last executing test programs: 1m2.431595593s ago: executing program 2 (id=2171): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf1, 0x78, 0x1e, 0x8, 0x45e, 0x437, 0x5ab, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc9, 0xfa, 0xb3}}]}}]}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket(0xa, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x11, 0x64, 0x0, 0x20000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@assoc={0x18, 0x117, 0x2}], 0xf}], 0x49249249249261c, 0x0) 1m0.687203783s ago: executing program 2 (id=2179): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000300), 0xd) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000340)) sched_setscheduler(0x0, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f33129f74b5bd7f106000000000000005ec66d", @ANYRES16=0x0, @ANYBLOB="000000000020000000000500000028000180080003000200000008000100", @ANYBLOB="140002006970766c616e30000000000000000000"], 0x3c}}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000000)) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r3, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r5, &(0x7f0000000a40)={0x2020}, 0x2020) write(r6, &(0x7f0000000140)="94", 0xfffffdef) 15.014034463s ago: executing program 1 (id=2255): flock(0xffffffffffffffff, 0x1) flock(0xffffffffffffffff, 0x5) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) (fail_nth: 2) ioctl$EVIOCGSND(0xffffffffffffffff, 0x5451, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e0023"], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, 0x0) pipe2(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_io_uring_setup(0x6167, 0x0, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) r0 = syz_open_dev$evdev(&(0x7f0000005e80), 0x4, 0x42) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000005ec0)={0x4, 0x2, 0x2002, 0xb, "a2196bf0ae9048ced3900813726203ea0337b065c6b388e3cdf73cb18bfd1b04"}) syz_usb_connect(0x3, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xb, 0x2a, 0x9c, 0x8, 0x421, 0x445, 0xe3, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0xb4, 0x4, 0x0, 0xcf, 0x3b, 0x27, 0x2}}]}}]}}, 0x0) 13.332243542s ago: executing program 4 (id=2258): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) inotify_init1(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x6, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f15852323460608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) 12.173001924s ago: executing program 4 (id=2259): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f0000000340)=[{0x0, 0x1}], 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x3, &(0x7f0000000340)={0x8003}, 0x8) connect$inet(r1, &(0x7f0000000140)={0x10, 0x2}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20104, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x21, 0x0, 0x0) semtimedop(r0, &(0x7f0000000000)=[{}], 0x1, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x2, 0x0, 0x800}], 0x2aaaaaaaaaaaad0e, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0x84, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x2000, 0x0, {0x0, @in6={{0xa, 0x4e22, 0xa, @remote, 0x1}}, 0xc0000000, 0x0, 0x2}}, &(0x7f0000000280)=0xb0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) readv(r3, &(0x7f0000000200)=[{&(0x7f0000000080)=""/3, 0x3}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='xfs\x00', 0x808000, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000400)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\xa4y\x9e>\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\x8dr\xd5\xcd\xf2P\r\x0e\"\x03\xa9\xab\xfa#\x01\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\\\x1a\x80=\xa72)\xd2\x00'/276, &(0x7f0000000000)='/\x00\x9b\x1d\x00\x96', 0x0) tkill(r4, 0xb) listen(0xffffffffffffffff, 0x0) r6 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) 11.63121978s ago: executing