last executing test programs: 12.23726326s ago: executing program 1 (id=1393): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/sctp\x00') pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000140)="09aa9aee57f1de1ed7969436a69abe5dc2303b8e742f7f69a74eb9e5d3d24616e6e5b7a7ba5397219a01373c99bdba7d5d7ae6afb7113c557e1885cd5ecf0945dd59044344866680e9fb462d0c8dcf8c51bf03b72d58e1d13c98e3620d598d7a8eff2e", 0x63}, {&(0x7f00000001c0)="89c036ba7d40bbe37261ee308b83f2c1467bfc3a6d277f8d61ea15b52ecb986568e731f30c31e3aef0f8abf33b74b6968d97bb76926732657f3a49853803c3dc928612108d7195bdf3b5b35df21b8b1b753cbb8956cdd17c6aba2ffc16ec968ae09feb5a19b5cbfb53be2c4844080a3474b4b4dbc1e012bd", 0x78}], 0x2, 0xff, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioperm(0x80, 0x49, 0x69) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) write$vga_arbiter(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="756e6c6e000011"], 0xc) r3 = socket(0x1, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000280)=[{0x1000, 0x0, 0x0, 0x400}, {0xe2, 0x0, 0x3, 0x4}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) brk(0x55555ede6000) inotify_init() getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) brk(0x6) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT=0x0], 0x0) syz_usb_ep_write(r5, 0x8d, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}h\xc6\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\a\x00\x00\x00\xb6\x9b\xdb\xdc\xf3\xb9\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x88, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r4, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x38, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x34, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xb}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x76ce}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x1, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xfc}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ICMPV6_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0xffffff00, 0xffffff00, 0x0, 0xffffff00]}]}}]}, 0x88}, 0x1, 0x806}, 0x0) 11.361234444s ago: executing program 4 (id=1398): r0 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xeb}, &(0x7f0000000500)=0x0, &(0x7f0000000340)=0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$nci(r3, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xffffffffffffbffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r7, 0x83, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x14, 0x0, 0x0, 0x0, &(0x7f0000753000/0x3000)=nil, 0x3000}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe, 0x100010, r0, 0x8000000) r10 = dup(r9) write$FUSE_BMAP(r10, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r10, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r10]) ioctl$KVM_REGISTER_COALESCED_MMIO(r10, 0x4010ae67, &(0x7f0000000000)={0x1, 0xa000}) 9.339331648s ago: executing program 2 (id=1404): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="54000000100009040000000000007fffffff0000", @ANYRES32=r2, @ANYBLOB="000000000000000034001280110000006272696467655f736c617665000000001c000580050020000100000005000c0000000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) 9.270788268s ago: executing program 2 (id=1406): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x4000000000002, 0x300) socket(0xa, 0x801, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x11, 0xa, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c00000010000104000000050000000000000000", @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 9.014711958s ago: executing program 2 (id=1408): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="3097", 0x2, 0xffffffffffffffff) fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) r2 = io_uring_setup(0x2b35, &(0x7f0000000240)={0x0, 0x6572, 0x1c6715d046e482ac, 0x2, 0x21e, 0x0, r1}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x800, @dev={0xfe, 0x80, '\x00', 0x25}, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x17, 0x0, 0x0) r4 = syz_io_uring_setup(0xd2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2b3, 0x0, r2}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x50}, 0x4, 0x700000000000000}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) request_key(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000540)='%-\'\x00', 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) 8.945978772s ago: executing program 2 (id=1409): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) socket(0x29, 0x5, 0x103) (async) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000000c0)={0x0, 0x7, 0xc}) (async) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x82400, 0x0) (async) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="f8", 0x1}], 0x1, 0x4) (async) write(r3, &(0x7f0000001100)="94", 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) (async) tee(r2, r5, 0xaf5, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) syz_usb_connect(0x2, 0x3b9, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000041914140f30c75932efd010203010902a703010000000209046d000c3fdae20009050402ff03"], 0x0) 7.644129764s ago: executing program 1 (id=1411): openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) r0 = socket(0x10, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x24000040) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r4, 0x0, 0x10000, 0x0, 0x50000, 0x1, 0x32bb90, 0x100000000000000}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xd0, @void, @value}, 0x94) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r6}, 0x18) r7 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000007fc0), 0x2, 0x0) write(r8, &(0x7f0000000080), 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 7.423272171s ago: executing program 4 (id=1412): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x10, 0xa, [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x7, 0x1, 0x1, 0x68, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x2, 0x5, 0xb}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0xd, 0x9}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x8, 0x8, 0x5, 0x40, 0x3}, 0x19, &(0x7f00000000c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xf, "7cb2ae61eb0ab370c64cb1c1387092c4"}]}, 0x1, [{0x94, &(0x7f0000000100)=@string={0x94, 0x3, "7f1d2c0e7a53240f1b0de6c301fcd0688d8167b17a228146508edb3a4f4e8b912b98755d59e070bd970bbfa603a16b81856302748900e17a69e4a52a1631beb353dbc33e5cbf3669b595b54cfb2a7c425065ec64419a3ee31e1b9db37a5b97fd40300b3ac35a70131bcbfd380963a1b385c2553250f0d7584bd4df4ffbbe084f6558faa7b499568cf490fc39a51c0533877c"}}]}) syz_usb_control_io$printer(r1, &(0x7f0000000340)={0x14, &(0x7f0000000200)={0x40, 0x4, 0x9f, {0x9f, 0x23, "f8d24042c45b41b83ca15d8b960b0727b0cfed39425a04e9af8b5cf643cfe468c9d551acf585181ea60468c3f4a6ce6fb51b9754b9d05a1ec9e9f3e587d28162ea0d122c85dc65e3247d1b32f34dea077b91c60c5be7175435fba68e8a723c9d89ae08175bd29ca78e13a18568f72470c5a876e8e77066fe3d67a13969b8f92002667b64772bc99de82f890fadb2ad264c8c1d9cc1820ba939eefadfbd"}}, &(0x7f00000002c0)={0x0, 0x3, 0x6b, @string={0x6b, 0x3, "03d6c27f17219021b979b4cc848514dfb8f5b27bd51d2252836d5759a418c246bb5a237493f529c73c0d1f8d62aa3a57c9b66688b264e6cf897a94a191c3d308d21c2574b446ff042d0db3bf9003e1860c2c58e1b3aa0d627bb487c89d82dd7a83d2e70b46c04ae905"}}}, &(0x7f0000000680)={0x34, &(0x7f0000000480)={0x0, 0xf, 0xdb, "0a86e68b70ee3f672bb27838f9bd97bb7fd0c031fe1017e466d15f5fcbbb899d3722a8be1a91c8b8e2c0aca8c614db7e1689f6dad6e6225d654c4b3569d9fe1ed5a0ee6ed0a988a5b7527c1b3a42d1626cba921495a6cc4c2eacd7cdcc0e67235e2f17f6631d532c2e4e48c6b86cc2cac8e210a5945a1b802666bac1d7af6196a208134de968462c9bde338512f5febd579ad904932ed5592bbdeb746987feae7e08fb3896e1daffd939efd402993ed61af3bb11efbe0b1e3a438d0be9ffaee343b55868a595eabb8aab1561c2262fb50551510fdd97151bc3b482"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xf6}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000580)={0x20, 0x0, 0x70, {0x6e, "2daed589a5cc1a742dde1c1b5ea2ee85bfc01be2e6463f119ea39fd739c4b50eacca2cac396c4dc6218f57020ac30cd90d927a8820268af9b8cb7dbd5e54f0c8f52eb93d552f3a3bc22a5f5c7bb843dabab9842c75bc4862da1b30a58f0f91aa913ac0332b857ad7d03874a58cbf"}}, &(0x7f0000000600)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000000640)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.051368185s ago: executing program 3 (id=1413): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76, 0x0, 0x0, 0xfffff000}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) 6.783452142s ago: executing program 3 (id=1415): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async) mknod$loop(0x0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) rt_sigtimedwait(&(0x7f0000000280)={[0x2]}, 0x0, &(0x7f0000000380)={0x0, 0x989680}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10010, 0xffffffffffffffff, 0x0) (async) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000340)={0x0, 0x9, 0xb2f3a3bc0486cb40, 0x1}, &(0x7f0000000380)=0x18) (async) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000300)='./file0\x00', 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) dup3(r6, r7, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 6.275261534s ago: executing program 2 (id=1417): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0, 0x0, 0x4}, 0x18) r1 = socket(0xa, 0xa, 0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) socket(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) timer_create(0x0, 0x0, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dsp(0xffffffffffffff9c, 0x0, 0x42f82, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x5, 0x8000000], [0x8200, 0x1]}}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x180, 0xffffff80, 0x178, 0x0, 0x178, 0x2a0, 0x230, 0x258, 0x2a0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x138, 0x180, 0x12, {0x959f1400}, [@common=@unspec=@ipvs={{0x48}, {@ipv4=@multicast1}}, @common=@unspec=@limit={{0x48}, {0x0, 0x412}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'geneve1\x00'}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'hsr0\x00'}, 0x7000000, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x2}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) 6.083514377s ago: executing program 3 (id=1419): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000540)={'wg1\x00', 0x0}) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000039000000080001007063690011000200303030303a30303a31302e3000000000080003"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="780000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004800128009000100766c616e00000000380002800600010000000000280003800c0001e400000000000000000c0001000f000000020000000c00070000000000010000000400048008000500", @ANYRES32=r2], 0x78}, 0x1, 0xba01}, 0x0) 5.91342427s ago: executing program 1 (id=1420): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="140100001f000117000000000000000001", @ANYRESDEC=r0], 0x114}], 0x1}, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f00000000c0)=0x1) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000007, 0x12, r1, 0x0) write$dsp(r1, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) r2 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x8000023, 0x4, @tid=r2}, &(0x7f0000000300)) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0), 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') preadv(r4, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/128, 0x80}], 0x1, 0xc102a0, 0x101) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000000101010200000000000000000500000824001080080002400000000008000340000000050800014000000204000000400000000908001540000000030c0019800800010018080000"], 0x4c}, 0x1, 0x0, 0x0, 0x20040000}, 0xc5) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0x0, 0xffffffff, 0xffffffff, 0x148, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, &(0x7f0000000140), {[{{@ip={@local, @multicast1, 0xff, 0x0, 'veth0_to_bond\x00', 'virt_wifi0\x00', {}, {0xff}, 0x11, 0x2, 0x1a}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x2}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x2, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x204, [0x1, 0x2, 0x0, 0x2, 0x2, 0x1], 0x4, 0x4}, {0x0, [0x4, 0x4, 0x4, 0x3, 0x5, 0x4], 0x2, 0x5}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x100, 0x5, 0x400, 0xfffffffb, 0x800009, 0x8e, 0x5, 0x3]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 5.909479151s ago: executing program 3 (id=1421): pipe(&(0x7f0000000000)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000180)=[{&(0x7f00000006c0)="fbba", 0x2}], 0x1, 0x0) sendto$rxrpc(r0, &(0x7f0000000000)="6dc30109860bd304a53f09c4fbc455d573bf4d940a18535d46bc21bd4413427af42f2a931defaf0b4855264c3577997764416e335de67f19feff4b30c54c98749d5dd8c66f802d965e94895f42cdd46d886e06a81569bac3b1faa0816da93ba7e5b018665cd883c8dee59debafff5c347821817795edd3338dddac4bcde768e34c9ad75ff0def1732f09649a4547e7446d080f4f5274697b0961a6c8362efaba5866edd066cf7ee6ba92570326daf4b68be92638c69f4b70554ab190111630cec8140106e221917e6a615921b66d5120b257", 0xd2, 0x20000005, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r2, 0x851, 0x400000000000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000d00000006000a3cc487376951b640ab780d609fbae802000000"], 0x1c}}, 0x0) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) chdir(&(0x7f0000000140)='./file0\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x250, 0x4c, 0x232, 0x0, 0x0, 0x3b0, 0x2e8, 0x2e8, 0x3b0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x0, 0x228, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [0x0, 0x0, 0xffffffff], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@ipv4=@rand_addr=0x64010100, [], @ipv4=@broadcast, [0x7000000], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {@ipv4=@multicast2, [], @ipv4=@dev}, {@ipv6=@loopback, [], @ipv6=@private2, [0x0, 0xff000000]}], 0x1}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [0x7000000], 'ip6gre0\x00', 'xfrm0\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x50}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xc, 0x0, 0x2, 0xd, 'snmp\x00', 'syz1\x00', {0x401}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) 4.451725719s ago: executing program 2 (id=1422): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000280)="45a5ca8ce5c277044bce4b45b4ac7aa0546819def2ccf57461adf7e840d3559b754bced750dac000040f515826195a196f7002a5531de83d1a83d1cfddb05093363a60c3268b68023f136e13827faf0af9bc02576dfb8f0a58a0249a868f1008bb8a0eaee0009986365ca3f5801c646f1432269587e134f0644f06b973997273717bfc707061030ce7722d9658d656767937ab114f50bc611c7016e0516024bbf90e7f9988ba89c0d537d1daf409dccb10c63b8b46e26ea5ff34ab88fa0190fb973aa30f9bb7f3d6ef5fa1e51cab95b42d0ce851267494c32495e77ebbcfb48cd5417da7caf8b61461800a5f4b9a", 0xee}], 0x1) r0 = socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) syz_open_dev$evdev(&(0x7f0000000b80), 0x0, 0x0) userfaultfd(0x80801) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) r1 = syz_io_uring_setup(0x1111, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x50, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x18, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff]}, 0x1) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x0, 0x3e, @dev={0xfe, 0x80, '\x00', 0x21}}, 0x1c, 0x0}}], 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r4}, 0x10) r5 = socket$can_raw(0x1d, 0x3, 0x1) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x20141, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r6}, 0x10, &(0x7f00000005c0)={&(0x7f00000000c0)=@can={{}, 0x80, 0x3, 0x4, 0x2}, 0x210}, 0x1, 0x0, 0x0, 0xc4}, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001900), 0x8500) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r7, 0xc05c5340, &(0x7f0000001940)={0xc8, 0xd9b, 0x188a7a06, {0x2, 0xfffffffd}, 0x0, 0x7}) 4.346404112s ago: executing program 3 (id=1424): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xd, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000611214000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x8000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x10000000000001, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x22080) mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000580)='ntfs\x00', 0x24d808, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x1202002, &(0x7f0000000400)={[{@index_on, 0x3a}], [{@audit}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@smackfsdef}], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x2c) getdents(r1, &(0x7f0000000300)=""/132, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000000040)={0xa, {0xffffffff, 0x5, 0xd, 0x8}}) r4 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x8004) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0x2, &(0x7f0000000140)) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x2068c00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x4008031, 0xffffffffffffffff, 0x47655000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) futex(&(0x7f00000040c0), 0x7, 0x0, 0x0, 0x0, 0x0) 3.915901769s ago: executing program 4 (id=1425): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x401, 0xffffff7f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}]}, 0x44}}, 0x0) 3.239610289s ago: executing program 4 (id=1426): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x44811}, 0x80) move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000001180), 0xfffffffffffffffe, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000226bd7000fddbdf2504000000200001800848a3278afdc4000300020100000000000000657468315f76697274"], 0x34}, 0x1, 0x0, 0x0, 0x20008040}, 0x41090) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$inet6(0xa, 0x80002, 0x1) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000003d) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x200) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000006c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf050000000000003d6500000000000065070000021c0000070700004c0000001f750000000000006154004d00000000070400000400f9ffad4301000000000095000000000000000500000000000020950000000000000096669e8e4da2f09183bb", @ANYRES64=r6], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r6, 0x80dc5521, &(0x7f0000000100)=""/119) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000100)) read$FUSE(r7, &(0x7f00000023c0)={0x2020}, 0x2020) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r9, 0x9, 0x0) 3.227915527s ago: executing program 0 (id=1427): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x248, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x1f8, 0x8, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @dev}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x168, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xfc, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x4c, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0x88, 