last executing test programs: 12.287697005s ago: executing program 0 (id=3183): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d240f0100000000000000000006241a0000000c241b480005000005008005090581030002000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000480)=ANY=[@ANYBLOB="ab0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x407, &(0x7f0000000980)={{0x12, 0x1, 0x250, 0xfc, 0xf3, 0x30, 0x20, 0x1415, 0x3, 0x6888, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f5, 0x1, 0xc0, 0x2, 0xf0, 0xa8, [{{0x9, 0x4, 0xfd, 0x36, 0x8, 0x1a, 0x61, 0x6b, 0x4, [@generic={0x73, 0xd, "b7c6966c0eb8f890a95bb713902823d63ea21e11084de8825eb32743a9bb73aa50c0737737d06e75621c66b0911e5545a24e011747441de1626cbe952a8c3692510ae8011f031bd733771526eb54f657ca5b4db437a11485397300e5b40a0a2d49fafff29c47ac8cceb70d2d6445662b4a"}], [{{0x9, 0x5, 0xa, 0x0, 0x10, 0x1, 0x8, 0x2}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x7f, 0x5b, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x98, 0x7fff}, @generic={0x9d, 0xc, "d7e08d6e131f0e0a7767bc5f874dca5681a1629294ccbfd3772b8b204011fac8c9030c32225100c87acc19e6559b1f1ef2d297702ba05de8260224342c2711e064410ed35372aaf985c98f2aa3074fb61549aff60243523c1f16860299c9336110016fc016f9a30e4be6d6a3d2ff0a12a08c550f2fadf6393c7a45d6cda97131e34486357b0d72489b1a95e174c657a9b7b73a6f2444bd8873434b"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x8, 0x73, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x573}]}}, {{0x9, 0x5, 0x1, 0x10, 0x250, 0x2, 0x1, 0xfa, [@generic={0xee, 0x7, "0f01bf8d4b6bd91d48cf92a432bb9b072ff1e5ce25b2192b90be5beff632d5ff1d7ff1b78085266a47c53e5c0aded8dacd7042d957d2dfd2b2046c1fe7cbdbadf00b66ba86197365cc89cf244ddb5d689fc4014d1f23403f229b2617bc4da72e75142c5b9849d2c8e2859be62fa94d9a8ae445419eeed61e450de03f05a573d9bbcc9623e576beb6d387e0fd6d256037c750523f2e0cb6cd00afabbe054b05fac7c9bf8757a7a270b0b6ec071c55c62e7ae1f6cb71d68fbc8250151f38b79d45071690e7e0251ac26713983d31d22825b77d52f9b3ba565c65ea75ebbd81e1c47d11687ff05d3658df59cab5"}, @generic={0x39, 0x5, "968d987969e0ca98dd535725fd7adb715aabaf5ca3ef9cfc51a0efaf7ec31e0ad83757ca5d4e118badb2ab47350d042f74845b7867cb81"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x2, 0x8, 0x7, [@generic={0x69, 0xa, "6f118dc4e451a668505e07bd74e614cb5f261135492c32146c2e2db7a7dffaad6587a428d0d8a7c028571d49f36da5dbf72a71179e971767929fb751ea5ff435da25c365ab523cc2c4425fe4b9f7bc0c257e06c578d524a6b1d8063b978fd94fc554011a4477bf"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x62dd}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0xe, 0xfb, 0xe, [@generic={0x34, 0xe, "e9b2152a997bb8808dc4ade5a99b2a01742bd94e848db89f718537a937fd6ac33c93d559556da03e1f2ab0552dca55ebddd4"}, @generic={0xb2, 0x11, "bd871b54f4153ba116e2087913e9db2c5963cf8d122b9bd2da725cc2c5033488ffad7de14ccb9236109dde8243c5537af8977600205aa8e2964f9dc5a4def1d4297b4f8d068a4687fa2d41272efa58c7855abd7603cef1e03b86c1a8c19027464ec1640f32c9b0bad0043f87e1706f3972726955567fdb01b6d3b470110dc3dc37a72b6d891b0ae883e7a5897a2243c9f21828d6bda7969d6c83772e70d2580b9d72c547211ce82f1eeb41bb742b41fb"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x1, 0x7f, 0x5}}, {{0x9, 0x5, 0x6, 0x0, 0x600, 0x1, 0x7f, 0x81}}]}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x10, 0x20, 0xa, 0xff, 0x50}, 0xab, &(0x7f0000000080)={0x5, 0xf, 0xab, 0x3, [@ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x40, 0x0, 0x3, [0xc000]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x0, 0x5}, @generic={0x8f, 0x10, 0x3, "634f2b5e6fdc22fec189f704d5a692893adbdb7fcd7811c9bbb8795c67c353aad15252228389b5b5e33bc738eeec8f7ab705177a5e21e3f51c1181547a30fab830d2bc8f8f71f7a9c008d16b0d1d41955350d531fab028e76633edfd1413a1358ad8d3dcbee0b3ec1e8adcb9721e51f7c8d8462a454c953848299a2ad0d5920e54a181642eb9e1f88b927a72"}]}, 0x5, [{0x100, &(0x7f00000001c0)=@string={0x100, 0x3, "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"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x3034}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x403}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x411}}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000000040)) 11.817022653s ago: executing program 2 (id=3184): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair(0x1d, 0x80000, 0x5, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x4, 0x4, 0xc3, 0x0, 0x0, 0x0, 0x0, 0xfe, 0xff, 0x0, 0x0, 0x0, 0x7, 0x9}, 0xe) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xdec9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYRES8=r3, @ANYBLOB="ab26dd35c7f1e91f74287e97252bf608723b99f4a6632d8930482d1e7a8ce8eaad1aed7b3032"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(0x0, 0x0, 0x2) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001c00000014000180080003000100000008000100", @ANYRES32=r9], 0x28}}, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r5, 0xc004510e, &(0x7f0000000800)=0xffffffff) clock_gettime(0x0, &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x61) 10.851623372s ago: executing program 2 (id=3187): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x442, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r5, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0xfffffffe}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x5, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x4}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4001) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES64=r2], 0x30}}, 0x24008044) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x20, 0x3, 0x8010002}) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4d6ad4ab, 0x5, 0x6}, 0x10) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r7 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(0xffffffffffffffff, 0x0, 0x81) openat$cgroup_procs(r8, &(0x7f0000000540)='cgroup.threads\x00', 0x2, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x4}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000001c0)="640f2210670f01c9ba4300b80200ef0f7969ce3e660f235bb8e1000f00d80f01ca660f21f7c4c3d9cf510000f30f1efb", 0x30}], 0x1, 0x6e, 0x0, 0x0) 9.523579249s ago: executing program 3 (id=3193): syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x410000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019800)=""/102400, 0x19000) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="1e031800dd5c980128854d4a828e000000000033"], 0xffdd) close(r1) 9.193235664s ago: executing program 0 (id=3194): sched_rr_get_interval(0x0, &(0x7f00000000c0)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone3(&(0x7f0000000480)={0x20000000, &(0x7f0000000180), &(0x7f0000000240)=0x0, &(0x7f0000000280), {0x35}, &(0x7f0000000300)=""/173, 0xad, &(0x7f00000003c0)=""/73, &(0x7f0000000440)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r5, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x4, 0xf000000) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000500)=0x807, 0x4) pread64(r0, 0x0, 0x0, 0x7) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) 7.983603242s ago: executing program 1 (id=3196): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_emit_ethernet(0x36, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, 0x0, 0x147040, 0x0) poll(0x0, 0x0, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r2, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)='k', 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000001580), 0x400000000000203, 0x10122, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r3, &(0x7f0000002080)=0x76, 0x23a) write$FUSE_BMAP(r3, 0x0, 0x0) 7.467738619s ago: executing program 2 (id=3198): syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d00000001090224"], 0x0) socket$netlink(0x10, 0x3, 0x15) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x2a, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000fc00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073010f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 5.484200903s ago: executing program 0 (id=3199): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000009c0)={@random="856b1200ff00", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88a8, 0x700}}}}}}}, 0x0) 5.482239082s ago: executing program 1 (id=3200): pipe(&(0x7f0000000100)) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000040)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000040)=""/95, 0x63}], 0x100002fb, 0x4000000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='personality\x00') read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0x2020) io_submit(0x0, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x0, r0, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x41, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r4, r4, r5}, 0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={'sha256-avx\x00'}}) close(r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r9, @ANYBLOB="1c002c80080000006c09"], 0x38}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) preadv(r3, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x4}], 0x3e8, 0x0, 0x0) 5.41829449s ago: executing program 0 (id=3201): syz_usb_connect(0x0, 0x36, &(0x7f0000001b40)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac29000000010902240003000000000904020000ff4f9b000904b000003a3846000904"], 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000240)=0x0) prlimit64(r0, 0x3, 0x0, &(0x7f0000000280)) syz_usb_connect$hid(0x4, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0xa, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xa1, 0x50, 0x6, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x1, 0x2, {0x9, 0x21, 0x3, 0x10, 0x1, {0x22, 0x219}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xfb, 0x10, 0xd}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x1, 0x3, 0x4}}]}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0x58, 0x1, 0x9, 0x40, 0x5}, 0x235, &(0x7f00000005c0)={0x5, 0xf, 0x235, 0x6, [@generic={0xfa, 0x10, 0x2, "ee52d6eb4175fb085a742cef838d8c329c192dd583eb091aac253a10f7d22b13f8e727397c8a574babd82422754df3c0cf98cfdd1ad49591c96194fcb9b6dc78512d36c18095707b0ec12fa8d6a20c9c9cdb999ae257f7f66de72e6c9e3ea2c5f847d2c763a135a774867379c3e2d700f25aff57aef58174b6ad37c3e88d43a3c5547ab29fe9abf677fa17540a9bd226856e00ade44fde5152ef69c42f530fc4667084767533137b2d9945ee8ed9f31eed424bbc3938a6fbb6bdc74d211d8ce79410cbf4b81e42f837d6bb18750b78547aa66f394f0e97d328e871468949e88cbc3fe8846743123992082bb5d84cdcabf45deea484af67"}, @generic={0x2e, 0x10, 0x4, "8de434b6a844d3c4ff6bf1d82a8eae29eabe196a78b96d30aebf8c53213207b8456e49b1030530155ea035"}, @ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0x3, 0xff00, 0x5}, @generic={0xd, 0x10, 0xb, "c2cae4151f7266e08446"}, @generic={0xe5, 0x10, 0x2, "28f0458e07b1af20d680fafe9c0949875e01d051deb371da4d26a536ab139735a55d5b45c21b069b268eb1617f5cb8b9f3a32fbe54c623669c2821e31b8850e444404aa87d23c67cf678c136c718136bd07bbfd72a0096cf70bdb8b83482ee02ba9db66d1534603f43cd4713e0f9ffe21a39551112ef620330400b57a3ee8f3a2dda8b6fcfc2ec2d147786b00a06177e414ea3fea3761b82419dc960f713e68c2b94c7b775bf208ef883a206c90e80923c1449ed6ab3a4b0717f76d9bbb66de56d4270d6f3f7387d2002d25cfe479637022d9e739f6a6ff43b9abc692fbcd1ef3e85"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x9, 0x8, 0x4}]}, 0x3, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x861}}, {0x25, &(0x7f0000000400)=@string={0x25, 0x3, "234ee18b15e3ddcb55c6c87a10cc5c461191f1d1c81d416f863a4ddc36fe1db372481a"}}]}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_usb_connect$uac1(0x1, 0xe0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x69, 0x8, 0x8, 0xff, 0x5}, 0x53, &(0x7f0000000040)={0x5, 0xf, 0x53, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0xfd387603e2b7ad6d, 0x4, 0xd, 0xd, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0xe, 0xa}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x3, 0x7f, 0x7}, @ssp_cap={0x14, 0x10, 0xa, 0x80, 0x2, 0x6, 0x880, 0x7b95, [0xf, 0xf]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x9, 0x0, 0x800, 0x7f}, @ss_container_id={0x14, 0x10, 0x4, 0x53, "a5bc07ca78558c78d29615a209611372"}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x5007}}]}) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x26}}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5.014348933s ago: executing program 2 (id=3202): r0 = socket(0x400000000010, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setxattr$security_ima(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x1f2f, 0xe, 0x0, &(0x7f00000007c0)="9f44948721919580684010a40800", 0x0, 0x241, 0x0, 0x9c, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f834", 0x0}, 0x50) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300}}) 4.589004879s ago: executing program 4 (id=3204): poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0x8110}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x14}, {0xffffffffffffffff, 0x240}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x2400}, {0xffffffffffffffff, 0x6304}, {0xffffffffffffffff, 0x413b}, {0xffffffffffffffff, 0x40}], 0xa, 0x740) 3.999653454s ago: executing program 2 (id=3205): socket$inet6(0x10, 0x3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlockall(0x7) r0 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r0, 0x0, 0x0, 0x805, 0x0, 0x0) listen(r0, 0xda8c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) socket$alg(0x26, 0x5, 0x0) pselect6(0x40, &(0x7f0000000100)={0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x200, 0x0, 0xfff}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)="3bfd"}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_usb_connect(0x2, 0x3dd, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x14, 0xaf, 0xbb, 0x10, 0xbb4, 0xa89, 0x7209, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3cb, 0x4, 0xbc, 0x7, 0x50, 0xeb, [{{0x9, 0x4, 0x2f, 0x47, 0x2, 0xbb, 0xa1, 0x47, 0x4, [], [{{0x9, 0x5, 0x84, 0x0, 0x20, 0xe, 0x39, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xbd, 0x4}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x6, 0x4, 0x6, [@generic={0x43, 0x31, "56216a939d6d5df07b018ad82804c5de141ccefb78a668f26b463d70692a350a3d0790bdc8adebc8b3b5aa0333425b5cdc019424ba6b9050fea35828c58c464f5a"}]}}]}}, {{0x9, 0x4, 0x7c, 0x10, 0x1, 0x2e, 0x75, 0xa7, 0x2, [], [{{0x9, 0x5, 0x7, 0x2, 0x200, 0x5, 0xd, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0x8}]}}]}}, {{0x9, 0x4, 0x0, 0xff, 0x5, 0x88, 0xe1, 0x1c, 0x7, [], [{{0x9, 0x5, 0x4, 0x10, 0x5f7, 0xa1, 0x9, 0x6}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x0, 0x7b, 0x16}}, {{0x9, 0x5, 0xc, 0x3, 0x91d60d2098efb4b2, 0x90, 0x92, 0x62}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x1, 0x9, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x3}, @generic={0xc5, 0x2, "4ffed801efd6f0e996dd3fb4343acc6e8619dc659738154fc41ca26d570fe50c7dfa5ca256e79274d6ebf306f8fb0599adf8902046f064730a598f14559ee662829b67e1712e174c7318693fcef1f36c334c70bd601751e8fe5cb9ea0006709e4657c2de5fbcafea05b83dfaf6e68e4f08b56d80814a35d0e30b2f6f2a175de6c76498c0661b2c3d9c2cbdc10f987b2da5bf67267ad7e4eb3634b56621ae023f847328827af10dc05c4cf5fba6f27958fa30429816b2a358604d95cc4094f9643bef07"}]}}, {{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x1, 0x81, 0xe}}]}}, {{0x9, 0x4, 0xfa, 0x6, 0x8, 0xd7, 0x7, 0x9a, 0x0, [], [{{0x9, 0x5, 0x3, 0x0, 0x40, 0x7, 0xe8}}, {{0x9, 0x5, 0x1, 0x8, 0x400, 0x86, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0x4, 0x101}, @generic={0x1c, 0x22, "c8213dff1d529c0d85cfaa3dcd0a19e098d3d4cf1ff097c55b11"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x0, 0x40, 0x81}}, {{0x9, 0x5, 0x4, 0xc, 0x200, 0x5, 0x1, 0x4, [@generic={0x69, 0x8, "af1373fdcbc41f659072741094c3a46ab8a58822bcfdc49f03e430184d4236c1c8f9be2f0c8e35d9412a32cb3d09c8c2477ecee246491718e858e118cefe86b90b622f470a0ae64c0d3ce4cc333478e33878f116bf665297c0f4b4721eaeecfd1f6297a02d58e6"}, @generic={0x21, 0x31, "87eaf615e0ee22b3f8b6a81cfcb6ad418f81b28b1d56bd2ffdf594648a39e3"}]}}, {{0x9, 0x5, 0xdd061e6f3f58cb02, 0x0, 0x40, 0xf7, 0x15, 0xf}}, {{0x9, 0x5, 0x9, 0x4, 0x400, 0xfe, 0x1, 0xe1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x2}, @generic={0xcc, 0x23, "0be9754ea4eed685720e530abd4ba124c7f240368a2817d34e3d2a416d22ae702de7cbcb9003d7c937eef3805355be5dc51cb2e352ee0c9a9d99cf8d6b91ac05ed9e37a592bf098ecb8ba324f5ffe4ab8ca355e192458d17493e49d56ba54197e5ae2cb9e98c92af0d4fad2685a494c4e6126659cbefba24f60a34618f567faf2c6c6eeddf2611bf6766b25ffeea906cfd71c833474dd9f5d980e0ef6af663c7ce1ba8301b68ff2b078598eec39d422bf32b237cc8bf372939d177fc9562bd98c68c13bb0b784067b4ec"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x40, 0x4, 0x5, 0x5, [@generic={0x63, 0x8, "8e8039f7b9244be74977f06685aae536f37dddd11866b3392de462ab90d8d421a2aa48e993a040fc5c541c4b2115d72b39f79bc1602621ed73e44b40dab316a86d8bb7670f40e93532c3fd9371cb81a51991c97e7c45dd064092569e785c9a0d82"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x1, 0x0, 0xa8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x462398e3e4879f5f, 0x3, 0x2}]}}]}}]}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0xd, 0x5, 0xe8, 0x8, 0x5}, 0xea, &(0x7f0000000800)={0x5, 0xf, 0xea, 0x3, [@generic={0xc7, 0x10, 0xb, "d8c34f142b751a8e75aec1d5c704942b4208697e8853ba2ed51d29de9557079dfb511931d5b7e12e5721f959dc954d85ad6d14a2d5b57f38517065e348a6cd07d8e8a021d61fcb2764c0efd29f0d9942dbe2e3129d79d8b6ce4b86ffaa5ded9ed28f348e7f59d9eadcd19afc50cc5f343dc43013abca64ee9ae87bbdc9e6df535fae95d10107963622186b9bec00b1d0003c44c4b1efeef524248a5e06c439ddec724a0bb4c6a633ef47262e755d95212538903651476d9d88f1d333c729f3694abd6c41"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "60340738982469a19623758c28441608"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x12, 0x6, 0x8, 0x5}]}, 0x6, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x814}}, {0xc5, &(0x7f0000000a00)=@string={0xc5, 