last executing test programs: 14.499913461s ago: executing program 2 (id=2565): mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) fchmodat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x22) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)="91eb072927fe9fd1ae773e851ee81e32214626a59abecc3169b86e9c8c0d4caefb49621fa144c428975868634899a3b7d31d8e9b0e5e69b5e8225bb31b1c4fc2084550b8d18672b1cbc66a71009f3fb94f1559736b50e78a9af151dbad5198e979684e84bc295ebb5b02ea9c21b0ab9fa78c55e3c17f2829e9fd7261954b8d3980f80dcd5b71640f7f3fdccd659a3588618893f9e2e62002eb94249c60da8d6b178a", 0xa2}, {0x0}], 0x2, &(0x7f0000001780)}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x4, 0x100, 0x800}, {0x4, 0x8001, 0x3000}], 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) semop(0x0, &(0x7f00000000c0)=[{}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x10) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol=interleave=']) semget$private(0x0, 0x0, 0x2) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001180)={{{@in=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@private1}}, 0x0) ioctl$SIOCAX25GETUID(r5, 0x89e0, &(0x7f00000013c0)={0x3, @bcast, r6}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) 13.132208766s ago: executing program 2 (id=2571): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffe0}}}, 0x24}}, 0x4800) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x8000, 0x40000}, &(0x7f0000002000), &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x38011, r3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) sendfile(r4, r3, 0x0, 0x7ffff000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a000100"], 0x3}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) shmctl$IPC_STAT(0x0, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r6, 0x0, 0x4ffe6, 0x0) 9.956769299s ago: executing program 2 (id=2580): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0xd}]}}}]}, 0x50}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000959800001801000020a0702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000280)='jbd2_write_superblock\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020200091a000000000000000000000005000600000000000a0000000000000020010000000000000000000000000001000000000000000002000100000000000000000b0000230005000500000000000a0000000000000020010000000000000000000000000001010001000000000002001000000004d6000004d40000000001001400030000000800120003000000b36b6e00003c980106003200021f000005000000000000000a010102000000000000000000000000fe8000000000000000000000000000aa010016"], 0xd0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='rtc_alarm_irq_enable\x00', r5}, 0x18) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_AIE_ON(r7, 0x7001) read$FUSE(0xffffffffffffffff, &(0x7f00000032c0)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r1, &(0x7f0000005300)={0x2020}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, r8, {0x6578}}, 0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmmsg$inet6(r4, &(0x7f0000003240)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000300)="76ea60699f62b250", 0x8}], 0x1, &(0x7f00000005c0)}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000003c0)="e8c1", 0x2}], 0x1}}], 0x2, 0x4) 9.15179017s ago: executing program 3 (id=2584): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x18, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x17fd147c801ae9ab, 0x0) sendmsg(r0, &(0x7f0000000780)={&(0x7f0000000500)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)="40e43b7402f374af77b5ddb3d023920d6976f7a3d4fa39c72a0bf5981203a236380ce68aabd6aa6e6db9c78c2965e10876b305cc08", 0x35}, {&(0x7f00000005c0)="7333b4aaa81d7808c9aa1af9306eb8884e0c31d9fb7604ba79fe", 0x1a}], 0x2, &(0x7f0000000640)=[{0x70, 0x101, 0x4, "a6e98ab983753efa6f73756134666812aa9ec75d7c57ef6aa5be37d3664aae85775aa8584a3bd00a9898ac84d399378ed78d4676fe388a5bf056a28476b0ec151e07ad66db8e17c251e832df3c3a7b5c489754ed3ba562be5f236c9cb8"}, {0xb0, 0x1, 0x40, "9802adfe66195ce7424ef61ffc8d6ea68f183384cf7a6d1ff4315901674c37b96fd409e236bb472ee935df1b7bb82b46b408c883588883249a1e702cde6b60b69c864dece60c8d45125dd6d0b2e28d0eb1f6ac1b9991dc0aef1dc2da77de1547feca632c96230863159001d73c21a2914a2f9bee08b7d66195e3a688e0e172b592aba5ba4fae7ae45398f24273d63fc3617262a29ae7af66333397"}], 0x120}, 0x4004) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x600080}, 0x18) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) r2 = epoll_create1(0x0) r3 = socket$unix(0x1, 0x1, 0x0) close(r3) socket(0x23, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0xa002a008}) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=""/126, 0x7e) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x1, 0x3}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x3, 0x1, 0x0, 0x0, 0x4, 0x0, {0x2}}) io_uring_enter(r5, 0x2df0, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x8010}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000400)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 8.856092046s ago: executing program 3 (id=2587): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) semget$private(0x0, 0x6, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000046d100180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000008208500000072000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 7.796234536s ago: executing program 1 (id=2589): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) semget$private(0x0, 0x6, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000046d100180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000008208500000072000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 7.711004558s ago: executing program 2 (id=2590): r0 = socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001080)=0x7) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) semop(0x0, 0x0, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000480)={'fscrypt:', @desc4}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00", 0x2}, 0x48, 0xfffffffffffffffe) keyctl$invalidate(0x15, r3) accept4(r0, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100fdffffff000000000100000008000100", @ANYRES32=0x0, @ANYBLOB="04000600"], 0x20}, 0x1, 0xf000, 0x0, 0x20000000}, 0x20040) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="180100002d"], 0x118}], 0x1}, 0x0) 7.296815924s ago: executing program 1 (id=2591): syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@bar={{}, {0x1}, @broadcast, @device_b, @multi={{0x0, 0x1, 0x1, 0x0, 0x2}, [{0x0, 0x0, {0x8}, "b1e245c9ca832e74"}, {0x0, 0x6, {0x2, 0x1}, "db35f94d556884da"}]}}, 0x2a) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@ctrl_frame=@cf_end={{}, {0x8}, @device_a, @random="378b7ba66a39"}, 0x10) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000002240)) ioctl$NBD_DISCONNECT(r0, 0xab08) connect$inet6(r0, &(0x7f0000002340)={0xa, 0x4e21, 0x6a2, @local, 0xffffffff}, 0x1c) syz_open_dev$video4linux(&(0x7f00000023c0), 0x4, 0x410000) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_emit_ethernet(0x1e, &(0x7f00000027c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast, @void, {@can={0xc, {{0x2, 0x0, 0x1}, 0x1, 0x3, 0x0, 0x0, "f6ce3c07191a522e"}}}}, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002840), 0x2000, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000002980), 0x20000, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000072c0)=[{{&(0x7f00000029c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002b40)=[{0x0}], 0x1}, 0x81}, {{0x0, 0x0, &(0x7f0000002ec0)}, 0x1e}, {{0x0, 0x0, &(0x7f0000004400)}, 0x69}, {{&(0x7f00000046c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000049c0)=[{0x0}, {&(0x7f00000047c0)=""/73, 0x49}], 0x2, &(0x7f0000004a00)=""/90, 0x5a}, 0xfffffffa}, {{0x0, 0x0, 0x0}, 0x8}], 0x5, 0x22, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000007500)) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, &(0x7f0000007580)) 6.371984993s ago: executing program 1 (id=2593): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x400, 0x108, 0x210, 0x108, 0x318, 0x318, 0x318, 0x7fffffe, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 0x0, 0x8, {@mac=@link_local}, {@mac=@local, {[0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netpci0\x00', 'pimreg0\x00'}, 0xc0, 0x108, 0x0, {0x3ed}}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00', {0xc574}}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x450) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0xfffe, 0x4, @remote, 0x9}, 0x1c) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r0]) setreuid(0x0, 0xee01) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x401, 0x100, 0x400008, 0x0, 0x0, 0x2}}, 0x50) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 6.352456825s ago: executing program 2 (id=2594): r0 = memfd_create(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @sliced={0x9, [0xd2, 0x7, 0xe7, 0xe, 0x3, 0x8, 0x1, 0x8, 0x9, 0x2, 0xfff5, 0x3, 0x1000, 0x8, 0xd, 0x0, 0x8186, 0x3, 0x403, 0xfff, 0x2, 0x3, 0x9, 0x8bb8, 0x1, 0xfff, 0x8, 0x1, 0x8cc4, 0x7fff, 0x208, 0x6, 0x5, 0x51, 0x3, 0x4, 0x4, 0x9, 0x401, 0x5, 0x9, 0x3, 0x5, 0x2, 0xfff8, 0x9, 0x2, 0x1]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x1000, 0x0) io_uring_enter(0xffffffffffffffff, 0x8aa, 0x0, 0x0, 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0xc0044dff, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x6, {0x1, 0x8000000000000001}, 0x54}, 0x1) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000040)='erspan0\x00') write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0'}, 0x2) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002080), 0x0, 0x0) preadv2(r4, 0x0, 0x0, 0x0, 0x0, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000002340)={0x50, 0x0, r5, {0x7, 0x29, 0x7fffffff, 0x1000018, 0x7, 0x6, 0xbc7, 0xffff, 0x0, 0x0, 0x10, 0x2}}, 0x50) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r7, @ANYBLOB="000080000000000018003480"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) mprotect(&(0x7f0000514000/0x1000)=nil, 0x1000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 5.825484626s ago: executing program 3 (id=2597): r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}]}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) symlink(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='./file1\x00') inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x40000782) syz_open_dev$dri(0x0, 0x1, 0x0) ioperm(0x0, 0x8, 0x400) getresgid(0x0, &(0x7f0000000040), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, 0x0, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x6, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="38000000100039042cbd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="03000000cb1507001800128008000100736974000c000280080003000a010102496c63b8ad886118352ddc2929426b261af36e238bb7ec45fc6c207fd446c2ae874d38f3b3403fa58efed7365d997b15097d1fdb23ce0f0371cb5ab358e3a26f066b5d7d91a33682a7c27b8b197138d115e5e53e5aa12a5ceb58ab0418b1e03b7b0dbfdf386e88a772e33cb1b46d27ec4e888524c17a88a07826df8710847c73ab106f2312271357b88f98cba461484331f35c048cb0ff0102c1fbffa09fae6ba726b30a2a3e3613ac28f37b99e2ecd9f1"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20040c14) 5.619950506s ago: executing program 4 (id=2598): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='.\x00\x00', 0x3}], 0x1}, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) close_range(r5, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0xe, 0x0, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.243909221s ago: executing program 0 (id=2599): mkdir(0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3000000000002, 0x0, 0x885}, 0x24000090) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(0x0, 0x2) r2 = creat(0x0, 0x0) write$qrtrtun(r2, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000013c0)={r2, &(0x7f0000000380)="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", &(0x7f0000001380)=""/48}, 0x20) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) listen(r3, 0xa1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, './file0\x00'}) sendmsg$nl_xfrm(r5, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) accept4$bt_l2cap(r3, 0x0, 0x0, 0x0) shutdown(r3, 0x1) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000240), 0x4) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='msdos\x00', 0x1, 0x0) 4.191648215s ago: executing program 3 (id=2600): syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x6}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x1, 0x3, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x4, 0x2}, {0x10, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x40c0}, 0x4000004) sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000200)=0x4000002) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6012000800103afffe8000000000000000000000000000bb23efe42e55f4fbf754566b4e8aea974f0dff020000000000000000000000000001860090780300020000000000000000"], 0x0) syz_emit_ethernet(0x66, &(0x7f0000000800)={@local, @dev, @val={@val={0x88a8, 0x7, 0x1, 0x1}, {0x8100, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000880)={@local, @dev, @val={@void, {0x8100, 0x1, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x13, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0xa4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc3a8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xcd}, @func={0x85, 0x0, 0x1, 0x0, 0x2}]}, &(0x7f0000000280)='syzkaller\x00', 0x10, 0x6c, &(0x7f0000000480)=""/108, 0x41000, 0x20, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x1, r4, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000540)=[{0x2, 0x5, 0x10, 0xb}, {0x3, 0x2, 0xd, 0xb}, {0x0, 0x4, 0x9, 0xc}], 0x10, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x20000000, @void, @value}, 0x94) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0001007564703a73797a3200"], 0x34}, 0x1, 0x0, 0x0, 0x40404}, 0x100) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r9}, 0x10) pipe2$9p(&(0x7f0000001900), 0x0) 4.078527916s ago: executing program 4 (id=2601): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000003c00)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003a80)="f5214f77da9f", 0x6}, 0x68) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) syz_open_dev$vim2m(&(0x7f00000002c0), 0x7, 0x2) 3.776176968s ago: executing program 0 (id=2602): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@host}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f00000010c0)={&(0x7f00000000c0)=[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x1, 0x400}) 2.840240977s ago: executing program 4 (id=2603): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="7930e87e8ae4cbe4cf5eb83733a33227d0fdf267f1ebc3dc06c6f371d3efa8d39f5722cc80e610d779fab687929e7c4a01b9c09cb45d396e6483b9d0", 0x3c) bind$netlink(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r3, 0x10d, 0x83, &(0x7f00000002c0), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$packet(0x11, 0x3, 0x300) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r6, 0x3b84, &(0x7f0000000100)={0x20, r7, 0x1, 0x0, &(0x7f0000000040)=[{}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r6, 0x3b82, &(0x7f0000000180)={0x20, r7, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_UNMAP(r6, 0x3b86, &(0x7f0000000340)={0x18, r7, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r7, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r6, 0x3b86, &(0x7f00000003c0)={0x18, r7}) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000400)={0xc}) ioctl$IOMMU_IOAS_MAP(r6, 0x3b85, &(0x7f0000000240)={0x28, 0x77e932edadf6359f, r7, 0x0, &(0x7f0000000480)="4c4c4c4c4c4cb7d5f3434c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c", 0x1c, 0x2}) 2.815479283s ago: executing program 2 (id=2604): r0 = socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001080)=0x7) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) semop(0x0, 0x0, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000480)={'fscrypt:', @desc4}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00", 0x2}, 0x48, 0xfffffffffffffffe) keyctl$invalidate(0x15, r3) accept4(r0, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100fdffffff000000000100000008000100", @ANYRES32=0x0, @ANYBLOB="04000600"], 0x20}, 0x1, 0xf000, 0x0, 0x20000000}, 0x20040) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="180100002d"], 0x118}], 0x1}, 0x0) 2.814873174s ago: executing program 1 (id=2605): mkdir(0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3000000000002, 0x0, 0x885}, 0x24000090) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808b", 0x4) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) listen(0xffffffffffffffff, 0xa1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, './file0\x00'}) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 2.786778794s ago: executing program 0 (id=2606): socket(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) (async) epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) (async) setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, &(0x7f0000000100), 0x1) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) (async) pipe(&(0x7f0000000100)) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="6000000010000304f500"/20, @ANYRES32=0x0, @ANYBLOB="00050000000000003000128009000100766c616e00000000200002800c0002000a0000001f00000006000100000000000600050088a8000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x60}}, 0x4000000) 2.31770264s ago: executing program 4 (id=2607): mkdir(0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3000000000002, 0x0, 0x885}, 0x24000090) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) bind$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(0x0, 0x2) r2 = creat(0x0, 0x0) write$qrtrtun(r2, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000013c0)={r2, &(0x7f0000000380)="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", &(0x7f0000001380)=""/48}, 0x20) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) listen(r3, 0xa1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, './file0\x00'}) sendmsg$nl_xfrm(r5, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) accept4$bt_l2cap(r3, 0x0, 0x0, 0x0) shutdown(r3, 0x1) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000240), 0x4) read$FUSE(r6, &(0x7f0000001840)={0x2020}, 0x2020) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='msdos\x00', 0x1, 0x0) 2.283600694s ago: executing program 3 (id=2608): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r0, &(0x7f0000000180)={0x27, 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x7f, "ac9cbb6edd7cf9b6c793b8910faebf06fc858fa2b8d78d1fd85225434ec09e677d3cc271fa7e8390f26242b9e2bc8535743be38f8ce838f214fa9305322735", 0x80002d}, 0x5f) 2.262435163s ago: executing program 1 (id=2609): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) r4 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]}, 0x2a8) 2.152004414s ago: executing program 0 (id=2610): r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}]}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) symlink(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='./file1\x00') inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x40000782) syz_open_dev$dri(0x0, 0x1, 0x0) ioperm(0x0, 0x8, 0x400) getresgid(0x0, &(0x7f0000000040), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, 0x0, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x6, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="38000000100039042cbd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="03000000cb1507001800128008000100736974000c000280080003000a010102496c63b8ad886118352ddc2929426b261af36e238bb7ec45fc6c207fd446c2ae874d38f3b3403fa58efed7365d997b15097d1fdb23ce0f0371cb5ab358e3a26f066b5d7d91a33682a7c27b8b197138d115e5e53e5aa12a5ceb58ab0418b1e03b7b0dbfdf386e88a772e33cb1b46d27ec4e888524c17a88a07826df8710847c73ab106f2312271357b88f98cba461484331f35c048cb0ff0102c1fbffa09fae6ba726b30a2a3e3613ac28f37b99e2ecd9f1"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20040c14) 1.72633795s ago: executing program 0 (id=2611): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='.