0xa00, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x2f}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev}}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2767b524f45e9dfaf001c414581741c92349c3b6661d9864680582bd184ef1a6"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0x248}}, 0x0) 3.163488579s ago: executing program 0 (id=1428): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0800000004000000040000000800000000000080", @ANYRES32, @ANYRESDEC], 0x48) 3.039534255s ago: executing program 0 (id=1429): socket(0x15, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000180)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000240)={0x2, r5}) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='geneve0\x00', 0x10) connect$phonet_pipe(r4, &(0x7f0000000200), 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0xc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x3000c0a0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket(0x15, 0x5, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) getpid() (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) (async) fcntl$setownex(r1, 0xf, &(0x7f0000000240)={0x2, r5}) (async) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='geneve0\x00', 0x10) (async) connect$phonet_pipe(r4, &(0x7f0000000200), 0x10) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0xc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x3000c0a0}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) 2.52790311s ago: executing program 1 (id=1430): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300)="00000000000000000000000000f400", 0x2000, &(0x7f0000006300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000063c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.489628154s ago: executing program 0 (id=1431): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x4000}, 0x94) 2.267815929s ago: executing program 0 (id=1432): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRESOCT], 0x44}}, 0x0) socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001040)=[@in6={0xa, 0x4e22, 0x7ff, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, @in={0x2, 0x4e20, @remote}], 0x2c) 2.123806697s ago: executing program 1 (id=1433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, 0x0, 0x8880) r4 = syz_open_procfs(r0, &(0x7f0000000100)='oom_adj\x00') ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000180)) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.161552572s ago: executing program 1 (id=1434): r0 = socket(0x22, 0x2, 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x0, 0x0, 0x103ff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f00000006c0)={0x1, 0x1, 0x7000000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1f00, 0x12) recvfrom$inet6(r0, 0x0, 0x0, 0x10040, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5) ftruncate(0xffffffffffffffff, 0x8800000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0x0, &(0x7f00000001c0), 0x2b82, 0x0) 513.312137ms ago: executing program 3 (id=1435): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x815}, 0x4084) (async) syz_usb_connect(0x3, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) (async) r3 = syz_open_pts(r2, 0x60c40) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000080)=0x14) (async) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f00000000c0)=0x32) (async) r4 = getpid() (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}}, 0x0) (async, rerun: 32) dup3(r3, r2, 0x0) (async, rerun: 32) splice(r2, 0x0, r1, 0x0, 0x3, 0x0) (async) write$UHID_CREATE2(r1, &(0x7f0000000100)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x3b, 0x83e, 0xbc0, 0x7ff, 0x9, 0x1, "61c4b9d028b63b602aa8edd9ecb1d2dd591e0e8cf709b356fcbebcf69379e9011f65229c4acc8475a1c45942fae0ab7690b6cb800cdc36cf788bb8"}}, 0x153) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8cb83, 0x0) 127.987934ms ago: executing program 4 (id=1436): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1000001000104) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x200) ioctl$NBD_SET_SOCK(r4, 0xab00, r2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_DO_IT(r3, 0xab03) 0s ago: executing program 0 (id=1437): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) (async) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r2, 0x3, &(0x7f0000002580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6, r1, 0x0, 0x0, 0x8, 0x0, 0x0, r1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x6, r1, &(0x7f0000000240)="c6fc7574a7bc1e5c012adbf6c6c5ee6ccd31d80f5ed56dd0e1ab9dc1b89ba24c34fb15ac7246907fce8204f81a521d1c8695133bc2ceb26883dd3d59ca1a59d0e0dc2e7fcd0f5d292929871b75bbeb5ea9f3d7d9f11e1da4ed36272fc26243f502860b166fbb81ccc9b243f60e285611c2710630686d5ca42c7b01307d054816", 0x80, 0x5c8, 0x0, 0x0, r1}, 0x0]) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0) (async) recvmmsg(r4, &(0x7f00000001c0), 0x40001a7, 0x40002100, 0x0) (async) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r7, 0x407, 0x0) (async) write$FUSE_INIT(r7, &(0x7f0000000340)={0x50}, 0x50) vmsplice(r7, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) (async) fcntl$setpipe(r7, 0x407, 0x2000000) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r8, r0, &(0x7f00000000c0)=0x58, 0x5) kernel console output (not intermixed with test programs): 67][ T9056] x_tables: ip6_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48 [ 303.833969][ T29] audit: type=1400 audit(1734809109.061:562): avc: denied { read } for pid=9042 comm="syz.3.892" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 303.858607][ T29] audit: type=1400 audit(1734809109.061:563): avc: denied { open } for pid=9042 comm="syz.3.892" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 303.914879][ T29] audit: type=1400 audit(1734809109.161:564): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 306.134943][ T9079] vlan2: entered promiscuous mode [ 308.122841][ T9092] netlink: 60 bytes leftover after parsing attributes in process `syz.3.905'. [ 308.499161][ T9082] delete_channel: no stack [ 308.540422][ T5864] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 308.716232][ T5864] usb 3-1: Using ep0 maxpacket: 32 [ 308.724211][ T5864] usb 3-1: config 105 has an invalid descriptor of length 66, skipping remainder of the config [ 308.766598][ T5864] usb 3-1: config 105 has 0 interfaces, different from the descriptor's value: 1 [ 308.784109][ T5864] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 308.808418][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.827114][ T5864] usb 3-1: Product: syz [ 308.841205][ T5864] usb 3-1: Manufacturer: syz [ 308.845887][ T5864] usb 3-1: SerialNumber: syz [ 310.403192][ T5864] usb 3-1: USB disconnect, device number 13 [ 311.800236][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 311.809178][ T9143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.916'. [ 311.819393][ T9143] nbd: must specify at least one socket [ 312.533946][ T9] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 312.543243][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.553854][ T9] usb 3-1: Product: syz [ 312.563423][ T9] usb 3-1: Manufacturer: syz [ 312.572555][ T9] usb 3-1: SerialNumber: syz [ 312.602569][ T9] usb 3-1: config 0 descriptor?? [ 312.965053][ T9155] netlink: 2716 bytes leftover after parsing attributes in process `syz.3.924'. [ 313.094953][ T9] usb 3-1: USB disconnect, device number 14 [ 313.230314][ T8] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 313.398044][ T8] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 313.407296][ T8] usb 4-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 313.418077][ T8] usb 4-1: Product: syz [ 313.423950][ T8] usb 4-1: config 0 descriptor?? [ 313.433038][ T8] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 313.611123][ T8] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 313.827161][ T969] usb 4-1: USB disconnect, device number 18 [ 313.840712][ T969] ftdi_sio 4-1:0.0: device disconnected [ 313.992994][ T9171] netlink: 'syz.4.928': attribute type 3 has an invalid length. [ 314.001076][ T9171] netlink: 'syz.4.928': attribute type 3 has an invalid length. [ 314.009733][ T9171] netlink: 16 bytes leftover after parsing attributes in process `syz.4.928'. [ 314.550345][ T29] audit: type=1400 audit(1734809119.651:565): avc: denied { ioctl } for pid=9172 comm="syz.4.929" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 315.288578][ T5817] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 316.611362][ T9204] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 317.493479][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.499786][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.954960][ T29] audit: type=1400 audit(1734809124.191:566): avc: denied { write } for pid=9211 comm="syz.4.941" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 318.978833][ C0] vkms_vblank_simulate: vblank timer overrun [ 318.987628][ T9214] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 318.994876][ T9214] IPv6: NLM_F_CREATE should be set when creating new route [ 319.002112][ T9214] IPv6: NLM_F_CREATE should be set when creating new route [ 319.115160][ T29] audit: type=1400 audit(1734809124.191:567): avc: denied { open } for pid=9211 comm="syz.4.941" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 319.139617][ T29] audit: type=1326 audit(1734809124.261:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4036385d29 code=0x7ffc0000 [ 319.162935][ T29] audit: type=1326 audit(1734809124.261:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4036385d29 code=0x7ffc0000 [ 319.186359][ T29] audit: type=1326 audit(1734809124.261:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4036385d29 code=0x7ffc0000 [ 319.209848][ T29] audit: type=1326 audit(1734809124.261:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4036385d29 code=0x7ffc0000 [ 319.233344][ T29] audit: type=1326 audit(1734809124.261:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4036385d29 code=0x7ffc0000 [ 319.256779][ T29] audit: type=1326 audit(1734809124.261:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4036385d29 code=0x7ffc0000 [ 319.280274][ T29] audit: type=1326 audit(1734809124.261:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4036385d29 code=0x7ffc0000 [ 319.744017][ T9216] netlink: 'syz.2.939': attribute type 10 has an invalid length. [ 319.769660][ T9216] netlink: 55 bytes leftover after parsing attributes in process `syz.2.939'. [ 319.781153][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 319.781164][ T29] audit: type=1400 audit(1734809124.991:589): avc: denied { bind } for pid=9215 comm="syz.2.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 319.852254][ T29] audit: type=1326 audit(1734809125.101:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4036385d29 code=0x7ffc0000 [ 319.889304][ T29] audit: type=1326 audit(1734809125.101:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4036385d29 code=0x7ffc0000 [ 319.955652][ T29] audit: type=1326 audit(1734809125.191:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4036385d29 code=0x7ffc0000 [ 319.979109][ T29] audit: type=1326 audit(1734809125.191:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4036385d29 code=0x7ffc0000 [ 320.002616][ T29] audit: type=1326 audit(1734809125.191:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4036385d29 code=0x7ffc0000 [ 320.026253][ T29] audit: type=1326 audit(1734809125.201:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4036385d29 code=0x7ffc0000 [ 320.049879][ T29] audit: type=1326 audit(1734809125.201:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4036385d29 code=0x7ffc0000 [ 320.074489][ T29] audit: type=1326 audit(1734809125.201:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4036385d29 code=0x7ffc0000 [ 320.097985][ T29] audit: type=1326 audit(1734809125.201:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4036385d29 code=0x7ffc0000 [ 320.408909][ T9236] trusted_key: encrypted_key: insufficient parameters specified [ 321.512031][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 321.626491][ T9253] vlan2: entered promiscuous mode [ 321.673301][ T9] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 321.682612][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.692954][ T9] usb 3-1: Product: syz [ 321.709006][ T9] usb 3-1: Manufacturer: syz [ 321.737762][ T9] usb 3-1: SerialNumber: syz [ 321.769411][ T9] usb 3-1: config 0 descriptor?? [ 321.921172][ T9259] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 321.928831][ T9259] CPU: 1 UID: 0 PID: 9259 Comm: syz.4.952 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 321.939435][ T9259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 321.949673][ T9259] Call Trace: [ 321.952950][ T9259] [ 321.955880][ T9259] dump_stack_lvl+0x16c/0x1f0 [ 321.960570][ T9259] sysfs_warn_dup+0x7f/0xa0 [ 321.965080][ T9259] sysfs_do_create_link_sd+0x124/0x140 [ 321.970558][ T9259] sysfs_create_link+0x61/0xc0 [ 321.975337][ T9259] device_add+0x62e/0x1a70 [ 321.979763][ T9259] ? __pfx_device_add+0x10/0x10 [ 321.984620][ T9259] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 321.990522][ T9259] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 321.996520][ T9259] wiphy_register+0x1cab/0x2860 [ 322.001379][ T9259] ? __pfx_wiphy_register+0x10/0x10 [ 322.006589][ T9259] ? ieee80211_register_hw+0x27e0/0x41a0 [ 322.012228][ T9259] ieee80211_register_hw+0x2aa2/0x41a0 [ 322.017706][ T9259] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 322.023520][ T9259] ? rcu_is_watching+0x12/0xc0 [ 322.028312][ T9259] ? __asan_memset+0x23/0x50 [ 322.032920][ T9259] ? __hrtimer_init+0x106/0x2c0 [ 322.037789][ T9259] mac80211_hwsim_new_radio+0x304e/0x54d0 [ 322.043541][ T9259] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 322.049631][ T9259] ? hwsim_new_radio_nl+0xa10/0x12b0 [ 322.054941][ T9259] hwsim_new_radio_nl+0xb42/0x12b0 [ 322.060071][ T9259] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 322.065636][ T9259] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 322.073030][ T9259] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 322.080423][ T9259] genl_family_rcv_msg_doit+0x202/0x2f0 [ 322.085981][ T9259] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 322.092065][ T9259] ? bpf_lsm_capable+0x9/0x10 [ 322.096743][ T9259] ? security_capable+0x7e/0x260 [ 322.101682][ T9259] ? ns_capable+0xd7/0x110 [ 322.106103][ T9259] genl_rcv_msg+0x565/0x800 [ 322.110608][ T9259] ? __pfx_genl_rcv_msg+0x10/0x10 [ 322.115633][ T9259] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 322.121184][ T9259] ? __pfx___lock_acquire+0x10/0x10 [ 322.126390][ T9259] netlink_rcv_skb+0x16b/0x440 [ 322.131187][ T9259] ? __pfx_genl_rcv_msg+0x10/0x10 [ 322.136237][ T9259] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 322.141543][ T9259] ? down_read+0xc9/0x330 [ 322.145876][ T9259] ? __pfx_down_read+0x10/0x10 [ 322.150647][ T9259] ? netlink_deliver_tap+0x1ae/0xd30 [ 322.155972][ T9259] genl_rcv+0x28/0x40 [ 322.159980][ T9259] netlink_unicast+0x53c/0x7f0 [ 322.164772][ T9259] ? __pfx_netlink_unicast+0x10/0x10 [ 322.170075][ T9259] netlink_sendmsg+0x8b8/0xd70 [ 322.174862][ T9259] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.180159][ T9259] ? tomoyo_socket_sendmsg+0xe/0x30 [ 322.185371][ T9259] ____sys_sendmsg+0xaaf/0xc90 [ 322.190139][ T9259] ? copy_msghdr_from_user+0x10b/0x160 [ 322.195599][ T9259] ? __pfx_____sys_sendmsg+0x10/0x10 [ 322.200900][ T9259] ___sys_sendmsg+0x135/0x1e0 [ 322.205576][ T9259] ? __pfx____sys_sendmsg+0x10/0x10 [ 322.210796][ T9259] ? __fget_files+0x206/0x3a0 [ 322.215484][ T9259] __sys_sendmsg+0x16e/0x220 [ 322.220073][ T9259] ? __pfx___sys_sendmsg+0x10/0x10 [ 322.225183][ T9259] ? __pfx___schedule+0x10/0x10 [ 322.230035][ T9259] ? __x64_sys_futex+0x1e1/0x4c0 [ 322.234991][ T9259] do_syscall_64+0xcd/0x250 [ 322.239500][ T9259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.245397][ T9259] RIP: 0033:0x7f4036385d29 [ 322.249807][ T9259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.269419][ T9259] RSP: 002b:00007f40371d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.277848][ T9259] RAX: ffffffffffffffda RBX: 00007f4036576160 RCX: 00007f4036385d29 [ 322.285840][ T9259] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000009 [ 322.293817][ T9259] RBP: 00007f4036401aa8 R08: 0000000000000000 R09: 0000000000000000 [ 322.301795][ T9259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.309765][ T9259] R13: 0000000000000000 R14: 00007f4036576160 R15: 00007ffd12ac71c8 [ 322.317755][ T9259] [ 323.852828][ T5828] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 324.438169][ T9242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.812896][ T9242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.966292][ T9] usb 3-1: Firmware: major: 0, minor: 248, hardware type: RZUSB (3) [ 325.782131][ T9] usb 3-1: failed to fetch extended address, random address set [ 326.046587][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 326.046603][ T29] audit: type=1400 audit(1734809131.291:606): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 326.122889][ T9285] delete_channel: no stack [ 326.468787][ T9] usb 3-1: USB disconnect, device number 15 [ 327.968190][ T5894] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 328.146091][ T29] audit: type=1400 audit(1734809133.391:607): avc: denied { ioctl } for pid=9315 comm="syz.0.971" path="socket:[19422]" dev="sockfs" ino=19422 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 328.177226][ T5894] usb 4-1: Using ep0 maxpacket: 8 [ 328.192827][ T5894] usb 4-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.250399][ T5894] usb 4-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.269716][ T5894] usb 4-1: config 0 interface 0 has no altsetting 0 [ 328.276628][ T5894] usb 4-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00 [ 328.286195][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.301022][ T5894] usb 4-1: config 0 descriptor?? [ 328.750204][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 328.754683][ T5894] wacom 0003:056A:00BB.0003: Unknown device_type for 'HID 056a:00bb'. Assuming pen. [ 328.814878][ T5894] wacom 0003:056A:00BB.0003: hidraw0: USB HID v0.00 Device [HID 056a:00bb] on usb-dummy_hcd.3-1/input0 [ 328.836203][ T5894] input: Wacom Intuos4 12x19 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00BB.0003/input/input14 [ 328.937664][ T5894] usb 4-1: USB disconnect, device number 19 [ 328.960645][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 328.969717][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.028515][ T9] usb 3-1: Product: syz [ 329.041793][ T9] usb 3-1: Manufacturer: syz [ 329.050177][ T9] usb 3-1: SerialNumber: syz [ 329.118751][ T9] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 329.359273][ T5866] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 329.779198][ T9344] veth1_macvtap: left promiscuous mode [ 329.839782][ T29] audit: type=1400 audit(1734809135.081:608): avc: denied { map } for pid=9331 comm="syz.3.974" path="socket:[19882]" dev="sockfs" ino=19882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 330.563762][ T5866] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 330.572773][ T5866] ath9k_htc: Failed to initialize the device [ 330.601258][ T5866] usb 3-1: ath9k_htc: USB layer deinitialized [ 330.796160][ T29] audit: type=1400 audit(1734809136.031:609): avc: denied { append } for pid=9353 comm="syz.4.981" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 330.870280][ T9358] loop9: detected capacity change from 0 to 7 [ 330.911898][ T9355] netlink: 60 bytes leftover after parsing attributes in process `syz.0.980'. [ 330.925742][ T9358] Dev loop9: unable to read RDB block 7 [ 330.960375][ T9358] loop9: unable to read partition table [ 330.978146][ T9358] loop9: partition table beyond EOD, truncated [ 331.023257][ T9358] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 331.185834][ T9346] delete_channel: no stack [ 331.378883][ T9367] netlink: 28 bytes leftover after parsing attributes in process `syz.3.983'. [ 331.610203][ T5894] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 331.820891][ T5894] usb 2-1: Using ep0 maxpacket: 8 [ 331.899504][ T5894] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 331.907606][ T5894] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 331.939308][ T5894] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 332.000023][ T969] usb 3-1: USB disconnect, device number 16 [ 332.031428][ T5894] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 332.091434][ T5894] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 332.146054][ T5894] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 332.179727][ T5894] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 332.191545][ T5894] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 332.203266][ T5894] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 332.214616][ T5894] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 332.378565][ T5894] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 332.386150][ T5894] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 332.504406][ T5894] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 332.510292][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 332.516416][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 333.021512][ T9383] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 333.028111][ T9383] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 333.034225][ T9383] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 333.040941][ T9383] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 333.046936][ T9383] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 333.056261][ T5894] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 333.068288][ T9383] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 333.075033][ T9383] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 333.087181][ T9383] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 333.093354][ T9383] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 333.193369][ T5894] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 333.322489][ T9389] ieee802154 phy0 wpan0: encryption failed: -22 [ 333.571268][ T5894] usb 2-1: string descriptor 0 read error: -22 [ 333.585980][ T5894] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 333.610496][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.641606][ T5894] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 333.833706][ T9393] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 333.841600][ T9393] CPU: 1 UID: 0 PID: 9393 Comm: syz.4.991 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 333.852205][ T9393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 333.862261][ T9393] Call Trace: [ 333.865536][ T9393] [ 333.868463][ T9393] dump_stack_lvl+0x16c/0x1f0 [ 333.873150][ T9393] sysfs_warn_dup+0x7f/0xa0 [ 333.877656][ T9393] sysfs_do_create_link_sd+0x124/0x140 [ 333.883121][ T9393] sysfs_create_link+0x61/0xc0 [ 333.887898][ T9393] device_add+0x62e/0x1a70 [ 333.892322][ T9393] ? __pfx_device_add+0x10/0x10 [ 333.897186][ T9393] wiphy_register+0x1cab/0x2860 [ 333.902036][ T9393] ? __pfx__dev_printk+0x10/0x10 [ 333.906978][ T9393] ? __pfx_wiphy_register+0x10/0x10 [ 333.912185][ T9393] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 333.918261][ T9393] ieee80211_register_hw+0x2aa2/0x41a0 [ 333.923729][ T9393] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 333.929540][ T9393] ? rcu_is_watching+0x12/0xc0 [ 333.934315][ T9393] ? __asan_memset+0x23/0x50 [ 333.938902][ T9393] ? __hrtimer_init+0x106/0x2c0 [ 333.943756][ T9393] mac80211_hwsim_new_radio+0x304e/0x54d0 [ 333.949500][ T9393] ? __kmalloc_node_track_caller_noprof+0x240/0x510 [ 333.956096][ T9393] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 333.962167][ T9393] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 333.967454][ T9393] ? __asan_memcpy+0x3c/0x60 [ 333.972048][ T9393] hwsim_new_radio_nl+0xb42/0x12b0 [ 333.977166][ T9393] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 333.982721][ T9393] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 333.990098][ T9393] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 333.997481][ T9393] genl_family_rcv_msg_doit+0x202/0x2f0 [ 334.003035][ T9393] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 334.009121][ T9393] ? bpf_lsm_capable+0x9/0x10 [ 334.013795][ T9393] ? security_capable+0x7e/0x260 [ 334.018729][ T9393] ? ns_capable+0xd7/0x110 [ 334.023151][ T9393] genl_rcv_msg+0x565/0x800 [ 334.027655][ T9393] ? __pfx_genl_rcv_msg+0x10/0x10 [ 334.032675][ T9393] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 334.038230][ T9393] netlink_rcv_skb+0x16b/0x440 [ 334.043002][ T9393] ? __pfx_genl_rcv_msg+0x10/0x10 [ 334.048023][ T9393] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 334.053328][ T9393] ? down_read+0xc9/0x330 [ 334.057680][ T9393] ? __pfx_down_read+0x10/0x10 [ 334.062467][ T9393] ? __pfx_genl_rcv+0x10/0x10 [ 334.067167][ T9393] genl_rcv+0x28/0x40 [ 334.071159][ T9393] netlink_unicast+0x53c/0x7f0 [ 334.075933][ T9393] ? __pfx_netlink_unicast+0x10/0x10 [ 334.081232][ T9393] netlink_sendmsg+0x8b8/0xd70 [ 334.086019][ T9393] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.091315][ T9393] ____sys_sendmsg+0xaaf/0xc90 [ 334.096083][ T9393] ? copy_msghdr_from_user+0x10b/0x160 [ 334.101561][ T9393] ? __pfx_____sys_sendmsg+0x10/0x10 [ 334.106859][ T9393] ___sys_sendmsg+0x135/0x1e0 [ 334.111529][ T9393] ? preempt_schedule_common+0x44/0xc0 [ 334.116989][ T9393] ? __pfx____sys_sendmsg+0x10/0x10 [ 334.122220][ T9393] ? __pfx_lock_release+0x10/0x10 [ 334.127245][ T9393] ? trace_lock_acquire+0x14e/0x1f0 [ 334.132469][ T9393] ? __fget_files+0x206/0x3a0 [ 334.137152][ T9393] __sys_sendmsg+0x16e/0x220 [ 334.141740][ T9393] ? __pfx___sys_sendmsg+0x10/0x10 [ 334.146849][ T9393] ? __x64_sys_futex+0x1e1/0x4c0 [ 334.151809][ T9393] do_syscall_64+0xcd/0x250 [ 334.156326][ T9393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.162223][ T9393] RIP: 0033:0x7f4036385d29 [ 334.166638][ T9393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.186258][ T9393] RSP: 002b:00007f40371d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 334.194675][ T9393] RAX: ffffffffffffffda RBX: 00007f4036576160 RCX: 00007f4036385d29 [ 334.202641][ T9393] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000009 [ 334.210604][ T9393] RBP: 00007f4036401aa8 R08: 0000000000000000 R09: 0000000000000000 [ 334.218569][ T9393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.226536][ T9393] R13: 0000000000000000 R14: 00007f4036576160 R15: 00007ffd12ac71c8 [ 334.234517][ T9393] [ 335.071502][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 335.078386][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 335.084566][ T5817] Bluetooth: hci3: command 0x0c1a tx timeout [ 335.090809][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 335.186744][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 335.906193][ T9403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.994'. [ 335.916921][ T5866] usb 2-1: USB disconnect, device number 10 [ 337.257574][ T9406] delete_channel: no stack [ 337.268410][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 337.274589][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 337.280310][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 337.280677][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 337.431259][ T5898] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 337.592017][ T5898] usb 4-1: config 5 has an invalid interface number: 255 but max is 0 [ 337.612089][ T5898] usb 4-1: config 5 has an invalid descriptor of length 255, skipping remainder of the config [ 337.667961][ T5898] usb 4-1: config 5 has no interface number 0 [ 337.690460][ T5898] usb 4-1: too many endpoints for config 5 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 337.706168][ T5898] usb 4-1: config 5 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 337.719835][ T5898] usb 4-1: config 5 interface 255 has no altsetting 0 [ 337.988914][ T5898] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 337.999525][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.009294][ T5898] usb 4-1: Product: syz [ 338.014868][ T5898] usb 4-1: Manufacturer: syz [ 338.019807][ T5898] usb 4-1: SerialNumber: syz [ 338.822681][ T9422] delete_channel: no stack [ 340.130953][ T29] audit: type=1400 audit(1734809145.381:610): avc: denied { write } for pid=9441 comm="syz.2.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 341.053482][ T9442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1006'. [ 341.339008][ T5898] comedi comedi0: Wrong number of endpoints [ 341.345277][ T5898] ni6501 4-1:5.255: driver 'ni6501' failed to auto-configure device. [ 341.358481][ T5898] usb 4-1: USB disconnect, device number 20 [ 342.770653][ T5894] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 342.946362][ T5894] usb 5-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 343.169006][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.202323][ T5894] usb 5-1: Product: syz [ 343.207780][ T5894] usb 5-1: Manufacturer: syz [ 343.213016][ T5894] usb 5-1: SerialNumber: syz [ 343.242014][ T5894] usb 5-1: config 0 descriptor?? [ 343.477455][ T5894] peak_usb 5-1:0.0: PEAK-System PCAN-USB FD v0 fw v0.0.0 (1 channels) [ 343.791674][ T5894] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 343.798487][ T5894] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 343.806006][ T5894] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 344.900413][ T5894] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 344.960663][ T5894] usb 5-1: USB disconnect, device number 22 [ 345.958267][ T9523] hpfs: Bad magic ... probably not HPFS [ 345.970208][ T29] audit: type=1400 audit(1734809151.201:611): avc: denied { connect } for pid=9516 comm="syz.0.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 346.349309][ T9540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1037'. [ 347.150247][ T9538] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 347.345791][ T9548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1042'. [ 347.354857][ T9548] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1042'. [ 347.495260][ T9550] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=9550 comm=syz.0.1040 [ 347.535839][ T9550] tmpfs: Bad value for 'mpol' [ 347.546100][ T29] audit: type=1400 audit(1734809152.791:612): avc: denied { append } for pid=9549 comm="syz.0.1040" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 347.629009][ T5817] Bluetooth: hci4: command 0x0c1a tx timeout [ 347.730987][ T29] audit: type=1400 audit(1734809152.931:613): avc: denied { open } for pid=9558 comm="syz.1.1043" path="/dev/ptyq7" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 347.820318][ T29] audit: type=1400 audit(1734809153.001:614): avc: denied { create } for pid=9558 comm="syz.1.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 347.855176][ T9562] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1041'. [ 347.865012][ T29] audit: type=1400 audit(1734809153.031:615): avc: denied { ioctl } for pid=9558 comm="syz.1.1043" path="/dev/ptyq7" dev="devtmpfs" ino=126 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 348.364232][ T9554] delete_channel: no stack [ 348.547687][ T9566] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1044'. [ 349.936485][ T9584] binder: 9583:9584 ioctl c0306201 200002c0 returned -22 [ 350.158176][ T29] audit: type=1400 audit(1734809155.401:616): avc: denied { listen } for pid=9590 comm="syz.0.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 350.180308][ T5894] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 350.194588][ T29] audit: type=1400 audit(1734809155.431:617): avc: denied { module_request } for pid=9590 comm="syz.0.1055" kmod="net-pf-16-proto-16-family-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 350.840193][ T5894] usb 5-1: Using ep0 maxpacket: 16 [ 351.162891][ T5894] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 351.173882][ T5894] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 351.183673][ T5894] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 351.300460][ T9603] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 351.481116][ T5894] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 351.505621][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.519245][ T5894] usb 5-1: Product: syz [ 351.527233][ T5894] usb 5-1: Manufacturer: syz [ 351.535693][ T9612] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1058'. [ 351.555582][ T5894] usb 5-1: SerialNumber: syz [ 351.802456][ T5894] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 351.819249][ T5894] usb 5-1: unit 0 not found! [ 351.884985][ T9597] delete_channel: no stack [ 351.889372][ T5894] usb 5-1: USB disconnect, device number 23 [ 352.636100][ T9633] sctp: [Deprecated]: syz.3.1067 (pid 9633) Use of int in max_burst socket option deprecated. [ 352.636100][ T9633] Use struct sctp_assoc_value instead [ 352.685524][ T8002] udevd[8002]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 354.082125][ T29] audit: type=1400 audit(1734809158.561:618): avc: denied { create } for pid=9641 comm="syz.0.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 354.101993][ T29] audit: type=1400 audit(1734809158.571:619): avc: denied { ioctl } for pid=9641 comm="syz.0.1068" path="socket:[20381]" dev="sockfs" ino=20381 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 354.608860][ T52] Bluetooth: hci5: Frame reassembly failed (-84) [ 354.629246][ T9659] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1074'. [ 354.736312][ T9664] SET target dimension over the limit! [ 354.867404][ T9671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1079'. [ 356.624075][ T9678] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1081'. [ 356.670348][ T5829] Bluetooth: hci5: command 0x1003 tx timeout [ 356.677576][ T5817] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 356.816589][ T9689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1082'. [ 357.707070][ T9699] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1085'. [ 357.771643][ T9693] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1086'. [ 358.135338][ T9690] delete_channel: no stack [ 358.491300][ T29] audit: type=1400 audit(1734809163.741:620): avc: denied { read } for pid=9709 comm="syz.2.1090" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 358.540573][ T29] audit: type=1400 audit(1734809163.761:621): avc: denied { open } for pid=9709 comm="syz.2.1090" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 358.584823][ T29] audit: type=1400 audit(1734809163.831:622): avc: denied { write } for pid=9709 comm="syz.2.1090" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 358.702811][ T9712] binder: 9709:9712 ioctl c0306201 20000080 returned -14 [ 358.753304][ T29] audit: type=1400 audit(1734809163.991:623): avc: denied { map } for pid=9709 comm="syz.2.1090" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 358.971667][ T9715] syz.0.1091: attempt to access beyond end of device [ 358.971667][ T9715] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 358.986542][ T9715] syz.0.1091: attempt to access beyond end of device [ 358.986542][ T9715] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 359.001709][ T9715] Mount JFS Failure: -5 [ 360.181841][ T9723] vlan2: entered promiscuous mode [ 361.314586][ T29] audit: type=1326 audit(1734809166.561:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9730 comm="syz.2.1096" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8907b85d29 code=0x0 [ 361.415930][ T9736] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 363.406704][ T9742] syz.0.1101 (9742): drop_caches: 2 [ 363.413129][ T9742] syz.0.1101 (9742): drop_caches: 2 [ 363.492922][ T9750] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1099'. [ 363.564355][ T9757] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9757 comm=syz.2.1103 [ 363.730233][ T969] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 364.003573][ T969] usb 2-1: device descriptor read/64, error -71 [ 364.060348][ T8] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 364.170866][ T9770] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1105'. [ 364.240218][ T969] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 364.250470][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 364.263595][ T8] usb 4-1: config 0 interface 0 altsetting 30 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.288032][ T8] usb 4-1: config 0 interface 0 altsetting 30 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.301729][ T9771] netlink: 'syz.2.1103': attribute type 10 has an invalid length. [ 364.331903][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 364.338550][ T8] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 364.342180][ T9771] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1103'. [ 364.384708][ T969] usb 2-1: device descriptor read/64, error -71 [ 364.390235][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.420807][ T8] usb 4-1: config 0 descriptor?? [ 364.421860][ T9772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1103'. [ 364.510612][ T969] usb usb2-port1: attempt power cycle [ 364.678948][ T9760] delete_channel: no stack [ 364.860205][ T969] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 364.910951][ T969] usb 2-1: device descriptor read/8, error -71 [ 365.209860][ T8] hkems 0003:2006:0118.0004: bogus close delimiter [ 365.236504][ T8] hkems 0003:2006:0118.0004: item 0 4 2 10 parsing failed [ 365.643251][ T8] hkems 0003:2006:0118.0004: parse failed [ 365.644248][ T9779] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 365.669399][ T8] hkems 0003:2006:0118.0004: probe with driver hkems failed with error -22 [ 365.690199][ T969] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 365.720643][ T969] usb 2-1: device descriptor read/8, error -71 [ 365.830400][ T969] usb usb2-port1: unable to enumerate USB device [ 366.003982][ T9788] vlan2: entered promiscuous mode [ 366.009424][ T9788] batadv0: entered promiscuous mode [ 366.019095][ T9788] team0: Port device vlan2 added [ 366.420635][ T9797] loop9: detected capacity change from 0 to 7 [ 366.567315][ T9797] Dev loop9: unable to read RDB block 7 [ 366.670351][ T9797] loop9: unable to read partition table [ 366.687684][ T9797] loop9: partition table beyond EOD, truncated [ 366.708364][ T9797] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 366.856036][ T8] usb 4-1: USB disconnect, device number 21 [ 366.947136][ T29] audit: type=1400 audit(1734809172.181:625): avc: denied { accept } for pid=9798 comm="syz.0.