0x3, "fca39b3f2a02742a60aafa721f89090f526e211b89496df24a1ef6a439d20eb1bf06c902d6b220995423594b4d1cd6a45585aee63e8c9e6b183dd117fd799f531f0e6e8cd58f516d7f99f917d4fbb02233a5f5ab28a74b1ac3d989efb1e112b3f4b37e20c87c4743aa92795c0a92b67417477db4b4969955b09ae117c54cd62f99198144104161d9dcb7d9cd61552e8c40ad2c55598fe5c6c7192e1cc04cbe2de62650d1bd8be568dd4ea17afe8e3db647ca53e83524a81dc912b71abb52af0c06f9aa"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x1004}}, {0x8b, &(0x7f0000000b00)=@string={0x8b, 0x3, "cb9b44e923d22445155018ed344bb799eb899132f1597bc6b5278fdc4681734b2b0e2540ae4d738059425610facaca54a3f57171d6df4a63e26d7c3b5c558199b058771ca7181dadb8a76b25b0815fe6f390e367be70c9c87d3ac64c090cd1273dd42f47d5e37d44a5cbd71361c92ef6cdfc01b963129c9736704f312ff7d2bda101046cfbf548bbed"}}]}) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x2000010) syz_open_dev$MSR(&(0x7f0000000240), 0x1, 0x0) eventfd(0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 3.98781158s ago: executing program 3 (id=3206): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aa", 0x18}, {&(0x7f0000000700)="6a8fa35a5ac69c3f3504610b7a65154b8a319d412cae86d445126356a7ea73e2cc334fba45667941bdeaebee3915c7685d4a2c125a1898bb727147075b79a19e162ca01c17cdb0398d7303a2955433e8f9de6d144dddc2ca170b10d505c3eb024dcacee0c139b5a9044f1f3a0fd4e958406a6ba551007ed89e2312e678f38707c8f37e5c8fe3cb977b7035046ea60fc263c1f72c13c1c7be3f14407e96c832dd5b10a03966185a38402e2cf26722ddeb0ef8f2d4a071d516ed09b0adec288e14e03b42147a29ba7f26c6886c05bea9ef56a3bb171e67a92b838a", 0xda}], 0x3}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="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", 0x144}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec", 0x4b, 0x11, 0x0, 0x0) 3.867726113s ago: executing program 1 (id=3207): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d214"], 0x68}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0000802800018023"], 0xe8}}, 0x0) 3.815483652s ago: executing program 3 (id=3208): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000ebffffffffffffff000000918d514fce6b08929ccee40dc3c6e94d9cbc336bbc855da141a4283ac61c088ba0e9648199d6387dfbf70571235e28d346f5240f894232fbe5ebdbdb7487787b9f5bdd87540f113c34fabcdcda2f228135444b71bf38f309af6ee09ddc8bfaf7f8c066fa45"], 0x50) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) (async) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x12) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00'}, 0x10) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x3a9, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 3.760133354s ago: executing program 1 (id=3209): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$MSR(0x0, 0xfffffffffffffffc, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc000801) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24008040) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000180)={{0x1}, 0x0, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80000, 0x5, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x10000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00006dbffc), 0x4) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 3.693182043s ago: executing program 3 (id=3210): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48019}, 0x20000040) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x1210020, &(0x7f0000000000)={[{@uid, 0x41}]}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x1) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8341) read$msr(r4, &(0x7f0000019680)=""/102360, 0x18fd8) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) ioctl$USBDEVFS_BULK(r5, 0x5523, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) 3.692910586s ago: executing program 4 (id=3211): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48019}, 0x20000040) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x1210020, &(0x7f0000000000)={[{@uid, 0x41}]}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x1) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8341) read$msr(r4, &(0x7f0000019680)=""/102360, 0x18fd8) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) ioctl$USBDEVFS_BULK(r5, 0x5523, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) 2.791723282s ago: executing program 0 (id=3212): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) getrusage(0x0, &(0x7f0000000700)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 2.75891594s ago: executing program 3 (id=3213): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000000), 0xe, 0x280400) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8001, 0x4, 0x8, 0x3, 0x2, 0x3, 0x5e, 0x4, 0x7ff}) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002a00dbdf"], 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) 2.43372813s ago: executing program 0 (id=3214): mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xb, 0xfffffffffffffffe}, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="c8eab789f2f08d27321645c40d861923728da7e13106cc1e97ebfb4ea69ca8825b7422f0fc8b2c4e1628", 0x2a}], 0x1}, 0x8800) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x1b, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6766}, [@map_idx={0x18, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @exit, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7f}, @generic={0x3, 0x1, 0x4, 0x37b, 0x9}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x5d}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000001440)='contention_end\x00', r1}, 0x10) r2 = socket(0x1, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/95) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0xfffffffffffffffc) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000019c0)='s', 0x1, 0xfffffffffffffffe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mount$overlay(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 2.192089428s ago: executing program 4 (id=3215): r0 = socket(0x400000000010, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setxattr$security_ima(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x1f2f, 0xe, 0x0, &(0x7f00000007c0)="9f44948721919580684010a40800", 0x0, 0x241, 0x0, 0x9c, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f834", 0x0}, 0x50) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300}}) 2.160770428s ago: executing program 3 (id=3216): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb1, 0xbd, 0x2f, 0x8, 0x47d, 0x5003, 0x2f8c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x58, 0xb7}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$hiddev(0xffffffffffffffff, &(0x7f00000034c0)=""/255, 0xff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d0918108ac051582588d0000000109022d00010000000009040000030b08000009058d67c87d2a000009050502000000000009058b6ef1"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f00000001c0)={0xd, @output}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280000514"], 0x528}}, 0xc000) 2.160170245s ago: executing program 1 (id=3217): pipe(&(0x7f0000000100)) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000040)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000040)=""/95, 0x63}], 0x100002fb, 0x4000000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='personality\x00') read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0x2020) io_submit(0x0, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x0, r0, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x41, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r4, r4, r5}, 0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={'sha256-avx\x00'}}) close(r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r9, @ANYBLOB="1c002c80080000006c09"], 0x38}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) preadv(r3, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x4}], 0x3e8, 0x0, 0x0) 837.339605ms ago: executing program 1 (id=3218): r0 = syz_usb_connect$uac1(0x0, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206"], 0x0) syz_usb_control_io(r0, &(0x7f0000001bc0)={0x2c, 0x0, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, 0x0, &(0x7f0000000f80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc01}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x81, 0x1, "17"}, 0x0, 0x0, 0x0, 0x0}) 802.671879ms ago: executing program 4 (id=3219): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$igmp6(0xa, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) read(r2, &(0x7f00000004c0)=""/4096, 0x1000) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f00000002c0)={'macvlan0\x00', &(0x7f0000003d00)=@ethtool_rxfh={0x0, 0x0, 0x0, 0x0, 0x0, "518000"}}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000003c0)=0x2, 0x4) r8 = socket$inet_tcp(0x2, 0x1, 0x0) pipe2$9p(&(0x7f0000000000), 0x880) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0xc01, 0x3, 0x2b8, 0x120, 0x5002004a, 0x6, 0x120, 0x3, 0x220, 0x3c8, 0x3c8, 0x220, 0x3c8, 0x7fffffe, 0x0, {[{{@ip={@dev, @broadcast=0xfeffffff, 0x0, 0x0, 'hsr0\x00', 'bridge0\x00', {}, {0xff}}, 0x0, 0xd8, 0x120, 0x0, {0x0, 0x3fa}, [@common=@unspec=@rateest={{0x68}, {'dvmrp0\x00', 'wlan1\x00', 0x2, 0x1, 0x3d33, 0x43b, 0xffffff81, 0xfff, {0x7}, {0x2}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@udp={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local, 0x0, 0x0, [], 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x318) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000014c0)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x130, 0xffffffff, 0xffffffff, 0x1c8, 0x1c8, 0x1c8, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ip={@private=0xa010100, @private=0xa010101, 0xff, 0xff000000, 'dvmrp0\x00', 'veth1_vlan\x00', {}, {0xff}, 0x88, 0x3, 0x16}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x401, 0x967c}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) getsockopt$SO_TIMESTAMP(r7, 0x1, 0x40, 0x0, &(0x7f0000000300)) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002cbd7000000000001d000000080003cc7ea9a42844464100471e6695d386d43138eed7e2287eaa0008000000000000cd6a5c22773fbbf0556f7fa0a9cad7cda1770c1b0f4d908614a3f7c91ebb7e4f2a70168446cd2f9bc9627c6f6ba92f548e2d7aecd409e416e57a006393c06531c8232afadf3d23d3694134f6c0bb0f4b8fc57443f58a2ab0bb7ff06536db27e999789bb691c41d22be573a335bc2251172bb4a1449e3949f7d2854ab5cf66daee7ca9cb0d0bda2e0dfabe68962ad7ccfd246482f5d1e90b9", @ANYRES32=r12, @ANYBLOB="18002f800c0002000203aaaaaaaaaaaa0800010006000000"], 0x34}, 0x1, 0x0, 0x0, 0x5396ebcfacd913b0}, 0x10) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) 619.797026ms ago: executing program 4 (id=3220): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000014c0)='#\x00', 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 609.052517ms ago: executing program 4 (id=3221): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000100)='tcp_retransmit_synack\x00', r1, 0x0, 0xbb2}, 0x18) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000055c0), 0x400023c, 0x0, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x44800) r5 = syz_io_uring_setup(0x230, &(0x7f0000000540)={0x0, 0x0, 0x10100, 0x0, 0xa0}, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f0000001600)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b7500090583"], 0x0) r9 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) r10 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0xfffffffd, 0x0, {0x0, 0x0, 0x12, r11, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9e}]}]}]}}]}, 0xa4}}, 0x0) openat(r9, &(0x7f0000000240)='./file0\x00', 0x440, 0x80) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r8}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f"]) 0s ago: executing program 2 (id=3222): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x2000000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0xee01}}, './file0/file0\x00'}) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000200)='./file0\x00', r1, r2) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x3}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r6}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8905, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, 0x0, 0x0) r9 = syz_io_uring_setup(0x31e2, &(0x7f0000000080)={0x0, 0xfffffffe, 0x10100, 0xfffffffe}, &(0x7f0000000000), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r9, 0x18, &(0x7f0000000100)={0x6, r9, 0x2, {0x2, 0x1}, 0xa9}, 0x1) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x141842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000380)) writev(r10, &(0x7f0000000040)=[{&(0x7f0000000000)="b2ff", 0x2}], 0x1) fcntl$setlease(r0, 0x400, 0x2) kernel console output (not intermixed with test programs): e on all matching packets. [ 458.181210][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.204009][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.281148][ T5866] usb 3-1: USB disconnect, device number 27 [ 458.334347][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.348277][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.453985][T12471] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input46 [ 458.474934][T12471] usb 1-1: USB disconnect, device number 27 [ 458.508038][ T29] audit: type=1400 audit(1734023890.908:3810): avc: denied { remount } for pid=14567 comm="syz.3.2977" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 458.654971][ T29] audit: type=1400 audit(1734023891.058:3811): avc: denied { map } for pid=14572 comm="syz.2.2994" path="socket:[38649]" dev="sockfs" ino=38649 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 458.970308][ T53] Bluetooth: hci3: command tx timeout [ 459.106643][ T29] audit: type=1400 audit(1734023891.058:3812): avc: denied { read } for pid=14572 comm="syz.2.2994" path="socket:[38649]" dev="sockfs" ino=38649 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 459.211847][ T29] audit: type=1400 audit(1734023891.618:3813): avc: denied { name_connect } for pid=14580 comm="syz.1.2997" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 459.326840][ T29] audit: type=1400 audit(1734023891.658:3814): avc: denied { shutdown } for pid=14580 comm="syz.1.2997" lport=42532 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 459.877835][ T29] audit: type=1400 audit(1734023891.868:3815): avc: denied { getopt } for pid=14580 comm="syz.1.2997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 460.139777][ T29] audit: type=1400 audit(1734023892.538:3816): avc: denied { bind } for pid=14596 comm="syz.3.3001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 460.164042][ T29] audit: type=1400 audit(1734023892.538:3817): avc: denied { listen } for pid=14596 comm="syz.3.3001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 460.190807][ T29] audit: type=1400 audit(1734023892.538:3818): avc: denied { accept } for pid=14596 comm="syz.3.3001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 460.212203][T14594] overlayfs: missing 'lowerdir' [ 460.218089][ T29] audit: type=1400 audit(1734023892.598:3819): avc: denied { connect } for pid=14596 comm="syz.3.3001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 460.599587][T14501] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 460.749750][T14501] usb 2-1: Using ep0 maxpacket: 32 [ 460.764340][T14501] usb 2-1: config 0 has an invalid interface number: 61 but max is 1 [ 460.772703][T14501] usb 2-1: config 0 has an invalid interface number: 98 but max is 1 [ 460.781501][T14501] usb 2-1: config 0 has no interface number 0 [ 460.787592][T14501] usb 2-1: config 0 has no interface number 1 [ 460.795696][T14501] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 460.808288][T14501] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.826745][T14501] usb 2-1: Product: syz [ 460.836678][T14501] usb 2-1: Manufacturer: syz [ 460.841513][T14501] usb 2-1: SerialNumber: syz [ 460.847452][T14501] usb 2-1: config 0 descriptor?? [ 460.960007][T14501] viperboard 2-1:0.61: version 0.00 found at bus 002 address 023 [ 460.989558][T14501] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 461.009843][T14501] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 461.039998][ T53] Bluetooth: hci3: command tx timeout [ 461.045724][T14501] viperboard 2-1:0.98: version 0.00 found at bus 002 address 023 [ 461.057050][T14501] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100 [ 461.081218][T14501] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 461.102721][ T51] usb 2-1: USB disconnect, device number 23 [ 461.138395][T14592] FAULT_INJECTION: forcing a failure. [ 461.138395][T14592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.152839][T14592] CPU: 0 UID: 0 PID: 14592 Comm: syz.0.2999 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 461.163610][T14592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 461.173660][T14592] Call Trace: [ 461.176915][T14592] [ 461.179827][T14592] dump_stack_lvl+0x16c/0x1f0 [ 461.184501][T14592] should_fail_ex+0x497/0x5b0 [ 461.189162][T14592] _copy_to_user+0x32/0xd0 [ 461.193563][T14592] simple_read_from_buffer+0xd0/0x160 [ 461.198917][T14592] proc_fail_nth_read+0x198/0x270 [ 461.203922][T14592] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 461.209458][T14592] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 461.215008][T14592] vfs_read+0x1df/0xbe0 [ 461.219153][T14592] ? __fget_files+0x1fc/0x3a0 [ 461.223819][T14592] ? __pfx___mutex_lock+0x10/0x10 [ 461.228832][T14592] ? __pfx_vfs_read+0x10/0x10 [ 461.234105][T14592] ? __fget_files+0x206/0x3a0 [ 461.238773][T14592] ksys_read+0x12b/0x250 [ 461.242999][T14592] ? __pfx_ksys_read+0x10/0x10 [ 461.247751][T14592] do_syscall_64+0xcd/0x250 [ 461.252242][T14592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.258121][T14592] RIP: 0033:0x7f3eb3d8472c [ 461.262520][T14592] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 461.282116][T14592] RSP: 002b:00007f3eb4b89030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 461.290514][T14592] RAX: ffffffffffffffda RBX: 00007f3eb3f75fa0 RCX: 00007f3eb3d8472c [ 461.298470][T14592] RDX: 000000000000000f RSI: 00007f3eb4b890a0 RDI: 0000000000000007 [ 461.306431][T14592] RBP: 00007f3eb4b89090 R08: 