program 4 (id=2260): r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f00000003c0)=""/102392, 0x18ff8) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000001c0)={0x0, 0x5, 0x1, "fd"}, 0x9) sendto$inet6(r3, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x5}, 0x8) r4 = fcntl$getown(r2, 0x9) ptrace$ARCH_SHSTK_STATUS(0x1e, r4, &(0x7f0000000200), 0x5005) accept4$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0x80000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) dup(r5) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) io_setup(0x5, &(0x7f0000002340)=0x0) io_submit(r7, 0x1, &(0x7f00000014c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r6, 0x0) cachestat(r5, &(0x7f0000000040)={0x0, 0xfffffffffffffffc}, &(0x7f00000000c0), 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0xfffffffffffffd71, 0x12, 0xa01, 0xffffffff, 0x0, {0xa}}, 0x26}}, 0x0) 11.497653523s ago: executing program 1 (id=2261): timer_create(0x2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000c40)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) sched_setscheduler(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x40}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = add_key$fscrypt_v1(0x0, &(0x7f00000000c0)={'fscrypt:', @desc1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r2, 0x0) keyctl$revoke(0x6, r2) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[], 0x5c, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000580), 0x24, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000400), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) 9.774917613s ago: executing program 4 (id=2263): syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x20000804) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) prctl$PR_GET_KEEPCAPS(0x7) syz_usb_connect(0x0, 0xfffffffffffffffb, 0x0, 0x0) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f0000000180)={0x2020}, 0x2020) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3, 0x10010, r0, 0x38179000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3e8, 0x200, 0x200, 0x0, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netdevsim0\x00', 'pim6reg\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) 9.489687632s ago: executing program 1 (id=2265): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$netlink(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x20000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) request_key(&(0x7f0000000040)='logon\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='/dev/loop-control\x00', 0xfffffffffffffffc) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000640)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000380)=""/32, 0x20, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, 0x120) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001000000000000000000000071120d000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x5a, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000, @void, @value}, 0x80) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x0, 0x0, 'lc\x00'}, 0x2c) syz_open_procfs$namespace(0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 7.742632173s ago: executing program 0 (id=2267): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000240), &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000080)=[r1, 0x0], 0x2}) syz_open_dev$video4linux(&(0x7f00000000c0), 0x20000006, 0x200880) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) r3 = memfd_create(&(0x7f0000000200)='\xf3\xd9\x00\x00\x918\xc0y\x01c\x1fnux\x00sV\a\x01\x00l \xed\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xf9P\x84\x9d\x15\xa4=\xfa\x81\f\x1et\x10\x0e\xcf', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="000000000000bcc7a07b00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) creat(&(0x7f0000000240)='./bus\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0x4, 