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 368.274811][ T9804] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 368.870385][ T9820] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 368.876387][ T9820] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 368.883561][ T9820] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 368.889976][ T9820] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 368.895954][ T9820] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 368.938410][ T9820] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 368.944465][ T9820] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 369.186728][ T9833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1126'. [ 369.934259][ T9843] syz_tun: entered promiscuous mode [ 369.990488][ T9843] syz_tun: left promiscuous mode [ 370.451232][ T9853] ieee802154 phy0 wpan0: encryption failed: -22 [ 370.921696][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 370.927753][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 370.934429][ T5817] Bluetooth: hci1: command 0x0c1a tx timeout [ 370.940534][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 371.012660][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 372.120315][ T29] audit: type=1400 audit(1734809177.141:626): avc: denied { write } for pid=9867 comm="syz.3.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 372.990646][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 373.070281][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 373.080063][ T9889] delete_channel: no stack [ 373.100272][ T5898] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 373.264910][ T5898] usb 5-1: Using ep0 maxpacket: 8 [ 373.275639][ T5898] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 373.295799][ T5898] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 373.319857][ T5898] usb 5-1: Product: syz [ 373.337923][ T5898] usb 5-1: Manufacturer: syz [ 373.382353][ T5898] usb 5-1: SerialNumber: syz [ 373.405667][ T5898] usb 5-1: config 0 descriptor?? [ 373.421051][ T5898] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 374.788077][ T29] audit: type=1400 audit(1734809180.031:627): avc: denied { nlmsg_read } for pid=9877 comm="syz.4.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 375.106749][ T5898] input: gspca_zc3xx as /devices/platform/dummy_hcd.4/usb5/5-1/input/input17 [ 376.713514][ T9924] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 376.721210][ T9924] CPU: 1 UID: 0 PID: 9924 Comm: syz.2.1149 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 376.731902][ T9924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 376.741956][ T9924] Call Trace: [ 376.745229][ T9924] [ 376.748156][ T9924] dump_stack_lvl+0x16c/0x1f0 [ 376.752846][ T9924] sysfs_warn_dup+0x7f/0xa0 [ 376.757370][ T9924] sysfs_do_create_link_sd+0x124/0x140 [ 376.762840][ T9924] sysfs_create_link+0x61/0xc0 [ 376.767619][ T9924] device_add+0x62e/0x1a70 [ 376.772044][ T9924] ? __pfx_device_add+0x10/0x10 [ 376.776897][ T9924] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 376.782810][ T9924] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 376.788816][ T9924] wiphy_register+0x1cab/0x2860 [ 376.793679][ T9924] ? __pfx_wiphy_register+0x10/0x10 [ 376.798888][ T9924] ? ieee80211_register_hw+0x2a78/0x41a0 [ 376.804521][ T9924] ieee80211_register_hw+0x2aa2/0x41a0 [ 376.809993][ T9924] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 376.815804][ T9924] ? net_generic+0xea/0x2a0 [ 376.820316][ T9924] ? __asan_memset+0x23/0x50 [ 376.824906][ T9924] ? __hrtimer_init+0x106/0x2c0 [ 376.829777][ T9924] mac80211_hwsim_new_radio+0x304e/0x54d0 [ 376.835515][ T9924] ? __kmalloc_node_track_caller_noprof+0x240/0x510 [ 376.842110][ T9924] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 376.848178][ T9924] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 376.853467][ T9924] ? __asan_memcpy+0x3c/0x60 [ 376.858065][ T9924] hwsim_new_radio_nl+0xb42/0x12b0 [ 376.863185][ T9924] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 376.868741][ T9924] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 376.876115][ T9924] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 376.883501][ T9924] genl_family_rcv_msg_doit+0x202/0x2f0 [ 376.889053][ T9924] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 376.895135][ T9924] ? bpf_lsm_capable+0x9/0x10 [ 376.899804][ T9924] ? security_capable+0x7e/0x260 [ 376.904739][ T9924] ? ns_capable+0xd7/0x110 [ 376.909158][ T9924] genl_rcv_msg+0x565/0x800 [ 376.913659][ T9924] ? __pfx_genl_rcv_msg+0x10/0x10 [ 376.918680][ T9924] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 376.924225][ T9924] ? __pfx_genl_rcv_msg+0x10/0x10 [ 376.929247][ T9924] netlink_rcv_skb+0x16b/0x440 [ 376.934014][ T9924] ? __pfx_genl_rcv_msg+0x10/0x10 [ 376.939060][ T9924] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 376.944361][ T9924] ? down_read+0xc9/0x330 [ 376.948692][ T9924] ? __pfx_down_read+0x10/0x10 [ 376.953465][ T9924] ? genl_rcv+0xd/0x40 [ 376.957540][ T9924] genl_rcv+0x28/0x40 [ 376.961527][ T9924] netlink_unicast+0x53c/0x7f0 [ 376.966298][ T9924] ? __pfx_netlink_unicast+0x10/0x10 [ 376.971590][ T9924] netlink_sendmsg+0x8b8/0xd70 [ 376.976367][ T9924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.981658][ T9924] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 376.987729][ T9924] ____sys_sendmsg+0xaaf/0xc90 [ 376.992499][ T9924] ? copy_msghdr_from_user+0x10b/0x160 [ 376.997955][ T9924] ? __pfx_____sys_sendmsg+0x10/0x10 [ 377.003252][ T9924] ___sys_sendmsg+0x135/0x1e0 [ 377.007932][ T9924] ? __pfx____sys_sendmsg+0x10/0x10 [ 377.013138][ T9924] ? __pfx_lock_release+0x10/0x10 [ 377.018160][ T9924] ? trace_lock_acquire+0x14e/0x1f0 [ 377.023372][ T9924] ? __fget_files+0x206/0x3a0 [ 377.028050][ T9924] __sys_sendmsg+0x16e/0x220 [ 377.032637][ T9924] ? __pfx___sys_sendmsg+0x10/0x10 [ 377.037764][ T9924] do_syscall_64+0xcd/0x250 [ 377.042278][ T9924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.048170][ T9924] RIP: 0033:0x7f8907b85d29 [ 377.052579][ T9924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.072187][ T9924] RSP: 002b:00007f89089ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.080609][ T9924] RAX: ffffffffffffffda RBX: 00007f8907d76160 RCX: 00007f8907b85d29 [ 377.088576][ T9924] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000009 [ 377.096550][ T9924] RBP: 00007f8907c01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 377.104520][ T9924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.112485][ T9924] R13: 0000000000000000 R14: 00007f8907d76160 R15: 00007ffe379fe108 [ 377.120472][ T9924] [ 377.611070][ T5898] usb 5-1: USB disconnect, device number 24 [ 377.763453][ T9932] delete_channel: no stack [ 377.886793][ T9937] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 377.919201][ T29] audit: type=1400 audit(1734809183.161:628): avc: denied { create } for pid=9938 comm="syz.0.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 377.940211][ T969] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 378.125958][ T9945] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 378.133239][ T9945] IPv6: NLM_F_CREATE should be set when creating new route [ 378.323516][ T969] usb 2-1: not running at top speed; connect to a high speed hub [ 378.856965][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.909434][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.393911][ T969] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 379.463224][ T969] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 379.490059][ T969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.511739][ T969] usb 2-1: Product: Ђ [ 379.512390][ T9962] cgroup: fork rejected by pids controller in [ 379.518926][ T9961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1160'. [ 379.522855][ T969] usb 2-1: Manufacturer: 홷鮛⧔๡닯⼨ꄔåƒî´˜ä˜¥ë­¥é¥³ã”–催꠫鰉๧氧䆴꼒ê›êƒ¬å‡”翨䩱贗颶á’韴뺽缊ⵃ鎥핀 [ 379.529808][ T9962] /syz2 [ 379.548176][ T969] usb 2-1: SerialNumber: ì®ì‹‡ïŠ’ۯ穯찡宕빇àºêº”퓥鋋혴ïŒï¹•ã¥˜ë³®ë¼‹áª¾î¤¿é—稪ᴇҟ誗ꨰẺ徻ⷜꤔè팵飬횈샯쬜苸⸅ꔕ橄æ¼æ—²à¤¿ëºè¬ë¢¿ç®ˆä›ãŠê­®î²®áƒ”舸æ±æ±™ì´ç†Žè’£ìˆ”䜭è«ï¾œã±’୉鳕㘛遼쥩ⴈﻥ笻ஊㄼ㖜ê¤í–³ [ 379.579095][ T9962] [ 379.663081][ T9987] netlink: 1276 bytes leftover after parsing attributes in process `syz.0.1162'. [ 379.677037][ T9987] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 380.751982][ T969] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 380.758804][ T969] cdc_ncm 2-1:1.0: bind() failure [ 380.767138][ T969] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 380.774304][ T969] cdc_ncm 2-1:1.1: bind() failure [ 380.800213][ T969] usb 2-1: USB disconnect, device number 15 [ 381.004199][T10075] delete_channel: no stack [ 381.009428][ T29] audit: type=1400 audit(1734809186.251:629): avc: denied { read write } for pid=10076 comm="syz.0.1167" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 381.093652][ T29] audit: type=1400 audit(1734809186.251:630): avc: denied { open } for pid=10076 comm="syz.0.1167" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 381.167754][ T29] audit: type=1400 audit(1734809186.251:631): avc: denied { map } for pid=10076 comm="syz.0.1167" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 381.190981][ T29] audit: type=1400 audit(1734809186.251:632): avc: denied { execute } for pid=10076 comm="syz.0.1167" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 381.374910][ T29] audit: type=1400 audit(1734809186.591:633): avc: denied { ioctl } for pid=10076 comm="syz.0.1167" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 381.447170][T10089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1169'. [ 381.456236][T10089] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1169'. [ 381.465567][T10089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1169'. [ 381.606459][T10093] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.813943][T10094] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1171'. [ 381.886571][ T1097] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.132716][ T1097] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.190729][ T5817] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 382.240191][ T5817] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 382.312365][ T5817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 382.479650][ T5817] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 382.595505][ T5817] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 382.604427][ T5817] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 383.404144][ T1097] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.518123][ T29] audit: type=1326 audit(1734809189.761:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10128 comm="syz.4.1181" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4036385d29 code=0x0 [ 384.627778][ T1097] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.674422][ T5829] Bluetooth: hci0: command tx timeout [ 384.931521][T10140] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1183'. [ 384.971048][T10142] 9pnet_fd: Insufficient options for proto=fd [ 385.110413][T10140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1183'. [ 385.122400][T10140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1183'. [ 385.239539][ T1097] erspan0: left allmulticast mode [ 385.252246][ T1097] erspan0: left promiscuous mode [ 385.273501][ T1097] bridge0: port 3(erspan0) entered disabled state [ 385.289800][ T1097] bridge_slave_1: left allmulticast mode [ 385.296615][ T1097] bridge_slave_1: left promiscuous mode [ 385.302639][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.391198][ T1097] bridge_slave_0: left allmulticast mode [ 385.425392][ T1097] bridge_slave_0: left promiscuous mode [ 385.459443][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.823174][ T5864] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 386.017420][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.036588][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.046432][ T5898] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 386.046497][ T5864] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 386.076233][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.080881][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.094873][ T5864] usb 5-1: config 0 descriptor?? [ 386.103111][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.114192][ T1097] bond0 (unregistering): Released all slaves [ 386.125589][ T1097] bond1 (unregistering): Released all slaves [ 386.138844][ T1097] bond2 (unregistering): Released all slaves [ 386.182130][T10098] chnl_net:caif_netlink_parms(): no params data found [ 386.197179][ T5898] usb 2-1: device descriptor read/64, error -71 [ 386.354506][T10098] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.362617][T10098] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.375169][T10098] bridge_slave_0: entered allmulticast mode [ 386.383368][T10098] bridge_slave_0: entered promiscuous mode [ 386.392140][T10098] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.399270][T10098] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.407167][T10098] bridge_slave_1: entered allmulticast mode [ 386.414200][T10098] bridge_slave_1: entered promiscuous mode [ 386.478597][ T5898] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 386.496794][T10098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.508817][T10098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.539159][T10098] team0: Port device team_slave_0 added [ 386.553006][T10098] team0: Port device team_slave_1 added [ 386.592279][ T1097] hsr_slave_0: left promiscuous mode [ 386.598231][ T1097] hsr_slave_1: left promiscuous mode [ 386.604622][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.613414][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.620393][ T5898] usb 2-1: device descriptor read/64, error -71 [ 386.628323][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.636130][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.654934][ T1097] veth1_macvtap: left promiscuous mode [ 386.661063][ T1097] veth0_macvtap: left promiscuous mode [ 386.719721][ T5864] usb 5-1: language id specifier not provided by device, defaulting to English [ 386.730593][ T5898] usb usb2-port1: attempt power cycle [ 386.752123][ T5829] Bluetooth: hci0: command tx timeout [ 386.926360][ T5864] letsketch 0003:6161:4D15.0005: Device info: Ñ [ 387.098136][ T5898] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 387.117838][ T1097] team0 (unregistering): Port device team_slave_1 removed [ 387.126014][ T5898] usb 2-1: device descriptor read/8, error -71 [ 387.143174][ T5894] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 387.185685][ T1097] team0 (unregistering): Port device team_slave_0 removed [ 387.265570][ T5864] usb 5-1: Max retries (5) exceeded reading string descriptor 201 [ 387.274771][ T5864] letsketch 0003:6161:4D15.0005: probe with driver letsketch failed with error -71 [ 387.296429][ T5894] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 387.305999][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.314182][ T5864] usb 5-1: USB disconnect, device number 25 [ 387.329931][ T5894] usb 4-1: Product: syz [ 387.347950][ T5894] usb 4-1: Manufacturer: syz [ 387.352688][ T5894] usb 4-1: SerialNumber: syz [ 387.368298][ T5894] usb 4-1: config 0 descriptor?? [ 387.386418][ T5898] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 387.416334][ T5898] usb 2-1: device descriptor read/8, error -71 [ 387.535054][ T5898] usb usb2-port1: unable to enumerate USB device [ 388.018140][ T5898] usb 4-1: USB disconnect, device number 22 [ 388.226021][T10098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.233571][T10098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.259471][ C1] vkms_vblank_simulate: vblank timer overrun [ 388.268546][T10098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.294665][T10098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.309876][T10098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.424634][T10098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.508331][T10098] hsr_slave_0: entered promiscuous mode [ 388.516304][T10098] hsr_slave_1: entered promiscuous mode [ 388.580220][T10098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 388.589249][T10098] Cannot create hsr debugfs directory [ 388.831214][ T5829] Bluetooth: hci0: command tx timeout [ 388.865608][T10170] delete_channel: no stack [ 389.569561][T10186] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 389.625112][T10098] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 389.635019][T10098] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 389.645240][T10098] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 389.654930][T10098] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 389.685575][ T29] audit: type=1400 audit(1734809194.921:635): avc: denied { create } for pid=10190 comm="syz.4.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 389.705051][ C1] vkms_vblank_simulate: vblank timer overrun [ 389.719425][T10193] fuse: Unknown parameter '000000000000000000040x0000000000000005' [ 389.826510][T10098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.983483][ T29] audit: type=1400 audit(1734809194.981:636): avc: denied { listen } for pid=10190 comm="syz.4.