\x00\x00', 0x3}], 0x1}, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) close_range(r5, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0xe, 0x0, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.72181047s ago: executing program 3 (id=2612): mkdir(0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3000000000002, 0x0, 0x885}, 0x24000090) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(0x0, 0x2) r2 = creat(0x0, 0x0) write$qrtrtun(r2, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000013c0)={r2, &(0x7f0000000380)="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", &(0x7f0000001380)=""/48}, 0x20) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) listen(r3, 0xa1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, './file0\x00'}) sendmsg$nl_xfrm(r5, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) accept4$bt_l2cap(r3, 0x0, 0x0, 0x0) shutdown(r3, 0x1) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000240), 0x4) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='msdos\x00', 0x1, 0x0) 1.6707672s ago: executing program 4 (id=2613): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1000, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) keyctl$dh_compute(0x17, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={'vmac64(sm4)\x00'}}) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000400), r1, 0x0, 0x3, 0x1}}, 0x20) 1.278526725s ago: executing program 1 (id=2614): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x8031, 0xffffffffffffffff, 0xffffc000) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6a8, 0x0, 0x0, 0x230, 0x320, 0x4d8, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x6, &(0x7f0000000000), {[{{@ipv6={@private2, @loopback, [0xffffffff, 0xff, 0xff000000, 0xff], [0xffffff00, 0xff000000, 0xffffff00], 'veth0_vlan\x00', 'macsec0\x00', {0x101}, {0xff}, 0x2c, 0x5, 0x4, 0x34}, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @common=@rt={{0x138}, {0xc000, [0x8, 0x6], 0x8001, 0x8, 0xd, [@mcast1, @remote, @mcast2, @private1, @local, @mcast1, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @dev={0xfe, 0x80, '\x00', 0x32}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @private1, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty], 0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x37, 0x1d, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x5, 0x8, "848a87be7ee4ec6fe4986deeb4a48d1251143d8c6809f2d3ca7873b4be3f"}}}, {{@ipv6={@empty, @mcast2, [0xff000000, 0xffffffff, 0x0, 0xff0000ff], [0xff, 0xffffff00, 0xff, 0xffffffff], 'wg2\x00', 'veth1_to_team\x00', {0xff}, {}, 0x29, 0x4, 0x1, 0x14}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4, 0x0, 0x2}, {0x0, 0x3, 0x7}, 0x0, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x708) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@cgroup, 0xf23fce2c80c9831f, 0x0, 0xfffffffe, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000840)=[0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000009c0)=@generic={&(0x7f0000000980)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000940)={r1, r4, 0x25, 0x1a, @val=@tcx={@void, @value=r6, @void, @void, r5}}, 0x1c) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x3}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000780)='\x00', 0x1, 0x4001, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000200)=""/215, 0xd7, 0x62, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000007c0), 0x20200, 0x0) 420.719284ms ago: executing program 0 (id=2615): mkdir(&(0x7f0000000180)='./file0\x00', 0x6) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x1020000, &(0x7f00000001c0)={[{@redirect_dir_off}, {@verity_off}, {@uuid_auto}, {@nfs_export_off}, {@redirect_dir_off}, {@nfs_export_on}, {@upperdir={'upperdir', 0x3d, './file0'}}], [{@audit}, {@permit_directio}, {@dont_hash}, {@appraise_type}, {@dont_hash}, {@smackfsfloor={'smackfsfloor', 0x3d, '@'}}, {@smackfsroot={'smackfsroot', 0x3d, ').^-(&:]+\x94:'}}, {@subj_role={'subj_role', 0x3d, 'mountinfo\x00'}}]}) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'dummy0\x00', 0x3}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'pim6reg1\x00'}, 0x18) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x8000, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') 0s ago: executing program 4 (id=2616): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x400, 0x108, 0x210, 0x108, 0x318, 0x318, 0x318, 0x7fffffe, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 0x0, 0x8, {@mac=@link_local}, {@mac=@local, {[0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netpci0\x00', 'pimreg0\x00'}, 0xc0, 0x108, 0x0, {0x3ed}}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00', {0xc574}}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x450) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0xfffe, 0x4, @remote, 0x9}, 0x1c) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r0]) setreuid(0x0, 0xee01) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x401, 0x100, 0x400008, 0x0, 0x0, 0x2}}, 0x50) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): fig 0 descriptor?? [ 837.665693][T13327] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2028'. [ 837.808206][T13327] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2028'. [ 837.825585][ T47] usb 3-1: can't set config #0, error -71 [ 837.841302][ T47] usb 3-1: USB disconnect, device number 85 [ 840.520564][ T29] audit: type=1400 audit(1737353460.369:592): avc: denied { write } for pid=13341 comm="syz.3.2032" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 841.142850][T13355] syz.2.2035: attempt to access beyond end of device [ 841.142850][T13355] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 841.156468][T13355] FAT-fs (nbd2): unable to read boot sector [ 842.281003][T13360] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2036'. [ 842.388464][T10294] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 843.136574][T10294] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 843.154591][ T29] audit: type=1400 audit(1737353462.719:593): avc: denied { compute_member } for pid=13364 comm="syz.3.2037" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 843.175350][T10294] usb 5-1: config 0 has no interface number 0 [ 843.182430][T10294] usb 5-1: config 0 interface 29 has no altsetting 0 [ 843.216841][T10294] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 843.236611][T10294] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.245055][T10294] usb 5-1: Product: syz [ 843.255010][T10294] usb 5-1: Manufacturer: syz [ 843.294345][T13368] syz.0.2038: attempt to access beyond end of device [ 843.294345][T13368] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 843.317696][T13368] FAT-fs (nbd0): unable to read boot sector [ 843.318364][T10294] usb 5-1: SerialNumber: syz [ 843.358993][T10294] usb 5-1: config 0 descriptor?? [ 843.509105][ T5865] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 843.868699][ T5865] usb 4-1: Using ep0 maxpacket: 16 [ 844.186396][ T5865] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 844.196796][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 844.208900][ T5865] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 844.228226][ T5865] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 844.325424][ T5865] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 844.334706][ T5865] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 844.343090][ T5865] usb 4-1: Manufacturer: syz [ 844.385850][T10294] peak_usb 5-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 844.406037][ T5865] usb 4-1: config 0 descriptor?? [ 844.433538][T10294] peak_usb 5-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 845.162367][T10294] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -71 [ 845.419006][T13388] tmpfs: Bad value for 'mpol' [ 845.949900][ T5865] usb 4-1: USB disconnect, device number 87 [ 846.005621][T10294] usb 5-1: USB disconnect, device number 76 [ 847.061920][T13399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2044'. [ 847.307734][T13397] xt_TPROXY: Can be used only with -p tcp or -p udp [ 848.467753][T13417] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2050'. [ 849.638488][ T5862] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 849.758338][T10294] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 849.818678][ T5862] usb 4-1: Using ep0 maxpacket: 8 [ 849.846439][ T5862] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.907295][ T5862] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 849.976428][T10294] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 850.003401][ T5862] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 850.020429][T10294] usb 1-1: config 0 has no interface number 0 [ 850.060395][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.068602][T10294] usb 1-1: config 0 interface 29 has no altsetting 0 [ 850.193924][ T5862] usb 4-1: Product: syz [ 850.203627][T10294] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 850.216555][ T5862] usb 4-1: Manufacturer: syz [ 850.232144][ T5862] usb 4-1: SerialNumber: syz [ 850.291390][T13433] tmpfs: Bad value for 'mpol' [ 850.794703][T10294] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.809956][ T5862] usb 4-1: config 0 descriptor?? [ 850.815958][T10294] usb 1-1: Product: syz [ 850.823697][T10294] usb 1-1: Manufacturer: syz [ 850.892058][ T5862] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 850.911681][T10294] usb 1-1: SerialNumber: syz [ 850.959045][T10294] usb 1-1: config 0 descriptor?? [ 850.965072][ T5862] imon 4-1:0.0: unable to initialize intf0, err -19 [ 850.972279][ T5862] imon:imon_probe: failed to initialize context! [ 850.982647][ T5862] imon 4-1:0.0: unable to register, err -19 [ 851.243460][T10294] peak_usb 1-1:0.29 can0: unable to request usb[type=0 value=1] err=-32 [ 851.268583][T10294] peak_usb 1-1:0.29: unable to read PCAN-USB X6 firmware info (err -32) [ 851.697920][T13420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 851.728561][T13420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 852.277971][T13446] syz.4.2059: attempt to access beyond end of device [ 852.277971][T13446] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 852.291380][T13446] FAT-fs (nbd4): unable to read boot sector [ 852.308761][T10294] peak_usb 1-1:0.29: probe with driver peak_usb failed with error -32 [ 852.401777][T10294] usb 1-1: USB disconnect, device number 73 [ 853.232306][T13463] syz.4.2061: attempt to access beyond end of device [ 853.232306][T13463] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 853.245999][T13463] FAT-fs (nbd4): unable to read boot sector [ 853.319971][T13462] syz.1.2063: attempt to access beyond end of device [ 853.319971][T13462] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 853.335411][T13462] FAT-fs (nbd1): unable to read boot sector [ 855.630449][T13484] tmpfs: Bad value for 'mpol' [ 856.211727][T13485] overlayfs: missing 'workdir' [ 856.416577][ T5857] usb 4-1: USB disconnect, device number 88 [ 856.796129][T13495] 9pnet_fd: Insufficient options for proto=fd [ 857.180433][ T29] audit: type=1400 audit(1737353494.851:594): avc: denied { mounton } for pid=13488 comm="syz.4.2070" path="/408/file0" dev="tmpfs" ino=2159 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 857.286251][T10759] Bluetooth: hci4: command 0x0405 tx timeout [ 857.768227][ T29] audit: type=1400 audit(1737353495.601:595): avc: denied { read } for pid=13486 comm="syz.2.2068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 857.888857][T13508] ptrace attach of "./syz-executor exec"[5822] was attempted by "./syz-executor exec"[13508] [ 857.998228][T13510] overlayfs: missing 'lowerdir' [ 858.436900][T13518] syz.3.2075: attempt to access beyond end of device [ 858.436900][T13518] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 858.455258][T13518] FAT-fs (nbd3): unable to read boot sector [ 859.299152][ T5857] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 859.579277][ T5857] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 859.598395][ T5857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.639236][ T5857] usb 2-1: config 0 descriptor?? [ 859.673389][ T5857] cp210x 2-1:0.0: cp210x converter detected [ 860.583298][ T5857] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 860.591278][ T5857] cp210x 2-1:0.0: querying part number failed [ 860.600415][ T5857] usb 2-1: cp210x converter now attached to ttyUSB0 [ 860.680775][ T5857] usb 2-1: USB disconnect, device number 80 [ 861.179004][ T5857] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 861.187039][ T5857] cp210x 2-1:0.0: device disconnected [ 863.137025][T13573] x_tables: ip_tables: ah match: only valid for protocol 51 [ 863.763983][T13574] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2088'. [ 863.773626][ T8] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 863.871142][T13577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 863.912096][T13577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 863.930098][ T8] usb 1-1: device descriptor read/64, error -71 [ 863.937839][T13576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 864.759265][ T8] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 864.918267][ T8] usb 1-1: device descriptor read/64, error -71 [ 864.937537][T13589] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2095'. [ 865.006486][T13592] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2095'. [ 865.088499][ T8] usb usb1-port1: attempt power cycle [ 865.238296][ T5862] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 865.458300][ T8] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 865.459799][ T5862] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 865.492470][ T8] usb 1-1: device descriptor read/8, error -71 [ 865.492613][ T5862] usb 4-1: config 0 has no interface number 0 [ 865.546030][ T5862] usb 4-1: config 0 interface 29 has no altsetting 0 [ 865.620959][ T5862] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 865.670538][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.728135][ T5862] usb 4-1: Product: syz [ 865.735743][ T5862] usb 4-1: Manufacturer: syz [ 865.788428][ T5862] usb 4-1: SerialNumber: syz [ 865.854630][ T5862] usb 4-1: config 0 descriptor?? [ 866.506284][ T5862] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 866.723853][ T5862] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 866.798666][ T5862] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 866.899518][ T5862] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 867.492784][ T5862] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -22 [ 867.975433][ T5862] usb 4-1: USB disconnect, device number 89 [ 868.062697][T13631] x_tables: ip_tables: ah match: only valid for protocol 51 [ 868.579419][ T5892] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 868.707868][T13633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2103'. [ 868.735151][ T5892] usb 1-1: device descriptor read/64, error -71 [ 870.160861][T13649] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2107'. [ 870.371986][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.378891][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.426021][T13655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2109'. [ 870.467597][T13655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2109'. [ 870.534421][T13655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2109'. [ 870.762168][ T9] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 870.929759][T13664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2110'. [ 870.940499][T13664] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 870.975339][T13665] netlink: 'syz.3.2111': attribute type 32 has an invalid length. [ 871.752900][T13655] syzkaller1: entered promiscuous mode [ 871.828385][T13655] syzkaller1: entered allmulticast mode [ 871.998973][ T9] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 