0x0, 0x4}) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) socket(0x10, 0x0, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000680)={'veth0_to_team\x00', &(0x7f0000000500)=@ethtool_cmd={0x1}}) pwrite64(r3, &(0x7f0000000540)='/', 0x1, 0x2000) lseek(r3, 0x0, 0x4) ioctl$PTP_SYS_OFFSET_PRECISE(r2, 0xc0403d08, &(0x7f0000000040)) 6.334696547s ago: executing program 0 (id=2268): socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406b1d01014000010203010902720003010000000904000000010300000a"], 0x0) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$can_raw(0x1d, 0x3, 0x1) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010200000007402505a0a45d4f0102030109021b00010000000009045500012abccb00090508032000080c09"], 0x0) syz_usb_connect$uac1(0x3, 0x112, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x100, 0x3, 0x1, 0x2, 0x40, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0xe}, [@selector_unit={0x9, 0x24, 0x5, 0x6, 0x2, "0a26b188"}, @processing_unit={0x9, 0x24, 0x7, 0x3, 0x6, 0xd, '\t\x00'}, @extension_unit={0xc, 0x24, 0x8, 0x2, 0x7, 0x3, "66c1fc8909"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x306, 0x3, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x305, 0x2, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x6, 0x3}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x40, 0x0, 0x5, "83053c47b064"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xb, 0x200, 0x4b, "b07fba95a39c"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x9, 0x4, 0xbd, 0x0, 'q'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x3, 0x6, 0x6, "da", "dc58"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x7, 0x2, 0xcc, "a46f5e34"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x7, 0x3, 0x3, {0x7, 0x25, 0x1, 0x1, 0x2, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xfffd, 0x2}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x4, 0x3, 0xb, 0x7, "60ec1d951184de9870"}, @as_header={0x7, 0x24, 0x1, 0x10, 0x8, 0x4}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x3, 0x3, 0x3, 0x1, "9854"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x8, 0x0, 0x9, {0x7, 0x25, 0x1, 0x0, 0xa, 0x3ff5}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x8, 0x9, 0x4f, 0xff, 0x10}, 0x21, &(0x7f00000001c0)={0x5, 0xf, 0x21, 0x1, [@ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0x800, 0xff0f, 0x1000, [0x3f00, 0xff000f, 0xffffff, 0xff0000]}]}, 0x6, [{0x3e, &(0x7f0000000200)=@string={0x3e, 0x3, "d4604eadea2ba2fafa1422993c545e434c0543531ab72984943c9003c9c8af7626f5d4644ff74a10ef5c8b4a13edcda7427cd9891aeeb0c921f47338"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x80c}}, {0x1c, &(0x7f0000000580)=ANY=[@ANYBLOB="1c0314fa9fe79803c76f8bf5db8f66a85aea8676fd7dc3148a3c5545f828977c7b8f84b0be0eee4e5d6a3dec567c19a285ff623352318c0cf41420e3fad703886410620e0c9296e58c210fcf950ed31ca20c4ef369c85992d61d6ce3ae8cd1dcb8ca72eff1f3055658603f37367ae0028d409eaa11de05d8d4c56ffad013047fb8c8353bed735ee48414bb2f2da36be21b4c023e8c4d3ec53f9d379ca0dc5cd62592d140"]}, {0x9d, &(0x7f00000002c0)=@string={0x9d, 0x3, "766cbcdb5b57182c4b765dbc9abf11b0c938ad6e6797d6647ed70bb528032e30ff3c2fd68f02d265d4057a030ef14c6aa0b5e6781d61ba6c78580ed5cf99b848e9d990122766a1acaa80e94c6d646a056eb257a9241a61095df8951d73d629857601df0ef0164de8c08b5430505440ab1c5da7e532066402324e79b4d28ea3c288be8bcf61b0a0ed8b81d15295f2ccdbfb823fd242b313a676f8e9"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x40c}}, {0xf6, &(0x7f00000003c0)=@string={0xf6, 0x3, "78577ef653a4cb9a8160329569c26892ac237f061627a88ff789165e72670860a719c85652c79e83e5c89878f84a928a2d974967390af77a4c45198bdb69b11ef296c1853d7325a4f214d9078072129e0a840d8c92ca512c85073c9f28c6a827427dde6184fbef40eb6af1a501f68abc4336c25cfb3b540b1f49e28b448f9a50494e14e17aafba67938f704234b4fe771dc149eaaf378e42b656e6d9a8cebdb6b6c8dbf714d24cb978fe8ff50942ebd6671f86dd361aff897b6fa7438d48602ec0e2fffdd857aabc1e284e6fed3b21d5c2fdc3f0990afe6cc5bc02049f10d5b3a31c491b9645fb3aad633f382aac9ad9d71c9a90"}}]}) 