0000000000000000 R09: 0000000000000000 [ 461.314389][T14592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.322344][T14592] R13: 0000000000000000 R14: 00007f3eb3f75fa0 R15: 00007fffca525fe8 [ 461.330310][T14592] [ 461.400746][T12471] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 461.509319][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 461.569574][T12471] usb 4-1: Using ep0 maxpacket: 32 [ 461.597869][T12471] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.620616][T12471] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.631661][T12471] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.641453][T12471] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 461.655088][T12471] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 461.664177][T12471] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.676309][T12471] usb 4-1: config 0 descriptor?? [ 462.176963][T12471] ntrig 0003:1B96:000A.0018: unknown main item tag 0x0 [ 462.183971][T12471] ntrig 0003:1B96:000A.0018: unknown main item tag 0x0 [ 462.191005][T12471] ntrig 0003:1B96:000A.0018: unknown main item tag 0x0 [ 462.198119][T12471] ntrig 0003:1B96:000A.0018: unknown main item tag 0x0 [ 462.205104][T12471] ntrig 0003:1B96:000A.0018: unknown main item tag 0x0 [ 462.214084][T12471] ntrig 0003:1B96:000A.0018: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.3-1/input0 [ 462.370380][T12471] usb 4-1: USB disconnect, device number 32 [ 463.469092][T14641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3014'. [ 463.485080][T14647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3014'. [ 463.619501][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 463.619516][ T29] audit: type=1400 audit(1734023896.018:3870): avc: denied { read write } for pid=14654 comm="syz.1.3017" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 464.372912][ T29] audit: type=1400 audit(1734023896.018:3871): avc: denied { open } for pid=14654 comm="syz.1.3017" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 464.396041][ C0] vkms_vblank_simulate: vblank timer overrun [ 464.455966][ T29] audit: type=1400 audit(1734023896.018:3872): avc: denied { map } for pid=14654 comm="syz.1.3017" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 464.459678][T14663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3017'. [ 464.478996][ C0] vkms_vblank_simulate: vblank timer overrun [ 464.479743][ T5868] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 464.597552][T14666] netlink: 3576 bytes leftover after parsing attributes in process `syz.3.3020'. [ 464.599475][ T29] audit: type=1400 audit(1734023896.018:3873): avc: denied { execute } for pid=14654 comm="syz.1.3017" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 464.719832][ T5868] usb 3-1: Using ep0 maxpacket: 8 [ 464.747513][ T5868] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 464.767651][T12471] IPVS: starting estimator thread 0... [ 464.775283][ T5868] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 464.820710][ T5868] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 464.830325][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.838369][ T5868] usb 3-1: Product: syz [ 464.870085][T14674] IPVS: using max 32 ests per chain, 76800 per kthread [ 464.872512][ T5868] usb 3-1: Manufacturer: syz [ 464.904094][ T5868] usb 3-1: SerialNumber: syz [ 464.929627][ T51] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 464.979267][T14641] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 465.090959][ T51] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.128225][ T51] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.179561][ T51] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 465.220310][ T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.254072][ T51] usb 1-1: config 0 descriptor?? [ 465.281308][T14641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.282888][ T51] usbhid 1-1:0.0: can't add hid device: -22 [ 465.320606][ T51] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 465.324877][T14641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.360787][ T5868] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 465.373121][ T5868] usb 3-1: USB disconnect, device number 28 [ 465.712406][ T29] audit: type=1400 audit(1734023898.128:3874): avc: denied { bind } for pid=14667 comm="syz.0.3019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 465.713161][T14685] netlink: 'syz.0.3019': attribute type 4 has an invalid length. [ 465.866269][T14689] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3025'. [ 465.897163][T14670] netlink: 'syz.0.3019': attribute type 4 has an invalid length. [ 465.906682][ T29] audit: type=1400 audit(1734023898.128:3875): avc: denied { node_bind } for pid=14667 comm="syz.0.3019" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 465.943954][ T5868] usb 1-1: USB disconnect, device number 28 [ 466.039592][T14691] FAULT_INJECTION: forcing a failure. [ 466.039592][T14691] name failslab, interval 1, probability 0, space 0, times 0 [ 466.069556][T14691] CPU: 1 UID: 0 PID: 14691 Comm: syz.4.3026 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 466.080334][T14691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 466.090402][T14691] Call Trace: [ 466.093683][T14691] [ 466.096616][T14691] dump_stack_lvl+0x16c/0x1f0 [ 466.101307][T14691] should_fail_ex+0x497/0x5b0 [ 466.105998][T14691] ? fs_reclaim_acquire+0xae/0x150 [ 466.111126][T14691] should_failslab+0xc2/0x120 [ 466.115810][T14691] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 466.121624][T14691] ? kasan_save_stack+0x42/0x60 [ 466.126479][T14691] ? __alloc_skb+0x2b1/0x380 [ 466.131086][T14691] __alloc_skb+0x2b1/0x380 [ 466.135511][T14691] ? __pfx___alloc_skb+0x10/0x10 [ 466.140460][T14691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.146550][T14691] netlink_dump+0x699/0xd00 [ 466.151063][T14691] ? __pfx_netlink_dump+0x10/0x10 [ 466.156107][T14691] ? __asan_memset+0x23/0x50 [ 466.160954][T14691] ? genl_start+0x67d/0x960 [ 466.165451][T14691] __netlink_dump_start+0x6ca/0x970 [ 466.170642][T14691] genl_family_rcv_msg_dumpit+0x1e1/0x2e0 [ 466.176355][T14691] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 466.182592][T14691] ? __pfx_genl_get_cmd+0x10/0x10 [ 466.187606][T14691] ? __pfx_genl_start+0x10/0x10 [ 466.192447][T14691] ? __pfx_genl_dumpit+0x10/0x10 [ 466.197374][T14691] ? __pfx_genl_done+0x10/0x10 [ 466.202132][T14691] ? __radix_tree_lookup+0x21f/0x2c0 [ 466.207409][T14691] genl_rcv_msg+0x470/0x800 [ 466.211907][T14691] ? __pfx_genl_rcv_msg+0x10/0x10 [ 466.216926][T14691] ? __pfx_smc_nl_dump_ueid+0x10/0x10 [ 466.222293][T14691] netlink_rcv_skb+0x16b/0x440 [ 466.227045][T14691] ? __pfx_genl_rcv_msg+0x10/0x10 [ 466.232062][T14691] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 466.237343][T14691] ? down_read+0xc9/0x330 [ 466.241662][T14691] ? __pfx_down_read+0x10/0x10 [ 466.246418][T14691] ? netlink_deliver_tap+0x1ae/0xd30 [ 466.251693][T14691] genl_rcv+0x28/0x40 [ 466.255664][T14691] netlink_unicast+0x53c/0x7f0 [ 466.260435][T14691] ? __pfx_netlink_unicast+0x10/0x10 [ 466.265715][T14691] netlink_sendmsg+0x8b8/0xd70 [ 466.270471][T14691] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.275757][T14691] ____sys_sendmsg+0xaaf/0xc90 [ 466.280511][T14691] ? copy_msghdr_from_user+0x10b/0x160 [ 466.285966][T14691] ? __pfx_____sys_sendmsg+0x10/0x10 [ 466.291251][T14691] ___sys_sendmsg+0x135/0x1e0 [ 466.295923][T14691] ? __pfx____sys_sendmsg+0x10/0x10 [ 466.301121][T14691] ? __pfx_lock_release+0x10/0x10 [ 466.306132][T14691] ? trace_lock_acquire+0x14e/0x1f0 [ 466.311332][T14691] ? __fget_files+0x206/0x3a0 [ 466.316000][T14691] __sys_sendmsg+0x16e/0x220 [ 466.320582][T14691] ? __pfx___sys_sendmsg+0x10/0x10 [ 466.325700][T14691] do_syscall_64+0xcd/0x250 [ 466.330194][T14691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.336075][T14691] RIP: 0033:0x7f628b585d19 [ 466.340480][T14691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.360072][T14691] RSP: 002b:00007f628c386038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.368469][T14691] RAX: ffffffffffffffda RBX: 00007f628b775fa0 RCX: 00007f628b585d19 [ 466.376424][T14691] RDX: 0000000000000004 RSI: 0000000020000000 RDI: 0000000000000003 [ 466.384378][T14691] RBP: 00007f628c386090 R08: 0000000000000000 R09: 0000000000000000 [ 466.392332][T14691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.400285][T14691] R13: 0000000000000000 R14: 00007f628b775fa0 R15: 00007ffe400f9ab8 [ 466.408252][T14691] [ 467.398902][ T29] audit: type=1400 audit(1734023899.088:3876): avc: denied { connect } for pid=14694 comm="syz.4.3028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 468.923180][ T29] audit: type=1400 audit(1734023901.328:3877): avc: denied { create } for pid=14716 comm="syz.0.3035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 468.982184][ T29] audit: type=1400 audit(1734023901.398:3878): avc: denied { ioctl } for pid=14716 comm="syz.0.3035" path="socket:[39402]" dev="sockfs" ino=39402 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 469.016813][T14725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3034'. [ 469.442015][T14728] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 469.449131][T14728] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 469.449531][ T53] Bluetooth: hci3: command tx timeout [ 469.456838][T14728] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 469.467595][T14728] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 469.475036][T14728] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 469.602287][T14728] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 469.635778][T14728] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 469.643708][T14728] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 469.692537][T14728] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 470.300461][ T51] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 470.691403][T14750] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3042'. [ 470.797989][T14752] FAULT_INJECTION: forcing a failure. [ 470.797989][T14752] name failslab, interval 1, probability 0, space 0, times 0 [ 470.812177][ T51] usb 2-1: Using ep0 maxpacket: 32 [ 470.818679][T14752] CPU: 0 UID: 0 PID: 14752 Comm: syz.2.3043 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 470.820815][ T51] usb 2-1: config 1 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 470.829437][T14752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 470.829457][T14752] Call Trace: [ 470.829464][T14752] [ 470.829473][T14752] dump_stack_lvl+0x16c/0x1f0 [ 470.829507][T14752] should_fail_ex+0x497/0x5b0 [ 470.842850][ T51] usb 2-1: config 1 interface 0 has no altsetting 0 [ 470.852430][T14752] should_failslab+0xc2/0x120 [ 470.852459][T14752] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 470.857389][ T51] usb 2-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.40 [ 470.858637][T14752] ? skb_clone+0x190/0x3f0 [ 470.858664][T14752] skb_clone+0x190/0x3f0 [ 470.863662][ T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.867953][T14752] netlink_deliver_tap+0xabd/0xd30 [ 470.867988][T14752] netlink_unicast+0x5e1/0x7f0 [ 470.868015][T14752] ? __pfx_netlink_unicast+0x10/0x10 [ 470.875835][ T51] usb 2-1: Product: syz [ 470.879215][T14752] netlink_sendmsg+0x8b8/0xd70 [ 470.879249][T14752] ? __pfx_netlink_sendmsg+0x10/0x10 [ 470.884747][ T51] usb 2-1: Manufacturer: syz [ 470.893581][T14752] ____sys_sendmsg+0xaaf/0xc90 [ 470.893607][T14752] ? copy_msghdr_from_user+0x10b/0x160 [ 470.898131][ T51] usb 2-1: SerialNumber: syz [ 470.902217][T14752] ? __pfx_____sys_sendmsg+0x10/0x10 [ 470.902254][T14752] ___sys_sendmsg+0x135/0x1e0 [ 470.968715][T14752] ? __pfx____sys_sendmsg+0x10/0x10 [ 470.973938][T14752] ? __pfx_lock_release+0x10/0x10 [ 470.978958][T14752] ? trace_lock_acquire+0x14e/0x1f0 [ 470.984160][T14752] ? __fget_files+0x206/0x3a0 [ 470.988833][T14752] __sys_sendmsg+0x16e/0x220 [ 470.993439][T14752] ? __pfx___sys_sendmsg+0x10/0x10 [ 470.998560][T14752] do_syscall_64+0xcd/0x250 [ 471.003061][T14752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.008945][T14752] RIP: 0033:0x7f8de1385d19 [ 471.013348][T14752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.032947][T14752] RSP: 002b:00007f8de20d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.041348][T14752] RAX: ffffffffffffffda RBX: 00007f8de1575fa0 RCX: 00007f8de1385d19 [ 471.049306][T14752] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 471.057265][T14752] RBP: 00007f8de20d8090 R08: 0000000000000000 R09: 0000000000000000 [ 471.065221][T14752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.073179][T14752] R13: 0000000000000000 R14: 00007f8de1575fa0 R15: 00007ffeecdc9408 [ 471.081148][T14752] [ 471.090854][T14752] lo: entered allmulticast mode [ 471.099185][T14752] tunl0: entered allmulticast mode [ 471.122593][T14752] gre0: entered allmulticast mode [ 471.138523][T14752] gretap0: entered allmulticast mode [ 471.155194][ T29] audit: type=1400 audit(1734023903.568:3879): avc: denied { read } for pid=14740 comm="syz.1.3040" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 471.158987][T14741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.183323][ T29] audit: type=1400 audit(1734023903.568:3880): avc: denied { open } for pid=14740 comm="syz.1.3040" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 471.209000][T14741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.221322][T14752] erspan0: entered allmulticast mode [ 471.248357][T14752] ip_vti0: entered allmulticast mode [ 471.263210][ T29] audit: type=1400 audit(1734023903.678:3881): avc: denied { ioctl } for pid=14740 comm="syz.1.3040" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 471.289364][T14752] ip6_vti0: entered allmulticast mode [ 471.315793][T14752] sit0: entered allmulticast mode [ 471.340265][T14752] ip6tnl0: entered allmulticast mode [ 471.359274][T14752] ip6gre0: entered allmulticast mode [ 471.382314][T14752] syz_tun: entered allmulticast mode [ 471.393755][T14752] ip6gretap0: entered allmulticast mode [ 471.403508][T14752] vcan0: entered allmulticast mode [ 471.421759][T14752] bond0: entered allmulticast mode [ 471.427375][T14752] bond_slave_0: entered allmulticast mode [ 471.444883][T14752] bond_slave_1: entered allmulticast mode [ 471.457616][T14752] bond1: entered allmulticast mode [ 471.467118][T14752] team0: entered allmulticast mode [ 471.472329][T14752] team_slave_0: entered allmulticast mode [ 471.478105][T14752] team_slave_1: entered allmulticast mode [ 471.488790][T14752] dummy0: entered allmulticast mode [ 471.496026][T14752] nlmon0: entered allmulticast mode [ 471.502615][T14752] caif0: entered allmulticast mode [ 471.509397][T14752] batadv0: entered allmulticast mode [ 471.519795][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 471.519840][T14752] veth0: entered allmulticast mode [ 471.526076][ T5132] Bluetooth: hci5: command 0x0c1a tx timeout [ 471.537722][ T5826] Bluetooth: hci4: command 0x0c1a tx timeout [ 471.537738][ T5824] Bluetooth: hci1: command 0x0c1a tx timeout [ 471.553875][T14752] veth1: entered allmulticast mode [ 471.573181][T14752] wg0: entered allmulticast mode [ 471.585004][T14752] wg1: entered allmulticast mode [ 471.592739][T14752] wg2: entered allmulticast mode [ 471.606698][T14752] veth0_to_bridge: entered allmulticast mode [ 471.616562][T14752] bridge_slave_0: entered allmulticast mode [ 471.626266][T14752] veth1_to_bridge: entered allmulticast mode [ 471.636371][T14752] bridge_slave_1: entered allmulticast mode [ 471.645590][T14752] veth0_to_bond: entered allmulticast mode [ 471.657153][T14752] veth1_to_bond: entered allmulticast mode [ 471.667621][T14752] veth0_to_team: entered allmulticast mode [ 471.668679][ T29] audit: type=1400 audit(1734023904.078:3882): avc: denied { append } for pid=14761 comm="syz.4.3045" name="cec4" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 471.701464][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout [ 471.710777][T14752] veth1_to_team: entered allmulticast mode [ 471.724411][T14752] veth0_to_batadv: entered allmulticast mode [ 471.734303][T14752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.743441][T14752] batadv_slave_0: entered allmulticast mode [ 471.752257][T14752] veth1_to_batadv: entered allmulticast mode [ 471.761022][T14752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.777465][T14752] batadv_slave_1: entered allmulticast mode [ 471.794485][T14752] xfrm0: entered allmulticast mode [ 471.807865][T14765] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 471.816641][T14752] veth0_to_hsr: entered allmulticast mode [ 471.820503][T14765] [U]  [ 471.833997][T14752] hsr_slave_0: entered allmulticast mode [ 471.847696][T14752] hsr0: entered allmulticast mode [ 471.854973][T14752] veth1_virt_wifi: entered allmulticast mode [ 471.864158][T14752] veth0_virt_wifi: entered allmulticast mode [ 471.872215][T14752] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 471.880269][T14752] veth1_vlan: entered allmulticast mode [ 471.887774][T14766] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3046'. [ 471.906436][T14752] veth0_vlan: entered allmulticast mode [ 471.932539][T14752] vlan0: entered allmulticast mode [ 471.938862][T14752] vlan1: entered allmulticast mode [ 471.947255][T14752] macvlan0: entered allmulticast mode [ 471.955410][T14752] macvlan1: entered allmulticast mode [ 471.964736][T14752] ipvlan0: entered allmulticast mode [ 471.970284][T14752] ipvlan1: entered allmulticast mode [ 471.976187][T14752] veth1_macvtap: entered allmulticast mode [ 471.993596][T14752] veth0_macvtap: entered allmulticast mode [ 472.010348][T14752] macvtap0: entered allmulticast mode [ 472.019116][T14752] macsec0: entered allmulticast mode [ 472.027166][T14752] geneve0: entered allmulticast mode [ 