872.026279][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.043931][ T9] usb 5-1: Product: syz [ 872.054616][ T9] usb 5-1: Manufacturer: syz [ 872.149351][ T9] usb 5-1: SerialNumber: syz [ 872.269196][T13675] x_tables: ip_tables: ah match: only valid for protocol 51 [ 872.903876][ T25] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 872.909034][ T9] usb 5-1: config 0 descriptor?? [ 873.209125][ T25] usb 1-1: device descriptor read/64, error -71 [ 873.263258][ T9] usb 5-1: can't set config #0, error -71 [ 873.282360][ T9] usb 5-1: USB disconnect, device number 77 [ 873.483884][T13685] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 873.493345][ T25] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 873.508789][T13685] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 875.158370][ T9] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 875.888791][ T9] usb 3-1: device descriptor read/64, error -71 [ 876.129431][ T9] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 876.187183][T13716] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2127'. [ 876.277759][T13721] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2127'. [ 876.296381][ T9] usb 3-1: device descriptor read/64, error -71 [ 876.428789][ T9] usb usb3-port1: attempt power cycle [ 876.674678][T13713] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 877.018279][T13731] bridge0: port 3(vlan2) entered blocking state [ 877.024826][T13731] bridge0: port 3(vlan2) entered disabled state [ 877.032021][T13731] vlan2: entered allmulticast mode [ 877.774128][T13731] vlan2: left allmulticast mode [ 878.502940][T13736] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2130'. [ 878.846431][T13738] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 878.862870][T13738] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 879.032113][T13743] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2134'. [ 879.050903][T13743] netlink: 'syz.0.2134': attribute type 1 has an invalid length. [ 879.770446][T13757] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.2138'. [ 879.779706][T13757] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 880.008298][ T5892] usb 1-1: new low-speed USB device number 82 using dummy_hcd [ 880.015943][ T9] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 880.183792][ T5892] usb 1-1: Invalid ep0 maxpacket: 32 [ 880.559598][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 880.586412][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 880.668393][ T5892] usb 1-1: new low-speed USB device number 83 using dummy_hcd [ 880.676001][ T9] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 880.685236][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.695748][ T9] usb 2-1: config 0 descriptor?? [ 880.835459][T13768] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2141'. [ 880.838236][ T5892] usb 1-1: Invalid ep0 maxpacket: 32 [ 880.898999][ T5892] usb usb1-port1: attempt power cycle [ 880.907885][T13772] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2141'. [ 881.167209][T13499] block nbd64: NBD_DISCONNECT [ 881.310991][ T9] hid-thrustmaster 0003:044F:B65D.0015: unknown main item tag 0x0 [ 881.348347][ T5892] usb 1-1: new low-speed USB device number 84 using dummy_hcd [ 881.362805][T13777] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 881.371734][ T9] hid-thrustmaster 0003:044F:B65D.0015: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 881.390238][ T9] hid-thrustmaster 0003:044F:B65D.0015: Wrong number of endpoints? [ 881.417540][ T5892] usb 1-1: Invalid ep0 maxpacket: 32 [ 881.456275][T13777] FAULT_INJECTION: forcing a failure. [ 881.456275][T13777] name failslab, interval 1, probability 0, space 0, times 0 [ 881.475463][T13777] CPU: 0 UID: 0 PID: 13777 Comm: syz.2.2143 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 881.486239][T13777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 881.496287][T13777] Call Trace: [ 881.499552][T13777] [ 881.502470][T13777] dump_stack_lvl+0x16c/0x1f0 [ 881.507140][T13777] should_fail_ex+0x497/0x5b0 [ 881.511840][T13777] ? fs_reclaim_acquire+0xae/0x150 [ 881.516942][T13777] should_failslab+0xc2/0x120 [ 881.521608][T13777] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 881.527403][T13777] ? __alloc_skb+0x2b1/0x380 [ 881.532027][T13777] __alloc_skb+0x2b1/0x380 [ 881.536477][T13777] ? __pfx___alloc_skb+0x10/0x10 [ 881.541445][T13777] ? genl_rcv_msg+0x510/0x800 [ 881.546139][T13777] ? genl_rcv_msg+0x4bd/0x800 [ 881.550812][T13777] netlink_ack+0x15f/0xb80 [ 881.555329][T13777] netlink_rcv_skb+0x348/0x440 [ 881.560091][T13777] ? __pfx_genl_rcv_msg+0x10/0x10 [ 881.565100][T13777] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 881.570400][T13777] ? down_read+0xc9/0x330 [ 881.574727][T13777] ? __pfx_down_read+0x10/0x10 [ 881.579500][T13777] ? netlink_deliver_tap+0x1ae/0xd30 [ 881.584790][T13777] genl_rcv+0x28/0x40 [ 881.588789][T13777] netlink_unicast+0x53c/0x7f0 [ 881.593550][T13777] ? __pfx_netlink_unicast+0x10/0x10 [ 881.598831][T13777] netlink_sendmsg+0x8b8/0xd70 [ 881.603588][T13777] ? __pfx_netlink_sendmsg+0x10/0x10 [ 881.608873][T13777] ____sys_sendmsg+0xaaf/0xc90 [ 881.613627][T13777] ? copy_msghdr_from_user+0x10b/0x160 [ 881.619070][T13777] ? __pfx_____sys_sendmsg+0x10/0x10 [ 881.624368][T13777] ___sys_sendmsg+0x135/0x1e0 [ 881.629047][T13777] ? __pfx____sys_sendmsg+0x10/0x10 [ 881.634249][T13777] ? __pfx_lock_release+0x10/0x10 [ 881.639259][T13777] ? trace_lock_acquire+0x14e/0x1f0 [ 881.644476][T13777] ? __fget_files+0x206/0x3a0 [ 881.649142][T13777] __sys_sendmsg+0x16e/0x220 [ 881.653717][T13777] ? __pfx___sys_sendmsg+0x10/0x10 [ 881.658824][T13777] do_syscall_64+0xcd/0x250 [ 881.663318][T13777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.669200][T13777] RIP: 0033:0x7f6cc0b85d29 [ 881.673598][T13777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 881.693199][T13777] RSP: 002b:00007f6cc192d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 881.701599][T13777] RAX: ffffffffffffffda RBX: 00007f6cc0d75fa0 RCX: 00007f6cc0b85d29 [ 881.709825][T13777] RDX: 0000000004040040 RSI: 0000000020000000 RDI: 0000000000000003 [ 881.717791][T13777] RBP: 00007f6cc192d090 R08: 0000000000000000 R09: 0000000000000000 [ 881.725755][T13777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 881.733716][T13777] R13: 0000000000000000 R14: 00007f6cc0d75fa0 R15: 00007ffccfee8078 [ 881.741686][T13777] [ 881.808379][ T5892] usb 1-1: new low-speed USB device number 85 using dummy_hcd [ 881.815933][ C0] hid-thrustmaster 0003:044F:B65D.0015: Unknown packet type 0x693e, unable to proceed further with wheel init [ 881.858777][ T5892] usb 1-1: Invalid ep0 maxpacket: 32 [ 881.868748][ T5892] usb usb1-port1: unable to enumerate USB device [ 881.958917][T13788] siw: device registration error -23 [ 881.965372][T13788] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.2144'. [ 881.974645][T13788] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 882.270009][T13791] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2147'. [ 882.446865][T13793] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=13793 comm=syz.4.2146 [ 882.634007][ T8] usb 2-1: USB disconnect, device number 81 [ 884.163701][T13811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2150'. [ 884.574803][ T29] audit: type=1400 audit(1737353540.133:596): avc: denied { create } for pid=13801 comm="syz.2.2150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 886.225441][T13825] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2156'. [ 886.294383][T13828] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2156'. [ 886.405220][T13833] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2158'. [ 886.429075][T13833] netlink: 'syz.2.2158': attribute type 1 has an invalid length. [ 886.573002][T13839] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 886.795477][T13846] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2159'. [ 887.400404][T13858] siw: device registration error -23 [ 887.406744][T13858] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.2160'. [ 887.416083][T13858] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 888.588255][T13874] FAULT_INJECTION: forcing a failure. [ 888.588255][T13874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 888.651381][T13874] CPU: 1 UID: 0 PID: 13874 Comm: syz.1.2167 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 888.662183][T13874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 888.672226][T13874] Call Trace: [ 888.675486][T13874] [ 888.678418][T13874] dump_stack_lvl+0x16c/0x1f0 [ 888.683086][T13874] should_fail_ex+0x497/0x5b0 [ 888.687753][T13874] _copy_to_user+0x32/0xd0 [ 888.692152][T13874] simple_read_from_buffer+0xd0/0x160 [ 888.697519][T13874] proc_fail_nth_read+0x198/0x270 [ 888.702533][T13874] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 888.708082][T13874] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 888.713629][T13874] vfs_read+0x1df/0xbe0 [ 888.717784][T13874] ? __pfx___mutex_lock+0x10/0x10 [ 888.722798][T13874] ? __pfx_vfs_read+0x10/0x10 [ 888.727462][T13874] ? fdget_pos+0x1ec/0x390 [ 888.731868][T13874] ksys_read+0x12b/0x250 [ 888.736105][T13874] ? __pfx_ksys_read+0x10/0x10 [ 888.740852][T13874] do_syscall_64+0xcd/0x250 [ 888.745343][T13874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.751224][T13874] RIP: 0033:0x7f7495f8473c [ 888.755624][T13874] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 888.775234][T13874] RSP: 002b:00007f7496e5f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 888.783646][T13874] RAX: ffffffffffffffda RBX: 00007f7496176080 RCX: 00007f7495f8473c [ 888.791609][T13874] RDX: 000000000000000f RSI: 00007f7496e5f0a0 RDI: 0000000000000008 [ 888.799565][T13874] RBP: 00007f7496e5f090 R08: 0000000000000000 R09: 0000000000000000 [ 888.807531][T13874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 888.815484][T13874] R13: 0000000000000000 R14: 00007f7496176080 R15: 00007ffc413c99d8 [ 888.823467][T13874] [ 890.444270][ T8] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 890.659447][ T8] usb 5-1: config 0 has an invalid interface number: 236 but max is 0 [ 890.674887][ T8] usb 5-1: config 0 has no interface number 0 [ 890.687981][ T8] usb 5-1: New USB device found, idVendor=06cd, idProduct=0114, bcdDevice=65.4b [ 890.702842][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.712009][ T8] usb 5-1: Product: syz [ 890.716162][ T8] usb 5-1: Manufacturer: syz [ 890.723043][ T8] usb 5-1: SerialNumber: syz [ 890.730204][ T8] usb 5-1: config 0 descriptor?? [ 890.736877][ T8] keyspan 5-1:0.236: Keyspan - (without firmware) converter detected [ 890.825223][T13898] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2173'. [ 891.070951][T13891] team0: Device wireguard0 is of different type [ 891.111750][T13899] team0: Device wireguard0 is of different type [ 891.290528][ T47] usb 5-1: USB disconnect, device number 78 [ 891.299269][ T47] keyspan 5-1:0.236: device disconnected [ 891.438282][ T8] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 891.778455][T13919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2178'. [ 891.929473][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 892.055676][ T8] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 892.138853][ T8] usb 3-1: config 0 has no interface number 0 [ 892.145001][ T8] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 892.193821][ T8] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 892.239129][ T8] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 892.263544][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.291873][ T29] audit: type=1400 audit(1737353548.353:597): avc: denied { map } for pid=13923 comm="syz.4.2180" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 892.296783][ T8] usb 3-1: config 0 descriptor?? [ 892.492454][ T29] audit: type=1400 audit(1737353548.353:598): avc: denied { execute } for pid=13923 comm="syz.4.2180" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 892.498319][T13926] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 893.520677][ T29] audit: type=1400 audit(1737353549.583:599): avc: denied { map } for pid=13937 comm="syz.3.2183" path="/dev/vbi4" dev="devtmpfs" ino=978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 893.588388][T13940] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2183'. [ 893.932393][ T29] audit: type=1400 audit(1737353549.713:600): avc: denied { mounton } for pid=13937 comm="syz.3.2183" path="/452/file0" dev="tmpfs" ino=2414 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 894.326067][T13944] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 894.365106][ T8] usbhid 3-1:0.1: can't add hid device: -71 [ 894.368529][T13950] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.2185'. [ 894.380269][T13950] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 894.398348][ T8] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 894.409057][T13944] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2184'. [ 894.455116][ T8] usb 3-1: USB disconnect, device number 89 [ 896.120309][T13976] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2190'. [ 896.194374][T13990] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2190'. [ 898.902618][ T5865] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 899.191438][ T5865] usb 3-1: no configurations [ 899.196202][ T5865] usb 3-1: can't read configurations, error -22 [ 899.602881][ T5865] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 899.905640][ T5865] usb 3-1: device descriptor read/all, error -71 [ 899.912642][ T5865] usb usb3-port1: attempt power cycle [ 900.915976][T14027] orangefs_mount: mount request failed with -4 [ 901.307353][T14058] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2207'. [ 901.327320][ T29] audit: type=1400 audit(1737353557.383:601): avc: denied { setopt } for pid=14059 comm="syz.2.2206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 901.437837][T14068] IPv6: addrconf: prefix option has invalid lifetime [ 901.448896][T14068] IPv6: addrconf: prefix option has invalid lifetime [ 901.485669][T14067] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2207'. [ 902.048586][ T29] audit: type=1400 audit(1737353558.083:602): avc: denied { create } for pid=14063 comm="syz.3.2208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 902.086386][ T29] audit: type=1400 audit(1737353558.083:603): avc: denied { read } for pid=14059 comm="syz.2.2206" path="socket:[36995]" dev="sockfs" ino=36995 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 902.129390][T14076] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 902.169434][ T29] audit: type=1400 audit(1737353558.203:604): avc: denied { connect } for pid=14059 comm="syz.2.2206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 902.978298][ T8] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 903.612176][ T8] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 903.626074][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.635347][ T8] usb 3-1: Product: syz [ 903.639990][ T8] usb 3-1: Manufacturer: syz [ 903.644984][ T8] usb 3-1: SerialNumber: syz [ 903.681551][ T8] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 903.698808][ T9] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 904.523690][T14087] syz.2.2213: attempt to access beyond end of device [ 904.523690][T14087] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 904.568625][ T8] usb 3-1: USB disconnect, device number 93 [ 904.768237][ T9] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 904.782653][ T9] ath9k_htc: Failed to initialize the device [ 904.898849][ T8] usb 3-1: ath9k_htc: USB layer deinitialized [ 906.188406][ T9] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 906.316027][T14124] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2223'. [ 906.349686][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 906.362087][ T9] usb 4-1: config 0 has no interfaces? [ 906.380253][ T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 906.408192][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.486593][T14129] FAULT_INJECTION: forcing a failure. [ 906.486593][T14129] name failslab, interval 1, probability 0, space 0, times 0 [ 906.499507][T14129] CPU: 1 UID: 0 PID: 14129 Comm: syz.0.2222 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 906.510291][T14129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 906.520366][T14129] Call Trace: [ 906.523653][T14129] [ 906.526592][T14129] dump_stack_lvl+0x16c/0x1f0 [ 906.531287][T14129] should_fail_ex+0x497/0x5b0 [ 906.535986][T14129] ? fs_reclaim_acquire+0xae/0x150 [ 906.541115][T14129] should_failslab+0xc2/0x120 [ 906.545810][T14129] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 906.551196][T14129] ? lock_acquire+0x2f/0xb0 [ 906.555712][T14129] ? __might_fault+0xe3/0x190 [ 906.560409][T14129] ? getname_flags.part.0+0x4c/0x550 [ 906.565719][T14129] ? __might_fault+0xe3/0x190 [ 906.570420][T14129] getname_flags.part.0+0x4c/0x550 [ 906.575554][T14129] getname_flags+0x93/0xf0 [ 906.579986][T14129] user_path_at+0x24/0x60 [ 906.584330][T14129] __x64_sys_mount+0x1fc/0x320 [ 906.589112][T14129] ? __pfx___x64_sys_mount+0x10/0x10 [ 906.594423][T14129] do_syscall_64+0xcd/0x250 [ 906.598949][T14129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.604860][T14129] RIP: 0033:0x7f4e3b385d29 [ 906.609285][T14129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 906.628911][T14129] RSP: 002b:00007f4e3c1a5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 906.637348][T14129] RAX: ffffffffffffffda RBX: 00007f4e3b576080 RCX: 00007f4e3b385d29 [ 906.645336][T14129] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 00000000200000c0 [ 906.653321][T14129] RBP: 00007f4e3c1a5090 R08: 0000000000000000 R09: 0000000000000000 [ 906.661302][T14129] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 906.669282][T14129] R13: 0000000000000000 R14: 00007f4e3b576080 R15: 00007ffea036f718 [ 906.677293][T14129] [ 