6.270791814s ago: executing program 1 (id=2269): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000003c0)={'b', ' *:* ', 'r\x00'}, 0x8) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYRES8=r0], 0xa) io_uring_setup(0x7bd9, &(0x7f00000003c0)={0x0, 0x1ef6, 0x1c81, 0x2}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) getpid() openat$vimc1(0xffffff9c, 0x0, 0x2, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x14, 0x19, 0xa, 0x801}, 0x14}}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0xc}, 0x20) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000500)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f0000000180)={r8}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000080)={r9, 0x3, r7, 0x5}) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="92001f", @ANYRES16=r3, @ANYBLOB="270e00000000fc"], 0x14}, 0x1, 0x40030000000000}, 0x0) 6.234606166s ago: executing program 4 (id=2270): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x20000, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f00000fe000/0x2000)=nil, 0x2000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 5.444203132s ago: executing program 3 (id=2186): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x5, &(0x7f00000002c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ff", 0x3, 0x0, 0x0, 0x2}]) 5.125495879s ago: executing program 3 (id=2271): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "00629a7d82000000000000000000f7ffffff00"}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x402c542c, &(0x7f0000000000)) 5.002063331s ago: executing program 2 (id=2187): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r2, 0x84, 0x25, 0x0, &(0x7f0000000000)) 4.695444569s ago: executing program 2 (id=2272): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r1 = socket(0x10, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000003c0), 0xffff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000380)={0x1, 0x3, 0x3, "96a358c4adf4d1e86ecd000000e9ffff1f00000000007416d31d36624ecd0600"}) write$binfmt_script(r3, &(0x7f0000000840)={'#! ', '', [{0x20, '\x1aF\x99\rr\x81\xa6!C\x95I\xd0\xc4gw\x1eZ'}, {0x20, ']/+%-'}, {0x20, 'veth1_to_hsr\x00'}, {0x20, '\xb8G\xbeY~~\xd9\xec'}, {0x20, 'nl80211\x00'}], 0xa, "ca2dac9e33b3f425e652056f1bf8cb7bea4edad5ca4c78f7f434bf5d0ad475f31108df3d0adb5ca9560b"}, 0x66) mmap(&(0x7f000081f000/0x3000)=nil, 0x3000, 0x200000b, 0x11, r2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="740000000001010800000000000000000a000000040001803c0002800c00028005000100010000002c00118014000300fc00000000000000000000001d830c371c00e4fffd80000000000000000000000000000b20000d8014000500df01000000000000000000000000000108000100e0000002"], 0x74}}, 0x4051) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRES8=r6], 0x38}}, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0xa) r8 = openat$cgroup_ro(r2, &(0x7f0000000080)='rdma.current\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r11, 0x29, 0x1b, &(0x7f00000000c0)={@mcast2}, 0x14) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000140)={'veth1_to_hsr\x00', 0x0}) r13 = openat$cgroup_ro(r2, &(0x7f0000000400)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r13, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "b66a0a84377f5e5547e8a77f747b0600000000000000"}, 0x21) readv(r13, 0x0, 0x0) write$binfmt_misc(r13, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r13, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r13, 0xc0d05604, &(0x7f0000000480)={0x3, @vbi={0xd, 0x200, 0x1, 0x30395056, [0x1, 0x400], [0x1, 0xc], 