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 390.003085][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.197606][T10098] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.247505][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.254643][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.311164][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.318291][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.965149][ T5829] Bluetooth: hci0: command tx timeout [ 391.047731][T10208] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 391.113824][T10098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.122088][T10211] netlink: 'syz.3.1201': attribute type 3 has an invalid length. [ 391.129845][T10211] netlink: 'syz.3.1201': attribute type 3 has an invalid length. [ 391.156433][T10212] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1199'. [ 391.180084][T10211] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1201'. [ 391.234838][T10098] veth0_vlan: entered promiscuous mode [ 391.257732][T10098] veth1_vlan: entered promiscuous mode [ 391.651503][T10219] : renamed from bond0 (while UP) [ 391.728190][T10098] veth0_macvtap: entered promiscuous mode [ 391.761837][T10098] veth1_macvtap: entered promiscuous mode [ 391.765329][T10200] delete_channel: no stack [ 392.133744][T10098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.144577][T10098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.154498][T10098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.165054][T10098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.175266][T10098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.185843][T10098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.196197][T10098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.206827][T10098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.218424][T10098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.275967][T10098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.299541][T10098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.315774][T10098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.335702][T10098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.360708][T10098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.371527][T10098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.405139][T10098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.426014][T10098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.461364][T10098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.479040][T10229] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1207'. [ 392.503669][ T29] audit: type=1400 audit(1734809197.751:637): avc: denied { execute } for pid=10228 comm="syz.0.1207" path="/dev/dsp" dev="devtmpfs" ino=1283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 392.533410][T10098] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.564313][ T29] audit: type=1400 audit(1734809197.771:638): avc: denied { append } for pid=10228 comm="syz.0.1207" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 392.645303][T10098] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.663572][T10098] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.685022][T10098] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.715936][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.721210][ T8155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.731669][ T8155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.739392][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.817259][ T29] audit: type=1400 audit(1734809199.051:639): avc: denied { mounton } for pid=10098 comm="syz-executor" path="/root/syzkaller.4W3H9N/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 394.045610][ T29] audit: type=1400 audit(1734809199.191:640): avc: denied { mount } for pid=10098 comm="syz-executor" name="/" dev="gadgetfs" ino=7075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 394.446532][ T29] audit: type=1400 audit(1734809199.691:641): avc: denied { ioctl } for pid=10250 comm="syz.1.1210" path="socket:[23263]" dev="sockfs" ino=23263 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 396.517941][T10285] Process accounting resumed [ 396.540526][T10288] SET target dimension over the limit! [ 396.950376][ T5864] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 397.129474][T10297] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1223'. [ 397.143677][ T5864] usb 5-1: Using ep0 maxpacket: 16 [ 397.154742][ T5864] usb 5-1: config 0 has an invalid interface number: 4 but max is 3 [ 397.160249][ T5817] Bluetooth: hci1: command 0x0c1a tx timeout [ 397.170992][ T5864] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 397.190545][ T5864] usb 5-1: config 0 has an invalid interface number: 222 but max is 3 [ 397.198739][ T5864] usb 5-1: config 0 has an invalid interface number: 89 but max is 3 [ 397.242469][ T5864] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 397.283396][ T5864] usb 5-1: config 0 has an invalid interface number: 200 but max is 3 [ 397.307623][ T5864] usb 5-1: config 0 has an invalid interface number: 224 but max is 3 [ 397.338472][ T5864] usb 5-1: config 0 has an invalid interface number: 127 but max is 3 [ 397.373101][ T5864] usb 5-1: config 0 has 6 interfaces, different from the descriptor's value: 4 [ 397.376557][T10300] loop9: detected capacity change from 0 to 7 [ 397.383120][ T5864] usb 5-1: config 0 has no interface number 0 [ 397.400926][T10300] Dev loop9: unable to read RDB block 7 [ 397.406054][ T5864] usb 5-1: config 0 has no interface number 1 [ 397.406509][T10300] loop9: unable to read partition table [ 397.419207][ T5864] usb 5-1: config 0 has no interface number 2 [ 397.424637][T10300] loop9: partition table beyond EOD, truncated [ 397.429968][ T5864] usb 5-1: config 0 has no interface number 3 [ 397.446495][ T5864] usb 5-1: config 0 has no interface number 5 [ 397.452100][T10300] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 397.457227][ T5864] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 397.488439][ T5864] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 397.534518][ T5864] usb 5-1: config 0 interface 4 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 16 [ 397.586295][ T5864] usb 5-1: config 0 interface 4 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 397.590432][ T29] audit: type=1400 audit(1734809202.831:642): avc: denied { append } for pid=10303 comm="syz.3.1228" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 397.609540][ T5864] usb 5-1: config 0 interface 4 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 397.631955][ T5864] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 397.642993][ T5864] usb 5-1: config 0 interface 4 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 397.653855][ T5864] usb 5-1: config 0 interface 4 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 397.664830][ T5864] usb 5-1: config 0 interface 4 altsetting 0 has 10 endpoint descriptors, different from the interface descriptor's value: 12 [ 397.672974][T10292] delete_channel: no stack [ 397.678114][ T5864] usb 5-1: too many endpoints for config 0 interface 222 altsetting 32: 229, using maximum allowed: 30 [ 397.693722][ T5864] usb 5-1: config 0 interface 222 altsetting 32 has 2 endpoint descriptors, different from the interface descriptor's value: 229 [ 397.707256][ T5864] usb 5-1: config 0 interface 89 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 397.718399][ T5864] usb 5-1: config 0 interface 89 altsetting 15 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 397.729692][ T5864] usb 5-1: config 0 interface 89 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 397.740791][ T5864] usb 5-1: config 0 interface 89 altsetting 15 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 397.752280][ T5864] usb 5-1: config 0 interface 89 altsetting 15 has a duplicate endpoint with address 0x5, skipping [ 397.763415][ T5864] usb 5-1: config 0 interface 89 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 397.774503][ T5864] usb 5-1: config 0 interface 89 altsetting 15 has a duplicate endpoint with address 0x1, skipping [ 397.785307][ T5864] usb 5-1: config 0 interface 89 altsetting 15 has a duplicate endpoint with address 0xA, skipping [ 397.796315][ T5864] usb 5-1: config 0 interface 200 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 397.807130][ T5864] usb 5-1: config 0 interface 200 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 397.817970][ T5864] usb 5-1: config 0 interface 200 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 397.828950][ T5864] usb 5-1: config 0 interface 200 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 397.839740][ T5864] usb 5-1: config 0 interface 200 altsetting 0 bulk endpoint 0xC has invalid maxpacket 8 [ 397.849891][ T5864] usb 5-1: config 0 interface 200 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 397.860867][ T5864] usb 5-1: config 0 interface 200 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 397.871891][ T5864] usb 5-1: config 0 interface 200 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 397.882682][ T5864] usb 5-1: config 0 interface 200 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 13 [ 397.895927][ T5864] usb 5-1: too many endpoints for config 0 interface 224 altsetting 33: 87, using maximum allowed: 30 [ 397.906980][ T5864] usb 5-1: config 0 interface 224 altsetting 33 has a duplicate endpoint with address 0x9, skipping [ 397.918267][ T5864] usb 5-1: config 0 interface 224 altsetting 33 has a duplicate endpoint with address 0x5, skipping [ 397.929142][ T5864] usb 5-1: config 0 interface 224 altsetting 33 has a duplicate endpoint with address 0xC, skipping [ 397.939997][ T5864] usb 5-1: config 0 interface 224 altsetting 33 has a duplicate endpoint with address 0x6, skipping [ 397.951089][ T5864] usb 5-1: config 0 interface 224 altsetting 33 has 4 endpoint descriptors, different from the interface descriptor's value: 87 [ 397.964594][ T5864] usb 5-1: config 0 interface 127 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 397.975421][ T5864] usb 5-1: config 0 interface 127 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 397.986940][ T5864] usb 5-1: config 0 interface 222 has no altsetting 0 [ 397.993800][ T5864] usb 5-1: config 0 interface 89 has no altsetting 0 [ 398.000571][ T5864] usb 5-1: config 0 interface 224 has no altsetting 0 [ 398.007795][ T5864] usb 5-1: config 0 interface 127 has no altsetting 0 [ 398.030077][ T5864] usb 5-1: New USB device found, idVendor=19d2, idProduct=0168, bcdDevice=df.97 [ 398.039378][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.047791][ T5864] usb 5-1: Product: syz [ 398.052496][ T5864] usb 5-1: Manufacturer: à¡¡ [ 398.057314][ T5864] usb 5-1: SerialNumber: syz [ 398.092513][ T5864] usb 5-1: config 0 descriptor?? [ 398.099769][T10290] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 398.343319][T10290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.364155][T10290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.955190][T10315] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=10315 comm=syz.3.1230 [ 399.086275][T10319] Driver unsupported XDP return value 0 on prog (id 223) dev N/A, expect packet loss! [ 399.325565][T10326] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 400.782594][T10344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1239'. [ 401.326886][ T5864] option 5-1:0.200: GSM modem (1-port) converter detected [ 401.430268][ T5864] usb 5-1: USB disconnect, device number 26 [ 401.442691][ T5864] option 5-1:0.200: device disconnected [ 401.700254][T10357] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1246'. [ 401.711426][T10350] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1242'. [ 401.815934][T10359] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 401.823682][T10359] CPU: 1 UID: 0 PID: 10359 Comm: syz.0.1244 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 401.834461][T10359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 401.844522][T10359] Call Trace: [ 401.847796][T10359] [ 401.850722][T10359] dump_stack_lvl+0x16c/0x1f0 [ 401.855404][T10359] sysfs_warn_dup+0x7f/0xa0 [ 401.859913][T10359] sysfs_do_create_link_sd+0x124/0x140 [ 401.865377][T10359] sysfs_create_link+0x61/0xc0 [ 401.870143][T10359] device_add+0x62e/0x1a70 [ 401.874571][T10359] ? __pfx_device_add+0x10/0x10 [ 401.879421][T10359] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 401.885324][T10359] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 401.891320][T10359] wiphy_register+0x1cab/0x2860 [ 401.896168][T10359] ? __pfx__dev_printk+0x10/0x10 [ 401.901109][T10359] ? __pfx_wiphy_register+0x10/0x10 [ 401.906315][T10359] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 401.912389][T10359] ieee80211_register_hw+0x2aa2/0x41a0 [ 401.917856][T10359] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 401.923663][T10359] ? __hrtimer_init+0x2b/0x2c0 [ 401.928434][T10359] ? __asan_memset+0x23/0x50 [ 401.933023][T10359] ? __hrtimer_init+0x106/0x2c0 [ 401.937881][T10359] mac80211_hwsim_new_radio+0x304e/0x54d0 [ 401.943630][T10359] ? __kmalloc_node_track_caller_noprof+0x240/0x510 [ 401.950222][T10359] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 401.956289][T10359] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 401.961577][T10359] ? __asan_memcpy+0x3c/0x60 [ 401.966168][T10359] hwsim_new_radio_nl+0xb42/0x12b0 [ 401.971279][T10359] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 401.976839][T10359] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 401.984216][T10359] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 401.991596][T10359] genl_family_rcv_msg_doit+0x202/0x2f0 [ 401.997150][T10359] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 402.003227][T10359] ? bpf_lsm_capable+0x9/0x10 [ 402.007894][T10359] ? security_capable+0x7e/0x260 [ 402.012829][T10359] ? ns_capable+0xd7/0x110 [ 402.017246][T10359] genl_rcv_msg+0x565/0x800 [ 402.021745][T10359] ? __pfx_genl_rcv_msg+0x10/0x10 [ 402.026765][T10359] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 402.032318][T10359] netlink_rcv_skb+0x16b/0x440 [ 402.037083][T10359] ? __pfx_genl_rcv_msg+0x10/0x10 [ 402.042104][T10359] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 402.047405][T10359] ? down_read+0xc9/0x330 [ 402.051736][T10359] ? __pfx_down_read+0x10/0x10 [ 402.056507][T10359] ? genl_rcv+0xd/0x40 [ 402.060581][T10359] genl_rcv+0x28/0x40 [ 402.064564][T10359] netlink_unicast+0x53c/0x7f0 [ 402.069332][T10359] ? __pfx_netlink_unicast+0x10/0x10 [ 402.074627][T10359] netlink_sendmsg+0x8b8/0xd70 [ 402.079398][T10359] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.085153][T10359] ____sys_sendmsg+0xaaf/0xc90 [ 402.089930][T10359] ? copy_msghdr_from_user+0x10b/0x160 [ 402.095391][T10359] ? __pfx_____sys_sendmsg+0x10/0x10 [ 402.100695][T10359] ___sys_sendmsg+0x135/0x1e0 [ 402.105375][T10359] ? __pfx____sys_sendmsg+0x10/0x10 [ 402.110584][T10359] ? __pfx_lock_release+0x10/0x10 [ 402.115607][T10359] ? trace_lock_acquire+0x14e/0x1f0 [ 402.120820][T10359] ? __fget_files+0x206/0x3a0 [ 402.125502][T10359] __sys_sendmsg+0x16e/0x220 [ 402.130096][T10359] ? __pfx___sys_sendmsg+0x10/0x10 [ 402.135204][T10359] ? __pfx___schedule+0x10/0x10 [ 402.140060][T10359] ? __x64_sys_futex+0x1e1/0x4c0 [ 402.145012][T10359] do_syscall_64+0xcd/0x250 [ 402.149525][T10359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.155425][T10359] RIP: 0033:0x7f5d4ff85d29 [ 402.159847][T10359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.179455][T10359] RSP: 002b:00007f5d4ddd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 402.187870][T10359] RAX: ffffffffffffffda RBX: 00007f5d50176160 RCX: 00007f5d4ff85d29 [ 402.195837][T10359] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000009 [ 402.203802][T10359] RBP: 00007f5d50001aa8 R08: 0000000000000000 R09: 0000000000000000 [ 402.211777][T10359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 402.219756][T10359] R13: 0000000000000000 R14: 00007f5d50176160 R15: 00007fffbfc6e2e8 [ 402.227748][T10359] [ 404.285204][ T29] audit: type=1400 audit(1734809209.531:643): avc: denied { write } for pid=10385 comm="syz.3.1255" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 404.285272][T10387] random: crng reseeded on system resumption [ 404.555518][T10391] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 405.803538][T10403] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 405.915929][ T5817] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 406.540930][T10408] vlan2: entered promiscuous mode [ 406.546489][T10408] bond0: (slave vlan2): Opening slave failed [ 406.820216][ T5898] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 407.050246][ T5898] usb 3-1: Using ep0 maxpacket: 16 [ 407.053060][ T5898] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 407.053096][ T5898] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.053123][ T5898] usb 3-1: config 0 interface 0 has no altsetting 0 [ 407.053155][ T5898] usb 3-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 407.053181][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.061932][ T5898] usb 3-1: config 0 descriptor?? [ 407.712712][T10413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.733557][T10413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.243740][ T5898] hid-multitouch 0003:0EEF:72D0.0006: unknown main item tag 0x0 [ 408.253214][ T5898] hid-multitouch 0003:0EEF:72D0.0006: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.2-1/input0 [ 408.330376][ T5864] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 408.408110][T10438] loop9: detected capacity change from 0 to 7 [ 408.427828][T10438] Dev loop9: unable to read RDB block 7 [ 408.438110][T10438] loop9: unable to read partition table [ 408.456518][T10438] loop9: partition table beyond EOD, truncated [ 408.463554][T10438] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 408.482978][ T5898] usb 3-1: USB disconnect, device number 17 [ 409.190663][ T29] audit: type=1400 audit(1734809214.421:644): avc: denied { write } for pid=10444 comm="syz.3.1271" lport=44790 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 409.214138][ C0] vkms_vblank_simulate: vblank timer overrun [ 409.300513][ T5864] usb 2-1: Using ep0 maxpacket: 32 [ 409.307046][ T5864] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 409.329660][ T29] audit: type=1400 audit(1734809214.421:645): avc: denied { setopt } for pid=10444 comm="syz.3.1271" lport=44790 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 409.353482][ T5864] usb 2-1: config 0 has no interface number 0 [ 409.373114][ T5864] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 409.383641][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.410313][ T5864] usb 2-1: Product: syz [ 409.420509][ T29] audit: type=1400 audit(1734809214.571:646): avc: denied { append } for pid=10446 comm="syz.4.1272" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 409.451077][ T5864] usb 2-1: Manufacturer: syz [ 409.455713][ T5864] usb 2-1: SerialNumber: syz [ 409.474582][ T5864] usb 2-1: config 0 descriptor?? [ 409.501148][ T5864] smsc95xx v2.0.0 [ 409.936580][T10463] vlan3: entered promiscuous mode [ 409.992582][T10433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.011704][T10433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.047745][ T5864] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 410.059020][ T5864] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 410.113733][T10456] syz.3.1276 (10456) used greatest stack depth: 19696 bytes left [ 410.293946][ T5864] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 410.448597][ T5864] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 410.747605][ T5864] usb 2-1: USB disconnect, device number 20 [ 411.430356][ T5864] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 411.628257][ T5864] usb 4-1: Using ep0 maxpacket: 32 [ 411.730291][ T5864] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 411.738493][ T5864] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.748727][ T5864] usb 4-1: config 0 has no interface number 0 [ 411.754944][ T5864] usb 4-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 411.767911][ T5864] usb 4-1: config 0 interface 1 has no altsetting 0 [ 411.777234][ T5864] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 411.787066][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.795235][ T5864] usb 4-1: Product: syz [ 411.799416][ T5864] usb 4-1: Manufacturer: syz [ 411.804101][ T5864] usb 4-1: SerialNumber: syz [ 411.813768][ T5864] usb 4-1: config 0 descriptor?? [ 411.830422][ T5864] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 411.839419][ T5864] cx231xx 4-1:0.1: Not found matching IAD interface [ 413.392481][T10493] syz.3.1280: attempt to access beyond end of device [ 413.392481][T10493] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 413.405989][T10493] SQUASHFS error: Failed to read block 0x0: -5 [ 413.412916][T10493] unable to read squashfs_super_block [ 413.532755][T10494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.541416][T10494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.796693][T10481] delete_channel: no stack [ 414.942597][ T5898] usb 4-1: USB disconnect, device number 23 [ 416.332545][ T29] audit: type=1400 audit(1734809221.444:647): avc: denied { ioctl } for pid=10505 comm="syz.3.1293" path="socket:[24497]" dev="sockfs" ino=24497 ioctlcmd=0x6435 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 416.780187][T10515] syz.3.1293: attempt to access beyond end of device [ 416.780187][T10515] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 417.049795][ T29] audit: type=1400 audit(1734809222.024:648): avc: denied { accept } for pid=10520 comm="syz.1.1295" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 417.072658][ T29] audit: type=1400 audit(1734809222.084:649): avc: denied { write } for pid=10520 comm="syz.1.