906.680372][ C1] vkms_vblank_simulate: vblank timer overrun [ 906.842082][T14127] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2223'. [ 907.225236][ T9] usb 4-1: config 0 descriptor?? [ 907.357236][ T9] usb 4-1: can't set config #0, error -71 [ 907.383884][ T9] usb 4-1: USB disconnect, device number 90 [ 907.629032][T14136] openvswitch: netlink: IP tunnel dst address not specified [ 907.656034][ T29] audit: type=1400 audit(1737353563.713:605): avc: denied { write } for pid=14133 comm="syz.1.2227" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 907.722152][ T29] audit: type=1400 audit(1737353563.773:606): avc: denied { setopt } for pid=14135 comm="syz.4.2228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 907.937001][ T29] audit: type=1400 audit(1737353563.823:607): avc: denied { append } for pid=14131 comm="syz.3.2226" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 908.870822][T14149] netlink: 'syz.2.2224': attribute type 1 has an invalid length. [ 908.914100][T14149] 8021q: adding VLAN 0 to HW filter on device bond14 [ 909.080687][T14149] bond14: (slave gretap1): making interface the new active one [ 909.090281][T14149] bond14: (slave gretap1): Enslaving as an active interface with an up link [ 910.298274][ T8] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 910.394853][T14167] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2234'. [ 910.472075][ T8] usb 5-1: config 64 has an invalid interface number: 1 but max is 0 [ 910.688432][ T8] usb 5-1: config 64 has no interface number 0 [ 910.697163][ T8] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.2c [ 910.738190][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.767588][ T8] usb 5-1: Product: syz [ 910.781128][ T8] usb 5-1: Manufacturer: syz [ 910.801447][ T8] usb 5-1: SerialNumber: syz [ 910.887180][T14170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 910.910105][T14170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 910.925190][T14170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 910.941039][T14170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 910.953416][T14170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 911.025317][ T8] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 911.044093][ T8] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 911.065096][ T8] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 911.082942][ T8] usb 5-1: media controller created [ 911.119654][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 911.217752][T14178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2238'. [ 911.302729][ T8] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 912.008179][ T8] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 912.362473][ T5892] usb 5-1: USB disconnect, device number 79 [ 912.425656][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 912.451247][ T8] usb 4-1: config 0 has no interfaces? [ 912.578523][ T8] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 912.637436][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.670474][ T8] usb 4-1: config 0 descriptor?? [ 914.161966][T14209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=14209 comm=syz.0.2245 [ 914.443619][ T47] usb 4-1: USB disconnect, device number 91 [ 914.485343][T14199] syz.4.2241: attempt to access beyond end of device [ 914.485343][T14199] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 914.499202][T14199] FAT-fs (nbd4): unable to read boot sector [ 914.528162][ T5892] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 915.042044][ T5892] usb 2-1: config 2 has an invalid interface number: 1 but max is 0 [ 915.055186][ T5892] usb 2-1: config 2 has no interface number 0 [ 915.095120][ T5892] usb 2-1: config 2 interface 1 has no altsetting 0 [ 915.116454][ T5892] usb 2-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=47.78 [ 915.134422][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.166398][ T5892] usb 2-1: Product: syz [ 915.201817][ T5892] usb 2-1: Manufacturer: syz [ 915.206464][ T5892] usb 2-1: SerialNumber: syz [ 915.931018][T14206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 915.992590][T14206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.009521][T14206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.438934][T14227] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2249'. [ 916.439891][T14206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.473547][T14206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.488840][T14206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.497615][T14206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.604727][T14206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.621845][T14232] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2250'. [ 917.680780][ T5892] snd-usb-audio 2-1:2.1: probe with driver snd-usb-audio failed with error -22 [ 917.722019][ T5892] snd-usb-us122l 2-1:2.1: usb_set_interface error [ 917.729844][ T5892] snd-usb-us122l 2-1:2.1: probe with driver snd-usb-us122l failed with error -22 [ 917.741682][ T5892] usb 2-1: USB disconnect, device number 82 [ 918.315612][T14243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2255'. [ 918.383115][T13912] udevd[13912]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 919.043850][T14265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 919.778786][T14265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 919.795614][T14264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 920.406246][T14273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2262'. [ 920.736787][ T29] audit: type=1400 audit(1737353576.773:608): avc: denied { ioctl } for pid=14275 comm="syz.1.2265" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 921.338388][ T47] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 921.551398][ T47] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 921.773373][ T47] usb 5-1: config 0 has no interface number 0 [ 921.782250][ T47] usb 5-1: config 0 interface 29 has no altsetting 0 [ 921.791848][ T47] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 921.818198][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.826232][ T47] usb 5-1: Product: syz [ 921.858241][ T47] usb 5-1: Manufacturer: syz [ 921.862882][ T47] usb 5-1: SerialNumber: syz [ 921.931841][ T47] usb 5-1: config 0 descriptor?? [ 922.211640][ T47] peak_usb 5-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 922.328196][ T5892] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 922.348404][ T5865] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 922.379242][T14302] tmpfs: Bad value for 'mpol' [ 922.417345][ T47] peak_usb 5-1:0.29 can0: sending command failure: -22 [ 922.438188][ T47] peak_usb 5-1:0.29 can0: sending command failure: -22 [ 922.445701][ T47] peak_usb 5-1:0.29 can0: sending command failure: -22 [ 922.448235][ T9] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 922.481594][ T5892] usb 4-1: config index 0 descriptor too short (expected 64754, got 72) [ 922.494096][ T5892] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 922.505811][ T5892] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 922.508528][ T47] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -22 [ 922.521758][ T5892] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 922.546018][ T5892] usb 4-1: config index 1 descriptor too short (expected 64754, got 72) [ 922.554954][ T5892] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 922.572851][ T5892] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 922.586989][ T5892] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 922.629630][ T9] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 922.674367][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.678164][ T5865] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 922.808210][ T5865] usb 2-1: config 0 has no interface number 0 [ 922.814691][ T5865] usb 2-1: config 0 interface 29 has no altsetting 0 [ 922.912678][ T5865] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 922.914565][ T9] usb 3-1: config 0 descriptor?? [ 923.044755][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.061971][ T47] usb 5-1: USB disconnect, device number 80 [ 923.183576][ T5865] usb 2-1: Product: syz [ 923.239995][ T5865] usb 2-1: Manufacturer: syz [ 923.279984][ T9] cp210x 3-1:0.0: cp210x converter detected [ 923.295414][ T5865] usb 2-1: SerialNumber: syz [ 923.324132][ T5865] usb 2-1: config 0 descriptor?? [ 923.559114][ T5865] peak_usb 2-1:0.29 can0: unable to request usb[type=0 value=1] err=-32 [ 923.587894][ T5865] peak_usb 2-1:0.29: unable to read PCAN-USB X6 firmware info (err -32) [ 923.642293][ T9] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 923.650240][ T9] cp210x 3-1:0.0: querying part number failed [ 923.670630][ T5865] peak_usb 2-1:0.29: probe with driver peak_usb failed with error -32 [ 923.743167][ T9] usb 3-1: cp210x converter now attached to ttyUSB0 [ 923.757203][ T5865] usb 2-1: USB disconnect, device number 83 [ 923.759795][ T9] usb 3-1: USB disconnect, device number 94 [ 924.062652][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 924.075898][ T9] cp210x 3-1:0.0: device disconnected [ 925.284142][ T5892] usb 4-1: string descriptor 0 read error: -71 [ 925.313508][ T5892] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 925.323127][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.994266][ T5892] usb 4-1: can't set config #1, error -71 [ 926.068231][ T5892] usb 4-1: USB disconnect, device number 92 [ 926.628472][ T47] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 926.818261][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 926.822037][T14336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 926.852504][ T29] audit: type=1400 audit(1737353582.903:609): avc: denied { shutdown } for pid=14333 comm="syz.3.2279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 926.866175][T14336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 926.915201][ T47] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 926.938168][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.956478][ T47] usb 5-1: Product: syz [ 926.963173][ T47] usb 5-1: Manufacturer: syz [ 926.968666][ T47] usb 5-1: SerialNumber: syz [ 926.982149][T14335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 926.993931][ T47] usb 5-1: config 0 descriptor?? [ 927.168966][T14347] syz.2.2282: attempt to access beyond end of device [ 927.168966][T14347] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 927.182234][T14347] FAT-fs (nbd2): unable to read boot sector [ 927.414537][ T47] airspy 5-1:0.0: Board ID: aa [ 927.453356][ T47] airspy 5-1:0.0: Firmware version: ª [ 928.318228][ T5865] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 928.378311][ T8] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 928.555402][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 928.591437][ T47] airspy 5-1:0.0: usb_control_msg() failed -71 request 10 [ 928.606247][ T47] airspy 5-1:0.0: Registered as swradio24 [ 928.617523][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 928.620967][ T47] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 928.638242][ T8] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 928.644613][ T5865] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 928.660609][ T8] usb 1-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 928.668161][ T5865] usb 2-1: config 0 has no interface number 0 [ 928.674438][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.675722][ T5865] usb 2-1: config 0 interface 29 has no altsetting 0 [ 928.700471][ T47] usb 5-1: USB disconnect, device number 81 [ 928.701947][ T8] usb 1-1: Product: syz [ 928.719408][ T8] usb 1-1: Manufacturer: syz [ 928.727040][ T8] usb 1-1: SerialNumber: syz [ 928.848664][ T5865] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 928.857743][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.865851][ T5865] usb 2-1: Product: syz [ 928.870428][ T5865] usb 2-1: Manufacturer: syz [ 928.875278][ T5865] usb 2-1: SerialNumber: syz [ 928.876569][ T8] usb 1-1: config 0 descriptor?? [ 928.890796][ T5865] usb 2-1: config 0 descriptor?? [ 929.504217][ T8] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 929.758583][ T8] imon 1-1:0.0: unable to initialize intf0, err -19 [ 929.997867][ T5865] peak_usb 2-1:0.29 can0: unable to request usb[type=0 value=1] err=-32 [ 930.014409][T14361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.031539][ T5865] peak_usb 2-1:0.29: unable to read PCAN-USB X6 firmware info (err -32) [ 930.043166][T14361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.058187][ T8] imon:imon_probe: failed to initialize context! [ 930.064839][ T8] imon 1-1:0.0: unable to register, err -19 [ 930.090788][T14375] FAULT_INJECTION: forcing a failure. [ 930.090788][T14375] name failslab, interval 1, probability 0, space 0, times 0 [ 930.152911][T14375] CPU: 0 UID: 0 PID: 14375 Comm: syz.2.2291 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 930.163725][T14375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 930.173791][T14375] Call Trace: [ 930.177072][T14375] [ 930.180007][T14375] dump_stack_lvl+0x16c/0x1f0 [ 930.184702][T14375] should_fail_ex+0x497/0x5b0 [ 930.189401][T14375] ? fs_reclaim_acquire+0xae/0x150 [ 930.194533][T14375] should_failslab+0xc2/0x120 [ 930.199230][T14375] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 930.204615][T14375] ? lockdep_init_map_type+0x16d/0x7d0 [ 930.210092][T14375] ? security_inode_alloc+0x3b/0x2b0 [ 930.215403][T14375] security_inode_alloc+0x3b/0x2b0 [ 930.220534][T14375] inode_init_always_gfp+0xce4/0x1030 [ 930.225925][T14375] alloc_inode+0x82/0x230 [ 930.230272][T14375] new_inode+0x22/0x210 [ 930.234442][T14375] proc_pid_make_inode+0x22/0x160 [ 930.239454][T14375] proc_pident_instantiate+0x85/0x320 [ 930.244814][T14375] proc_pident_lookup+0x226/0x2a0 [ 930.249825][T14375] __lookup_slow+0x24f/0x460 [ 930.254411][T14375] ? __pfx___lookup_slow+0x10/0x10 [ 930.259545][T14375] ? walk_component+0x342/0x5b0 [ 930.264402][T14375] ? lookup_fast+0x155/0x540 [ 930.268984][T14375] walk_component+0x350/0x5b0 [ 930.273645][T14375] link_path_walk.part.0.constprop.0+0x669/0xd40 [ 930.279959][T14375] path_openat+0x228/0x2d60 [ 930.284442][T14375] ? hlock_class+0x4e/0x130 [ 930.288940][T14375] ? __pfx_path_openat+0x10/0x10 [ 930.293861][T14375] ? __pfx___lock_acquire+0x10/0x10 [ 930.299039][T14375] ? lock_acquire.part.0+0x11b/0x380 [ 930.304305][T14375] ? find_held_lock+0x2d/0x110 [ 930.309059][T14375] do_filp_open+0x20c/0x470 [ 930.313546][T14375] ? __pfx_do_filp_open+0x10/0x10 [ 930.318576][T14375] ? find_held_lock+0x2d/0x110 [ 930.323357][T14375] ? __pfx_kfree_link+0x10/0x10 [ 930.328212][T14375] ? alloc_fd+0x41f/0x760 [ 930.332534][T14375] do_sys_openat2+0x17a/0x1e0 [ 930.337197][T14375] ? __pfx_do_sys_openat2+0x10/0x10 [ 930.342399][T14375] ? __fget_files+0x206/0x3a0 [ 930.347079][T14375] __x64_sys_openat+0x175/0x210 [ 930.351917][T14375] ? __pfx___x64_sys_openat+0x10/0x10 [ 930.357295][T14375] ? ksys_write+0x1ba/0x250 [ 930.361790][T14375] do_syscall_64+0xcd/0x250 [ 930.366285][T14375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.372163][T14375] RIP: 0033:0x7f6cc0b84690 [ 930.376564][T14375] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 930.396182][T14375] RSP: 002b:00007f6cc192cf60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 930.404598][T14375] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6cc0b84690 [ 930.412565][T14375] RDX: 0000000000000000 RSI: 00007f6cc0c01c20 RDI: 00000000ffffff9c [ 930.420536][T14375] RBP: 00007f6cc0c01c20 R08: 0000000000000000 R09: 0000000000000000 [ 930.428494][T14375] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 930.436448][T14375] R13: 0000000000000001 R14: 00007f6cc0d75fa0 R15: 00007ffccfee8078 [ 930.444421][T14375] [ 930.493751][ T5865] peak_usb 2-1:0.29: probe with driver peak_usb failed with error -32 [ 930.525741][ T5865] usb 2-1: USB disconnect, device number 84 [ 931.727255][T14389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 931.775287][T14389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 931.790834][T14388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 931.812374][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.822951][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.830298][T14391] syz.2.2293: attempt to access beyond end of device [ 931.830298][T14391] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 931.913881][T14391] FAT-fs (nbd2): unable to read boot sector [ 932.221891][ T5865] usb 1-1: USB disconnect, device number 86 [ 933.223160][T14406] syz.0.2299: attempt to access beyond end of device [ 933.223160][T14406] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 933.273806][T14406] FAT-fs (nbd0): unable to read boot sector [ 933.416707][T14404] syz.4.2300: attempt to access beyond end of device [ 933.416707][T14404] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 933.429922][T14404] FAT-fs (nbd4): unable to read boot sector [ 933.539618][T14408] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2301'. [ 933.913736][T14408] netlink: 6296 bytes leftover after parsing attributes in process `syz.3.2301'. [ 933.964219][T14408] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2301'. [ 934.108042][T14420] netlink: 71 bytes leftover after parsing attributes in process `syz.4.2305'. [ 935.262624][T14435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 935.649706][T14435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 935.882008][T14442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 938.025495][ T29] audit: type=1400 audit(1737353593.373:610): avc: denied { bind } for pid=14448 comm="syz.1.2312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 938.463045][ T29] audit: type=1326 audit(1737353594.493:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14456 comm="syz.1.