0x1}}) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYRES8=r9, @ANYRESOCT=r1, @ANYRES8=r3, @ANYRES32=r7, @ANYRESOCT=r0, @ANYRESHEX=r8, @ANYRES16=r5], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0xfffffffffffffe02, &(0x7f0000007640)={&(0x7f0000000580)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r12, @ANYBLOB="ff830500000700ffdcb6fd906a2bfb7b5ac4a23cd923a35b680e3fd0a72207cdba9953a9ef663ba5c7f5a17d0b0efc42eb39bf090dc1fa543a953d4399aeec66daedbf38e776160a2cef296cd1ec2fc94c0a5b6b07c238cb1ee23b621dcaf17329bc52153276851ea6aa1f52f2fce1d446c4d729d18218d40e9e31617bdf44c3e5f936e75f1e023fac70fe70f61c44d2b98b2965713501f1894ed58062a7a87126520e5d77f59fe71a9bcabc75b0653ee3cd6aa32c16777e44076dd041b9b49bc04af1d89e7cfe09d87aa66a73a32cdbaef23de61b3cf0a1e6373a7cbac935938f86d0c84a7a2fcce62ce624e9ed8a", @ANYRES16=r10], 0x4}}, 0x0) 4.551264677s ago: executing program 0 (id=2273): timer_create(0x2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000c40)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) sched_setscheduler(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x40}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = add_key$fscrypt_v1(0x0, &(0x7f00000000c0)={'fscrypt:', @desc1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r2, 0x0) keyctl$revoke(0x6, r2) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[], 0x5c, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000580), 0x24, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000400), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) 4.381279882s ago: executing program 2 (id=2274): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/11, 0xb}}, 0x120) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000005c0)={{{@in6, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@loopback}}, &(0x7f00000006c0)=0xe8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005020524", @ANYRES8=r5, @ANYBLOB="05"], 0x0) r6 = syz_open_dev$amidi(&(0x7f0000000740), 0x4, 0x181000) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001b40), 0x82800, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) r10 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setregid(r11, 0x0) stat(&(0x7f0000001b80)='./file0\x00', &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001c40)={0x0, 0x0, 0x0}, &(0x7f0000001c80)=0xc) r14 = getpid() sched_setscheduler(r14, 0x1, &(0x7f0000000100)=0x5) r15 = geteuid() r16 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setfsgid(r17) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="b60d5661e57c359853e7a1bd49153e5ea2daff904b786666ae84dc0e0eada4c0282d54fa44106f0e403060542c670e868a5851294873e13c89c2c4132450e4b6d67a7761eb7363e50fc2d6d4b23aee4d5f9c5f097bff3bff17f3", 0x5a}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=0xee00, @ANYBLOB="000000003800000000010000010077a8f9ff0000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0xd8, 0x1}}, {{&(0x7f0000000a80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001b00)=[{&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000000880)="cc50fed9f5fb5e7c57b825fe478c8e4c6b273de73f21e5ea2070e6a7c11a931ad2728a04dbbfa986c2925c6009d71070705ddae543f06e", 0x37}], 0x2, &(0x7f0000001cc0)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r7]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r9, r11}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r17}}}], 0x80, 0x10}}], 0x2, 0x4040000) write$UHID_INPUT2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB='\f'], 