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 417.566081][T10515] syz.3.1293: attempt to access beyond end of device [ 417.566081][T10515] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 417.622299][T10523] nbd3: detected capacity change from 0 to 67108884 [ 417.622304][T10515] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 417.680920][ T8002] block nbd3: Send control failed (result -89) [ 417.687168][ T8002] block nbd3: Request send failed, requeueing [ 417.698402][ T5829] block nbd3: Receive control failed (result -32) [ 417.713348][ T41] block nbd3: Dead connection, failed to find a fallback [ 417.721131][ T5898] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 417.730414][ T41] block nbd3: shutting down sockets [ 417.735676][ T41] blk_print_req_error: 71 callbacks suppressed [ 417.736667][ T41] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 417.752092][ T41] buffer_io_error: 64 callbacks suppressed [ 417.752100][ T41] Buffer I/O error on dev nbd3, logical block 0, async page read [ 417.766599][T10515] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 417.794430][ T8002] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 417.814944][ T8002] Buffer I/O error on dev nbd3, logical block 1, async page read [ 417.823599][ T8002] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 417.825838][T10515] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=0, location=0 [ 417.832898][ T8002] Buffer I/O error on dev nbd3, logical block 2, async page read [ 417.850711][ T8002] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 417.859815][ T8002] Buffer I/O error on dev nbd3, logical block 3, async page read [ 417.868404][ T8002] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 417.878474][ T8002] Buffer I/O error on dev nbd3, logical block 0, async page read [ 417.889262][ T8002] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 417.900916][ T8002] Buffer I/O error on dev nbd3, logical block 1, async page read [ 417.910767][ T5898] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid wMaxPacketSize 0 [ 417.922687][ T5898] usb 5-1: config 0 interface 0 has no altsetting 0 [ 417.929877][T10515] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 417.939757][ T8002] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 417.949134][ T8002] Buffer I/O error on dev nbd3, logical block 2, async page read [ 417.960276][ T5898] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 417.976973][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.985555][T10515] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=1, location=1 [ 418.045729][ T8002] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 418.080221][ T5898] usb 5-1: Product: syz [ 418.087466][ T5898] usb 5-1: Manufacturer: syz [ 418.222430][ T5898] usb 5-1: SerialNumber: syz [ 418.228642][ T8002] Buffer I/O error on dev nbd3, logical block 3, async page read [ 418.318163][ T8002] Buffer I/O error on dev nbd3, logical block 0, async page read [ 418.370660][ T8002] Buffer I/O error on dev nbd3, logical block 1, async page read [ 418.395160][ T8002] ldm_validate_partition_table(): Disk read failed. [ 418.409438][ T8002] Dev nbd3: unable to read RDB block 0 [ 418.449128][ T8002] nbd3: unable to read partition table [ 418.470690][T10515] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 418.481555][T10515] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 418.497407][ T5898] usb 5-1: config 0 descriptor?? [ 418.498266][T10515] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16777220, location=16777220 [ 418.508817][ T5898] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 418.535412][ T8002] ldm_validate_partition_table(): Disk read failed. [ 418.550663][T10515] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16776964, location=16776964 [ 418.576866][ T8002] Dev nbd3: unable to read RDB block 0 [ 418.584333][ T8002] nbd3: unable to read partition table [ 418.593925][ T5898] keyspan 5-1:0.0: unsupported endpoint type 0 [ 418.602993][ T5898] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 418.611820][ T5898] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 418.619573][ T5898] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 418.627293][ T5898] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 418.638077][ T5898] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 418.646236][ T5898] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 418.666270][T10515] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16777219, location=16777219 [ 418.716976][T10515] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16776963, location=16776963 [ 418.727681][ T5898] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 418.739485][ T5898] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 418.747293][ T5898] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 418.755995][ T5898] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 418.763943][ T5898] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 418.771895][ T5898] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 418.780701][T10515] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16777218, location=16777218 [ 418.797910][ T8002] ldm_validate_partition_table(): Disk read failed. [ 418.811430][ T8002] Dev nbd3: unable to read RDB block 0 [ 418.817282][ T8002] nbd3: unable to read partition table [ 418.823924][T10515] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16776962, location=16776962 [ 418.838555][ T8002] ldm_validate_partition_table(): Disk read failed. [ 418.846138][ T5898] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 418.847619][ T8002] Dev nbd3: unable to read RDB block 0 [ 418.860166][ T8002] nbd3: unable to read partition table [ 418.876302][T10515] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16777070, location=16777070 [ 418.889098][T10515] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16776814, location=16776814 [ 418.901772][ T5898] usb 5-1: USB disconnect, device number 27 [ 418.909131][T10515] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16777068, location=16777068 [ 418.926591][T10515] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16776812, location=16776812 [ 418.938492][T10515] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 418.953005][T10515] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 418.967686][T10515] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388609, location=8388609 [ 418.999072][T10515] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388353, location=8388353 [ 419.009831][ T5898] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 419.019517][T10515] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388608, location=8388608 [ 419.035277][T10515] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388352, location=8388352 [ 419.045704][T10540] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1301'. [ 419.058537][T10515] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388607, location=8388607 [ 419.068933][T10515] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388351, location=8388351 [ 419.088485][T10515] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388459, location=8388459 [ 419.098873][T10515] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388203, location=8388203 [ 419.109241][T10515] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388457, location=8388457 [ 419.119830][T10515] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388201, location=8388201 [ 419.130258][T10515] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 419.139787][T10515] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 419.180764][ T5898] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 419.223823][ T5898] keyspan 5-1:0.0: device disconnected [ 419.802205][T10547] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1304'. [ 421.234517][T10572] FAULT_INJECTION: forcing a failure. [ 421.234517][T10572] name failslab, interval 1, probability 0, space 0, times 0 [ 421.247300][T10572] CPU: 1 UID: 0 PID: 10572 Comm: syz.1.1310 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 421.258080][T10572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 421.268589][T10572] Call Trace: [ 421.271864][T10572] [ 421.274788][T10572] dump_stack_lvl+0x16c/0x1f0 [ 421.279470][T10572] should_fail_ex+0x497/0x5b0 [ 421.284165][T10572] should_failslab+0xc2/0x120 [ 421.288850][T10572] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 421.294231][T10572] ? skb_clone+0x190/0x3f0 [ 421.298662][T10572] skb_clone+0x190/0x3f0 [ 421.302908][T10572] netlink_deliver_tap+0xabd/0xd30 [ 421.308029][T10572] netlink_unicast+0x5e1/0x7f0 [ 421.312806][T10572] ? __pfx_netlink_unicast+0x10/0x10 [ 421.318098][T10572] netlink_sendmsg+0x8b8/0xd70 [ 421.322867][T10572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.328159][T10572] ? ____sys_sendmsg+0x7f8/0xc90 [ 421.333110][T10572] ____sys_sendmsg+0xaaf/0xc90 [ 421.337871][T10572] ? copy_msghdr_from_user+0x10b/0x160 [ 421.343326][T10572] ? __pfx_____sys_sendmsg+0x10/0x10 [ 421.348618][T10572] ___sys_sendmsg+0x135/0x1e0 [ 421.353290][T10572] ? __pfx____sys_sendmsg+0x10/0x10 [ 421.358523][T10572] ? __fget_files+0x206/0x3a0 [ 421.363208][T10572] __sys_sendmsg+0x16e/0x220 [ 421.367802][T10572] ? __pfx___sys_sendmsg+0x10/0x10 [ 421.372930][T10572] do_syscall_64+0xcd/0x250 [ 421.377448][T10572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.383350][T10572] RIP: 0033:0x7f84ca185d29 [ 421.387757][T10572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.407367][T10572] RSP: 002b:00007f84caedd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.415778][T10572] RAX: ffffffffffffffda RBX: 00007f84ca376080 RCX: 00007f84ca185d29 [ 421.423739][T10572] RDX: 0000000000008000 RSI: 0000000020000100 RDI: 0000000000000005 [ 421.431702][T10572] RBP: 00007f84caedd090 R08: 0000000000000000 R09: 0000000000000000 [ 421.439666][T10572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.447626][T10572] R13: 0000000000000000 R14: 00007f84ca376080 R15: 00007ffe891d2ec8 [ 421.455599][T10572] [ 421.826065][T10559] vcan0: entered allmulticast mode [ 421.949398][ T5829] Bluetooth: hci3: unexpected event 0x06 length: 4 > 3 [ 422.031298][T10579] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1313'. [ 422.126146][ T5898] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 422.303721][ T5898] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 422.314004][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.322920][ T5898] usb 2-1: Product: syz [ 422.327463][ T5898] usb 2-1: Manufacturer: syz [ 422.327488][ T5898] usb 2-1: SerialNumber: syz [ 422.329828][ T5898] usb 2-1: config 0 descriptor?? [ 422.583375][T10591] FAULT_INJECTION: forcing a failure. [ 422.583375][T10591] name failslab, interval 1, probability 0, space 0, times 0 [ 422.647306][T10591] CPU: 0 UID: 0 PID: 10591 Comm: syz.4.1316 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 422.658102][T10591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 422.668145][T10591] Call Trace: [ 422.671408][T10591] [ 422.674338][T10591] dump_stack_lvl+0x16c/0x1f0 [ 422.679016][T10591] should_fail_ex+0x497/0x5b0 [ 422.683684][T10591] ? fs_reclaim_acquire+0xae/0x150 [ 422.688783][T10591] should_failslab+0xc2/0x120 [ 422.693450][T10591] __kmalloc_noprof+0xcb/0x510 [ 422.698204][T10591] ? rcu_is_watching+0x12/0xc0 [ 422.702955][T10591] tomoyo_encode2+0x100/0x3e0 [ 422.707622][T10591] tomoyo_encode+0x29/0x50 [ 422.712031][T10591] tomoyo_realpath_from_path+0x19d/0x720 [ 422.717650][T10591] ? tomoyo_path_number_perm+0x235/0x590 [ 422.723271][T10591] tomoyo_path_number_perm+0x248/0x590 [ 422.728745][T10591] ? tomoyo_path_number_perm+0x235/0x590 [ 422.734367][T10591] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 422.740353][T10591] ? __pfx_lock_release+0x10/0x10 [ 422.745362][T10591] ? trace_lock_acquire+0x14e/0x1f0 [ 422.750549][T10591] ? lock_acquire+0x2f/0xb0 [ 422.755036][T10591] ? __fget_files+0x40/0x3a0 [ 422.759608][T10591] ? __fget_files+0x206/0x3a0 [ 422.764279][T10591] security_file_ioctl+0x9b/0x240 [ 422.769315][T10591] __x64_sys_ioctl+0xb7/0x200 [ 422.773998][T10591] do_syscall_64+0xcd/0x250 [ 422.778500][T10591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.784398][T10591] RIP: 0033:0x7f4036385d29 [ 422.788817][T10591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.808414][T10591] RSP: 002b:00007f4037216038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 422.816822][T10591] RAX: ffffffffffffffda RBX: 00007f4036575fa0 RCX: 00007f4036385d29 [ 422.824782][T10591] RDX: 0000000020000180 RSI: 0000000080044944 RDI: 0000000000000003 [ 422.832740][T10591] RBP: 00007f4037216090 R08: 0000000000000000 R09: 0000000000000000 [ 422.840707][T10591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.848677][T10591] R13: 0000000000000000 R14: 00007f4036575fa0 R15: 00007ffd12ac71c8 [ 422.856664][T10591] [ 422.859784][ C0] vkms_vblank_simulate: vblank timer overrun [ 422.973274][T10591] ERROR: Out of memory at tomoyo_realpath_from_path. [ 423.192008][T10590] delete_channel: no stack [ 423.253975][ T8] usb 2-1: USB disconnect, device number 21 [ 423.827184][ T29] audit: type=1400 audit(1734809228.804:650): avc: denied { shutdown } for pid=10597 comm="syz.3.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 424.386353][T10588] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.395459][T10588] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.644822][T10588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.665494][T10588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.799627][T10588] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.808930][T10588] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.818120][T10588] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.827518][T10588] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.431611][T10629] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 428.519715][ T29] audit: type=1400 audit(1734809233.754:651): avc: denied { getopt } for pid=10641 comm="syz.3.