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7495f85d29 code=0x7ffc0000 [ 938.514458][T14459] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2315'. [ 938.533758][T14459] netlink: 'syz.1.2315': attribute type 1 has an invalid length. [ 938.545948][ T29] audit: type=1326 audit(1737353594.543:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14456 comm="syz.1.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7495f85d29 code=0x7ffc0000 [ 938.585444][T14459] netlink: 13 bytes leftover after parsing attributes in process `syz.1.2315'. [ 938.615073][T14459] vlan2: entered allmulticast mode [ 938.632567][ T29] audit: type=1326 audit(1737353594.573:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14456 comm="syz.1.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f7495f85d29 code=0x7ffc0000 [ 938.713089][T14465] netlink: 2716 bytes leftover after parsing attributes in process `syz.2.2314'. [ 939.070372][ T29] audit: type=1326 audit(1737353594.573:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14456 comm="syz.1.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7495f85d29 code=0x7ffc0000 [ 939.204253][ T29] audit: type=1326 audit(1737353594.573:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14456 comm="syz.1.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7495f85d29 code=0x7ffc0000 [ 939.377189][ T29] audit: type=1326 audit(1737353594.573:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14456 comm="syz.1.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7495f85d29 code=0x7ffc0000 [ 939.451304][ T29] audit: type=1326 audit(1737353594.573:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14456 comm="syz.1.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7495f85d29 code=0x7ffc0000 [ 939.518214][ T25] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 939.534010][ T29] audit: type=1326 audit(1737353594.573:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14456 comm="syz.1.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7495f85d29 code=0x7ffc0000 [ 939.587128][ T29] audit: type=1326 audit(1737353594.573:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14456 comm="syz.1.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7495f85d29 code=0x7ffc0000 [ 939.721574][ T25] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 939.765615][ T25] usb 2-1: config 0 has no interface number 0 [ 939.766050][ T9] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 939.795415][ T25] usb 2-1: config 0 interface 29 has no altsetting 0 [ 939.863945][ T9] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz0] on syz0 [ 939.873980][ T25] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 939.893820][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.930950][ T25] usb 2-1: Product: syz [ 940.036634][ T25] usb 2-1: Manufacturer: syz [ 940.090260][ T25] usb 2-1: SerialNumber: syz [ 940.147248][ T25] usb 2-1: config 0 descriptor?? [ 940.490076][T14489] openvswitch: netlink: IP tunnel dst address not specified [ 941.449853][T14491] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2324'. [ 941.491082][ T25] peak_usb 2-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 941.807131][ T25] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 941.814103][ T25] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 941.821666][ T25] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 943.058868][ T25] peak_usb 2-1:0.29: probe with driver peak_usb failed with error -22 [ 943.107471][ T25] usb 2-1: USB disconnect, device number 85 [ 943.971851][T14521] syz.4.2326: attempt to access beyond end of device [ 943.971851][T14521] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 943.997444][T14521] FAT-fs (nbd4): unable to read boot sector [ 944.383978][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 944.385130][ T29] audit: type=1400 audit(1737353600.443:626): avc: denied { ioctl } for pid=14522 comm="syz.1.2331" path="socket:[38335]" dev="sockfs" ino=38335 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 944.475653][T14526] Cannot find del_set index 136 as target [ 944.668216][ T47] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 944.851935][ T47] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 945.160757][ T47] usb 4-1: config 0 has no interface number 0 [ 945.188318][ T47] usb 4-1: config 0 interface 29 has no altsetting 0 [ 945.208301][ T8] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 945.245859][ T47] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 945.247907][ T29] audit: type=1400 audit(1737353601.303:627): avc: denied { remount } for pid=14535 comm="syz.1.2334" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 945.268008][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.284623][ T47] usb 4-1: Product: syz [ 945.288275][T14536] ======================================================= [ 945.288275][T14536] WARNING: The mand mount option has been deprecated and [ 945.288275][T14536] and is ignored by this kernel. Remove the mand [ 945.288275][T14536] option from the mount to silence this warning. [ 945.288275][T14536] ======================================================= [ 945.288922][ T47] usb 4-1: Manufacturer: syz [ 945.329037][ T47] usb 4-1: SerialNumber: syz [ 945.349490][ T47] usb 4-1: config 0 descriptor?? [ 945.373871][ T8] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 945.384151][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 945.422845][ T8] usb 5-1: config 0 has no interface number 0 [ 945.432444][ T8] usb 5-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 945.445940][ T8] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 945.461225][ T8] usb 5-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 945.477781][ T8] usb 5-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 945.495531][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.519043][ T8] usb 5-1: Product: syz [ 945.537019][ T8] usb 5-1: Manufacturer: syz [ 945.548816][ T8] usb 5-1: SerialNumber: syz [ 945.573062][ T47] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 945.646316][T14541] Cannot find del_set index 136 as target [ 945.719985][ T8] usb 5-1: config 0 descriptor?? [ 945.780499][ T47] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 945.951028][ T47] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 945.958020][ T47] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 946.139108][T14543] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2336'. [ 946.206493][ T8] HFC-S_USB 5-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 946.424802][T14528] bridge0: port 3(hsr_slave_1) entered blocking state [ 946.438334][T14528] bridge0: port 3(hsr_slave_1) entered disabled state [ 946.451677][ T47] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -22 [ 946.498596][T14528] hsr_slave_1: entered allmulticast mode [ 946.661760][ T47] usb 4-1: USB disconnect, device number 93 [ 946.679512][T14528] hsr_slave_1: left allmulticast mode [ 946.690060][ T5862] kernel write not supported for file /snd/seq (pid: 5862 comm: kworker/1:3) [ 946.765866][T14549] Cannot find del_set index 136 as target [ 946.883101][ T47] usb 5-1: USB disconnect, device number 82 [ 949.127270][ T8] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 949.355149][ T8] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 949.614999][ T8] usb 1-1: config 0 has no interface number 0 [ 949.621506][ T8] usb 1-1: config 0 interface 29 has no altsetting 0 [ 949.631045][ T8] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 949.642761][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.653105][T14574] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2343'. [ 949.664596][ T8] usb 1-1: Product: syz [ 949.704715][ T8] usb 1-1: Manufacturer: syz [ 949.728442][ T8] usb 1-1: SerialNumber: syz [ 949.742448][T14575] syz.4.2342: attempt to access beyond end of device [ 949.742448][T14575] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 949.757694][T14581] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2343'. [ 949.767802][ T8] usb 1-1: config 0 descriptor?? [ 949.782434][T14575] FAT-fs (nbd4): unable to read boot sector [ 949.911495][T14580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2345'. [ 950.210402][ T8] peak_usb 1-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 950.432877][ T8] peak_usb 1-1:0.29 can0: sending command failure: -22 [ 950.546610][ T8] peak_usb 1-1:0.29 can0: sending command failure: -22 [ 950.625176][ T8] peak_usb 1-1:0.29 can0: sending command failure: -22 [ 950.918620][ T8] peak_usb 1-1:0.29: probe with driver peak_usb failed with error -22 [ 950.933441][ T8] usb 1-1: USB disconnect, device number 87 [ 951.812900][T14607] geneve2: entered promiscuous mode [ 951.818260][T14607] geneve2: entered allmulticast mode [ 952.029184][T14606] xt_CT: No such helper "syz0" [ 952.363291][T14615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14615 comm=syz.2.2355 [ 952.528171][ T5865] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 952.978278][ T5865] usb 2-1: Using ep0 maxpacket: 8 [ 953.106879][ T5865] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 953.352470][T14627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2358'. [ 953.653783][ T5865] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 953.719498][ T5865] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 953.796039][T14631] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2360'. [ 953.843472][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.860414][ T5865] usb 2-1: Product: syz [ 953.864795][ T5865] usb 2-1: Manufacturer: syz [ 953.872476][T14635] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2360'. [ 953.876632][ T5865] usb 2-1: SerialNumber: syz [ 953.990747][ T5865] usb 2-1: config 0 descriptor?? [ 954.042591][ T5865] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 954.059294][ T5865] imon 2-1:0.0: unable to initialize intf0, err -19 [ 954.066076][ T5865] imon:imon_probe: failed to initialize context! [ 954.092966][ T5865] imon 2-1:0.0: unable to register, err -19 [ 954.264529][T14611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 954.297081][T14611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.870492][ T47] usb 2-1: USB disconnect, device number 86 [ 955.257941][ T29] audit: type=1400 audit(1737353611.273:628): avc: denied { write } for pid=14647 comm="syz.2.2364" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 955.373286][T14652] geneve2: entered promiscuous mode [ 955.378647][T14652] geneve2: entered allmulticast mode [ 956.028485][T14655] xt_TCPMSS: Only works on TCP SYN packets [ 956.469422][T14660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14660 comm=syz.2.2367 [ 956.649514][ T5892] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 956.921380][ T5892] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 956.938388][ T5892] usb 1-1: config 0 has no interface number 0 [ 956.944656][ T5892] usb 1-1: config 0 interface 29 has no altsetting 0 [ 956.955648][ T5892] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 956.968413][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.976445][ T5892] usb 1-1: Product: syz [ 956.985971][ T5892] usb 1-1: Manufacturer: syz [ 957.058220][ T5892] usb 1-1: SerialNumber: syz [ 957.079925][ T5892] usb 1-1: config 0 descriptor?? [ 957.287811][ T5955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 957.317907][ T5892] peak_usb 1-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 957.333956][ T5955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 957.533490][ T5892] peak_usb 1-1:0.29 can0: sending command failure: -22 [ 957.639200][ T5892] peak_usb 1-1:0.29 can0: sending command failure: -22 [ 957.664074][ T5892] peak_usb 1-1:0.29 can0: sending command failure: -22 [ 957.969111][ T5857] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 958.528731][T14692] xt_CT: No such helper "syz0" [ 958.613839][T14693] geneve2: entered promiscuous mode [ 958.619217][T14693] geneve2: entered allmulticast mode [ 958.682391][T14682] uprobe: syz.1.2373:14682 failed to unregister, leaking uprobe [ 958.690333][T14682] uprobe: syz.1.2373:14682 failed to unregister, leaking uprobe [ 958.717138][ T5892] peak_usb 1-1:0.29: probe with driver peak_usb failed with error -22 [ 958.819950][ T29] audit: type=1326 audit(1737353614.883:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14696 comm="syz.2.2378" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6cc0b85d29 code=0x0 [ 958.838443][ T5892] usb 1-1: USB disconnect, device number 88 [ 958.878198][ T5857] usb 5-1: Using ep0 maxpacket: 8 [ 958.897866][ T5857] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 959.449531][ T5857] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 959.462489][ T5857] usb 5-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 959.471781][ T5857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.479879][ T5857] usb 5-1: Product: syz [ 959.484063][ T5857] usb 5-1: Manufacturer: syz [ 959.489143][ T5857] usb 5-1: SerialNumber: syz [ 959.502105][ T5857] usb 5-1: config 0 descriptor?? [ 959.591404][ T5857] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 959.599314][ T5857] imon 5-1:0.0: unable to initialize intf0, err -19 [ 959.606381][ T5857] imon:imon_probe: failed to initialize context! [ 959.623020][ T5857] imon 5-1:0.0: unable to register, err -19 [ 959.905649][T14686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.932070][T14686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 960.329792][ T47] usb 5-1: USB disconnect, device number 83 [ 960.441552][T14706] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14706 comm=syz.0.2381 [ 962.016307][T14727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2386'. [ 962.116590][ T5862] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 962.259586][T14727] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 962.268479][T14727] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 962.277480][T14727] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 962.286694][T14727] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 962.298329][T14727] vxlan0: entered promiscuous mode [ 962.453399][ T5862] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 962.500801][ T5862] usb 4-1: config 0 has no interface number 0 [ 962.522596][ T5862] usb 4-1: config 0 interface 29 has no altsetting 0 [ 962.555518][ T5862] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 962.591075][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.612794][ T5862] usb 4-1: Product: syz [ 962.617092][ T5862] usb 4-1: Manufacturer: syz [ 962.637041][ T5862] usb 4-1: SerialNumber: syz [ 962.653598][ T5862] usb 4-1: config 0 descriptor?? [ 962.675071][T14736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 962.697788][T14736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 962.715948][T14736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 962.740446][T14736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 962.757093][T14736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 962.862652][ T5862] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 962.868428][ T5857] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 962.923866][T14740] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2390'. [ 962.923900][T14740] netlink: 'syz.0.2390': attribute type 1 has an invalid length. [ 963.020241][ T5857] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 963.042839][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.063001][ T5862] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 963.063118][ T5857] usb 5-1: config 0 descriptor?? [ 963.075883][ T5862] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 963.083301][ T5862] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 963.129002][ T5862] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -22 [ 963.278309][T14734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 963.286904][T14734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 963.349613][ T9] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 963.673997][ T9] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 963.700174][ T9] usb 1-1: config 0 has no interface number 0 [ 963.775300][ T9] usb 1-1: config 0 interface 29 has no altsetting 0 [ 963.779275][ T47] usb 4-1: USB disconnect, device number 94 [ 963.789958][ T9] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 963.805542][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.814982][ T9] usb 1-1: Product: syz [ 963.820412][ T9] usb 1-1: Manufacturer: syz [ 963.825258][ T9] usb 1-1: SerialNumber: syz [ 963.833373][ T9] usb 1-1: config 0 descriptor?? [ 964.042790][ T9] peak_usb 1-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 964.158917][ T5862] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 964.161524][ T5857] ath6kl: Failed to submit usb control message: -110 [ 964.481588][ T5857] ath6kl: unable to send the bmi data to the device: -110 [ 964.488939][ T5857] ath6kl: Unable to send get target info: -110 [ 964.520034][ T5857] ath6kl: Failed to init ath6kl core: -110 [ 964.541302][ T9] peak_usb 1-1:0.29 can0: sending command failure: -22 [ 964.553119][ T5857] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 964.565984][ T9] peak_usb 1-1:0.29 can0: sending command failure: -22 [ 964.579322][ T9] peak_usb 1-1:0.29 can0: sending command failure: -22 [ 964.750632][ T9] peak_usb 1-1:0.29: probe with driver peak_usb failed with error -22 [ 965.154131][ T5862] usb 3-1: Using ep0 maxpacket: 8 [ 965.872649][ T5892] usb 5-1: USB disconnect, device number 84 [ 966.081164][ T5862] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 966.100314][ T5862] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 966.113323][ T5862] usb 3-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 966.123175][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.134747][ T5862] usb 3-1: Product: syz [ 966.175142][ T5862] usb 3-1: Manufacturer: syz [ 966.190186][ T5862] usb 3-1: SerialNumber: syz [ 966.203328][ T5862] usb 3-1: config 0 descriptor?? [ 