472.039130][T14752] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.049880][T14752] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.058858][T14752] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.073411][T14752] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.087714][T14752] geneve1: entered allmulticast mode [ 472.105412][T14752] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 472.126992][T14752] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 472.145372][T14752] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 472.155485][T14752] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 472.171976][T14752] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 472.191233][T14752] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 472.200778][T14752] bridge0: entered allmulticast mode [ 472.206192][T14752] batadv1: entered allmulticast mode [ 472.212550][T14752] veth2: entered allmulticast mode [ 472.217717][T14752] veth3: entered allmulticast mode [ 472.223024][T14752] veth4: entered allmulticast mode [ 472.228181][T14752] veth5: entered allmulticast mode [ 472.234496][T14752] veth6: entered allmulticast mode [ 472.243013][T14752] veth7: entered allmulticast mode [ 472.250324][T14752] batadv2: entered allmulticast mode [ 472.328433][ T51] usbhid 2-1:1.0: can't add hid device: -71 [ 472.341457][ T51] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 472.352346][ T51] usb 2-1: USB disconnect, device number 24 [ 472.480561][T14780] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 472.811321][T14784] FAULT_INJECTION: forcing a failure. [ 472.811321][T14784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 472.824791][T14784] CPU: 0 UID: 0 PID: 14784 Comm: syz.0.3052 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 472.835559][T14784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 472.845610][T14784] Call Trace: [ 472.848885][T14784] [ 472.851815][T14784] dump_stack_lvl+0x16c/0x1f0 [ 472.856509][T14784] should_fail_ex+0x497/0x5b0 [ 472.861196][T14784] _copy_from_user+0x2e/0xd0 [ 472.865794][T14784] snd_seq_event_dup+0x722/0x8b0 [ 472.870747][T14784] ? __pfx_snd_seq_event_dup+0x10/0x10 [ 472.876209][T14784] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 472.882016][T14784] ? lockdep_hardirqs_on+0x7c/0x110 [ 472.887217][T14784] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 472.893033][T14784] snd_seq_client_enqueue_event.constprop.0+0x210/0x440 [ 472.899979][T14784] ? __pfx_snd_seq_client_enqueue_event.constprop.0+0x10/0x10 [ 472.907439][T14784] ? __might_fault+0xe3/0x190 [ 472.912130][T14784] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 472.918033][T14784] snd_seq_write+0x363/0x6c0 [ 472.922633][T14784] ? __pfx_snd_seq_write+0x10/0x10 [ 472.927749][T14784] ? bpf_lsm_file_permission+0x9/0x10 [ 472.933126][T14784] ? security_file_permission+0x71/0x210 [ 472.938766][T14784] ? __pfx_snd_seq_write+0x10/0x10 [ 472.943879][T14784] vfs_write+0x24c/0x1150 [ 472.948208][T14784] ? __fget_files+0x1fc/0x3a0 [ 472.952883][T14784] ? __pfx_lock_release+0x10/0x10 [ 472.957910][T14784] ? __pfx_vfs_write+0x10/0x10 [ 472.962673][T14784] ? lock_acquire+0x2f/0xb0 [ 472.967177][T14784] ? __fget_files+0x40/0x3a0 [ 472.971771][T14784] ? __fget_files+0x206/0x3a0 [ 472.976454][T14784] ksys_write+0x207/0x250 [ 472.980786][T14784] ? __pfx_ksys_write+0x10/0x10 [ 472.985643][T14784] do_syscall_64+0xcd/0x250 [ 472.990149][T14784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.996044][T14784] RIP: 0033:0x7f3eb3d85d19 [ 473.000457][T14784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.020070][T14784] RSP: 002b:00007f3eb4b47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 473.028470][T14784] RAX: ffffffffffffffda RBX: 00007f3eb3f76160 RCX: 00007f3eb3d85d19 [ 473.036431][T14784] RDX: 000000000000ffc8 RSI: 0000000020000000 RDI: 0000000000000005 [ 473.044385][T14784] RBP: 00007f3eb4b47090 R08: 0000000000000000 R09: 0000000000000000 [ 473.052338][T14784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.060290][T14784] R13: 0000000000000000 R14: 00007f3eb3f76160 R15: 00007fffca525fe8 [ 473.068254][T14784] [ 473.494626][T14800] input: syz0 as /devices/virtual/input/input48 [ 473.623469][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 474.014014][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout [ 474.264892][T14803] syzkaller0: entered promiscuous mode [ 474.300161][T14803] syzkaller0: entered allmulticast mode [ 474.529952][ T29] audit: type=1400 audit(1734023906.938:3883): avc: denied { remount } for pid=14813 comm="syz.3.3061" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 475.287517][T14822] FAULT_INJECTION: forcing a failure. [ 475.287517][T14822] name failslab, interval 1, probability 0, space 0, times 0 [ 475.322433][T14822] CPU: 0 UID: 0 PID: 14822 Comm: syz.1.3062 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 475.333196][T14822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 475.343229][T14822] Call Trace: [ 475.346491][T14822] [ 475.349402][T14822] dump_stack_lvl+0x16c/0x1f0 [ 475.354064][T14822] should_fail_ex+0x497/0x5b0 [ 475.358720][T14822] ? fs_reclaim_acquire+0xae/0x150 [ 475.363823][T14822] should_failslab+0xc2/0x120 [ 475.368477][T14822] __kmalloc_cache_noprof+0x68/0x410 [ 475.373741][T14822] ? __pfx___debug_object_init+0x10/0x10 [ 475.379361][T14822] ? __pfx___debug_object_init+0x10/0x10 [ 475.384981][T14822] device_add+0xccf/0x1a70 [ 475.389398][T14822] ? lockdep_init_map_type+0x16d/0x7d0 [ 475.394849][T14822] ? __pfx_device_add+0x10/0x10 [ 475.399690][T14822] ? __init_waitqueue_head+0xca/0x150 [ 475.405076][T14822] tty_register_device_attr+0x38f/0x7c0 [ 475.410634][T14822] ? __pfx_tty_register_device_attr+0x10/0x10 [ 475.416705][T14822] rfcomm_dev_ioctl+0x16b0/0x1ca0 [ 475.421738][T14822] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 475.427105][T14822] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 475.432990][T14822] rfcomm_sock_ioctl+0xaa/0xd0 [ 475.437747][T14822] sock_do_ioctl+0x116/0x280 [ 475.442334][T14822] ? __pfx_sock_do_ioctl+0x10/0x10 [ 475.447454][T14822] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 475.453959][T14822] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 475.460456][T14822] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 475.467303][T14822] sock_ioctl+0x228/0x6c0 [ 475.471625][T14822] ? __pfx_sock_ioctl+0x10/0x10 [ 475.476472][T14822] ? selinux_file_ioctl+0x180/0x270 [ 475.481658][T14822] ? selinux_file_ioctl+0xb4/0x270 [ 475.486758][T14822] ? __pfx_sock_ioctl+0x10/0x10 [ 475.491598][T14822] __x64_sys_ioctl+0x190/0x200 [ 475.496357][T14822] do_syscall_64+0xcd/0x250 [ 475.500853][T14822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.506738][T14822] RIP: 0033:0x7fef41585d19 [ 475.511140][T14822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.530737][T14822] RSP: 002b:00007fef423a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 475.539136][T14822] RAX: ffffffffffffffda RBX: 00007fef41775fa0 RCX: 00007fef41585d19 [ 475.547090][T14822] RDX: 0000000020000100 RSI: 00000000400452c8 RDI: 0000000000000004 [ 475.555047][T14822] RBP: 00007fef423a6090 R08: 0000000000000000 R09: 0000000000000000 [ 475.563002][T14822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.570959][T14822] R13: 0000000000000000 R14: 00007fef41775fa0 R15: 00007fff644868a8 [ 475.578924][T14822] [ 475.769633][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 476.151502][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout [ 476.540417][T14827] xt_CT: You must specify a L4 protocol and not use inversions on it [ 476.593279][T14831] trusted_key: encrypted_key: insufficient parameters specified [ 477.032525][ T29] audit: type=1400 audit(1734023909.448:3884): avc: denied { accept } for pid=14826 comm="syz.1.3064" lport=41378 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 477.199146][T14834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3065'. [ 478.658068][T14849] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3071'. [ 478.790641][ T5132] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 478.864638][ T5132] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 478.983347][T14850] fuse: Bad value for 'group_id' [ 478.997334][T14850] fuse: Bad value for 'group_id' [ 479.032428][ T5132] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 479.122106][ T29] audit: type=1400 audit(1734023911.518:3885): avc: denied { setopt } for pid=14845 comm="syz.3.3070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 479.202182][ T5132] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 479.216613][ T5132] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 479.223912][ T5132] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 479.269824][T14850] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 479.455752][ T29] audit: type=1400 audit(1734023911.868:3886): avc: denied { bind } for pid=14845 comm="syz.3.3070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 479.619554][ T25] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 479.789499][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 479.795772][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 479.811846][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 26056, setting to 1024 [ 479.823558][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 479.833356][ T25] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 479.843315][ T25] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 241 [ 479.853753][ T25] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58 [ 479.862991][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.872564][ T25] usb 1-1: config 0 descriptor?? [ 479.878076][T14862] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 479.885422][T14862] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 480.179167][T14872] netlink: 'syz.3.3074': attribute type 1 has an invalid length. [ 480.186999][T14872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3074'. [ 480.574220][T14852] chnl_net:caif_netlink_parms(): no params data found [ 480.688594][T14874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.773556][ T5132] Bluetooth: hci1: Opcode 0x0c03 failed: -71 [ 480.780026][ T25] usb 1-1: USB disconnect, device number 29 [ 480.788938][ T29] audit: type=1326 audit(1734023913.198:3887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14875 comm="syz.3.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb193d85d19 code=0x7ffc0000 [ 480.812421][ C0] vkms_vblank_simulate: vblank timer overrun [ 481.057619][ T29] audit: type=1326 audit(1734023913.238:3888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14875 comm="syz.3.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb193d85d19 code=0x7ffc0000 [ 481.245812][ T29] audit: type=1326 audit(1734023913.238:3889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14875 comm="syz.3.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb193d85d19 code=0x7ffc0000 [ 481.270193][ T29] audit: type=1326 audit(1734023913.238:3890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14875 comm="syz.3.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb193d85d19 code=0x7ffc0000 [ 481.293632][ C0] vkms_vblank_simulate: vblank timer overrun [ 481.301498][ T29] audit: type=1326 audit(1734023913.238:3891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14875 comm="syz.3.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb193d85d19 code=0x7ffc0000 [ 481.324950][ C0] vkms_vblank_simulate: vblank timer overrun [ 481.331869][ T29] audit: type=1326 audit(1734023913.248:3892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14875 comm="syz.3.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb193d85d19 code=0x7ffc0000 [ 481.355747][ T29] audit: type=1326 audit(1734023913.248:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14875 comm="syz.3.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb193d85d19 code=0x7ffc0000 [ 481.379196][ C0] vkms_vblank_simulate: vblank timer overrun [ 481.379315][ T5132] Bluetooth: hci2: command tx timeout [ 481.391721][ T29] audit: type=1326 audit(1734023913.248:3894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14875 comm="syz.3.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb193d85d19 code=0x7ffc0000 [ 481.415722][ T29] audit: type=1326 audit(1734023913.248:3895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14875 comm="syz.3.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb193d85d19 code=0x7ffc0000 [ 481.420437][ T25] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 481.439185][ T29] audit: type=1326 audit(1734023913.268:3896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14875 comm="syz.3.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb193d85d19 code=0x7ffc0000 [ 481.476917][T14852] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.492175][T14852] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.499395][T14852] bridge_slave_0: entered allmulticast mode [ 481.524762][T14852] bridge_slave_0: entered promiscuous mode [ 481.541227][T14852] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.548650][T14852] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.556912][T14852] bridge_slave_1: entered allmulticast mode [ 481.562943][T14890] digital: digital_start_poll: Unknown protocol [ 481.578116][T14852] bridge_slave_1: entered promiscuous mode [ 481.693699][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 481.709994][ T25] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 481.953529][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.961845][ T25] usb 5-1: Product: syz [ 481.966060][ T25] usb 5-1: Manufacturer: syz [ 481.974698][T14852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.984929][ T25] usb 5-1: SerialNumber: syz [ 482.001316][ T25] usb 5-1: config 0 descriptor?? [ 482.019844][T14852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.026868][ T25] gspca_main: se401-2.14.0 probing 047d:5003 [ 482.113106][T14897] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14897 comm=syz.0.3081 [ 482.116287][T14852] team0: Port device team_slave_0 added [ 482.134042][T14852] team0: Port device team_slave_1 added [ 482.183882][T14852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.199003][T14852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.225087][ C0] vkms_vblank_simulate: vblank timer overrun [ 482.248497][T14852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.671470][T14852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.692568][T14852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.719947][T14852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.780414][T14852] hsr_slave_0: entered promiscuous mode [ 482.808798][T14852] hsr_slave_1: entered promiscuous mode [ 482.815802][T14883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.825044][T14883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.895590][T14906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 483.161290][T14852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 483.169996][T14852] Cannot create hsr debugfs directory [ 483.535567][ T5132] Bluetooth: hci2: command tx timeout [ 483.616728][T14914] FAULT_INJECTION: forcing a failure. [ 483.616728][T14914] name failslab, interval 1, probability 0, space 0, times 0 [ 483.948736][ T25] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input49 [ 483.950643][T14914] CPU: 0 UID: 0 PID: 14914 Comm: syz.3.3086 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 483.967768][T14914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 483.977830][T14914] Call Trace: [ 483.981110][T14914] [ 483.984041][T14914] dump_stack_lvl+0x16c/0x1f0 [ 483.988721][T14914] should_fail_ex+0x497/0x5b0 [ 483.993386][T14914] should_failslab+0xc2/0x120 [ 483.998046][T14914] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 484.003421][T14914] ? skb_clone+0x190/0x3f0 [ 484.004201][ T25] usb 5-1: USB disconnect, device number 34 [ 484.007841][T14914] skb_clone+0x190/0x3f0 [ 484.007867][T14914] netlink_deliver_tap+0xabd/0xd30 [ 484.023080][T14914] netlink_unicast+0x5e1/0x7f0 [ 484.027846][T14914] ? __pfx_netlink_unicast+0x10/0x10 [ 484.033114][T14914] netlink_sendmsg+0x8b8/0xd70 [ 484.037864][T14914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 484.043136][T14914] ____sys_sendmsg+0xaaf/0xc90 [ 484.047881][T14914] ? lockdep_hardirqs_on+0x7c/0x110 [ 484.053058][T14914] ? __pfx_____sys_sendmsg+0x10/0x10 [ 484.058323][T14914] ? ___sys_sendmsg+0x111/0x1e0 [ 484.063155][T14914] ___sys_sendmsg+0x135/0x1e0 [ 484.067812][T14914] ? __pfx____sys_sendmsg+0x10/0x10 [ 484.072994][T14914] ? __pfx_lock_release+0x10/0x10 [ 484.077994][T14914] ? trace_lock_acquire+0x14e/0x1f0 [ 484.083178][T14914] ? __fget_files+0x206/0x3a0 [ 484.087836][T14914] __sys_sendmsg+0x16e/0x220 [ 484.092417][T14914] ? __pfx___sys_sendmsg+0x10/0x10 [ 484.097522][T14914] do_syscall_64+0xcd/0x250 [ 484.102015][T14914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.107893][T14914] RIP: 0033:0x7fb193d85d19 [ 484.112282][T14914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.131865][T14914] RSP: 002b:00007fb194b0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 484.140253][T14914] RAX: ffffffffffffffda RBX: 00007fb193f75fa0 RCX: 00007fb193d85d19 [ 484.148205][T14914] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 484.156158][T14914] RBP: 00007fb194b0b090 R08: 0000000000000000 R09: 0000000000000000 [ 484.164105][T14914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.172050][T14914] R13: 0000000000000000 R14: 00007fb193f75fa0 R15: 00007fff433c88b8 [ 484.180003][T14914] [ 484.183037][ C0] vkms_vblank_simulate: vblank timer overrun [ 484.303290][T14914] 8021q: adding VLAN 0 to HW filter on device bond1 [ 484.312498][T14914] bond0: (slave bond1): Enslaving as an active interface with an up link [ 484.915291][ T5866] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 485.078468][ T5866] usb 4-1: Using ep0 maxpacket: 8 [ 485.099394][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 485.110566][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 26056, setting to 1024 [ 485.121721][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 485.131691][ T5866] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 485.141529][ T5866] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 241 [ 485.151597][ T5866] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58 [ 485.161738][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.181976][ T5866] usb 4-1: config 0 descriptor?? [ 485.187632][T14922] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 485.194897][T14922] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 485.471418][T14937] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 485.629669][ T5826] Bluetooth: hci2: command tx timeout [ 485.821773][ T5132] Bluetooth: hci1: Opcode 0x0c03 failed: -71 [ 485.839867][T14501] usb 4-1: USB disconnect, device number 33 [ 485.860823][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 485.860837][ T29] audit: type=1400 audit(1734023918.218:3913): avc: denied { create } for pid=14934 comm="syz.0.3092" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 486.112517][ T29] audit: type=1400 audit(1734023918.528:3914): avc: denied { unlink } for pid=14391 comm="syz-executor" name="file0" dev="tmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 486.166095][T14852] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 486.219157][ T29] audit: type=1400 audit(1734023918.578:3915): avc: denied { mount } for pid=14940 comm="syz.0.3093" name="/" dev="hugetlbfs" ino=41002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 486.282973][T14852] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 486.310249][ T29] audit: type=1400 audit(1734023918.668:3916): avc: denied { unmount } for pid=14391 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 486.360409][T14852] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 486.455917][T14852] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 486.641128][T14852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.670120][ T5868] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 486.684585][T14852] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.706521][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.713662][ T4283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.733177][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.740228][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.786741][T14852] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 486.819959][ T5868] usb 4-1: Using ep0 maxpacket: 8 [ 486.826052][T14852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 486.836980][ T5868] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 486.854043][ T5868] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 486.879936][ T5868] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 486.915730][ T5868] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 486.954741][ T5868] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 486.982291][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.223906][ T5868] usb 4-1: GET_CAPABILITIES returned 0 [ 487.238543][ T5868] usbtmc 4-1:16.0: can't read capabilities [ 487.293375][T14852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.334682][T14852] veth0_vlan: entered promiscuous mode [ 487.386357][T14852] veth1_vlan: entered promiscuous mode [ 487.421734][ T29] audit: type=1400 audit(1734023919.838:3917): avc: denied { listen } for pid=14957 comm="syz.0.3098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 487.435009][T14852] veth0_macvtap: entered promiscuous mode [ 487.477047][T14946] serio: Serial port ptm1 [ 487.484193][T14852] veth1_macvtap: entered promiscuous mode [ 487.499758][ T5132] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 487.542397][T14852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.662856][T14852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.672779][T14852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.679633][ T5132] Bluetooth: hci2: command tx timeout [ 487.683340][T14852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.698405][T14852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.709037][T14852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.718993][T14852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.729455][T14852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.739562][T14852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.750024][T14852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.759951][T14852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.770431][T14852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.780259][T14852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.790747][T14852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.810465][T14852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.871113][T14852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.882349][T14852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.901302][T14852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.911822][T14852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.921970][T14852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.969768][ T25] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 487.994925][T14852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.039636][T14852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.070859][T14852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.079626][T14501] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 488.088511][T14852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.100338][T14852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.121501][T14852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.132044][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 488.139174][T14852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.149894][T14852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.165542][ T25] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 488.174763][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.182939][ T25] usb 2-1: Product: syz [ 488.187130][ T25] usb 2-1: Manufacturer: syz [ 488.191794][ T25] usb 2-1: SerialNumber: syz [ 488.197307][T14852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.208261][ T25] usb 2-1: config 0 descriptor?? [ 488.221877][ T25] gspca_main: se401-2.14.0 probing 047d:5003 [ 488.229716][T14501] usb 1-1: Using ep0 maxpacket: 32 [ 488.230334][T14852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.246882][T14501] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.275312][T14501] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.294947][T14852] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.303753][T14852] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.312500][T14852] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.313715][T14969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=14969 comm=syz.4.3101 [ 488.321276][T14852] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.330627][ T29] audit: type=1400 audit(1734023920.728:3918): avc: denied { write } for pid=14966 comm="syz.4.3101" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 488.378743][T14501] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.417942][T14501] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 488.489103][T14501] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 488.505980][ T29] audit: type=1400 audit(1734023920.728:3919): avc: denied { ioctl } for pid=14966 comm="syz.4.3101" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 488.518581][T14501] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.577531][T14147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.595430][T14147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.612682][T14501] usb 1-1: config 0 descriptor?? [ 488.650794][T14147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.665624][T14147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.822029][ T25] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input50 [ 488.838480][ T25] usb 2-1: USB disconnect, device number 25 [ 488.865434][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 489.050345][T14501] ntrig 0003:1B96:000A.0019: unknown main item tag 0x0 [ 489.070050][T14501] ntrig 0003:1B96:000A.0019: unknown main item tag 0x0 [ 489.100712][T14501] ntrig 0003:1B96:000A.0019: unknown main item tag 0x0 [ 489.107601][T14501] ntrig 0003:1B96:000A.0019: unknown main item tag 0x0 [ 489.140333][T14501] ntrig 0003:1B96:000A.0019: unknown main item tag 0x0 [ 489.266548][T14501] ntrig 0003:1B96:000A.0019: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.0-1/input0 [ 489.878850][T14501] usb 1-1: USB disconnect, device number 30 [ 490.071832][T14980] FAULT_INJECTION: forcing a failure. [ 490.071832][T14980] name failslab, interval 1, probability 0, space 0, times 0 [ 490.110549][T14980] CPU: 0 UID: 0 PID: 14980 Comm: syz.1.3104 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 490.121308][T14980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 490.131344][T14980] Call Trace: [ 490.134599][T14980] [ 490.137506][T14980] dump_stack_lvl+0x16c/0x1f0 [ 490.142172][T14980] should_fail_ex+0x497/0x5b0 [ 490.146829][T14980] ? fs_reclaim_acquire+0xae/0x150 [ 490.151923][T14980] should_failslab+0xc2/0x120 [ 490.156576][T14980] __kmalloc_node_noprof+0xd1/0x510 [ 490.161751][T14980] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 490.167202][T14980] __kvmalloc_node_noprof+0xad/0x1a0 [ 490.172471][T14980] video_usercopy+0xa61/0x1620 [ 490.177226][T14980] ? __pfx___video_do_ioctl+0x10/0x10 [ 490.182576][T14980] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 490.189406][T14980] ? __pfx_video_usercopy+0x10/0x10 [ 490.194604][T14980] v4l2_ioctl+0x1ba/0x250 [ 490.198913][T14980] ? __pfx_v4l2_ioctl+0x10/0x10 [ 490.203746][T14980] __x64_sys_ioctl+0x190/0x200 [ 490.208493][T14980] do_syscall_64+0xcd/0x250 [ 490.212974][T14980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.218843][T14980] RIP: 0033:0x7fef41585d19 [ 490.223240][T14980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.242839][T14980] RSP: 002b:00007fef423a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 490.251224][T14980] RAX: ffffffffffffffda RBX: 00007fef41775fa0 RCX: 00007fef41585d19 [ 490.259169][T14980] RDX: 0000000020000100 RSI: 00000000c0205648 RDI: 0000000000000003 [ 490.267114][T14980] RBP: 00007fef423a6090 R08: 0000000000000000 R09: 0000000000000000 [ 490.275075][T14980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.283022][T14980] R13: 0000000000000000 R14: 00007fef41775fa0 R15: 00007fff644868a8 [ 490.290973][T14980] [ 490.360793][T14501] usb 4-1: USB disconnect, device number 34 [ 490.377856][T14978] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14978 comm=syz.2.3103 [ 490.435070][ T29] audit: type=1400 audit(1734023922.848:3920): avc: denied { mount } for pid=14981 comm="syz.4.3105" name="/" dev="ramfs" ino=41466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 490.446308][T14982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=14982 comm=syz.4.3105 [ 490.826470][T14990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3109'. [ 491.085335][ T29] audit: type=1400 audit(1734023923.498:3921): avc: denied { mounton } for pid=14994 comm="syz.4.3110" path="/595/file0" dev="tmpfs" ino=3060 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 491.414730][ T4283] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.631060][T15009] FAULT_INJECTION: forcing a failure. [ 491.631060][T15009] name failslab, interval 1, probability 0, space 0, times 0 [ 491.688514][T15009] CPU: 0 UID: 0 PID: 15009 Comm: syz.0.3113 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 491.699301][T15009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 491.709338][T15009] Call Trace: [ 491.712602][T15009] [ 491.715518][T15009] dump_stack_lvl+0x16c/0x1f0 [ 491.720188][T15009] should_fail_ex+0x497/0x5b0 [ 491.724860][T15009] should_failslab+0xc2/0x120 [ 491.729531][T15009] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 491.735858][T15009] ? sidtab_sid2str_get+0x17a/0x680 [ 491.741050][T15009] kmemdup_noprof+0x29/0x60 [ 491.745541][T15009] sidtab_sid2str_get+0x17a/0x680 [ 491.750558][T15009] sidtab_entry_to_string+0x33/0x110 [ 491.755834][T15009] security_sid_to_context_core+0x35c/0x640 [ 491.761717][T15009] avc_audit_post_callback+0x10b/0x8c0 [ 491.767169][T15009] ? audit_log_format+0xe9/0x130 [ 491.772093][T15009] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 491.778061][T15009] ? skb_put+0x138/0x1b0 [ 491.782297][T15009] ? audit_log_n_string+0x251/0x540 [ 491.787489][T15009] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 491.793460][T15009] common_lsm_audit+0x33f/0x2250 [ 491.798390][T15009] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 491.804362][T15009] ? __pfx_common_lsm_audit+0x10/0x10 [ 491.809724][T15009] ? avc_update_node.isra.0+0x49d/0x800 [ 491.815260][T15009] ? __pfx_avc_node_free+0x10/0x10 [ 491.820359][T15009] ? rcu_is_watching+0x12/0xc0 [ 491.825118][T15009] ? slow_avc_audit+0x17d/0x210 [ 491.829960][T15009] slow_avc_audit+0x17d/0x210 [ 491.834629][T15009] ? __pfx_slow_avc_audit+0x10/0x10 [ 491.839820][T15009] ? avc_has_extended_perms+0x7c9/0xf70 [ 491.845359][T15009] ? avc_denied+0x138/0x180 [ 491.849853][T15009] ? avc_denied+0x141/0x180 [ 491.854347][T15009] avc_has_extended_perms+0x9a1/0xf70 [ 491.859712][T15009] ? find_held_lock+0x2d/0x110 [ 491.864465][T15009] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 491.870349][T15009] ? tomoyo_path_number_perm+0x298/0x590 [ 491.875964][T15009] ? __pfx_lock_release+0x10/0x10 [ 491.881001][T15009] ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 491.887319][T15009] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 491.894160][T15009] ? __pfx_lock_release+0x10/0x10 [ 491.899181][T15009] ? selinux_file_ioctl+0x180/0x270 [ 491.904368][T15009] selinux_file_ioctl+0x180/0x270 [ 491.909382][T15009] security_file_ioctl+0xc6/0x240 [ 491.914396][T15009] __x64_sys_ioctl+0xb7/0x200 [ 491.919066][T15009] do_syscall_64+0xcd/0x250 [ 491.923559][T15009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.929444][T15009] RIP: 0033:0x7f3eb3d85d19 [ 491.933851][T15009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.953444][T15009] RSP: 002b:00007f3eb4b89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 491.961843][T15009] RAX: ffffffffffffffda RBX: 00007f3eb3f75fa0 RCX: 00007f3eb3d85d19 [ 491.969797][T15009] RDX: 0000000020000000 RSI: 00000000000089e9 RDI: 0000000000000004 [ 491.977751][T15009] RBP: 00007f3eb4b89090 R08: 0000000000000000 R09: 0000000000000000 [ 491.985707][T15009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.993664][T15009] R13: 0000000000000000 R14: 00007f3eb3f75fa0 R15: 00007fffca525fe8 [ 492.001630][T15009] [ 492.047015][ T29] audit: type=1400 audit(1734023924.048:3922): avc: denied { ioctl } for pid=15004 comm="syz.0.3113" path="socket:[41613]" dev="sockfs" ino=41613 ioctlcmd=0x89e9 ssid=146 tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 492.071868][T15009] syz.0.3113 uses old SIOCAX25GETINFO [ 492.258046][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 492.270457][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 492.280775][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 492.312446][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 492.326058][ T5826] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 492.341041][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 492.465953][ T4283] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.490679][T15007] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 492.496717][T15007] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 492.510621][T15007] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 492.524935][T15007] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 492.538745][T15007] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 492.577897][T15007] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 492.590587][ T4283] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.619234][T15007] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 492.626444][T15007] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 492.635580][T15007] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 492.673310][ T4283] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.899008][T15014] chnl_net:caif_netlink_parms(): no params data found [ 492.919576][T12471] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 492.941268][ T4283] bridge_slave_1: left allmulticast mode [ 492.947132][ T4283] bridge_slave_1: left promiscuous mode [ 493.006194][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.064724][ T29] audit: type=1400 audit(1734023925.478:3923): avc: denied { open } for pid=15038 comm="syz.2.3121" path="/dev/ptyq8" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 493.139585][ T29] audit: type=1400 audit(1734023925.508:3924): avc: denied { ioctl } for pid=15038 comm="syz.2.3121" path="/dev/ptyq8" dev="devtmpfs" ino=127 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 493.188733][T12471] usb 5-1: Using ep0 maxpacket: 8 [ 493.321264][T12471] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 493.331193][ T4283] bridge_slave_0: left allmulticast mode [ 493.336839][ T4283] bridge_slave_0: left promiscuous mode [ 493.342798][T12471] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.353897][T12471] usb 5-1: Product: syz [ 493.358105][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.358280][T12471] usb 5-1: Manufacturer: syz [ 493.370666][T12471] usb 5-1: SerialNumber: syz [ 493.378213][T12471] usb 5-1: config 0 descriptor?? [ 493.394206][T12471] gspca_main: se401-2.14.0 probing 047d:5003 [ 493.615794][T15025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.620185][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 493.624445][T15025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.972584][T15025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 493.980171][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 493.989688][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.029310][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.040983][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.050895][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 494.063746][ T9] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 494.073173][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.094033][ T9] usb 1-1: config 0 descriptor?? [ 494.280117][ T4283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.330473][ T4283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.368055][ T4283] bond0 (unregistering): (slave bond1): Releasing backup interface [ 494.378535][ T4283] bond0 (unregistering): Released all slaves [ 494.515934][ T9] ntrig 0003:1B96:000A.001A: unknown main item tag 0x0 [ 494.522947][ T9] ntrig 0003:1B96:000A.001A: unknown main item tag 0x0 [ 494.534643][ T9] ntrig 0003:1B96:000A.001A: unknown main item tag 0x0 [ 494.551237][ T9] ntrig 0003:1B96:000A.001A: unknown main item tag 0x0 [ 494.558201][ T9] ntrig 0003:1B96:000A.001A: unknown main item tag 0x0 [ 494.578107][ T5132] Bluetooth: hci2: command 0x0c1a tx timeout [ 494.578141][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 494.584259][ T53] Bluetooth: hci5: command 0x0c1a tx timeout [ 494.590543][ T5826] Bluetooth: hci4: command 0x0c1a tx timeout [ 494.610628][ T9] ntrig 0003:1B96:000A.001A: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.0-1/input0 [ 494.650792][ T5826] Bluetooth: hci1: command 0x041b tx timeout [ 494.651938][ T4283] bond1 (unregistering): Released all slaves [ 494.674311][T15049] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15049 comm=syz.1.3122 [ 494.830726][T12471] gspca_se401: read req failed req 0x06 error -19 [ 495.072589][T12471] usb 5-1: USB disconnect, device number 35 [ 495.093197][T11088] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 495.100890][ T9] usb 1-1: USB disconnect, device number 31 [ 495.279742][T11088] usb 3-1: Using ep0 maxpacket: 8 [ 495.307349][T11088] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 495.321888][T11088] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 495.332036][T11088] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 99 [ 495.342117][T11088] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 495.355127][T11088] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 495.364242][T11088] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.383973][T15014] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.391845][T15014] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.408292][T15014] bridge_slave_0: entered allmulticast mode [ 495.417415][T15014] bridge_slave_0: entered promiscuous mode [ 495.483837][T15014] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.499508][T15014] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.514005][T15014] bridge_slave_1: entered allmulticast mode [ 495.533202][T15014] bridge_slave_1: entered promiscuous mode [ 495.578786][ T4283] hsr_slave_0: left promiscuous mode [ 495.591725][T11088] usb 3-1: GET_CAPABILITIES returned 0 [ 495.597771][ T4283] hsr_slave_1: left promiscuous mode [ 495.603919][T11088] usbtmc 3-1:16.0: can't read capabilities [ 495.612041][ T4283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.621515][ T4283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.630244][ T4283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.641983][ T4283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.661158][T15063] 9pnet_fd: Insufficient options for proto=fd [ 495.668958][ T4283] veth1_macvtap: left promiscuous mode [ 495.674901][ T4283] veth0_macvtap: left promiscuous mode [ 495.680526][ T4283] veth1_vlan: left promiscuous mode [ 495.685959][ T4283] veth0_vlan: left promiscuous mode [ 495.868195][ T29] audit: type=1400 audit(1734023928.278:3925): avc: denied { write } for pid=15068 comm="syz.1.3130" path="socket:[41888]" dev="sockfs" ino=41888 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 496.224942][T11088] usb 3-1: USB disconnect, device number 29 [ 496.640188][ T5826] Bluetooth: hci2: command 0x0c1a tx timeout [ 496.733383][ T5826] Bluetooth: hci1: command 0x041b tx timeout [ 496.741483][T15078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3132'. [ 497.250981][ T4283] team0 (unregistering): Port device team_slave_1 removed [ 497.301116][ T4283] team0 (unregistering): Port device team_slave_0 removed [ 497.689875][T15014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.760694][T15014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.812971][T15089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3134'. [ 497.874167][T15089] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3134'. [ 497.889806][T15089] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3134'. [ 497.922983][T15089] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3134'. [ 498.219693][T15014] team0: Port device team_slave_0 added [ 498.220492][T15089] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3134'. [ 498.234484][T15014] team0: Port device team_slave_1 added [ 498.576985][T15098] overlayfs: missing 'lowerdir' [ 498.616446][ T29] audit: type=1400 audit(1734023930.998:3926): avc: denied { ioctl } for pid=15097 comm="syz.1.3137" path="socket:[40828]" dev="sockfs" ino=40828 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 498.675566][ T29] audit: type=1400 audit(1734023930.998:3927): avc: denied { setopt } for pid=15097 comm="syz.1.3137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 498.706724][T15100] x_tables: ip_tables: udp match: only valid for protocol 17 [ 498.726293][ T5826] Bluetooth: hci2: command 0x0c1a tx timeout [ 498.752720][T15014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.759727][T15014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.786101][T15014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.800020][ T5826] Bluetooth: hci1: command 0x041b tx timeout [ 498.814960][T15014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.825934][T15014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.854030][T15105] FAULT_INJECTION: forcing a failure. [ 498.854030][T15105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.867311][T15105] CPU: 0 UID: 0 PID: 15105 Comm: syz.2.3139 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 498.877216][T15014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.878062][T15105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 498.898582][T15105] Call Trace: [ 498.901857][T15105] [ 498.904785][T15105] dump_stack_lvl+0x16c/0x1f0 [ 498.909470][T15105] should_fail_ex+0x497/0x5b0 [ 498.914163][T15105] _copy_from_user+0x2e/0xd0 [ 498.918763][T15105] copy_msghdr_from_user+0x99/0x160 [ 498.923969][T15105] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 498.929788][T15105] ? __pfx___lock_acquire+0x10/0x10 [ 498.934978][T15105] ___sys_recvmsg+0xdc/0x1a0 [ 498.939550][T15105] ? __pfx____sys_recvmsg+0x10/0x10 [ 498.944732][T15105] ? find_held_lock+0x2d/0x110 [ 498.949483][T15105] ? __pfx___might_resched+0x10/0x10 [ 498.954746][T15105] ? __might_fault+0xe3/0x190 [ 498.959419][T15105] do_recvmmsg+0x2f8/0x740 [ 498.963847][T15105] ? __pfx_do_recvmmsg+0x10/0x10 [ 498.968790][T15105] ? vfs_write+0x306/0x1150 [ 498.973289][T15105] ? __mutex_unlock_slowpath+0x164/0x690 [ 498.978901][T15105] ? __fget_files+0x206/0x3a0 [ 498.981479][ T5826] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 498.983555][T15105] __x64_sys_recvmmsg+0x239/0x290 [ 498.995225][T15105] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 499.000872][T15105] do_syscall_64+0xcd/0x250 [ 499.005358][T15105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.011237][T15105] RIP: 0033:0x7ff29b785d19 [ 499.015649][T15105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.035249][T15105] RSP: 002b:00007ff2995f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 499.043636][T15105] RAX: ffffffffffffffda RBX: 00007ff29b976080 RCX: 00007ff29b785d19 [ 499.051581][T15105] RDX: 0400000000000203 RSI: 0000000020001580 RDI: 0000000000000004 [ 499.059542][T15105] RBP: 00007ff2995f6090 R08: 0000000000000000 R09: 0000000000000000 [ 499.067516][T15105] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000001 [ 499.075482][T15105] R13: 0000000000000000 R14: 00007ff29b976080 R15: 00007fff3f1d7748 [ 499.083440][T15105] [ 499.086523][ C0] vkms_vblank_simulate: vblank timer overrun [ 499.257741][T15014] hsr_slave_0: entered promiscuous mode [ 499.266454][T15014] hsr_slave_1: entered promiscuous mode [ 499.275070][T15014] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 499.283287][T15014] Cannot create hsr debugfs directory [ 499.329053][ T4283] IPVS: stop unused estimator thread 0... [ 499.339760][ T5866] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 499.479624][T14501] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 499.490862][ T5866] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 499.499527][ T25] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 499.499525][ T5866] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 499.499552][ T5866] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 499.535697][ T5866] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 499.548089][ T5866] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 499.561165][ T5866] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 499.568625][ T5866] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 499.596273][ T5866] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 499.606860][ T5866] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 499.619154][ T5866] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 499.638138][ T5866] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 499.651737][T14501] usb 1-1: Using ep0 maxpacket: 16 [ 499.662723][ T5866] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 499.678199][T14501] usb 1-1: config index 0 descriptor too short (expected 17170, got 18) [ 499.679508][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 499.689634][T14501] usb 1-1: config 0 has too many interfaces: 63, using maximum allowed: 32 [ 499.705520][ T25] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 499.719697][T14501] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 63 [ 499.720730][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.728684][ T5866] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 499.761196][T14501] usb 1-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90 [ 499.770732][T14501] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.779278][ T25] usb 5-1: Product: syz [ 499.783561][T14501] usb 1-1: Product: syz [ 499.783580][T14501] usb 1-1: Manufacturer: syz [ 499.783596][T14501] usb 1-1: SerialNumber: syz [ 499.784282][ T5866] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 499.809153][ T5866] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 499.822086][T14501] usb 1-1: config 0 descriptor?? [ 499.837918][ T25] usb 5-1: Manufacturer: syz [ 499.839966][T14501] ums-freecom 1-1:0.0: USB Mass Storage device detected [ 499.868003][ T25] usb 5-1: SerialNumber: syz [ 499.875881][ T5866] usb 2-1: string descriptor 0 read error: -22 [ 499.891147][ T25] usb 5-1: config 0 descriptor?? [ 499.898049][ T5866] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 499.909356][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.923941][ T5866] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 499.923978][ T25] gspca_main: se401-2.14.0 probing 047d:5003 [ 499.939089][T15014] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 499.957210][T15014] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 499.976659][T15014] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 499.987348][T15014] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 500.044889][ T29] audit: type=1400 audit(1734023932.458:3928): avc: denied { connect } for pid=15111 comm="syz.0.3142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 500.071076][T15014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.109271][T15014] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.146518][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.153597][ T4283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.173728][T11088] usb 2-1: USB disconnect, device number 26 [ 500.182580][T11164] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.189673][T11164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.233950][T15014] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 500.245005][T15014] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 500.325527][ T25] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 500.333552][ T25] se401 5-1:0.0: probe with driver se401 failed with error -71 [ 500.357068][ T25] usb 5-1: USB disconnect, device number 36 [ 500.416345][T15014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.456515][T15014] veth0_vlan: entered promiscuous mode [ 500.481372][T15014] veth1_vlan: entered promiscuous mode [ 500.513813][T15014] veth0_macvtap: entered promiscuous mode [ 500.525893][T15014] veth1_macvtap: entered promiscuous mode [ 500.546015][T15014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.557542][T15014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.567527][T15014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.578562][T15014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.588519][T15014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.599381][T15014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.618305][T15014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.628915][T15014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.642016][T15014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.653534][T15014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.663751][T15014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.679695][T15014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.693680][T15014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.704472][T15014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.716317][T15014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.752771][T15014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.765486][T14501] usb 1-1: USB disconnect, device number 32 [ 500.789875][T15014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.819888][T15014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.840785][T15014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.860850][T15014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.879710][ T5826] Bluetooth: hci1: command 0x041b tx timeout [ 500.889546][T15014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.929955][T15014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.941388][ T29] audit: type=1400 audit(1734023933.348:3929): avc: denied { append } for pid=15125 comm="syz.4.3145" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 500.955409][T15014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.985655][T15014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.027082][T15126] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2305 sclass=netlink_tcpdiag_socket pid=15126 comm=syz.4.3145 [ 501.050315][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.091658][T15014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.144097][T15014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.180014][T15014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.229819][T15014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.250649][T15014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.272672][T15014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.394715][T15014] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.403677][T15014] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.412507][T15014] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.421285][T15014] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.973388][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.981493][T15141] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 501.987429][T15141] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 502.002298][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.019525][ T5868] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 502.040142][T15141] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 502.046891][T15141] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 502.052886][T15141] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 502.061190][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.062457][T15147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3150'. [ 502.099239][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.119513][T15147] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3150'. [ 502.128394][T15147] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3150'. [ 502.153995][T15147] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3150'. [ 502.164023][T15147] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3150'. [ 502.184979][ T5868] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.205869][ T5868] usb 2-1: config 0 has no interfaces? [ 502.219548][ T5868] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 502.249055][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.282140][ T5868] usb 2-1: config 