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 428.737491][T10652] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 428.745162][T10652] CPU: 1 UID: 0 PID: 10652 Comm: syz.2.1332 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 428.755936][T10652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 428.766003][T10652] Call Trace: [ 428.769276][T10652] [ 428.772209][T10652] dump_stack_lvl+0x16c/0x1f0 [ 428.776897][T10652] sysfs_warn_dup+0x7f/0xa0 [ 428.781409][T10652] sysfs_do_create_link_sd+0x124/0x140 [ 428.786873][T10652] sysfs_create_link+0x61/0xc0 [ 428.791642][T10652] device_add+0x62e/0x1a70 [ 428.796067][T10652] ? __pfx_device_add+0x10/0x10 [ 428.800924][T10652] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 428.806819][T10652] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 428.812814][T10652] wiphy_register+0x1cab/0x2860 [ 428.817674][T10652] ? __pfx_wiphy_register+0x10/0x10 [ 428.822880][T10652] ? ieee80211_register_hw+0x2a78/0x41a0 [ 428.828512][T10652] ieee80211_register_hw+0x2aa2/0x41a0 [ 428.833977][T10652] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 428.839780][T10652] ? net_generic+0xea/0x2a0 [ 428.844282][T10652] ? lockdep_init_map_type+0x16d/0x7d0 [ 428.849754][T10652] ? __asan_memset+0x23/0x50 [ 428.854344][T10652] ? __hrtimer_init+0x106/0x2c0 [ 428.859197][T10652] mac80211_hwsim_new_radio+0x304e/0x54d0 [ 428.864936][T10652] ? __kmalloc_node_track_caller_noprof+0x240/0x510 [ 428.871527][T10652] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 428.877600][T10652] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 428.882887][T10652] ? __asan_memcpy+0x3c/0x60 [ 428.887475][T10652] hwsim_new_radio_nl+0xb42/0x12b0 [ 428.892591][T10652] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 428.898139][T10652] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1af/0x290 [ 428.905516][T10652] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 428.912895][T10652] genl_family_rcv_msg_doit+0x202/0x2f0 [ 428.918447][T10652] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 428.924525][T10652] ? bpf_lsm_capable+0x9/0x10 [ 428.929197][T10652] ? security_capable+0x7e/0x260 [ 428.934131][T10652] ? ns_capable+0xd7/0x110 [ 428.938552][T10652] genl_rcv_msg+0x565/0x800 [ 428.943061][T10652] ? __pfx_genl_rcv_msg+0x10/0x10 [ 428.948080][T10652] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 428.953625][T10652] ? hlock_class+0x4e/0x130 [ 428.958132][T10652] netlink_rcv_skb+0x16b/0x440 [ 428.962897][T10652] ? __pfx_genl_rcv_msg+0x10/0x10 [ 428.967915][T10652] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 428.973210][T10652] ? down_read+0xc9/0x330 [ 428.977540][T10652] ? __pfx_down_read+0x10/0x10 [ 428.982312][T10652] ? netlink_deliver_tap+0x1ae/0xd30 [ 428.987602][T10652] genl_rcv+0x28/0x40 [ 428.991584][T10652] netlink_unicast+0x53c/0x7f0 [ 428.996439][T10652] ? __pfx_netlink_unicast+0x10/0x10 [ 429.001732][T10652] netlink_sendmsg+0x8b8/0xd70 [ 429.006506][T10652] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.011805][T10652] ____sys_sendmsg+0xaaf/0xc90 [ 429.016571][T10652] ? copy_msghdr_from_user+0x10b/0x160 [ 429.022043][T10652] ? __pfx_____sys_sendmsg+0x10/0x10 [ 429.027363][T10652] ___sys_sendmsg+0x135/0x1e0 [ 429.032047][T10652] ? __pfx____sys_sendmsg+0x10/0x10 [ 429.037271][T10652] ? __fget_files+0x206/0x3a0 [ 429.041961][T10652] __sys_sendmsg+0x16e/0x220 [ 429.046560][T10652] ? __pfx___sys_sendmsg+0x10/0x10 [ 429.051670][T10652] ? lockdep_hardirqs_on+0x7c/0x110 [ 429.056881][T10652] ? __x64_sys_sendmsg+0x11/0xb0 [ 429.061816][T10652] ? __sanitizer_cov_trace_pc+0x56/0x70 [ 429.067365][T10652] do_syscall_64+0xcd/0x250 [ 429.071872][T10652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.077770][T10652] RIP: 0033:0x7f6964f85d29 [ 429.082181][T10652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.101787][T10652] RSP: 002b:00007f6965ced038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.110197][T10652] RAX: ffffffffffffffda RBX: 00007f6965176160 RCX: 00007f6964f85d29 [ 429.118164][T10652] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000009 [ 429.126129][T10652] RBP: 00007f6965001aa8 R08: 0000000000000000 R09: 0000000000000000 [ 429.134095][T10652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.142059][T10652] R13: 0000000000000000 R14: 00007f6965176160 R15: 00007ffdc12f7af8 [ 429.150041][T10652] [ 429.805673][ T29] audit: type=1400 audit(1734809235.044:652): avc: denied { setopt } for pid=10654 comm="syz.1.1334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 429.939769][T10662] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1334'. [ 429.958051][T10662] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.028578][T10662] bridge_slave_0 (unregistering): left allmulticast mode [ 430.035918][T10662] bridge_slave_0 (unregistering): left promiscuous mode [ 430.043442][T10662] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.680223][ T971] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 430.870843][ T971] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 431.157450][ T971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.189303][ T971] usb 3-1: Product: syz [ 431.204849][ T971] usb 3-1: Manufacturer: syz [ 431.210393][ T971] usb 3-1: SerialNumber: syz [ 432.012354][ T971] usb 3-1: config 0 descriptor?? [ 432.069771][ T971] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 432.345168][ T29] audit: type=1400 audit(1734809237.584:653): avc: denied { bind } for pid=10673 comm="syz.1.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 433.589806][ T29] audit: type=1400 audit(1734809238.824:654): avc: denied { mounton } for pid=10690 comm="syz.0.1344" path="/305/file0" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 433.690282][ T5864] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 433.720362][ T971] gspca_sq905c: sq905c_read: usb_control_msg failed (-110) [ 433.727608][ T971] sq905c 3-1:0.0: Reading version command failed [ 433.734084][ T971] sq905c 3-1:0.0: probe with driver sq905c failed with error -110 [ 433.850490][ T5864] usb 5-1: Using ep0 maxpacket: 32 [ 433.864189][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.906553][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.931379][ T5864] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 433.944951][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.956409][ T5864] usb 5-1: config 0 descriptor?? [ 433.964363][ T5864] hub 5-1:0.0: USB hub found [ 434.170283][ T5864] hub 5-1:0.0: 1 port detected [ 434.380404][ T971] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 434.491077][T10689] netlink: 252 bytes leftover after parsing attributes in process `syz.4.1343'. [ 434.585223][ T971] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 435.066500][ T971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.078029][ T971] usb 4-1: config 0 descriptor?? [ 435.275368][T10689] netlink: 268 bytes leftover after parsing attributes in process `syz.4.1343'. [ 435.321789][T10689] unsupported nla_type 65024 [ 435.613931][ T5864] usb 5-1: USB disconnect, device number 28 [ 436.295020][ T971] ath6kl: Failed to submit usb control message: -110 [ 436.302417][ T971] ath6kl: unable to send the bmi data to the device: -110 [ 436.309613][ T971] ath6kl: Unable to send get target info: -110 [ 436.335596][ T971] ath6kl: Failed to init ath6kl core: -110 [ 436.335911][ T5894] usb 3-1: USB disconnect, device number 18 [ 436.342212][ T971] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 437.271158][ T971] usb 4-1: USB disconnect, device number 24 [ 437.783868][T10737] binder: 10736:10737 ioctl c0306201 0 returned -14 [ 437.927493][T10739] binder: 10736:10739 ioctl c0306201 0 returned -14 [ 438.407449][T10745] FAULT_INJECTION: forcing a failure. [ 438.407449][T10745] name failslab, interval 1, probability 0, space 0, times 0 [ 438.420727][T10745] CPU: 1 UID: 0 PID: 10745 Comm: syz.4.1355 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 438.431492][T10745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 438.441548][T10745] Call Trace: [ 438.444834][T10745] [ 438.447767][T10745] dump_stack_lvl+0x16c/0x1f0 [ 438.452459][T10745] should_fail_ex+0x497/0x5b0 [ 438.457142][T10745] ? fs_reclaim_acquire+0xae/0x150 [ 438.462254][T10745] should_failslab+0xc2/0x120 [ 438.466920][T10745] __kmalloc_cache_noprof+0x68/0x410 [ 438.472193][T10745] ip_set_create+0x33f/0x14d0 [ 438.476864][T10745] ? __pfx_ip_set_create+0x10/0x10 [ 438.481991][T10745] ? __pfx_ip_set_create+0x10/0x10 [ 438.487171][T10745] ? nfnetlink_rcv_msg+0x952/0x11e0 [ 438.492362][T10745] nfnetlink_rcv_msg+0x9c3/0x11e0 [ 438.497394][T10745] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 438.502871][T10745] ? find_held_lock+0x2d/0x110 [ 438.507659][T10745] ? rcu_preempt_deferred_qs_irqrestore+0x505/0xb80 [ 438.514253][T10745] ? __rcu_read_unlock+0x2b4/0x580 [ 438.519366][T10745] netlink_rcv_skb+0x16b/0x440 [ 438.524133][T10745] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 438.529604][T10745] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 438.534885][T10745] ? bpf_lsm_capable+0x9/0x10 [ 438.539547][T10745] ? security_capable+0x7e/0x260 [ 438.544500][T10745] ? ns_capable+0xd7/0x110 [ 438.548923][T10745] nfnetlink_rcv+0x1b4/0x430 [ 438.553505][T10745] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 438.558602][T10745] ? rcu_is_watching+0x12/0xc0 [ 438.563358][T10745] netlink_unicast+0x53c/0x7f0 [ 438.568115][T10745] ? __pfx_netlink_unicast+0x10/0x10 [ 438.573385][T10745] ? netlink_sendmsg+0x822/0xd70 [ 438.578313][T10745] netlink_sendmsg+0x8b8/0xd70 [ 438.583070][T10745] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.588361][T10745] ____sys_sendmsg+0xaaf/0xc90 [ 438.593118][T10745] ? copy_msghdr_from_user+0x10b/0x160 [ 438.598561][T10745] ? __pfx_____sys_sendmsg+0x10/0x10 [ 438.603851][T10745] ___sys_sendmsg+0x135/0x1e0 [ 438.608519][T10745] ? __pfx____sys_sendmsg+0x10/0x10 [ 438.613706][T10745] ? __pfx_lock_release+0x10/0x10 [ 438.618713][T10745] ? trace_lock_acquire+0x14e/0x1f0 [ 438.623906][T10745] ? __fget_files+0x206/0x3a0 [ 438.628574][T10745] __sys_sendmsg+0x16e/0x220 [ 438.633147][T10745] ? __pfx___sys_sendmsg+0x10/0x10 [ 438.638260][T10745] do_syscall_64+0xcd/0x250 [ 438.642750][T10745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.648627][T10745] RIP: 0033:0x7f4036385d29 [ 438.653026][T10745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.672629][T10745] RSP: 002b:00007f40371f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 438.681056][T10745] RAX: ffffffffffffffda RBX: 00007f4036576080 RCX: 00007f4036385d29 [ 438.689011][T10745] RDX: 0000000000008000 RSI: 0000000020000100 RDI: 0000000000000005 [ 438.696968][T10745] RBP: 00007f40371f5090 R08: 0000000000000000 R09: 0000000000000000 [ 438.704949][T10745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.712904][T10745] R13: 0000000000000000 R14: 00007f4036576080 R15: 00007ffd12ac71c8 [ 438.720871][T10745] [ 439.050159][ T29] audit: type=1400 audit(1734809244.284:655): avc: denied { connect } for pid=10744 comm="syz.2.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 439.108875][ T29] audit: type=1400 audit(1734809244.334:656): avc: denied { read } for pid=10744 comm="syz.2.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 439.158205][T10752] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1358'. [ 439.403733][ T29] audit: type=1400 audit(1734809244.644:657): avc: denied { write } for pid=10744 comm="syz.2.1356" path="socket:[25452]" dev="sockfs" ino=25452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 439.801426][ T971] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 439.960355][ T971] usb 2-1: Using ep0 maxpacket: 8 [ 440.018034][ T971] usb 2-1: New USB device found, idVendor=03f0, idProduct=2101, bcdDevice=e2.cd [ 440.052041][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.058532][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.120215][ T971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.138543][ T971] usb 2-1: Product: syz [ 440.148514][ T971] usb 2-1: Manufacturer: syz [ 440.157001][ T971] usb 2-1: SerialNumber: syz [ 440.182429][ T971] usb 2-1: config 0 descriptor?? [ 440.222382][ T971] safe_serial 2-1:0.0: safe_serial converter detected [ 440.229291][ T971] safe_serial 2-1:0.0: probe with driver safe_serial failed with error -22 [ 442.644660][ T971] usb 2-1: USB disconnect, device number 22 [ 442.832660][T10792] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1368'. [ 443.220417][ T5864] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 443.490658][ T5864] usb 5-1: Using ep0 maxpacket: 32 [ 443.517435][ T5864] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 443.538228][ T5864] usb 5-1: config 0 has no interface number 0 [ 443.556308][ T5864] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 443.566908][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.594533][ T5864] usb 5-1: Product: syz [ 443.612469][ T5864] usb 5-1: Manufacturer: syz [ 443.618639][ T5864] usb 5-1: SerialNumber: syz [ 443.725644][ T5864] usb 5-1: config 0 descriptor?? [ 443.789459][ T5864] smsc95xx v2.0.0 [ 444.213042][T10812] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1376'. [ 444.249197][T10799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.277464][T10799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.302877][ T5864] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 444.325310][ T5864] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 444.556579][ T5864] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 444.580294][ T5864] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 444.600459][ T5864] usb 5-1: USB disconnect, device number 29 [ 444.696916][T10822] block nbd2: shutting down sockets [ 445.160293][ T29] audit: type=1400 audit(1734809250.344:658): avc: denied { setopt } for pid=10830 comm="syz.2.1382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 446.200386][ T5864] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 446.392071][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.930630][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.950166][ T5864] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 446.960047][T10843] vlan2: entered promiscuous mode [ 446.976563][ T5864] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 447.000158][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.263372][ T5864] usb 5-1: config 0 descriptor?? [ 447.401875][T10855] FAULT_INJECTION: forcing a failure. [ 447.401875][T10855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 447.416135][T10855] CPU: 0 UID: 0 PID: 10855 Comm: syz.2.1389 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 447.426925][T10855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 447.436975][T10855] Call Trace: [ 447.440247][T10855] [ 447.443162][T10855] dump_stack_lvl+0x16c/0x1f0 [ 447.447836][T10855] should_fail_ex+0x497/0x5b0 [ 447.452509][T10855] _copy_from_user+0x2e/0xd0 [ 447.457099][T10855] rtc_dev_ioctl+0x273/0xdd0 [ 447.461696][T10855] ? __pfx_rtc_dev_ioctl+0x10/0x10 [ 447.466817][T10855] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 447.473686][T10855] ? __pfx_lock_release+0x10/0x10 [ 447.478737][T10855] ? selinux_file_ioctl+0x180/0x270 [ 447.483919][T10855] ? selinux_file_ioctl+0xb4/0x270 [ 447.489028][T10855] ? __pfx_rtc_dev_ioctl+0x10/0x10 [ 447.494142][T10855] __x64_sys_ioctl+0x190/0x200 [ 447.498916][T10855] do_syscall_64+0xcd/0x250 [ 447.503425][T10855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.509331][T10855] RIP: 0033:0x7f6964f85d29 [ 447.513731][T10855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.533321][T10855] RSP: 002b:00007f6965d0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 447.541731][T10855] RAX: ffffffffffffffda RBX: 00007f6965176080 RCX: 00007f6964f85d29 [ 447.549702][T10855] RDX: 0000000020000040 RSI: 000000004024700a RDI: 0000000000000005 [ 447.557654][T10855] RBP: 00007f6965d0e090 R08: 0000000000000000 R09: 0000000000000000 [ 447.565646][T10855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.573607][T10855] R13: 0000000000000000 R14: 00007f6965176080 R15: 00007ffdc12f7af8 [ 447.581585][T10855] [ 448.125063][ T5864] gt683r_led 0003:1770:FF00.0007: item fetching failed at offset 1/5 [ 448.135605][ T5864] gt683r_led 0003:1770:FF00.0007: hid parsing failed [ 448.143776][ T5864] gt683r_led 0003:1770:FF00.0007: probe with driver gt683r_led failed with error -22 [ 448.939947][T10863] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 449.132381][T10858] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 449.138395][T10858] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 449.159958][ T5898] usb 5-1: USB disconnect, device number 30 [ 449.185235][T10858] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 449.191746][T10858] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 449.197778][T10858] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 449.203874][T10858] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 449.209813][T10858] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 449.220002][T10858] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 450.112178][T10881] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1395'. [ 451.658009][ T5822] Bluetooth: hci1: command 0x0c1a tx timeout [ 451.664160][ T5822] Bluetooth: hci0: command 0x0c1a tx timeout [ 451.670294][ T5822] Bluetooth: hci3: command 0x0c1a tx timeout [ 451.676337][ T5822] Bluetooth: hci4: command 0x0c1a tx timeout [ 451.682378][ T5822] Bluetooth: hci2: command 0x0c1a tx timeout [ 452.118035][T10907] tipc: Started in network mode [ 452.127871][T10907] tipc: Node identity ffffffff, cluster identity 4711 [ 452.134880][T10907] tipc: Node number set to 4294967295 [ 452.182871][ T5864] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 452.282689][T10159] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 452.475461][T10920] vlan2: entered promiscuous mode [ 452.493401][ T5864] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 452.502596][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.510978][ T5864] usb 5-1: Product: syz [ 452.515272][ T5864] usb 5-1: Manufacturer: syz [ 452.519883][ T5864] usb 5-1: SerialNumber: syz [ 452.548256][ T5864] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 452.564295][ T5894] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 452.613300][T10159] usb 2-1: Using ep0 maxpacket: 8 [ 452.620908][T10159] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 452.634866][T10159] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 452.645362][T10159] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 452.981361][ T29] audit: type=1400 audit(1734809258.214:659): avc: denied { execute } for pid=10887 comm="syz.4.1398" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=26517 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 453.005902][ C0] vkms_vblank_simulate: vblank timer overrun [ 453.040392][ T8] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 453.202431][ T8] usb 3-1: config 0 has an invalid interface number: 109 but max is 0 [ 453.606456][T10159] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 453.622711][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.633604][T10159] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 453.644405][ T5894] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 453.651423][T10159] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 453.659310][ T29] audit: type=1326 audit(1734809258.404:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10913 comm="syz.3.