966.398439][ T9] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 966.405654][ T5862] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 966.583344][ T5862] imon 3-1:0.0: unable to initialize intf0, err -19 [ 966.600206][ T5862] imon:imon_probe: failed to initialize context! [ 966.706314][ T5862] imon 3-1:0.0: unable to register, err -19 [ 966.728224][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 966.745176][ T9] usb 2-1: config 4 has an invalid interface number: 228 but max is 0 [ 966.756893][ T9] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 967.356235][ T9] usb 2-1: config 4 has no interface number 0 [ 967.362431][ T9] usb 2-1: config 4 interface 228 altsetting 68 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 967.375632][ T9] usb 2-1: config 4 interface 228 has no altsetting 0 [ 967.384588][ T9] usb 2-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 967.393976][ T9] usb 2-1: New USB device strings: Mfr=1, Product=25, SerialNumber=3 [ 967.422962][ T9] usb 2-1: Product: syz [ 967.427166][ T9] usb 2-1: Manufacturer: syz [ 967.439947][ T5893] usb 3-1: USB disconnect, device number 95 [ 967.476392][ T9] usb 2-1: SerialNumber: syz [ 967.684172][ T5892] usb 1-1: USB disconnect, device number 89 [ 968.454227][T14789] siw: device registration error -23 [ 968.465795][T14789] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.2401'. [ 968.475278][T14789] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 968.593812][T14782] xt_CT: No such helper "syz0" [ 968.803699][T14791] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2402'. [ 968.821464][T14785] geneve2: entered promiscuous mode [ 968.826766][T14785] geneve2: entered allmulticast mode [ 968.833863][T14791] netlink: 'syz.0.2402': attribute type 1 has an invalid length. [ 969.024173][T14798] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2403'. [ 969.045502][ T29] audit: type=1400 audit(1737353625.103:630): avc: denied { write } for pid=14795 comm="syz.0.2404" path="socket:[39283]" dev="sockfs" ino=39283 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 969.131269][T14804] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2403'. [ 969.520043][ T29] audit: type=1400 audit(1737353625.583:631): avc: denied { write } for pid=14777 comm="syz.2.2400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 969.568441][ T25] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 969.718160][ T25] usb 1-1: device descriptor read/64, error -71 [ 969.799055][ T5865] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 969.951663][ T9] usb 2-1: USB disconnect, device number 87 [ 970.111903][ T25] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 970.148567][ T5865] usb 3-1: Using ep0 maxpacket: 32 [ 970.155123][ T5865] usb 3-1: config 0 has an invalid descriptor of length 215, skipping remainder of the config [ 970.166751][ T5865] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 21 [ 970.181854][ T5865] usb 3-1: New USB device found, idVendor=1a06, idProduct=0108, bcdDevice=36.66 [ 970.194288][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.202612][ T5865] usb 3-1: Product: syz [ 970.206852][ T5865] usb 3-1: Manufacturer: syz [ 970.225921][ T5865] usb 3-1: SerialNumber: syz [ 970.288910][ T25] usb 1-1: device descriptor read/64, error -71 [ 970.364516][ T5865] usb 3-1: config 0 descriptor?? [ 970.410193][ T25] usb usb1-port1: attempt power cycle [ 970.818636][ T25] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 970.850407][ T25] usb 1-1: device descriptor read/8, error -71 [ 970.988745][ T9] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 971.162189][ T29] audit: type=1326 audit(1737353627.223:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14825 comm="syz.3.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5552185d29 code=0x7ffc0000 [ 971.187342][ T29] audit: type=1326 audit(1737353627.223:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14825 comm="syz.3.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5552185d29 code=0x7ffc0000 [ 971.211996][ T9] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 971.212111][ T29] audit: type=1326 audit(1737353627.253:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14825 comm="syz.3.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f5552185d29 code=0x7ffc0000 [ 971.222916][ T9] usb 2-1: config 0 has no interface number 0 [ 971.243776][ T25] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 971.244517][ T29] audit: type=1326 audit(1737353627.253:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14825 comm="syz.3.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5552185d29 code=0x7ffc0000 [ 971.285354][ T29] audit: type=1326 audit(1737353627.253:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14825 comm="syz.3.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5552185d29 code=0x7ffc0000 [ 971.288564][ T9] usb 2-1: config 0 interface 29 has no altsetting 0 [ 971.309073][ T25] usb 1-1: device descriptor read/8, error -71 [ 971.323020][ T29] audit: type=1326 audit(1737353627.263:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14825 comm="syz.3.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5552185d29 code=0x7ffc0000 [ 971.347451][ T29] audit: type=1326 audit(1737353627.263:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14825 comm="syz.3.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5552185d29 code=0x7ffc0000 [ 971.371952][ T29] audit: type=1326 audit(1737353627.263:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14825 comm="syz.3.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f5552185d29 code=0x7ffc0000 [ 971.396275][ T9] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 971.405669][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.413875][ T9] usb 2-1: Product: syz [ 971.418218][ T9] usb 2-1: Manufacturer: syz [ 971.422845][ T9] usb 2-1: SerialNumber: syz [ 971.429029][ T9] usb 2-1: config 0 descriptor?? [ 971.438194][ T5892] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 971.438646][ T25] usb usb1-port1: unable to enumerate USB device [ 971.588193][ T5892] usb 5-1: Using ep0 maxpacket: 8 [ 971.595547][ T5892] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 971.606124][ T5892] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 971.623962][ T5892] usb 5-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 971.633170][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.642748][ T5892] usb 5-1: Product: syz [ 971.646968][ T5892] usb 5-1: Manufacturer: syz [ 971.651754][ T9] peak_usb 2-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 971.660116][ T5892] usb 5-1: SerialNumber: syz [ 971.666420][ T5892] usb 5-1: config 0 descriptor?? [ 971.673778][ T5892] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 971.682021][ T5892] imon 5-1:0.0: unable to initialize intf0, err -19 [ 971.689037][ T5892] imon:imon_probe: failed to initialize context! [ 971.695415][ T5892] imon 5-1:0.0: unable to register, err -19 [ 971.796480][ T5892] usb 3-1: USB disconnect, device number 96 [ 971.843526][ T9] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 971.858633][ T9] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 971.865552][ T9] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 971.884863][T14824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 971.895220][T14824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 971.904927][ T9] peak_usb 2-1:0.29: probe with driver peak_usb failed with error -22 [ 971.920889][T14470] udevd[14470]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 972.248379][ T47] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 972.256358][ T25] usb 5-1: USB disconnect, device number 85 [ 972.502598][ T47] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 972.690403][ T47] usb 4-1: config 0 has no interface number 0 [ 972.811798][ T47] usb 4-1: config 0 interface 29 has no altsetting 0 [ 973.115464][ T9] usb 2-1: USB disconnect, device number 88 [ 973.128450][ T47] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 973.142884][T14836] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2413'. [ 973.154872][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.170078][ T47] usb 4-1: Product: syz [ 973.184682][ T47] usb 4-1: Manufacturer: syz [ 973.293844][ T47] usb 4-1: SerialNumber: syz [ 973.300122][ T47] usb 4-1: config 0 descriptor?? [ 973.515447][ T47] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 973.729054][ T47] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 973.736239][ T47] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 973.743537][ T47] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 974.188542][ T47] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -22 [ 974.209197][T14851] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2417'. [ 974.270584][T14854] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2417'. [ 974.342845][ T9] usb 4-1: USB disconnect, device number 95 [ 974.998139][ T47] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 975.080237][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 975.080254][ T29] audit: type=1400 audit(1737353631.143:663): avc: denied { checkpoint_restore } for pid=14858 comm="syz.1.2419" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 975.164747][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 975.201294][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 975.227846][ T47] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 975.244138][T14861] overlayfs: missing 'workdir' [ 975.248157][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.273806][ T47] usb 1-1: config 0 descriptor?? [ 975.555068][T14871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 976.287082][ T29] audit: type=1400 audit(1737353631.783:664): avc: denied { append } for pid=14866 comm="syz.2.2423" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 976.311673][ T47] hid-steam 0003:28DE:1142.0017: unknown main item tag 0x0 [ 976.335843][T14871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 976.348703][ T47] hid-steam 0003:28DE:1142.0017: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 976.363024][T14873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 976.419541][T14871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 976.429694][ T47] hid-steam 0003:28DE:1142.0017: Steam wireless receiver connected [ 976.519274][T14871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 976.520787][ T47] hid-steam 0003:28DE:1142.0018: unknown main item tag 0x0 [ 976.573645][T14879] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2426'. [ 976.577075][ T47] hid-steam 0003:28DE:1142.0018: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 976.738236][ T9] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 976.842864][T14882] FAULT_INJECTION: forcing a failure. [ 976.842864][T14882] name failslab, interval 1, probability 0, space 0, times 0 [ 976.855758][T14882] CPU: 1 UID: 0 PID: 14882 Comm: syz.0.2418 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 976.866537][T14882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 976.876598][T14882] Call Trace: [ 976.879883][T14882] [ 976.882814][T14882] dump_stack_lvl+0x16c/0x1f0 [ 976.887484][T14882] should_fail_ex+0x497/0x5b0 [ 976.892161][T14882] should_failslab+0xc2/0x120 [ 976.896829][T14882] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 976.898630][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 976.902185][T14882] ? skb_clone+0x190/0x3f0 [ 976.902216][T14882] skb_clone+0x190/0x3f0 [ 976.902239][T14882] netlink_deliver_tap+0xabd/0xd30 [ 976.909671][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 976.911646][T14882] netlink_unicast+0x5e1/0x7f0 [ 976.919792][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 976.920970][T14882] ? __pfx_netlink_unicast+0x10/0x10 [ 976.951712][T14882] netlink_sendmsg+0x8b8/0xd70 [ 976.956488][T14882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 976.961786][T14882] ____sys_sendmsg+0xaaf/0xc90 [ 976.966551][T14882] ? copy_msghdr_from_user+0x10b/0x160 [ 976.972016][T14882] ? __pfx_____sys_sendmsg+0x10/0x10 [ 976.977316][T14882] ___sys_sendmsg+0x135/0x1e0 [ 976.981990][T14882] ? __pfx____sys_sendmsg+0x10/0x10 [ 976.987192][T14882] ? __pfx_lock_release+0x10/0x10 [ 976.992212][T14882] ? trace_lock_acquire+0x14e/0x1f0 [ 976.997420][T14882] ? __fget_files+0x206/0x3a0 [ 977.002100][T14882] __sys_sendmsg+0x16e/0x220 [ 977.006688][T14882] ? __pfx___sys_sendmsg+0x10/0x10 [ 977.011810][T14882] do_syscall_64+0xcd/0x250 [ 977.016316][T14882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.022211][T14882] RIP: 0033:0x7f4e3b385d29 [ 977.026623][T14882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 977.046227][T14882] RSP: 002b:00007f4e3c1a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 977.054642][T14882] RAX: ffffffffffffffda RBX: 00007f4e3b576080 RCX: 00007f4e3b385d29 [ 977.062608][T14882] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000003 [ 977.070573][T14882] RBP: 00007f4e3c1a5090 R08: 0000000000000000 R09: 0000000000000000 [ 977.078537][T14882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 977.086499][T14882] R13: 0000000000000000 R14: 00007f4e3b576080 R15: 00007ffea036f718 [ 977.094483][T14882] [ 977.100119][ T9] usb 3-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 977.113851][ T25] usb 1-1: USB disconnect, device number 94 [ 977.114486][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.129481][ T25] hid-steam 0003:28DE:1142.0017: Steam wireless receiver disconnected [ 977.133314][ T9] usb 3-1: Product: syz [ 977.145417][ T9] usb 3-1: Manufacturer: syz [ 977.151150][ T9] usb 3-1: SerialNumber: syz [ 977.158283][ T47] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 977.179650][ T9] usb 3-1: config 0 descriptor?? [ 977.199552][ T9] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 977.207464][ T9] imon 3-1:0.0: unable to initialize intf0, err -19 [ 977.216853][ T9] imon:imon_probe: failed to initialize context! [ 977.225728][ T9] imon 3-1:0.0: unable to register, err -19 [ 977.337644][ T47] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 977.345986][ T47] usb 4-1: config 0 has no interface number 0 [ 977.352756][ T47] usb 4-1: config 0 interface 29 has no altsetting 0 [ 977.363521][ T47] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 977.374066][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.385532][ T47] usb 4-1: Product: syz [ 977.393181][ T47] usb 4-1: Manufacturer: syz [ 977.398922][ T47] usb 4-1: SerialNumber: syz [ 977.419033][ T47] usb 4-1: config 0 descriptor?? [ 977.423752][T14877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 977.449216][T14877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 977.639802][ T47] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 977.840294][ T47] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 977.847628][ T47] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 977.855170][ T47] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 977.908899][ T47] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -22 [ 978.365408][ T5892] usb 4-1: USB disconnect, device number 96 [ 979.248268][ T47] usb 1-1: new full-speed USB device number 95 using dummy_hcd [ 979.427756][ T47] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 979.441914][ T47] usb 1-1: config 0 has no interface number 0 [ 979.450610][ T47] usb 1-1: config 0 interface 29 has no altsetting 0 [ 979.460851][ T47] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 979.474193][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.490639][T10759] Bluetooth: hci5: command 0x1003 tx timeout [ 979.495603][ T47] usb 1-1: Product: syz [ 979.501652][ T5820] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 979.530592][ T47] usb 1-1: Manufacturer: syz [ 979.548223][ T47] usb 1-1: SerialNumber: syz [ 979.564917][ T47] usb 1-1: config 0 descriptor?? [ 979.579848][ T5892] usb 3-1: USB disconnect, device number 97 [ 979.746674][T14904] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2434'. [ 980.600625][ T47] peak_usb 1-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 980.610334][ T47] peak_usb 1-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 980.679291][ T47] peak_usb 1-1:0.29: probe with driver peak_usb failed with error -71 [ 980.706931][ T47] usb 1-1: USB disconnect, device number 95 [ 981.709323][T14924] openvswitch: netlink: IP tunnel dst address not specified [ 982.320301][T14931] mmap: syz.3.2435 (14931): VmData 37728256 exceed data ulimit 5. Update limits or use boot option ignore_rlimit_data. [ 982.408319][ T47] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 982.593584][ T47] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 982.602120][ T47] usb 2-1: config 0 has no interface number 0 [ 982.615296][ T47] usb 2-1: config 0 interface 29 has no altsetting 0 [ 982.624126][ T47] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 982.633351][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.642049][ T47] usb 2-1: Product: syz [ 982.646269][ T47] usb 2-1: Manufacturer: syz [ 982.651156][ T47] usb 2-1: SerialNumber: syz [ 982.662045][ T47] usb 2-1: config 0 descriptor?? [ 982.698474][ T25] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 982.881045][ T47] peak_usb 2-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 982.889752][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 982.896864][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 982.907247][ T25] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 982.921169][ T25] usb 1-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 982.930924][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.939615][ T25] usb 1-1: Product: syz [ 982.943860][ T25] usb 1-1: Manufacturer: syz [ 982.949118][ T25] usb 1-1: SerialNumber: syz [ 982.961544][ T25] usb 1-1: config 0 descriptor?? [ 982.977264][ T25] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 982.985352][ T25] imon 1-1:0.0: unable