0xaf) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7050000000000006110440000000000dc0500002000000095000000000000009abb1723bf24203831c9545b21c751ee4024f479cbe4b89f9808837203000000000000c2d182c7a3221481f5009edaf5f5ac058299e10e790a198f42a715b99fb3d2a73dd025848710155ad1efd7d991408000000000000085a0db0401fa29e075b7ab0408a0d8cfceeb23465bb027ee1151c02af21d8f9aa57e673a6724441d08087aff070eda8abef22b3a806c8226f5a2886c93bd29b37252ba4a6e9cc5f69e75680c431aa855e487ae513abd6c4ee973fce29a26018ed5e0780f8778a602a3533a3dac7da4fe491edf3abfa7bf871c58848ac46ada6776bd9b85df01e626026a59ddfa7a9c879acbfb0bf426785dec7d8611dc850df49ed8633bdb83dd505fb20649f53841a0e200c91f5bf1bb186ed87efc7b6f8859d029c8376ca19265e281fea0a6fd2222f8850c8445758503ede0ce1b3f73ecd8989e8c53c5e679b13802bddf80f3b1d07d6d68bfa12ab34697d40ac1150a842f8bb381344b994c19642a10eb30845a993daaa8bd4aebc595475feb3475d8e802498382e73edb98fcf2df96ab3c870490c4"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r18 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) accept4$netrom(r18, &(0x7f00000000c0)={{0x3, @null}, [@remote, @bcast, @netrom, @bcast, @netrom, @bcast, @remote, @null]}, &(0x7f0000000140)=0x48, 0x80000) 3.672684634s ago: executing program 3 (id=2275): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r7, &(0x7f0000002180)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x4, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)=@deltaction={0x78, 0x31, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x78}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x200008d0}, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 3.629495393s ago: executing program 4 (id=2276): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f050440000009058303"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x129c81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'gretap0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x1, 0x20, 0xfffffffd, 0x6, {{0x10, 0x4, 0x2, 0x2a, 0x40, 0x68, 0x0, 0x1, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x25}, {[@lsrr={0x83, 0x13, 0x4d, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback, @broadcast]}, @noop, @cipso={0x86, 0x16, 0x1, [{0x7, 0x10, "895ef8303c1f015893596e14b340"}]}]}}}}}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x22, 0x0, 0x0, 0x0, 0x10, '\x00', r5, 0x2, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0x541b, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0xb, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="38020000300009007fffffff000000000200002c040006801e0001"], 0x238}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) tgkill(r1, r1, 0x1c) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x0) 2.6148985s ago: executing program 3 (id=2277): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mknod$loop(&(0x7f0000000280)='./file0\x00', 0x0, 0x1) signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x6]}, 0x8, 0xc0800) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) setxattr(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)=@known='security.selinux\x00', 0x0, 0x0, 0x1) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='security.selinux\x00', 0x0, 0x0) 2.460651696s ago: executing program 3 (id=2278): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{0x0}, {&(0x7f00000012c0)="c89339f96fa636ba2f527aaa37159cc815448e015b23284d531bdd25a86c02e88b8f962021a37fd9614193094b27b21bf40bc7b43441ae5179a127ea80e91899e1f10a7045c4412bb7997ff8838923521fe0754832209cd546f4ed81500298511e080ec7059b1c32c07fd26f721c6611b8cb344a3fd8f7a889c50a42881e09d4d7ee7ee6c308a13ae6436c858933dc99f71924b68ae0faf95b0afcd3533bcc32840737f434728a12e99aea5c4ee6a603636560b8d9de530d395181e440c1a025ff8d6f33062f14ba2403a178e32ff2d4ec5d0d2c83233b01a41103ef38daeed650987abebe0e8ba7effc07bb5dbbc9a38a11f082f2c99937942f017c37a59572f5069ca709702ef133aa9730ebb5b72687f6175906dbc32289108cc93e5c84284bc701a0629e12eca8c15e763acd011323b758fdb82a63665c906b176042a6c601b5428722c8f6b795a4effc0d4c9a4b4963ae30e77afa0b473d27f4938b1f081765f30aee60de80b1154e3afc3593cad6a146f1c4e954a6b7535f7c4f1baf0e7280ae8957eb14aecb29cc42be434b6a73840fb4668ab11c7ad5f300d7561aa60619fc26a1bfe8fa4858b8b4282d0c9a86c8c2eed644303c1213114081f9cd2358f6609ed25113de321db6b3efbfea341c7318fdcf6776383d3329f080e2386a708679852ee2c28c2ab423163be97f818424b862486791