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85cf85d29 code=0x7fc00000 [ 453.862325][T10159] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.868801][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 453.876878][ T5894] ath9k_htc: Failed to initialize the device [ 453.876961][ T5822] Bluetooth: hci1: command 0x0c1a tx timeout [ 453.889576][ T8] usb 3-1: config 0 has no interface number 0 [ 453.906063][ T8] usb 3-1: config 0 interface 109 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 453.931150][ T8] usb 3-1: config 0 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 453.934177][T10159] usb 2-1: config 0 descriptor?? [ 453.966617][ T8] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 454.024418][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.072102][ T8] usb 3-1: Product: syz [ 454.074522][T10159] usb 2-1: can't set config #0, error -71 [ 454.078215][ T8] usb 3-1: Manufacturer: syz [ 454.088687][ T8] usb 3-1: SerialNumber: syz [ 454.189621][T10159] usb 2-1: USB disconnect, device number 23 [ 454.317185][ T8] usb 3-1: config 0 descriptor?? [ 454.349335][ T5894] usb 5-1: ath9k_htc: USB layer deinitialized [ 454.427688][ T5864] usb 5-1: USB disconnect, device number 31 [ 454.479175][T10929] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 454.680470][ T29] audit: type=1326 audit(1734809259.924:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10935 comm="syz.1.1411" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f84ca185d29 code=0x0 [ 454.720708][ T8] ath6kl: Failed to submit usb control message: -71 [ 454.727362][ T8] ath6kl: unable to send the bmi data to the device: -71 [ 454.784306][ T8] ath6kl: Unable to send get target info: -71 [ 454.829092][ T8] ath6kl: Failed to init ath6kl core: -71 [ 454.909189][ T8] ath6kl_usb 3-1:0.109: probe with driver ath6kl_usb failed with error -71 [ 454.920508][ T5864] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 455.072592][ T8] usb 3-1: USB disconnect, device number 19 [ 455.273346][ T5864] usb 5-1: Using ep0 maxpacket: 32 [ 455.289647][ T5864] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 455.299489][ T5864] usb 5-1: config 0 has no interface number 0 [ 455.395670][ T5864] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 455.405008][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.444315][ T5864] usb 5-1: Product: syz [ 455.448517][ T5864] usb 5-1: Manufacturer: syz [ 455.465026][ T5864] usb 5-1: SerialNumber: syz [ 455.483913][ T5864] usb 5-1: config 0 descriptor?? [ 455.491071][ T5864] smsc95xx v2.0.0 [ 455.956577][T10940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.962984][ T5822] Bluetooth: hci0: command 0x0c1a tx timeout [ 455.965441][T10940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.134391][ T29] audit: type=1326 audit(1734809261.364:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10963 comm="syz.0.1418" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5d4ff85d29 code=0x0 [ 456.160975][ T5864] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 456.171839][ T5864] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 456.208968][T10973] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1420'. [ 456.477706][T10975] x_tables: ip6_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48 [ 456.844892][ T5864] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 457.059861][T10963] delete_channel: no stack [ 457.191832][ T5864] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 457.239312][ T5864] usb 5-1: USB disconnect, device number 32 [ 458.876181][ T29] audit: type=1400 audit(1734809264.084:663): avc: denied { setopt } for pid=11008 comm="syz.0.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 459.140566][ T29] audit: type=1400 audit(1734809264.084:664): avc: denied { connect } for pid=11008 comm="syz.0.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 461.408511][T11029] delete_channel: no stack [ 461.540944][ T5864] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 461.722624][ T5864] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 461.733860][ T5864] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 461.744447][T11039] [ 461.746761][T11039] ====================================================== [ 461.753755][T11039] WARNING: possible circular locking dependency detected [ 461.760756][T11039] 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 Not tainted SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 461.767837][T11039] ------------------------------------------------------ [ 461.774829][T11039] syz.4.1436/11039 is trying to acquire lock: [ 461.780869][T11039] ffff888025ca7170 (&q->sysfs_lock){+.+.}-{4:4}, at: __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 461.791213][T11039] [ 461.791213][T11039] but task is already holding lock: [ 461.798575][T11039] ffff888025ca6c40 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x14e0 [ 461.810000][T11039] [ 461.810000][T11039] which lock already depends on the new lock. [ 461.810000][T11039] [ 461.820403][T11039] [ 461.820403][T11039] the existing dependency chain (in reverse order) is: [ 461.829419][T11039] [ 461.829419][T11039] -> #4 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 461.838037][T11039] blk_mq_submit_bio+0x1fb6/0x24c0 [ 461.843655][T11039] __submit_bio+0x384/0x540 [ 461.848687][T11039] submit_bio_noacct_nocheck+0x698/0xd70 [ 461.854824][T11039] submit_bio_noacct+0x93a/0x1e20 [ 461.860349][T11039] block_read_full_folio+0x812/0xa50 [ 461.866135][T11039] filemap_read_folio+0xc6/0x2a0 [ 461.871582][T11039] filemap_get_pages+0x155f/0x1be0 [ 461.877212][T11039] filemap_read+0x3ca/0xd70 [ 461.882215][T11039] blkdev_read_iter+0x187/0x480 [ 461.887567][T11039] vfs_read+0x87f/0xbe0 [ 461.892225][T11039] ksys_read+0x12b/0x250 [ 461.896964][T11039] do_syscall_64+0xcd/0x250 [ 461.901967][T11039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.908362][T11039] [ 461.908362][T11039] -> #3 (mapping.invalidate_lock#2){.+.+}-{4:4}: [ 461.916854][T11039] down_read+0x9a/0x330 [ 461.921515][T11039] page_cache_ra_unbounded+0x173/0x750 [ 461.927469][T11039] page_cache_ra_order+0x8f2/0xc80 [ 461.933076][T11039] filemap_fault+0x1a8a/0x2820 [ 461.938341][T11039] __do_fault+0x10a/0x490 [ 461.943190][T11039] do_pte_missing+0xebd/0x3e00 [ 461.948455][T11039] __handle_mm_fault+0x103c/0x2a40 [ 461.954066][T11039] handle_mm_fault+0x3fa/0xaa0 [ 461.959342][T11039] __get_user_pages+0x8d9/0x3b50 [ 461.964778][T11039] get_user_pages_unlocked+0x1c2/0x780 [ 461.970738][T11039] hva_to_pfn+0x8be/0xc20 [ 461.975564][T11039] kvm_follow_pfn+0x29f/0x3f0 [ 461.980743][T11039] __kvm_faultin_pfn+0x11c/0x1a0 [ 461.986180][T11039] kvm_mmu_faultin_pfn+0x469/0x1f30 [ 461.991873][T11039] kvm_tdp_page_fault+0x182/0x3d0 [ 461.997396][T11039] kvm_mmu_do_page_fault+0x58d/0x690 [ 462.003195][T11039] kvm_mmu_page_fault+0x20f/0x1bb0 [ 462.008850][T11039] handle_ept_violation+0x25a/0x640 [ 462.014586][T11039] vmx_handle_exit+0x733/0x1f70 [ 462.019969][T11039] vcpu_run+0x3047/0x4f50 [ 462.024834][T11039] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 462.030910][T11039] kvm_vcpu_ioctl+0x6ce/0x1520 [ 462.036204][T11039] __x64_sys_ioctl+0x190/0x200 [ 462.041495][T11039] do_syscall_64+0xcd/0x250 [ 462.046513][T11039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.052943][T11039] [ 462.052943][T11039] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 462.060492][T11039] __might_fault+0x11b/0x190 [ 462.065587][T11039] _copy_from_user+0x29/0xd0 [ 462.070681][T11039] __blk_trace_setup+0xa8/0x180 [ 462.076030][T11039] blk_trace_ioctl+0x163/0x290 [ 462.081293][T11039] blkdev_ioctl+0x109/0x6d0 [ 462.086295][T11039] __x64_sys_ioctl+0x190/0x200 [ 462.091561][T11039] do_syscall_64+0xcd/0x250 [ 462.096581][T11039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.102975][T11039] [ 462.102975][T11039] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 462.110772][T11039] __mutex_lock+0x19b/0xa60 [ 462.115795][T11039] blk_register_queue+0x13c/0x4f0 [ 462.121319][T11039] add_disk_fwnode+0x785/0x1300 [ 462.126667][T11039] brd_alloc.isra.0+0x5a2/0x840 [ 462.132017][T11039] brd_init+0x12b/0x1d0 [ 462.136758][T11039] do_one_initcall+0x128/0x700 [ 462.142039][T11039] kernel_init_freeable+0x5c7/0x900 [ 462.147736][T11039] kernel_init+0x1c/0x2b0 [ 462.152563][T11039] ret_from_fork+0x45/0x80 [ 462.157514][T11039] ret_from_fork_asm+0x1a/0x30 [ 462.162783][T11039] [ 462.162783][T11039] -> #0 (&q->sysfs_lock){+.+.}-{4:4}: [ 462.170314][T11039] __lock_acquire+0x249e/0x3c40 [ 462.175749][T11039] lock_acquire.part.0+0x11b/0x380 [ 462.181354][T11039] __mutex_lock+0x19b/0xa60 [ 462.186355][T11039] __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 462.192830][T11039] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 462.198872][T11039] nbd_start_device+0x15b/0xd70 [ 462.204222][T11039] nbd_ioctl+0x21a/0xfd0 [ 462.208966][T11039] blkdev_ioctl+0x276/0x6d0 [ 462.213972][T11039] __x64_sys_ioctl+0x190/0x200 [ 462.219237][T11039] do_syscall_64+0xcd/0x250 [ 462.224243][T11039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.230663][T11039] [ 462.230663][T11039] other info that might help us debug this: [ 462.230663][T11039] [ 462.240863][T11039] Chain exists of: [ 462.240863][T11039] &q->sysfs_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#53 [ 462.240863][T11039] [ 462.255640][T11039] Possible unsafe locking scenario: [ 462.255640][T11039] [ 462.263070][T11039] CPU0 CPU1 [ 462.268406][T11039] ---- ---- [ 462.273772][T11039] lock(&q->q_usage_counter(io)#53); [ 462.279121][T11039] lock(mapping.invalidate_lock#2); [ 462.286905][T11039] lock(&q->q_usage_counter(io)#53); [ 462.294777][T11039] lock(&q->sysfs_lock); [ 462.299081][T11039] [ 462.299081][T11039] *** DEADLOCK *** [ 462.299081][T11039] [ 462.307196][T11039] 4 locks held by syz.4.1436/11039: [ 462.312389][T11039] #0: ffff888025f34198 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x151/0xfd0 [ 462.321674][T11039] #1: ffff888025f340d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x20/0x40 [ 462.332446][T11039] #2: ffff888025ca6c40 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x14e0 [ 462.344246][T11039] #3: ffff888025ca6c78 (&q->q_usage_counter(queue)#37){+.+.}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x14e0 [ 462.356310][T11039] [ 462.356310][T11039] stack backtrace: [ 462.362175][T11039] CPU: 1 UID: 0 PID: 11039 Comm: syz.4.1436 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 462.372913][T11039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 462.382942][T11039] Call Trace: [ 462.386197][T11039] [ 462.389109][T11039] dump_stack_lvl+0x116/0x1f0 [ 462.393784][T11039] print_circular_bug+0x419/0x5d0 [ 462.398791][T11039] check_noncircular+0x31a/0x400 [ 462.403717][T11039] ? __pfx_check_noncircular+0x10/0x10 [ 462.409152][T11039] ? add_lock_to_list+0x17d/0x390 [ 462.414161][T11039] __lock_acquire+0x249e/0x3c40 [ 462.419003][T11039] ? __pfx___lock_acquire+0x10/0x10 [ 462.424180][T11039] ? __pfx_stack_trace_save+0x10/0x10 [ 462.429530][T11039] ? lockdep_unlock+0x11a/0x290 [ 462.434360][T11039] ? stack_depot_save_flags+0x28/0x9c0 [ 462.439814][T11039] lock_acquire.part.0+0x11b/0x380 [ 462.444901][T11039] ? __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 462.451051][T11039] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 462.456669][T11039] ? rcu_is_watching+0x12/0xc0 [ 462.461453][T11039] ? trace_lock_acquire+0x14e/0x1f0 [ 462.466633][T11039] ? __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 462.472764][T11039] ? lock_acquire+0x2f/0xb0 [ 462.477242][T11039] ? __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 462.483374][T11039] __mutex_lock+0x19b/0xa60 [ 462.487856][T11039] ? __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 462.493989][T11039] ? __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 462.500124][T11039] ? __pfx___mutex_lock+0x10/0x10 [ 462.505142][T11039] ? __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 462.511272][T11039] __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 462.517247][T11039] ? __bpf_trace_contention_end+0xca/0x110 [ 462.523028][T11039] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 462.529249][T11039] ? __mutex_trylock_common+0xea/0x250 [ 462.534686][T11039] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 462.540382][T11039] ? rcu_is_watching+0x12/0xc0 [ 462.545124][T11039] ? __pfx___blk_mq_update_nr_hw_queues+0x10/0x10 [ 462.551517][T11039] ? avc_has_perm_noaudit+0x61/0x3a0 [ 462.556783][T11039] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 462.562502][T11039] ? __pfx___mutex_lock+0x10/0x10 [ 462.567506][T11039] ? trace_contention_end+0xee/0x140 [ 462.572769][T11039] ? __mutex_lock+0x1cc/0xa60 [ 462.577423][T11039] ? nbd_ioctl+0x151/0xfd0 [ 462.581834][T11039] ? __pfx___mutex_lock+0x10/0x10 [ 462.586841][T11039] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 462.592370][T11039] nbd_start_device+0x15b/0xd70 [ 462.597199][T11039] ? bpf_lsm_capable+0x9/0x10 [ 462.601849][T11039] nbd_ioctl+0x21a/0xfd0 [ 462.606069][T11039] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 462.612569][T11039] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 462.619047][T11039] ? __pfx_nbd_ioctl+0x10/0x10 [ 462.623784][T11039] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 462.630612][T11039] ? __pfx_lock_release+0x10/0x10 [ 462.635636][T11039] ? __pfx_nbd_ioctl+0x10/0x10 [ 462.640375][T11039] blkdev_ioctl+0x276/0x6d0 [ 462.644893][T11039] ? __pfx_blkdev_ioctl+0x10/0x10 [ 462.649897][T11039] ? selinux_file_ioctl+0x180/0x270 [ 462.655075][T11039] ? selinux_file_ioctl+0xb4/0x270 [ 462.660166][T11039] ? __pfx_blkdev_ioctl+0x10/0x10 [ 462.665171][T11039] __x64_sys_ioctl+0x190/0x200 [ 462.669914][T11039] do_syscall_64+0xcd/0x250 [ 462.674414][T11039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.680290][T11039] RIP: 0033:0x7f4036385d29 [ 462.684682][T11039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.704264][T11039] RSP: 002b:00007f4037216038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 462.712652][T11039] RAX: ffffffffffffffda RBX: 00007f4036575fa0 RCX: 00007f4036385d29 [ 462.720602][T11039] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 000000000000000a [ 462.728546][T11039] RBP: 00007f4036401aa8 R08: 0000000000000000 R09: 0000000000000000 [ 462.736493][T11039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.744436][T11039] R13: 0000000000000000 R14: 00007f4036575fa0 R15: 00007ffd12ac71c8 [ 462.752390][T11039] [ 462.770165][ T5864] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 462.779219][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.931046][T11039] block nbd4: shutting down sockets [ 463.321340][ T5864] usb 4-1: can't set config #27, error -71 [ 463.343808][ T5864] usb 4-1: USB disconnect, device number 25 [ 463.589238][ T8151] bridge_slave_1: left allmulticast mode [ 463.594997][ T8151] bridge_slave_1: left promiscuous mode [ 463.600699][ T8151] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.608381][ T8151] bridge_slave_0: left allmulticast mode [ 463.614095][ T8151] bridge_slave_0: left promiscuous mode [ 463.619699][ T8151] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.921529][ T8151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.930900][ T8151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.939772][ T8151] bond0 (unregistering): Released all slaves [ 464.163589][ T8151] hsr_slave_0: left promiscuous mode [ 464.169297][ T8151] hsr_slave_1: left promiscuous mode [ 464.175060][ T8151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.183897][ T8151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.469725][ T8151] team0 (unregistering): Port device team_slave_1 removed [ 464.511274][ T8151] team0 (unregistering): Port device team_slave_0 removed [ 465.144334][ T8151] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.203560][ T8151] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.243089][ T8151] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.302969][ T8151] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.362689][ T8151] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.373068][ T8151] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.384518][ T8151] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 465.432761][ T8151] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.443146][ T8151] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.453539][ T8151] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 465.494168][ T8151] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.504575][ T8151] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.515561][ T8151] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 465.553263][ T8151] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.563559][ T8151] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.573869][ T8151] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 465.630247][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 465.645138][ T8151] bridge_slave_1: left allmulticast mode [ 465.650876][ T8151] bridge_slave_1: left promiscuous mode [ 465.656553][ T8151] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.664720][ T8151] bridge_slave_0: left allmulticast mode [ 465.670558][ T8151] bridge_slave_0: left promiscuous mode [ 465.676196][ T8151] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.685263][ T8151] bridge_slave_1: left allmulticast mode [ 465.691236][ T8151] bridge_slave_1: left promiscuous mode [ 465.696846][ T8151] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.704826][ T8151] bridge_slave_0: left allmulticast mode [ 465.710567][ T8151] bridge_slave_0: left promiscuous mode [ 465.716162][ T8151] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.799830][ T8151] team0: Port device vxlan0 removed [ 466.054398][ T8151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.064207][ T8151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.073725][ T8151] bond0 (unregistering): Released all slaves [ 466.081744][ T8151] bond1 (unregistering): Released all slaves [ 466.098614][ T8151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.108107][ T8151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.117978][ T8151] bond0 (unregistering): Released all slaves [ 466.126380][ T8151] bond1 (unregistering): Released all slaves [ 466.135036][ T8151] bond2 (unregistering): Released all slaves [ 466.211135][ T8151] tipc: Left network mode [ 466.466511][ T8151] hsr_slave_0: left promiscuous mode [ 466.472168][ T8151] hsr_slave_1: left promiscuous mode [ 466.477789][ T8151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.485216][ T8151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.492754][ T8151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.500183][ T8151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.509076][ T8151] hsr_slave_0: left promiscuous mode [ 466.515069][ T8151] hsr_slave_1: left promiscuous mode [ 466.520777][ T8151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.528145][ T8151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.535763][ T8151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.543194][ T8151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.552701][ T8151] veth0_macvtap: left promiscuous mode [ 466.558244][ T8151] veth1_vlan: left promiscuous mode [ 466.563559][ T8151] veth0_vlan: left promiscuous mode [ 466.569375][ T8151] veth0_macvtap: left promiscuous mode [ 466.575298][ T8151] veth1_vlan: left promiscuous mode [ 466.580564][ T8151] veth0_vlan: left promiscuous mode [ 466.716845][ T8151] team0 (unregistering): Port device team_slave_1 removed [ 466.745093][ T8151] team0 (unregistering): Port device team_slave_0 removed [ 466.919652][ T8151] team0 (unregistering): Port device team_slave_1 removed [ 466.944995][ T8151] team0 (unregistering): Port device team_slave_0 removed [ 467.006746][ T8151] vcan0 (unregistering): left allmulticast mode [ 467.391225][ T8151] IPVS: stop unused estimator thread 0...