syscall_64+0xcd/0x260 [ 396.190710][T11724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.190729][T11724] RIP: 0033:0x7f4d91b8e969 [ 396.190744][T11724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.190762][T11724] RSP: 002b:00007f4d92a2b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 396.190779][T11724] RAX: ffffffffffffffda RBX: 00007f4d91db5fa0 RCX: 00007f4d91b8e969 [ 396.190791][T11724] RDX: 0000000000000040 RSI: 0000200000000040 RDI: 0000000000000004 [ 396.190803][T11724] RBP: 00007f4d91c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 396.190814][T11724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.190824][T11724] R13: 0000000000000000 R14: 00007f4d91db5fa0 R15: 00007fff85327d18 [ 396.190842][T11724] [ 396.190859][T11724] [ 396.224591][ T30] audit: type=1326 audit(1746631678.428:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11712 comm="syz.4.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd438e969 code=0x7ffc0000 [ 396.228218][T11724] Allocated by task 13: [ 396.228231][T11724] kasan_save_stack+0x33/0x60 [ 396.312564][ T5856] gspca_sq905c: sq905c_read: usb_control_msg failed (-32) [ 396.314807][T11724] kasan_save_track+0x14/0x30 [ 396.314839][T11724] __kasan_kmalloc+0xaa/0xb0 [ 396.314864][T11724] batadv_forw_packet_alloc+0x3ad/0x4e0 [ 396.320838][ T5856] sq905c 3-1:0.0: Reading version command failed [ 396.324429][T11724] batadv_iv_ogm_aggregate_new+0x13c/0x4c0 [ 396.324454][T11724] batadv_iv_ogm_schedule_buff+0xe77/0x14e0 [ 396.329655][ T5856] sq905c 3-1:0.0: probe with driver sq905c failed with error -32 [ 396.334273][T11724] batadv_iv_send_outstanding_bat_ogm_packet+0x329/0x920 [ 396.334294][T11724] process_one_work+0x9cc/0x1b70 [ 396.334312][T11724] worker_thread+0x6c8/0xf10 [ 396.334328][T11724] kthread+0x3c2/0x780 [ 396.334342][T11724] ret_from_fork+0x45/0x80 [ 396.334357][T11724] ret_from_fork_asm+0x1a/0x30 [ 396.351138][ T5856] usb 3-1: USB disconnect, device number 76 [ 396.354625][T11724] [ 396.354636][T11724] Freed by task 1161: [ 396.354646][T11724] kasan_save_stack+0x33/0x60 [ 396.354676][T11724] kasan_save_track+0x14/0x30 [ 396.563108][T11724] kasan_save_free_info+0x3b/0x60 [ 396.568129][T11724] __kasan_slab_free+0x51/0x70 [ 396.572876][T11724] kfree+0x2b6/0x4d0 [ 396.576779][T11724] batadv_iv_send_outstanding_bat_ogm_packet+0x26d/0x920 [ 396.583791][T11724] process_one_work+0x9cc/0x1b70 [ 396.588713][T11724] worker_thread+0x6c8/0xf10 [ 396.593283][T11724] kthread+0x3c2/0x780 [ 396.597335][T11724] ret_from_fork+0x45/0x80 [ 396.601733][T11724] ret_from_fork_asm+0x1a/0x30 [ 396.606484][T11724] [ 396.608791][T11724] Last potentially related work creation: [ 396.614486][T11724] kasan_save_stack+0x33/0x60 [ 396.619153][T11724] kasan_record_aux_stack+0xb8/0xd0 [ 396.624338][T11724] insert_work+0x36/0x230 [ 396.628650][T11724] __queue_work+0x3f8/0x10f0 [ 396.633229][T11724] call_timer_fn+0x197/0x620 [ 396.637806][T11724] __run_timers+0x569/0x960 [ 396.642300][T11724] run_timer_base+0x114/0x190 [ 396.646964][T11724] run_timer_softirq+0x1a/0x40 [ 396.651720][T11724] handle_softirqs+0x216/0x8e0 [ 396.656469][T11724] __irq_exit_rcu+0x109/0x170 [ 396.661129][T11724] irq_exit_rcu+0x9/0x30 [ 396.665354][T11724] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 