0 descriptor?? [ 502.338869][T15149] random: crng reseeded on system resumption [ 503.210655][ T5865] usb 2-1: USB disconnect, device number 27 [ 503.300494][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 503.325945][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 503.334534][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 503.360950][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 503.368349][ T5826] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 503.377731][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 503.432386][ T5132] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 503.546925][T15161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3153'. [ 503.623509][T15154] chnl_net:caif_netlink_parms(): no params data found [ 503.651017][T15160] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 503.747867][T15154] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.769544][T15154] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.802762][T15154] bridge_slave_0: entered allmulticast mode [ 503.823779][T15154] bridge_slave_0: entered promiscuous mode [ 503.846991][T15154] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.865800][T15154] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.875956][T15154] bridge_slave_1: entered allmulticast mode [ 503.882193][ T29] audit: type=1400 audit(1734023936.288:3930): avc: denied { write } for pid=15178 comm="syz.1.3157" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 503.912372][T15154] bridge_slave_1: entered promiscuous mode [ 503.947149][T15183] FAULT_INJECTION: forcing a failure. [ 503.947149][T15183] name failslab, interval 1, probability 0, space 0, times 0 [ 503.962735][T15154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.975930][T15154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.985474][ T25] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 503.986222][T15183] CPU: 0 UID: 0 PID: 15183 Comm: syz.1.3157 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 504.003777][T15183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 504.013841][T15183] Call Trace: [ 504.017124][T15183] [ 504.020053][T15183] dump_stack_lvl+0x16c/0x1f0 [ 504.024742][T15183] should_fail_ex+0x497/0x5b0 [ 504.029426][T15183] ? fs_reclaim_acquire+0xae/0x150 [ 504.034555][T15183] should_failslab+0xc2/0x120 [ 504.034921][ T5826] Bluetooth: hci5: command 0x0c1a tx timeout [ 504.039225][T15183] __kmalloc_cache_noprof+0x68/0x410 [ 504.039248][T15183] ? ww_mutex_lock_interruptible+0x37/0x160 [ 504.056358][T15183] ? ww_mutex_lock_interruptible+0x37/0x160 [ 504.062277][T15183] vkms_plane_duplicate_state+0x45/0x130 [ 504.067919][T15183] drm_atomic_get_plane_state+0x20b/0x590 [ 504.073669][T15183] drm_atomic_helper_disable_plane+0x78/0x270 [ 504.079728][T15183] __setplane_atomic+0x2e1/0x360 [ 504.084672][T15183] drm_mode_cursor_universal+0x4a7/0xcb0 [ 504.090305][T15183] ? __pfx_drm_mode_cursor_universal+0x10/0x10 [ 504.096458][T15183] ? __pfx_drm_lease_held+0x10/0x10 [ 504.101650][T15183] ? modeset_lock+0x114/0x6e0 [ 504.106320][T15183] drm_mode_cursor_common+0x30a/0x960 [ 504.111689][T15183] ? __pfx_drm_mode_cursor_common+0x10/0x10 [ 504.117591][T15183] ? do_raw_spin_unlock+0x172/0x230 [ 504.122787][T15183] drm_ioctl_kernel+0x1e6/0x3d0 [ 504.127629][T15183] ? __pfx_drm_mode_cursor2_ioctl+0x10/0x10 [ 504.133519][T15183] ? __might_fault+0x51/0x190 [ 504.138185][T15183] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 504.143546][T15183] ? __might_fault+0xe3/0x190 [ 504.148218][T15183] drm_ioctl+0x5d6/0xc00 [ 504.152454][T15183] ? __pfx_drm_mode_cursor2_ioctl+0x10/0x10 [ 504.158341][T15183] ? __pfx_drm_ioctl+0x10/0x10 [ 504.163098][T15183] ? __pfx_lock_release+0x10/0x10 [ 504.168118][T15183] ? selinux_file_ioctl+0x180/0x270 [ 504.173310][T15183] ? selinux_file_ioctl+0xb4/0x270 [ 504.178412][T15183] ? __pfx_drm_ioctl+0x10/0x10 [ 504.183167][T15183] __x64_sys_ioctl+0x190/0x200 [ 504.187926][T15183] do_syscall_64+0xcd/0x250 [ 504.192423][T15183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.198306][T15183] RIP: 0033:0x7fef41585d19 [ 504.202724][T15183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.222327][T15183] RSP: 002b:00007fef42385038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 504.230818][T15183] RAX: ffffffffffffffda RBX: 00007fef41776080 RCX: 00007fef41585d19 [ 504.238786][T15183] RDX: 0000000020000080 RSI: 00000000c02464bb RDI: 0000000000000003 [ 504.246744][T15183] RBP: 00007fef42385090 R08: 0000000000000000 R09: 0000000000000000 [ 504.254700][T15183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.262656][T15183] R13: 0000000000000001 R14: 00007fef41776080 R15: 00007fff644868a8 [ 504.270624][T15183] [ 504.309581][ T5826] Bluetooth: hci1: command 0x041b tx timeout [ 504.315612][ T5826] Bluetooth: hci2: command 0x0c1a tx timeout [ 504.327474][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 504.443683][T15154] team0: Port device team_slave_0 added [ 504.449521][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 504.451268][T15154] team0: Port device team_slave_1 added [ 504.457201][ T25] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 504.469244][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.477378][ T25] usb 3-1: Product: syz [ 504.482700][ T25] usb 3-1: Manufacturer: syz [ 504.487528][ T25] usb 3-1: SerialNumber: syz [ 504.510424][ T25] usb 3-1: config 0 descriptor?? [ 504.519776][T15154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.521359][ T25] gspca_main: se401-2.14.0 probing 047d:5003 [ 504.538892][T15154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.564817][ C0] vkms_vblank_simulate: vblank timer overrun [ 504.587678][T15154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.678734][T15154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.706436][T15154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.732373][ C0] vkms_vblank_simulate: vblank timer overrun [ 504.795619][T15154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.112856][T15154] hsr_slave_0: entered promiscuous mode [ 505.181164][T15154] hsr_slave_1: entered promiscuous mode [ 505.265600][T15154] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 505.340472][T15154] Cannot create hsr debugfs directory [ 505.394395][ T25] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 505.402226][ T25] se401 3-1:0.0: probe with driver se401 failed with error -71 [ 505.415292][ T25] usb 3-1: USB disconnect, device number 30 [ 505.506728][T12471] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 505.524034][ T5132] Bluetooth: hci3: command tx timeout [ 505.669692][T12471] usb 4-1: Using ep0 maxpacket: 8 [ 505.686650][T12471] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 505.725409][T12471] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 505.749502][T12471] usb 4-1: config 6 has no interface number 0 [ 505.755743][T12471] usb 4-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 505.813948][T12471] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 505.828002][T12471] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.836695][T12471] usb 4-1: Product: syz [ 505.844185][T15154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.855788][T12471] usb 4-1: Manufacturer: syz [ 505.868801][T12471] usb 4-1: SerialNumber: syz [ 505.883335][T12471] hso 4-1:6.2: Failed to find INT IN ep [ 506.002336][T15154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.120792][T15154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.208541][T15154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.338077][ T5132] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 506.400194][ T5132] Bluetooth: hci1: command 0x041b tx timeout [ 506.849660][ T25] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 506.958150][T15154] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 506.981641][T15154] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 507.012037][T15154] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 507.037027][T15154] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 507.043948][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 507.051464][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.068537][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.125981][ T5865] usb 4-1: USB disconnect, device number 35 [ 507.193820][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.261099][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 507.297372][ T25] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 507.323599][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.340626][ T25] usb 2-1: config 0 descriptor?? [ 507.348583][T15154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.423453][T15154] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.473356][T11164] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.480458][T11164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.524118][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.531221][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.539557][ T5865] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 507.600114][ T5132] Bluetooth: hci3: command tx timeout [ 507.712385][ T5865] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.722813][ T5865] usb 4-1: config 0 has no interfaces? [ 507.759087][ T25] ntrig 0003:1B96:000A.001B: unknown main item tag 0x0 [ 507.790742][ T5865] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 507.814235][ T25] ntrig 0003:1B96:000A.001B: unknown main item tag 0x0 [ 507.827940][ T25] ntrig 0003:1B96:000A.001B: unknown main item tag 0x0 [ 507.840606][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.843165][ T25] ntrig 0003:1B96:000A.001B: unknown main item tag 0x0 [ 507.870887][ T25] ntrig 0003:1B96:000A.001B: unknown main item tag 0x0 [ 507.889196][ T25] ntrig 0003:1B96:000A.001B: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.1-1/input0 [ 507.964900][ T25] usb 2-1: USB disconnect, device number 28 [ 507.980311][ T5865] usb 4-1: config 0 descriptor?? [ 508.008372][T15154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.214156][T15154] veth0_vlan: entered promiscuous mode [ 508.226672][T15154] veth1_vlan: entered promiscuous mode [ 508.248841][T11088] usb 4-1: USB disconnect, device number 36 [ 508.259880][T15154] veth0_macvtap: entered promiscuous mode [ 508.270895][T15154] veth1_macvtap: entered promiscuous mode [ 508.279627][ T5865] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 508.282191][T15154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.300961][T15154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.311658][T15154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.323507][T15154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.334005][T15154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.344650][T15154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.355039][T15154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.365585][T15154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.375562][T15154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.386086][T15154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.396799][T15154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.407556][T15154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.418804][T15154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.430007][T15154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.440637][T15154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.449518][ T25] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 508.451267][ T5865] usb 3-1: Using ep0 maxpacket: 32 [ 508.459197][T15154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.476285][T15154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.488950][ T5865] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 508.490352][T15154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.508616][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.509935][T15154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.526923][ T5865] usb 3-1: Product: syz [ 508.527471][T15154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.536277][ T5865] usb 3-1: Manufacturer: syz [ 508.542062][T15154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.556068][ T5865] usb 3-1: SerialNumber: syz [ 508.562064][T15154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.562585][ T5865] usb 3-1: config 0 descriptor?? [ 508.572655][T15154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.572667][T15154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.594368][ T5865] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 508.598419][T15154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.614934][T15154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.625690][T15154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.635659][T15154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.646488][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 508.651787][T15154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.661846][T15154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.672630][T15154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.682691][T15154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.694518][T15154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.705177][ T25] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 508.713755][ T25] usb 1-1: config 179 has no interface number 0 [ 508.714998][T15154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.721641][ T25] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 508.740502][ T25] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 508.752063][ T25] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 508.763555][ T25] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 508.767930][T15154] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.783949][T15154] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.792807][T15154] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.801891][T15154] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.879889][ T25] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 508.916764][T11164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.924985][ T25] usb 1-1: config 179 interface 65 has no altsetting 0 [ 508.943847][T11164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.971747][T11164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.980631][T11164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.077101][ T25] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 509.086599][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.104095][ T25] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input51 [ 509.160613][ T5176] input input51: unable to receive magic message: -110 [ 509.743502][ T5865] gspca_topro: reg_w err -110 [ 509.811115][ T5132] Bluetooth: hci3: command tx timeout [ 509.816585][ T5865] gspca_topro: Sensor soi763a [ 510.044495][ T5176] input input51: unable to receive magic message: -32 [ 510.249081][ T25] usb 1-1: USB disconnect, device number 33 [ 510.255073][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 510.255348][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 510.278181][ T25] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 510.333130][T15248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3175'. [ 510.779551][ T51] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 510.929648][ T51] usb 4-1: Using ep0 maxpacket: 8 [ 510.936109][ T51] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 510.944178][ T51] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 510.955034][ T51] usb 4-1: config 6 has no interface number 0 [ 510.965239][ T51] usb 4-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 510.993403][ T51] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 511.003243][ T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.011551][ T51] usb 4-1: Product: syz [ 511.015971][ T51] usb 4-1: Manufacturer: syz [ 511.020899][ T51] usb 4-1: SerialNumber: syz [ 511.035739][ T51] hso 4-1:6.2: Failed to find INT IN ep [ 511.396150][T15264] netlink: 'syz.2.3170': attribute type 10 has an invalid length. [ 511.407961][T15264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.417195][T15264] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 511.890407][ T5132] Bluetooth: hci3: command tx timeout [ 511.980984][T15268] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 512.005292][T15268] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 512.011447][T15268] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 512.017532][T15268] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 512.024697][T15268] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 512.033700][T15268] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 512.044254][T15268] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 512.329837][ T51] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 512.369675][ T5865] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 512.469143][T12471] usb 3-1: USB disconnect, device number 31 [ 512.489549][ T51] usb 5-1: Using ep0 maxpacket: 32 [ 512.501688][ T51] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.519468][ T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.530799][ T5865] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 512.531433][ T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.550796][ T51] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 512.568222][ T51] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 512.569657][ T5865] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.591686][ T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.602490][ T5865] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 512.612461][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.635170][ T5865] usb 1-1: Product: syz [ 512.636914][ T51] usb 5-1: config 0 descriptor?? [ 512.649651][ T5865] usb 1-1: Manufacturer: syz [ 512.671969][ T5865] usb 1-1: SerialNumber: syz [ 512.681201][T15276] can: request_module (can-proto-5) failed. [ 512.691131][ T5865] usb 1-1: selecting invalid altsetting 1 [ 513.321915][ T51] ntrig 0003:1B96:000A.001C: unknown main item tag 0x0 [ 513.329097][ T51] ntrig 0003:1B96:000A.001C: unknown main item tag 0x0 [ 513.361314][ T25] usb 4-1: USB disconnect, device number 37 [ 513.368181][ T51] ntrig 0003:1B96:000A.001C: unknown main item tag 0x0 [ 513.390765][ T5865] usb 1-1: selecting invalid altsetting 1 [ 513.403865][ T5865] cdc_mbim 1-1:1.0: bind() failure [ 513.415024][ T51] ntrig 0003:1B96:000A.001C: unknown main item tag 0x0 [ 513.422120][ T51] ntrig 0003:1B96:000A.001C: unknown main item tag 0x0 [ 513.430735][ T51] ntrig 0003:1B96:000A.001C: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.4-1/input0 [ 513.583747][ T51] usb 5-1: USB disconnect, device number 37 [ 513.621388][T15274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.641114][T15274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.669295][T15292] mkiss: ax0: crc mode is auto. [ 513.739567][T12471] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 513.810110][ T25] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 513.869729][T12471] usb 3-1: device descriptor read/64, error -71 [ 513.959664][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 513.971348][ T25] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 513.980874][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.988862][ T25] usb 4-1: Product: syz [ 513.993096][ T25] usb 4-1: Manufacturer: syz [ 513.997683][ T25] usb 4-1: SerialNumber: syz [ 514.003266][ T5826] Bluetooth: hci5: command 0x0c1a tx timeout [ 514.009933][ T25] usb 4-1: config 0 descriptor?? [ 514.016876][ T25] gspca_main: se401-2.14.0 probing 047d:5003 [ 514.023020][ T51] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 514.089756][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout [ 514.089768][ T5132] Bluetooth: hci1: command 0x041b tx timeout [ 514.095834][ T5824] Bluetooth: hci2: command 0x0c1a tx timeout [ 514.102104][ T5132] Bluetooth: hci0: command 0x0c1a tx timeout [ 514.114256][T12471] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 514.193315][ T51] usb 2-1: Using ep0 maxpacket: 8 [ 514.201182][ T51] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 514.218522][ T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.234000][ T51] usb 2-1: Product: syz [ 514.238352][ T51] usb 2-1: Manufacturer: syz [ 514.243256][ T51] usb 2-1: SerialNumber: syz [ 514.249304][ T51] usb 2-1: config 0 descriptor?? [ 514.254653][T12471] usb 3-1: device descriptor read/64, error -71 [ 514.275684][ T51] gspca_main: se401-2.14.0 probing 047d:5003 [ 514.290420][T15300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3190'. [ 514.379660][T12471] usb usb3-port1: attempt power cycle [ 514.484118][T15297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.492850][T15297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.557604][T15307] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.609804][ T51] usb 2-1: reset high-speed USB device number 29 using dummy_hcd [ 514.789717][T12471] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 514.822531][T12471] usb 3-1: device descriptor read/8, error -71 [ 515.000814][ T25] gspca_se401: read req failed req 0x06 error -19 [ 515.014060][ T25] usb 4-1: USB disconnect, device number 38 [ 515.059507][T12471] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 515.128007][T12471] usb 3-1: device descriptor read/8, error -71 [ 515.171464][ T5865] usb 1-1: USB disconnect, device number 34 [ 515.259616][T12471] usb usb3-port1: unable to enumerate USB device [ 515.471792][T15311] syzkaller0: entered promiscuous mode [ 515.509856][T15311] syzkaller0: entered allmulticast mode [ 515.770090][ T51] gspca_se401: read req failed req 0x06 error -19 [ 515.784553][ T51] usb 2-1: USB disconnect, device number 29 [ 515.840218][T12471] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 516.019573][T12471] usb 1-1: Using ep0 maxpacket: 16 [ 516.084558][T12471] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.121147][T12471] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.155668][T12471] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 516.168653][ T5132] Bluetooth: hci3: command 0x0c1a tx timeout [ 516.176318][T12471] usb 1-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 516.185619][T12471] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.216333][T12471] usb 1-1: config 0 descriptor?? [ 517.271116][ T25] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 517.530224][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 517.547642][ T25] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 517.580748][ T25] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 517.634359][ T25] usb 5-1: config 6 has no interface number 0 [ 517.665099][ T25] usb 5-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 517.765912][ T25] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 517.819888][T15283] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 517.869681][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.877723][ T25] usb 5-1: Product: syz [ 517.933511][ T25] usb 5-1: Manufacturer: syz [ 517.939498][ T25] usb 5-1: SerialNumber: syz [ 517.992997][T15283] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 518.003772][T15283] usb 3-1: config 0 has no interfaces? [ 518.029257][T15283] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 518.030074][ T25] hso 5-1:6.2: Failed to find INT IN ep [ 518.075627][T15283] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.165110][T15283] usb 3-1: config 0 descriptor?? [ 518.263225][ T5132] Bluetooth: hci3: command 0x0c1a tx timeout [ 518.475511][T12471] usbhid 1-1:0.0: can't add hid device: -71 [ 518.484001][T12471] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 518.679589][T12471] usb 1-1: USB disconnect, device number 35 [ 518.838923][T15325] syz.1.3196 (15325): drop_caches: 1 [ 518.883421][T15283] usb 3-1: USB disconnect, device number 36 [ 518.927036][T15331] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 519.323802][T12471] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 519.479549][T12471] usb 1-1: Using ep0 maxpacket: 8 [ 519.487161][T12471] usb 1-1: config 0 has an invalid interface number: 176 but max is 2 [ 519.560620][T12471] usb 1-1: config 0 has no interface number 1 [ 519.566764][T12471] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 519.575941][T12471] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.610034][T12471] usb 1-1: config 0 descriptor?? [ 519.615666][ T51] usb 5-1: USB disconnect, device number 38 [ 519.828801][T15335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.849179][T15335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.414671][T12471] usb 1-1: Could not set interface, error -71 [ 520.426551][T12471] usb 1-1: USB disconnect, device number 36 [ 520.543489][T15353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3207'. [ 520.602756][T15355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3208'. [ 521.330178][ T51] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 521.549569][ T51] usb 3-1: not running at top speed; connect to a high speed hub [ 521.558091][ T51] usb 3-1: config 188 has an invalid interface number: 47 but max is 3 [ 521.579524][ T51] usb 3-1: config 188 has an invalid interface number: 124 but max is 3 [ 521.649680][ T51] usb 3-1: config 188 contains an unexpected descriptor of type 0x2, skipping [ 521.779681][ T51] usb 3-1: config 188 has an invalid interface number: 250 but max is 3 [ 521.789875][ T51] usb 3-1: config 188 has no interface number 1 [ 521.800109][ T51] usb 3-1: config 188 has no interface number 2 [ 521.875847][ T51] usb 3-1: config 188 has no interface number 3 [ 521.996134][ T51] usb 3-1: config 188 interface 124 altsetting 16 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 522.007677][ T51] usb 3-1: config 188 interface 0 altsetting 255 has a duplicate endpoint with address 0x4, skipping [ 522.018906][ T51] usb 3-1: config 188 interface 0 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 522.030050][ T51] usb 3-1: config 188 interface 0 altsetting 255 endpoint 0xC has invalid maxpacket 46258, setting to 64 [ 522.041537][ T51] usb 3-1: config 188 interface 0 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 522.052644][ T51] usb 3-1: config 188 interface 0 altsetting 255 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 522.063896][ T51] usb 3-1: config 188 interface 250 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 522.074828][ T51] usb 3-1: config 188 interface 250 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 522.086933][ T51] usb 3-1: config 188 interface 250 altsetting 6 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 522.098160][ T51] usb 3-1: config 188 interface 250 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 522.109096][ T51] usb 3-1: config 188 interface 47 has no altsetting 0 [ 522.116701][ T51] usb 3-1: config 188 interface 124 has no altsetting 0 [ 522.134883][ T51] usb 3-1: config 188 interface 0 has no altsetting 0 [ 522.141783][ T51] usb 3-1: config 188 interface 250 has no altsetting 0 [ 522.236405][ T51] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a89, bcdDevice=72.09 [ 522.252348][ T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.261649][ T51] usb 3-1: Product: ꏼ㾛Ȫ⩴ꩠ狺褟༉湒ᬡ䦉Ṋꓶ툹넎ڿˉ닖餠⍔䭙ᱍꓖ蕕谾殞㴘៑秽原ฟ豮迕浑饿៹ﯔ⊰ꔳ꯵Ꜩᩋ댒돴⁾糈䍇銪屹鈊璶䜗둽隴喙骰១䳅⿖ᦙ䒁䄐럜췙啡谮굀唬轙웥ᧇᰮ䳀ⶾ⛦텐讽棥仝窡軾똽쩇␵ᶨዉ᪷劻ಯ句 [ 522.290206][ T51] usb 3-1: Manufacturer: ࠔ [ 522.294811][ T51] usb 3-1: SerialNumber: Ⰹ [ 522.349756][T14501] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 522.489738][ T5866] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 522.502177][T14501] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 522.510708][T14501] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.522219][T14501] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 522.532274][T14501] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 522.540499][T14501] usb 1-1: Manufacturer: syz [ 522.546411][T14501] usb 1-1: config 0 descriptor?? [ 522.639837][ T5866] usb 4-1: Using ep0 maxpacket: 8 [ 522.657797][ T5866] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 522.688705][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.710663][ T5866] usb 4-1: Product: syz [ 522.720898][ T5866] usb 4-1: Manufacturer: syz [ 522.728961][ T5866] usb 4-1: SerialNumber: syz [ 522.735282][ T5866] usb 4-1: config 0 descriptor?? [ 522.742596][ T5866] gspca_main: se401-2.14.0 probing 047d:5003 [ 522.756553][ T51] usb 3-1: USB disconnect, device number 37 [ 522.959549][T14501] rc_core: IR keymap rc-hauppauge not found [ 522.965591][T14501] Registered IR keymap rc-empty [ 522.975107][T14501] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 523.028850][T15386] overlayfs: missing 'lowerdir' [ 523.467818][T14501] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input52 [ 523.628109][T15392] x_tables: duplicate underflow at hook 2 [ 523.654440][ T5866] gspca_se401: Wrong descriptor type [ 523.678251][T15392] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3219'. [ 523.791002][ T29] audit: type=1400 audit(1734023956.208:3931): avc: denied { shutdown } for pid=15397 comm="syz.4.3221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 523.811855][ T29] audit: type=1400 audit(1734023956.218:3932): avc: denied { read } for pid=15397 comm="syz.4.3221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 523.829601][T14501] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 523.859653][T15381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.868146][T15381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.951410][T15400] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 524.076393][T14501] usb 2-1: Using ep0 maxpacket: 16 [ 524.171235][T14501] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 524.183753][T14501] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 524.209716][T14501] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 524.227108][T14501] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.231921][ T29] audit: type=1400 audit(1734023956.638:3933): avc: denied { read write } for pid=15397 comm="syz.4.3221" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 524.244146][ T5866] usb 4-1: USB disconnect, device number 39 [ 524.269045][T14501] usb 2-1: Product: syz [ 524.281385][T14501] usb 2-1: Manufacturer: syz [ 524.289231][T14501] usb 2-1: SerialNumber: syz [ 524.299818][ T29] audit: type=1400 audit(1734023956.638:3934): avc: denied { open } for pid=15397 comm="syz.4.3221" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 524.477349][T15404] [ 524.479710][T15404] ============================= [ 524.484539][T15404] [ BUG: Invalid wait context ] [ 524.489361][T15404] 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 Not tainted [ 524.496436][T15404] ----------------------------- [ 524.501265][T15404] iou-wrk-15403/15404 is trying to lock: [ 524.506866][T15404] ffff888025eddc98 (&sighand->siglock){-.-.}-{3:3}, at: __lock_task_sighand+0xc2/0x340 [ 524.516487][T15404] other info that might help us debug this: [ 524.522344][T15404] context-{5:5} [ 524.525772][T15404] 4 locks held by iou-wrk-15403/15404: [ 524.531196][T15404] #0: ffffffff8e0881c0 (sched_map-wait-type-override){+.+.}-{3:3}, at: schedule+0x1fd/0x350 [ 524.541336][T15404] #1: ffff88802ad06928 (&acct->lock){+.+.}-{2:2}, at: io_wq_dec_running+0x126/0x250 [ 524.550797][T15404] #2: ffffffff8e1bb500 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1c2/0x590 [ 524.560153][T15404] #3: ffffffff8e1bb500 (rcu_read_lock){....}-{1:3}, at: __lock_task_sighand+0x3f/0x340 [ 524.569860][T15404] stack backtrace: [ 524.573567][T15404] CPU: 0 UID: 0 PID: 15404 Comm: iou-wrk-15403 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 524.584556][T15404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 524.594594][T15404] Call Trace: [ 524.597845][T15404] [ 524.600752][T15404] dump_stack_lvl+0x116/0x1f0 [ 524.605404][T15404] __lock_acquire+0x878/0x3c40 [ 524.610142][T15404] ? __pfx___lock_acquire+0x10/0x10 [ 524.615324][T15404] ? __pfx___lock_acquire+0x10/0x10 [ 524.620546][T15404] lock_acquire.part.0+0x11b/0x380 [ 524.625638][T15404] ? __lock_task_sighand+0xc2/0x340 [ 524.630823][T15404] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 524.636452][T15404] ? rcu_is_watching+0x12/0xc0 [ 524.641215][T15404] ? trace_lock_acquire+0x14e/0x1f0 [ 524.646400][T15404] ? trace_lock_acquire+0x14e/0x1f0 [ 524.651577][T15404] ? __lock_task_sighand+0xc2/0x340 [ 524.656751][T15404] ? lock_acquire+0x2f/0xb0 [ 524.661231][T15404] ? __lock_task_sighand+0xc2/0x340 [ 524.666415][T15404] _raw_spin_lock_irqsave+0x3a/0x60 [ 524.671587][T15404] ? __lock_task_sighand+0xc2/0x340 [ 524.676760][T15404] __lock_task_sighand+0xc2/0x340 [ 524.681759][T15404] group_send_sig_info+0x290/0x300 [ 524.686846][T15404] ? __pfx_group_send_sig_info+0x10/0x10 [ 524.692453][T15404] ? __pfx___lock_acquire+0x10/0x10 [ 524.697626][T15404] ? hlock_class+0x4e/0x130 [ 524.702125][T15404] bpf_send_signal_common+0x3d3/0x530 [ 524.707469][T15404] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 524.713335][T15404] ? trace_lock_acquire+0x14e/0x1f0 [ 524.718510][T15404] ? bpf_trace_run2+0x1c2/0x590 [ 524.723334][T15404] bpf_send_signal+0x1d/0x30 [ 524.727895][T15404] bpf_prog_631417f49dd64198+0x25/0x48 [ 524.733323][T15404] bpf_trace_run2+0x231/0x590 [ 524.737987][T15404] ? __pfx_bpf_trace_run2+0x10/0x10 [ 524.743157][T15404] ? __pfx_mark_lock+0x10/0x10 [ 524.747893][T15404] __bpf_trace_contention_end+0xca/0x110 [ 524.753509][T15404] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 524.759749][T15404] ? hlock_class+0x4e/0x130 [ 524.764234][T15404] ? __lock_acquire+0x15a9/0x3c40 [ 524.769235][T15404] trace_contention_end.constprop.0+0xf0/0x170 [ 524.775367][T15404] __pv_queued_spin_lock_slowpath+0x27e/0xc90 [ 524.781434][T15404] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 524.788002][T15404] ? lock_acquire.part.0+0x11b/0x380 [ 524.793264][T15404] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 524.798881][T15404] do_raw_spin_lock+0x210/0x2c0 [ 524.803709][T15404] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 524.809058][T15404] ? lock_acquire+0x2f/0xb0 [ 524.813534][T15404] ? io_wq_dec_running+0x126/0x250 [ 524.818625][T15404] io_wq_dec_running+0x126/0x250 [ 524.823540][T15404] io_wq_worker_sleeping+0xf1/0x120 [ 524.828720][T15404] schedule+0x2c6/0x350 [ 524.832863][T15404] schedule_timeout+0x124/0x280 [ 524.837693][T15404] ? __pfx_schedule_timeout+0x10/0x10 [ 524.843043][T15404] ? __pfx_process_timeout+0x10/0x10 [ 524.848307][T15404] ? __pfx_io_run_task_work+0x10/0x10 [ 524.853654][T15404] ? lock_acquire+0x2f/0xb0 [ 524.858140][T15404] ? io_wq_worker+0x3b1/0xdf0 [ 524.862794][T15404] io_wq_worker+0x4ba/0xdf0 [ 524.867289][T15404] ? __pfx_io_wq_worker+0x10/0x10 [ 524.872309][T15404] ? ret_from_fork+0x23/0x80 [ 524.876886][T15404] ? __pfx_lock_release+0x10/0x10 [ 524.881884][T15404] ? do_raw_spin_lock+0x12d/0x2c0 [ 524.886886][T15404] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 524.892234][T15404] ? __pfx_io_wq_worker+0x10/0x10 [ 524.897233][T15404] ret_from_fork+0x45/0x80 [ 524.901635][T15404] ? __pfx_io_wq_worker+0x10/0x10 [ 524.906647][T15404] ret_from_fork_asm+0x1a/0x30 [ 524.911391][T15404] [ 525.060726][ T51] usb 1-1: USB disconnect, device number 37 [ 525.127542][T14501] usb 2-1: 0:2 : does not exist [ 525.529935][T15390] Bluetooth: MGMT ver 1.23 [ 525.751016][ T117] usb 2-1: USB disconnect, device number 30