to initialize intf0, err -19 [ 982.992445][ T25] imon:imon_probe: failed to initialize context! [ 982.999006][ T25] imon 1-1:0.0: unable to register, err -19 [ 983.081989][ T47] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 983.089651][ T47] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 983.096539][ T47] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 983.161869][ T47] peak_usb 2-1:0.29: probe with driver peak_usb failed with error -22 [ 983.219392][T14945] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2445'. [ 984.237111][ T47] usb 2-1: USB disconnect, device number 89 [ 984.290545][T14939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.353231][T14939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.743432][ T47] usb 1-1: USB disconnect, device number 96 [ 985.885614][T14964] netlink: 71 bytes leftover after parsing attributes in process `syz.0.2450'. [ 986.318433][ T8] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 986.540842][ T8] usb 4-1: config 0 has an invalid interface number: 217 but max is 0 [ 986.552923][ T8] usb 4-1: config 0 has no interface number 0 [ 986.576834][ T8] usb 4-1: New USB device found, idVendor=a168, idProduct=0618, bcdDevice=e3.a4 [ 986.791027][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.878316][ T8] usb 4-1: Product: syz [ 986.899943][ T8] usb 4-1: Manufacturer: syz [ 986.993920][ T8] usb 4-1: SerialNumber: syz [ 987.014375][ T8] usb 4-1: config 0 descriptor?? [ 987.039571][ T8] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0618 [ 987.244892][ T8] gspca_sn9c20x: Write register 1000 failed -71 [ 987.253641][ T8] gspca_sn9c20x: Device initialization failed [ 987.263966][ T8] gspca_sn9c20x 4-1:0.217: probe with driver gspca_sn9c20x failed with error -71 [ 987.316298][ T8] usb 4-1: USB disconnect, device number 97 [ 987.437331][T14990] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2456'. [ 988.588130][ T47] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 989.080261][ T9] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 989.248237][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 989.265504][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 989.304792][T15006] syz.1.2463: attempt to access beyond end of device [ 989.304792][T15006] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 989.319815][ T47] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 989.327924][ T47] usb 5-1: config 0 has no interface number 0 [ 989.338180][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 989.349580][ T47] usb 5-1: config 0 interface 29 has no altsetting 0 [ 989.359286][T15006] FAT-fs (nbd1): unable to read boot sector [ 989.364547][ T47] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 989.383987][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.410704][ T9] usb 3-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 989.420764][ T47] usb 5-1: Product: syz [ 989.433554][ T47] usb 5-1: Manufacturer: syz [ 989.442299][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.453973][ T47] usb 5-1: SerialNumber: syz [ 989.473855][ T47] usb 5-1: config 0 descriptor?? [ 989.478141][ T9] usb 3-1: Product: syz [ 989.487591][ T9] usb 3-1: Manufacturer: syz [ 989.498163][ T9] usb 3-1: SerialNumber: syz [ 989.524760][ T9] usb 3-1: config 0 descriptor?? [ 989.526751][T15012] vxcan1: tx address claim with dlc 1 [ 989.542336][ T9] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 989.564090][ T9] imon 3-1:0.0: unable to initialize intf0, err -19 [ 989.603958][ T9] imon:imon_probe: failed to initialize context! [ 989.644595][ T9] imon 3-1:0.0: unable to register, err -19 [ 989.698308][ T47] peak_usb 5-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 989.763976][T15000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 989.786993][T15000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 989.950013][ T47] peak_usb 5-1:0.29 can0: sending command failure: -22 [ 989.956932][ T47] peak_usb 5-1:0.29 can0: sending command failure: -22 [ 989.967946][ T47] peak_usb 5-1:0.29 can0: sending command failure: -22 [ 990.642163][T15025] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2466'. [ 991.023299][ T47] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -22 [ 991.118037][ T47] usb 5-1: USB disconnect, device number 86 [ 991.142161][T15029] binder: BINDER_SET_CONTEXT_MGR already set [ 991.166883][T15029] binder: 15028:15029 ioctl 40046207 0 returned -16 [ 991.244243][ T5862] usb 3-1: USB disconnect, device number 98 [ 991.244959][ T29] audit: type=1400 audit(1737353647.253:665): avc: denied { mount } for pid=15028 comm="syz.0.2467" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 991.322406][ T29] audit: type=1400 audit(1737353647.263:666): avc: denied { watch } for pid=15028 comm="syz.0.2467" path="/503/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 991.398204][ T29] audit: type=1400 audit(1737353647.453:667): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 991.465526][T15034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 991.876712][T15037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 991.881948][T15034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 992.240442][T15046] syz.1.2471: attempt to access beyond end of device [ 992.240442][T15046] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 992.258219][ T9] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 992.266103][T15046] FAT-fs (nbd1): unable to read boot sector [ 992.273142][T15047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2473'. [ 992.388273][ T9] usb 4-1: device descriptor read/64, error -71 [ 992.555916][T15050] syz.4.2472: attempt to access beyond end of device [ 992.555916][T15050] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 992.613478][T15050] FAT-fs (nbd4): unable to read boot sector [ 992.639860][ T9] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 992.818719][ T9] usb 4-1: device descriptor read/64, error -71 [ 992.837851][T15058] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2476'. [ 992.929341][ T9] usb usb4-port1: attempt power cycle [ 993.263405][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.270002][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.292311][ T9] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 993.369428][ T9] usb 4-1: device descriptor read/8, error -71 [ 993.593862][T15062] syz.0.2477: attempt to access beyond end of device [ 993.593862][T15062] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 993.607311][T15062] FAT-fs (nbd0): unable to read boot sector [ 993.738260][ T9] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 993.822465][ T9] usb 4-1: device descriptor read/8, error -71 [ 993.948401][ T9] usb usb4-port1: unable to enumerate USB device [ 994.973042][ T29] audit: type=1400 audit(1737353651.013:668): avc: denied { shutdown } for pid=15072 comm="syz.0.2481" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 995.003840][T15076] Process accounting resumed [ 995.410758][T15078] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2483'. [ 995.423788][T15078] netlink: 'syz.3.2483': attribute type 1 has an invalid length. [ 995.643875][T15083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 995.693183][ T29] audit: type=1400 audit(1737353651.753:669): avc: denied { create } for pid=15080 comm="syz.1.2484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 995.694479][T15085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 995.907643][ T29] audit: type=1400 audit(1737353651.773:670): avc: denied { ioctl } for pid=15080 comm="syz.1.2484" path="socket:[39903]" dev="sockfs" ino=39903 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 996.171997][T15082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 996.347284][T15094] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2487'. [ 996.482640][T15093] vivid-001: disconnect [ 996.511911][ T29] audit: type=1400 audit(1737353652.573:671): avc: denied { setattr } for pid=15095 comm="syz.2.2489" name="file0" dev="tmpfs" ino=2624 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 996.552389][T15096] input: syz0 as /devices/virtual/input/input36 [ 996.560477][T15093] vivid-001: reconnect [ 997.138211][T15103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 997.197210][T15108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 997.282188][T15110] syz.3.2490: attempt to access beyond end of device [ 997.282188][T15110] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 997.299513][T15110] FAT-fs (nbd3): unable to read boot sector [ 997.356641][T15103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 998.001472][T15103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 998.059950][T15103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 998.748586][T15123] syz.0.2494: attempt to access beyond end of device [ 998.748586][T15123] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 998.869677][T15123] FAT-fs (nbd0): unable to read boot sector [ 999.528150][ T5862] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 999.763720][ T5862] usb 5-1: Using ep0 maxpacket: 32 [ 999.817345][ T5862] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 999.858572][ T5862] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 999.867711][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.915051][T15137] IPv6: addrconf: prefix option has invalid lifetime [ 999.923207][T15137] IPv6: addrconf: prefix option has invalid lifetime [ 1000.502341][ T5862] usb 5-1: Product: syz [ 1000.515962][ T5862] usb 5-1: Manufacturer: syz [ 1000.516768][T15139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1000.539371][ T5862] usb 5-1: SerialNumber: syz [ 1000.555242][ T5862] usb 5-1: config 0 descriptor?? [ 1000.562138][T15143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1000.792051][ T5862] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 1000.971520][T15135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1002.027103][T15160] binder: BINDER_SET_CONTEXT_MGR already set [ 1002.033568][T15160] binder: 15157:15160 ioctl 4018620d 20000040 returned -16 [ 1002.354782][ T5862] gspca_sunplus: reg_r err -32 [ 1002.478300][T15154] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2503'. [ 1002.523087][T15164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1002.562845][T15166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1002.685028][T15164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1002.713845][T15164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1002.726623][T15164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1002.753391][T15167] syz.1.2507: attempt to access beyond end of device [ 1002.753391][T15167] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1002.769468][T15167] FAT-fs (nbd1): unable to read boot sector [ 1002.860298][T15171] overlayfs: failed to resolve './file1': -2 [ 1003.708241][ T5862] sunplus 5-1:0.0: probe with driver sunplus failed with error -32 [ 1004.167775][ T5862] usb 5-1: USB disconnect, device number 87 [ 1004.607547][ T29] audit: type=1400 audit(1737353666.655:672): avc: denied { ioctl } for pid=15181 comm="syz.3.2512" path="socket:[41105]" dev="sockfs" ino=41105 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1005.556669][T15201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1005.719222][T15201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1005.811258][ T29] audit: type=1400 audit(1737353673.798:673): avc: denied { map } for pid=15202 comm="syz.2.2518" path="socket:[40799]" dev="sockfs" ino=40799 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1005.869008][T15198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1005.983544][T15213] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1006.796475][ T29] audit: type=1400 audit(1737353674.648:674): avc: denied { connect } for pid=15207 comm="syz.3.2519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1007.202185][T15217] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2521'. [ 1009.082195][T15235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1009.246794][T15237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1009.311641][T15238] binder: BINDER_SET_CONTEXT_MGR already set [ 1009.317701][T15238] binder: 15233:15238 ioctl 4018620d 20000040 returned -16 [ 1009.823792][ T29] audit: type=1326 audit(1737353677.328:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15202 comm="syz.2.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc0b85d29 code=0x7fc00000 [ 1009.877054][T15235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1009.907160][ T29] audit: type=1326 audit(1737353677.328:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15202 comm="syz.2.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6cc0b85d29 code=0x7fc00000 [ 1009.988179][T15235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1010.088421][ T29] audit: type=1326 audit(1737353677.328:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15202 comm="syz.2.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc0b85d29 code=0x7fc00000 [ 1010.122172][T15237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1011.223814][T15250] syz.1.2527: attempt to access beyond end of device [ 1011.223814][T15250] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1011.236960][T15250] FAT-fs (nbd1): unable to read boot sector [ 1011.583216][T15254] FAULT_INJECTION: forcing a failure. [ 1011.583216][T15254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1011.596911][T15254] CPU: 1 UID: 0 PID: 15254 Comm: syz.3.2529 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 1011.607687][T15254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1011.617749][T15254] Call Trace: [ 1011.621028][T15254] [ 1011.623962][T15254] dump_stack_lvl+0x16c/0x1f0 [ 1011.628664][T15254] should_fail_ex+0x497/0x5b0 [ 1011.633363][T15254] _copy_from_user+0x2e/0xd0 [ 1011.637967][T15254] alg_setsockopt+0x77f/0xee0 [ 1011.642658][T15254] ? __pfx_alg_setsockopt+0x10/0x10 [ 1011.647875][T15254] ? selinux_socket_setsockopt+0x6a/0x80 [ 1011.653517][T15254] ? __pfx_alg_setsockopt+0x10/0x10 [ 1011.658730][T15254] do_sock_setsockopt+0x222/0x480 [ 1011.663766][T15254] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1011.669321][T15254] ? lock_acquire+0x2f/0xb0 [ 1011.673852][T15254] __sys_setsockopt+0x1a0/0x230 [ 1011.678725][T15254] __x64_sys_setsockopt+0xbd/0x160 [ 1011.683862][T15254] ? do_syscall_64+0x91/0x250 [ 1011.688558][T15254] ? lockdep_hardirqs_on+0x7c/0x110 [ 1011.693766][T15254] do_syscall_64+0xcd/0x250 [ 1011.698291][T15254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.704199][T15254] RIP: 0033:0x7f5552185d29 [ 1011.708621][T15254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1011.728240][T15254] RSP: 002b:00007f554ffd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1011.736668][T15254] RAX: ffffffffffffffda RBX: 00007f5552376160 RCX: 00007f5552185d29 [ 1011.744644][T15254] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000009 [ 1011.752617][T15254] RBP: 00007f554ffd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1011.760591][T15254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1011.768565][T15254] R13: 0000000000000000 R14: 00007f5552376160 R15: 00007ffd60f82378 [ 1011.776560][T15254] [ 1011.786779][T15254] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 1011.999630][T15262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1012.071601][T15264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1012.239942][T15261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1012.415401][T15273] syz.1.2534: attempt to access beyond end of device [ 1012.415401][T15273] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1012.544270][T15281] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2533'. [ 1013.170080][T15273] XFS (nbd1): SB validate failed with error -5. [ 1013.415322][T15287] FAULT_INJECTION: forcing a failure. [ 1013.415322][T15287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1013.471148][T15287] CPU: 0 UID: 0 PID: 15287 Comm: syz.4.2535 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 1013.481967][T15287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1013.492041][T15287] Call Trace: [ 1013.495330][T15287] [ 1013.498271][T15287] dump_stack_lvl+0x16c/0x1f0 [ 1013.502978][T15287] should_fail_ex+0x497/0x5b0 [ 1013.507687][T15287] strncpy_from_user+0x3b/0x2d0 [ 1013.512565][T15287] getname_flags.part.0+0x8f/0x550 [ 1013.517708][T15287] getname_flags+0x93/0xf0 [ 1013.522143][T15287] user_path_at+0x24/0x60 [ 1013.526482][T15287] __x64_sys_mount+0x1fc/0x320 [ 1013.531264][T15287] ? __pfx___x64_sys_mount+0x10/0x10 [ 1013.536579][T15287] do_syscall_64+0xcd/0x250 [ 1013.541101][T15287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.547020][T15287] RIP: 0033:0x7f1b0ed85d29 [ 1013.551449][T15287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1013.571073][T15287] RSP: 002b:00007f1b0fc66038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1013.579495][T15287] RAX: ffffffffffffffda RBX: 00007f1b0ef75fa0 RCX: 00007f1b0ed85d29 [ 1013.587462][T15287] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000040 [ 1013.595443][T15287] RBP: 00007f1b0fc66090 R08: 0000000020000140 R09: 0000000000000000 [ 1013.603398][T15287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1013.611357][T15287] R13: 0000000000000000 R14: 00007f1b0ef75fa0 R15: 00007fff88ebb208 [ 1013.619345][T15287] [ 1014.399416][T15300] netlink: 'syz.3.2541': attribute type 10 has an invalid length. [ 1014.597209][T15307] netlink: 1268 bytes leftover after parsing attributes in process `syz.3.2541'. [ 1014.719839][T15300] macvlan0: entered allmulticast mode [ 1014.825865][T15307] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1014.995437][T15300] veth1_vlan: entered allmulticast mode [ 1015.017263][T15300] team0: Port device macvlan0 added [ 1015.053934][T15302] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 1015.116368][T15302] macsec2: entered promiscuous