396.670976][T11724] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 396.676941][T11724] [ 396.679248][T11724] The buggy address belongs to the object at ffff888023750400 [ 396.679248][T11724] which belongs to the cache kmalloc-512 of size 512 [ 396.693283][T11724] The buggy address is located 48 bytes inside of [ 396.693283][T11724] freed 512-byte region [ffff888023750400, ffff888023750600) [ 396.706974][T11724] [ 396.709277][T11724] The buggy address belongs to the physical page: [ 396.715666][T11724] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888023750400 pfn:0x23750 [ 396.725711][T11724] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 396.734192][T11724] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 396.742675][T11724] page_type: f5(slab) [ 396.746642][T11724] raw: 00fff00000000240 ffff88801b441c80 ffffea0001f59110 ffffea0000d4fa10 [ 396.755221][T11724] raw: ffff888023750400 000000000010000f 00000000f5000000 0000000000000000 [ 396.763788][T11724] head: 00fff00000000240 ffff88801b441c80 ffffea0001f59110 ffffea0000d4fa10 [ 396.772441][T11724] head: ffff888023750400 000000000010000f 00000000f5000000 0000000000000000 [ 396.781093][T11724] head: 00fff00000000002 ffffea00008dd401 00000000ffffffff 00000000ffffffff [ 396.789762][T11724] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 396.798439][T11724] page dumped because: kasan: bad access detected [ 396.804838][T11724] page_owner tracks the page as allocated [ 396.810529][T11724] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5879, tgid 5879 (kworker/u8:4), ts 59886224381, free_ts 59852423954 [ 396.831878][T11724] post_alloc_hook+0x181/0x1b0 [ 396.836634][T11724] get_page_from_freelist+0x135c/0x3920 [ 396.842169][T11724] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 396.848051][T11724] alloc_pages_mpol+0x1fb/0x550 [ 396.852888][T11724] new_slab+0x244/0x340 [ 396.857060][T11724] ___slab_alloc+0xd9c/0x1940 [ 396.861738][T11724] __slab_alloc.constprop.0+0x56/0xb0 [ 396.867100][T11724] __kmalloc_cache_noprof+0xfb/0x3e0 [ 396.872377][T11724] alloc_bprm+0x86/0xdd0 [ 396.876607][T11724] kernel_execve+0xb0/0x3b0 [ 396.881102][T11724] call_usermodehelper_exec_async+0x255/0x4c0 [ 396.887154][T11724] ret_from_fork+0x45/0x80 [ 396.891552][T11724] ret_from_fork_asm+0x1a/0x30 [ 396.896306][T11724] page last free pid 5856 tgid 5856 stack trace: [ 396.902611][T11724] __free_frozen_pages+0x69d/0xff0 [ 396.907710][T11724] __put_partials+0x16d/0x1c0 [ 396.912376][T11724] qlist_free_all+0x4e/0x120 [ 396.916957][T11724] kasan_quarantine_reduce+0x195/0x1e0 [ 396.922403][T11724] __kasan_slab_alloc+0x69/0x90 [ 396.927234][T11724] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 396.933118][T11724] __alloc_skb+0x2b2/0x380 [ 396.937514][T11724] mld_newpack.isra.0+0x18e/0xa20 [ 396.942524][T11724] add_grhead+0x299/0x340 [ 396.946838][T11724] add_grec+0x112a/0x1680 [ 396.951154][T11724] mld_ifc_work+0x41f/0xca0 [ 396.955641][T11724] process_one_work+0x9cc/0x1b70 [ 396.960561][T11724] worker_thread+0x6c8/0xf10 [ 396.965131][T11724] kthread+0x3c2/0x780 [ 396.969179][T11724] ret_from_fork+0x45/0x80 [ 396.973581][T11724] ret_from_fork_asm+0x1a/0x30 [ 396.978337][T11724] [ 396.980644][T11724] Memory state around the buggy address: [ 396.986283][T11724] ffff888023750300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 396.994335][T11724] ffff888023750380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 397.002377][T11724] >ffff888023750400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 397.010416][T11724] ^ [ 397.016024][T11724] ffff888023750480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 397.024069][T11724] ffff888023750500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 397.032111][T11724] ================================================================== [ 397.040236][T11724] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 397.047439][T11724] CPU: 1 UID: 0 PID: 11724 Comm: syz.1.1675 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 397.059523][T11724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 397.069594][T11724] Call Trace: [ 397.072882][T11724] [ 397.075822][T11724] dump_stack_lvl+0x3d/0x1f0 [ 397.080432][T11724] panic+0x71c/0x800 [ 397.084350][T11724] ? __pfx_panic+0x10/0x10 [ 397.088789][T11724] ? irqentry_exit+0x3b/0x90 [ 397.093402][T11724] ? lockdep_hardirqs_on+0x7c/0x110 [ 397.098621][T11724] ? rose_get_neigh+0x549/0x640 [ 397.103496][T11724] ? rose_get_neigh+0x549/0x640 [ 397.108457][T11724] check_panic_on_warn+0xab/0xb0 [ 397.113425][T11724] end_report+0x107/0x170 [ 397.117767][T11724] kasan_report+0xee/0x110 [ 397.122201][T11724] ? rose_get_neigh+0x549/0x640 [ 397.127074][T11724] rose_get_neigh+0x549/0x640 [ 397.131774][T11724] rose_connect+0x2d4/0x1540 [ 397.136383][T11724] ? __pfx_rose_connect+0x10/0x10 [ 397.141420][T11724] ? selinux_netlbl_socket_connect+0x30/0x40 [ 397.147416][T11724] ? rcu_is_watching+0x12/0xc0 [ 397.152201][T11724] ? __local_bh_enable_ip+0xa4/0x120 [ 397.157512][T11724] ? lockdep_hardirqs_on+0x7c/0x110 [ 397.162729][T11724] ? selinux_netlbl_socket_connect+0x30/0x40 [ 397.168732][T11724] ? __local_bh_enable_ip+0xa4/0x120 [ 397.174039][T11724] ? selinux_netlbl_socket_connect+0x30/0x40 [ 397.180049][T11724] ? selinux_socket_connect+0x6b/0x80 [ 397.185444][T11724] ? __pfx_rose_connect+0x10/0x10 [ 397.190477][T11724] __sys_connect_file+0x13e/0x1a0 [ 397.195527][T11724] __sys_connect+0x14d/0x170 [ 397.200141][T11724] ? __pfx___sys_connect+0x10/0x10 [ 397.205283][T11724] ? rcu_is_watching+0x12/0xc0 [ 397.210064][T11724] __x64_sys_connect+0x72/0xb0 [ 397.214845][T11724] ? lockdep_hardirqs_on+0x7c/0x110 [ 397.220060][T11724] do_syscall_64+0xcd/0x260 [ 397.224580][T11724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.230515][T11724] RIP: 0033:0x7f4d91b8e969 [ 397.234945][T11724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.254570][T11724] RSP: 002b:00007f4d92a2b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 397.262999][T11724] RAX: ffffffffffffffda RBX: 00007f4d91db5fa0 RCX: 00007f4d91b8e969 [ 397.270981][T11724] RDX: 0000000000000040 RSI: 0000200000000040 RDI: 0000000000000004 [ 397.278971][T11724] RBP: 00007f4d91c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 397.286959][T11724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.294943][T11724] R13: 0000000000000000 R14: 00007f4d91db5fa0 R15: 00007fff85327d18 [ 397.302929][T11724] [ 397.306152][T11724] Kernel Offset: disabled [ 397.310459][T11724] Rebooting in 86400 seconds..