mode [ 1015.153637][T15302] macsec2: entered allmulticast mode [ 1015.185644][T15302] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 1015.375950][T15321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1015.456900][ T9] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1015.548681][T10294] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1015.739858][T15325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1015.805654][T15319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1015.878289][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1015.878982][T15326] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2546'. [ 1016.027438][T10294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.044934][T10294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1016.066921][T10294] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1016.076402][T10294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.086381][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1016.087089][T10294] usb 2-1: config 0 descriptor?? [ 1016.629136][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1016.639300][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1016.649298][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1016.689582][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1016.719558][T10294] usb 2-1: can't set config #0, error -71 [ 1016.746912][T10294] usb 2-1: USB disconnect, device number 90 [ 1016.764803][ T9] usb 3-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 1016.855698][ T9] usb 3-1: Product: syz [ 1017.125294][T15337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2550'. [ 1017.145038][T15311] ubi0: detaching mtd0 [ 1017.169056][T15311] ubi0: mtd0 is detached [ 1017.309825][ T29] audit: type=1400 audit(1737353691.359:678): avc: denied { bind } for pid=15336 comm="syz.1.2550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1017.442134][ T9] usb 3-1: usb_control_msg returned -71 [ 1017.526817][ T9] usbtmc 3-1:16.0: can't read capabilities [ 1017.715048][ T9] usb 3-1: USB disconnect, device number 99 [ 1017.785016][ T5892] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1017.793959][ T5892] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1017.801636][ T5892] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1017.810186][ T5892] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1017.818805][ T5892] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1017.827805][ T5892] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1017.856313][ T5892] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1017.882076][ T5892] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1017.895218][ T5892] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1017.906656][ T5892] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1017.915233][ T5892] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1017.926863][ T5892] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1017.935214][ T5892] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1017.964664][ T5892] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1017.988412][ T5892] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1017.996672][ T5892] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1018.004615][ T5892] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1018.223320][ T5892] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1018.568994][T15351] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2554'. [ 1019.108410][T15353] syz.1.2555: attempt to access beyond end of device [ 1019.108410][T15353] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1019.121173][T15353] FAT-fs (nbd1): unable to read boot sector [ 1019.376719][T15372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1019.396500][T15372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1020.455888][T15371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1020.697803][T15380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2558'. [ 1022.308180][T15397] tmpfs: Bad value for 'mpol' [ 1023.946523][T15425] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2571'. [ 1024.499165][T15431] FAULT_INJECTION: forcing a failure. [ 1024.499165][T15431] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.538229][T15431] CPU: 1 UID: 0 PID: 15431 Comm: syz.4.2575 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 1024.549028][T15431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1024.559085][T15431] Call Trace: [ 1024.562344][T15431] [ 1024.565260][T15431] dump_stack_lvl+0x16c/0x1f0 [ 1024.569940][T15431] should_fail_ex+0x497/0x5b0 [ 1024.574625][T15431] ? fs_reclaim_acquire+0xae/0x150 [ 1024.579737][T15431] should_failslab+0xc2/0x120 [ 1024.584419][T15431] __kmalloc_cache_noprof+0x68/0x410 [ 1024.589706][T15431] ? _copy_from_user+0x59/0xd0 [ 1024.594489][T15431] copy_mount_options+0x55/0x190 [ 1024.599448][T15431] __x64_sys_mount+0x1ad/0x320 [ 1024.604218][T15431] ? __pfx___x64_sys_mount+0x10/0x10 [ 1024.609512][T15431] do_syscall_64+0xcd/0x250 [ 1024.614009][T15431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.619911][T15431] RIP: 0033:0x7f1b0ed85d29 [ 1024.624323][T15431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1024.643922][T15431] RSP: 002b:00007f1b0fc66038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1024.652319][T15431] RAX: ffffffffffffffda RBX: 00007f1b0ef75fa0 RCX: 00007f1b0ed85d29 [ 1024.660275][T15431] RDX: 0000000020000280 RSI: 0000000020000200 RDI: 0000000000000000 [ 1024.668236][T15431] RBP: 00007f1b0fc66090 R08: 0000000020000300 R09: 0000000000000000 [ 1024.676189][T15431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1024.684160][T15431] R13: 0000000000000000 R14: 00007f1b0ef75fa0 R15: 00007fff88ebb208 [ 1024.692160][T15431] [ 1025.412879][T15435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1025.447099][T15435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1025.505932][T15434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1025.542440][ T29] audit: type=1400 audit(1737353699.599:679): avc: denied { watch } for pid=15436 comm="syz.0.2577" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1025.630090][ T29] audit: type=1400 audit(1737353699.599:680): avc: denied { watch_sb watch_reads } for pid=15436 comm="syz.0.2577" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1025.693673][ T29] audit: type=1400 audit(1737353699.689:681): avc: denied { append } for pid=15436 comm="syz.0.2577" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1025.781111][T15443] Sensor A: ================= START STATUS ================= [ 1025.901596][T15445] netem: change failed [ 1025.906741][T15443] Sensor A: Test Pattern: 75% Colorbar [ 1025.925809][T15443] Sensor A: Show Information: All [ 1025.982545][T15443] Sensor A: Vertical Flip: false [ 1026.060219][T15443] Sensor A: Horizontal Flip: false [ 1026.096676][T15443] Sensor A: Brightness: 128 [ 1026.114107][T15443] Sensor A: Contrast: 128 [ 1026.128463][T15443] Sensor A: Hue: 0 [ 1026.132396][T15443] Sensor A: Saturation: 128 [ 1026.136986][T15443] Sensor A: ================== END STATUS ================== [ 1026.693188][T15448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15448 comm=syz.1.2581 [ 1026.793739][T15448] devtmpfs: Cannot enable quota on remount [ 1026.918244][T10294] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 1027.702088][T10294] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 1027.721974][T10294] usb 1-1: config 0 has no interface number 0 [ 1027.729283][T10294] usb 1-1: config 0 interface 29 has no altsetting 0 [ 1027.738919][T10294] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1027.748139][T10294] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.756196][T10294] usb 1-1: Product: syz [ 1027.762806][T10294] usb 1-1: Manufacturer: syz [ 1027.767477][T10294] usb 1-1: SerialNumber: syz [ 1027.836147][T10294] usb 1-1: config 0 descriptor?? [ 1027.931303][T15473] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1027.943323][T15473] overlayfs: missing 'lowerdir' [ 1028.051577][T10294] peak_usb 1-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 1028.067994][T10294] peak_usb 1-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 1028.439956][T10294] peak_usb 1-1:0.29: probe with driver peak_usb failed with error -71 [ 1028.501629][T10294] usb 1-1: USB disconnect, device number 97 [ 1028.667230][T15482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1028.699324][T15484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1028.750453][T15481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1028.769940][T15483] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2590'. [ 1030.017969][ T29] audit: type=1400 audit(1737353704.069:682): avc: denied { mounton } for pid=15494 comm="syz.0.2596" path="/534/file0" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1030.244167][ T29] audit: type=1400 audit(1737353704.109:683): avc: denied { getattr } for pid=15494 comm="syz.0.2596" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1030.717806][T15499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2597'. [ 1032.072252][T15516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2600'. [ 1032.083758][T15516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1032.091339][T15516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1032.103934][T15516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1032.118203][T15516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1033.026701][T15520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2600'. [ 1034.069376][T15551] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2610'. [ 1034.472276][T15542] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2604'. [ 1035.382522][T15559] could not allocate digest TFM handle vmac64(sm4) [ 1035.767537][T15575] IPVS: stopping backup sync thread 15576 ... [ 1035.774567][T15576] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 3, id = 0 [ 1035.815873][T15575] [ 1035.818228][T15575] ====================================================== [ 1035.825245][T15575] WARNING: possible circular locking dependency detected [ 1035.832249][T15575] 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 Not tainted [ 1035.839329][T15575] ------------------------------------------------------ [ 1035.846317][T15575] syz.0.2615/15575 is trying to acquire lock: [ 1035.852355][T15575] ffffffff8fee0048 (rtnl_mutex){+.+.}-{4:4}, at: ip_mc_drop_socket+0x9b/0x290 [ 1035.861206][T15575] [ 1035.861206][T15575] but task is already holding lock: [ 1035.868556][T15575] ffff88807cf7ad28 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x101/0xa00 [ 1035.878689][T15575] [ 1035.878689][T15575] which lock already depends on the new lock. [ 1035.878689][T15575] [ 1035.889082][T15575] [ 1035.889082][T15575] the existing dependency chain (in reverse order) is: [ 1035.898077][T15575] [ 1035.898077][T15575] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 1035.906661][T15575] __mutex_lock+0x19b/0xa60 [ 1035.911672][T15575] smc_switch_to_fallback+0x2d/0xa00 [ 1035.917461][T15575] smc_sendmsg+0x13d/0x520 [ 1035.922388][T15575] __sys_sendto+0x488/0x4f0 [ 1035.927395][T15575] __x64_sys_sendto+0xe0/0x1c0 [ 1035.932676][T15575] do_syscall_64+0xcd/0x250 [ 1035.937684][T15575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.944102][T15575] [ 1035.944102][T15575] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 1035.951724][T15575] lock_sock_nested+0x3a/0xf0 [ 1035.956901][T15575] sockopt_lock_sock+0x54/0x70 [ 1035.962162][T15575] do_ip_setsockopt+0x101/0x3680 [ 1035.967601][T15575] ip_setsockopt+0x59/0xf0 [ 1035.972523][T15575] udp_setsockopt+0x7d/0xd0 [ 1035.977527][T15575] do_sock_setsockopt+0x222/0x480 [ 1035.983052][T15575] __sys_setsockopt+0x1a0/0x230 [ 1035.988406][T15575] __x64_sys_setsockopt+0xbd/0x160 [ 1035.994012][T15575] do_syscall_64+0xcd/0x250 [ 1035.999018][T15575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.005419][T15575] [ 1036.005419][T15575] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 1036.012604][T15575] __lock_acquire+0x249e/0x3c40 [ 1036.017976][T15575] lock_acquire.part.0+0x11b/0x380 [ 1036.023591][T15575] __mutex_lock+0x19b/0xa60 [ 1036.028609][T15575] ip_mc_drop_socket+0x9b/0x290 [ 1036.033985][T15575] inet_release+0xa3/0x280 [ 1036.038903][T15575] sock_release+0x8e/0x1d0 [ 1036.043820][T15575] stop_sync_thread+0x285/0x720 [ 1036.049172][T15575] do_ip_vs_set_ctl+0x4ec/0x11c0 [ 1036.054620][T15575] nf_setsockopt+0x8a/0xf0 [ 1036.059557][T15575] ip_setsockopt+0xcb/0xf0 [ 1036.064481][T15575] tcp_setsockopt+0xa4/0x100 [ 1036.069584][T15575] smc_setsockopt+0x1b4/0xa00 [ 1036.074790][T15575] do_sock_setsockopt+0x222/0x480 [ 1036.080316][T15575] __sys_setsockopt+0x1a0/0x230 [ 1036.085677][T15575] __x64_sys_setsockopt+0xbd/0x160 [ 1036.091293][T15575] do_syscall_64+0xcd/0x250 [ 1036.096312][T15575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.102711][T15575] [ 1036.102711][T15575] other info that might help us debug this: [ 1036.102711][T15575] [ 1036.112932][T15575] Chain exists of: [ 1036.112932][T15575] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 1036.112932][T15575] [ 1036.126463][T15575] Possible unsafe locking scenario: [ 1036.126463][T15575] [ 1036.133888][T15575] CPU0 CPU1 [ 1036.139228][T15575] ---- ---- [ 1036.144566][T15575] lock(&smc->clcsock_release_lock); [ 1036.149919][T15575] lock(sk_lock-AF_INET); [ 1036.156829][T15575] lock(&smc->clcsock_release_lock); [ 1036.164694][T15575] lock(rtnl_mutex); [ 1036.168801][T15575] [ 1036.168801][T15575] *** DEADLOCK *** [ 1036.168801][T15575] [ 1036.176953][T15575] 1 lock held by syz.0.2615/15575: [ 1036.182039][T15575] #0: ffff88807cf7ad28 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x101/0xa00 [ 1036.192548][T15575] [ 1036.192548][T15575] stack backtrace: [ 1036.198412][T15575] CPU: 0 UID: 0 PID: 15575 Comm: syz.0.2615 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 1036.209250][T15575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1036.219282][T15575] Call Trace: [ 1036.222537][T15575] [ 1036.225450][T15575] dump_stack_lvl+0x116/0x1f0 [ 1036.230115][T15575] print_circular_bug+0x419/0x5d0 [ 1036.235119][T15575] check_noncircular+0x31a/0x400 [ 1036.240038][T15575] ? __pfx_check_noncircular+0x10/0x10 [ 1036.245476][T15575] ? __pfx_lock_release+0x10/0x10 [ 1036.250482][T15575] ? lockdep_lock+0xc6/0x200 [ 1036.255057][T15575] ? __pfx_lockdep_lock+0x10/0x10 [ 1036.260063][T15575] ? __pfx_mark_lock+0x10/0x10 [ 1036.264822][T15575] __lock_acquire+0x249e/0x3c40 [ 1036.269653][T15575] ? __pfx___lock_acquire+0x10/0x10 [ 1036.274845][T15575] ? __lock_acquire+0x15a9/0x3c40 [ 1036.279861][T15575] lock_acquire.part.0+0x11b/0x380 [ 1036.284952][T15575] ? ip_mc_drop_socket+0x9b/0x290 [ 1036.289956][T15575] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1036.295599][T15575] ? rcu_is_watching+0x12/0xc0 [ 1036.300346][T15575] ? trace_lock_acquire+0x14e/0x1f0 [ 1036.305528][T15575] ? ip_mc_drop_socket+0x9b/0x290 [ 1036.310532][T15575] ? lock_acquire+0x2f/0xb0 [ 1036.315019][T15575] ? ip_mc_drop_socket+0x9b/0x290 [ 1036.320032][T15575] __mutex_lock+0x19b/0xa60 [ 1036.324521][T15575] ? ip_mc_drop_socket+0x9b/0x290 [ 1036.329528][T15575] ? ip_mc_drop_socket+0x9b/0x290 [ 1036.334535][T15575] ? stop_sync_thread+0x23e/0x720 [ 1036.339557][T15575] ? __pfx___mutex_lock+0x10/0x10 [ 1036.344565][T15575] ? mark_held_locks+0x9f/0xe0 [ 1036.349306][T15575] ? _raw_spin_unlock_irq+0x23/0x50 [ 1036.354485][T15575] ? __mutex_unlock_slowpath+0x164/0x690 [ 1036.360112][T15575] ? ip_mc_drop_socket+0x9b/0x290 [ 1036.365122][T15575] ? rtnl_lock+0x9/0x20 [ 1036.369260][T15575] ip_mc_drop_socket+0x9b/0x290 [ 1036.374098][T15575] inet_release+0xa3/0x280 [ 1036.378502][T15575] sock_release+0x8e/0x1d0 [ 1036.382906][T15575] stop_sync_thread+0x285/0x720 [ 1036.387761][T15575] do_ip_vs_set_ctl+0x4ec/0x11c0 [ 1036.392689][T15575] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 1036.398054][T15575] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 1036.404022][T15575] ? __pfx_lock_release+0x10/0x10 [ 1036.409027][T15575] ? rcu_is_watching+0x12/0xc0 [ 1036.413777][T15575] ? __mutex_lock+0x1cc/0xa60 [ 1036.418438][T15575] ? mark_held_locks+0x9f/0xe0 [ 1036.423184][T15575] ? __mutex_unlock_slowpath+0x164/0x690 [ 1036.428808][T15575] ? nf_setsockopt+0x8a/0xf0 [ 1036.433383][T15575] nf_setsockopt+0x8a/0xf0 [ 1036.437782][T15575] ip_setsockopt+0xcb/0xf0 [ 1036.442187][T15575] tcp_setsockopt+0xa4/0x100 [ 1036.446757][T15575] smc_setsockopt+0x1b4/0xa00 [ 1036.451424][T15575] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1036.457298][T15575] ? __pfx_smc_setsockopt+0x10/0x10 [ 1036.462484][T15575] ? selinux_socket_setsockopt+0x6a/0x80 [ 1036.468103][T15575] ? __pfx_smc_setsockopt+0x10/0x10 [ 1036.473299][T15575] do_sock_setsockopt+0x222/0x480 [ 1036.478304][T15575] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1036.483831][T15575] ? lock_acquire+0x2f/0xb0 [ 1036.488318][T15575] __sys_setsockopt+0x1a0/0x230 [ 1036.493156][T15575] __x64_sys_setsockopt+0xbd/0x160 [ 1036.498243][T15575] ? do_syscall_64+0x91/0x250 [ 1036.502907][T15575] ? lockdep_hardirqs_on+0x7c/0x110 [ 1036.508117][T15575] do_syscall_64+0xcd/0x250 [ 1036.512606][T15575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.518493][T15575] RIP: 0033:0x7f4e3b385d29 [ 1036.522903][T15575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1036.542494][T15575] RSP: 002b:00007f4e3c1c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1036.550884][T15575] RAX: ffffffffffffffda RBX: 00007f4e3b575fa0 RCX: 00007f4e3b385d29 [ 1036.558833][T15575] RDX: 000000000000048c RSI: 0000000000000000 RDI: 0000000000000004 [ 1036.566783][T15575] RBP: 00007f4e3b401b08 R08: 0000000000000018 R09: 0000000000000000 [ 1036.574731][T15575] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000000 [ 1036.582680][T15575] R13: 0000000000000000 R14: 00007f4e3b575fa0 R15: 00007ffea036f718 [ 1036.590653][T15575]