ce5b8b25836a4f07079b65c7c3b2e797eee7f267e5cf37fb63bb89f6b15c332da46b2a313ff6cd958152701a73601c7d02b74622ba7ff9c2fccb1826a3238b95163edcf5dbb381c666fcd8f0ce22eb182135bd8a32c627e20354f2253edb77efadbb48d512ca030763df825c1dd71d34295dc2e75e0a3054354ca6674e2d16ae319c8f3bf7a7fe1e1e596cc2679444c2b5e84a5caaa40136a41a3a35e2ca053d8e4ff2134c2bd7dc2c5c7ef55579a7b569b5face778afba93a877b622f473d942fef36d909b7c17e2ba3948fc889f377f0bce583835ce70b86ee8c419f77c9fa9da33d5f3fd2f994c2229b59db0670a15d7ba9b8b3245c7c2f83953c046528db1d9626877752071b0389bb18edd4d3797b6846e8746911526b6cfb1da1a206f5d13f69d7a8a76f5dfaf02abdfde171ed51a80ca2146fe8a181df5f9c9e969c1e2113bb355a956dd0139446d7e5b1ae338513459753977c245177ed5ae398bb23ad503739c2d75b99d70af19a2faf0a6922585378c0c881298f5af7dc63f99b40be3aea8c25bb8f599ffc4d47caec400357f2fa0675c5a81141d6b1697a92f7ab1e465361bdec4bc837595cc257aac0bcd3333eef2199c622268f0aafdccf73b3fda6ddef6102aa03c1a07a85509025be45443e71d63e4a8b54cde98554b1dd9a2f431b62d29f0cf67e069c15988b8b78c6c66f7f1d831e6307473250bf66b88c1c326faa8f093f03824980bbddc34e2324754fdaafa45ea1a1cc4baaef3104108c8e7987696d3634aa61cd9af0f2b5e427eff51cc66792a37a6e09278c6457a92a84d2fd23f7a753120758e5ca80582848d537d2704315ee55374ca8204c427c8f1138c901a29f83c0b63fb00dca30a90aa0b81d09fad2bf556100a3f762dcafd44d89936f8d5e037bff746a3d7f769ef8045ca50b1f7e8b24b723f06b5582564133e8d6b9f78c0e0d19c6808b65aa19e0dbd18527e5cf4f1c2a7e9b9dcf996d781b0851b925a02a02a9ec2887fa049d10bf8e3cf99157df4f6708c9b3673e565ad47f3518d45c69e4c18f511a9973938279a0c607d4d5b010b83b7edf9dc91ac7b9dabcabf45f4abf863c87c9671b22421600e6358ab3798afeabb0021b587e125b4f599271228944365b1333e3a9f5cc7211fde35179bc2237a26d11b9ed5387644e34efbffb54c615c7e52efc06b425d43d85227f73d7d7a7435c4bf35c76be6e5daf24785f197710503a7cf3c6bde5d5f9ac3312f50af0bcd4e05313bf02e8737761c47957cdb07f1efe8468502e58e1ef9d02582fdfe2db9c1300d99d97b2b339b73a78ef91206a8f08a21988076987ca3b6e361bdd86fb74a9184789586a1815935d837fa7590ec4ae4aa838bcc5cc94c9193b4f3084f9854f21223bc2d8fb4cb4f888ebf6dc9daed2b5f36a964955daf5fac1e69e40952b09e3124491d9d6db5eb2529c0d0a6d7a9329a05a9d4d05a9fb55711786daca3519573d1a19c9200561e9e08d74190583fc4127d99ec251cc2597ddfc77562ebcb0c4107ed839e8d4e39cf048f7c3bf4d3af99d32b419f7e46cb70d23039bf965874be68923e7947fcc8f6182f620576221209a1781eb0e490d53831a01e5c3bb406b8004534c5f5c631a6a46a06bbd56c4d309f8e7f1de903dc9561cd23cb9a7ab63db127ab22adf1294aaab41e73bc067935901e66de985aafb506744c96d12af55e5961718a250ccde0db9dc94c5ab817448f193f922361f8d3043d4095ab1bb1126580c094f5f0356773fca30f963c2cf97c033c634a057d376140faeff8e19273749acc9322c94ec87d0f4b70615b76f8e2b256daa5c034382a1b93889081862c20dd2b956566321f69b192fc7f2bc135bdb2bd9575cfff340bfdddc21ce37647f7e34724286e5faf447e039e67fd64938a40151d9aedbb772a059b0ff3d2dd8c2b7f96df3b48f611758e28ad8812fee6708cc39e77bb55743db0df4cc08653c78182adc3a67db7e760d5f3741d6ee241576d0c55d5c40b5932769d80e2a687ec05c7f4c3f137ffdc5abe3e7039fd5a86990374ff0b00192088182e82b970c5bf0cfc054ca99aa225a69df5519a78fa31ca37ced124e84ded418aa9868a5ff95334ada067084fa98e5fdf353285836246154b0eef9ec625c855721a6cd0c649b6d2f72e600ebdbcfc207347a3d083033b03fb233946e9aca086456ef2bb02efff8e7953d833eb986c22afac7fd3753c19a7fd39e4d1f709e70272013b41614df4f1db326250b5588de369c7a8bf3842acf15c78a4d3881a6e092877665ef63e88dc97dd72d38612d5380abc72b9266cd325f05fe16ef0a01799e33adbff1d86d0980d2ed3f496495e5b7f41278c9498d1616db7ba860ffb87aee648df3f19bffa2edafb89940f930fd8beb2825492305b074757730accb8d20c847dd4d8beabc318c78cccfbc406314fea2da4b4cb8a67371bbce9dd7ec2d3c5b4ea21059130fa76fefdb4a7669ee25748468ef2d78088d1b3bb997ae4d51b5b739acfbd3bb1236db07dbcd0c810c07c73e5c6735a0be9d539d5c6caae62b3707d1a18cec5e16cac8575484604ca884e4f91c9bad2476f18be0b873a2cbe9c997335479b8487919a78922fd5175e8dd3b571a7677e6ac9f82e4e7c67cdfcb9ceee59b08a51bbc737bdff9b6e2250877d44a8d8c1d5ef113b2372833307be3cf0db834d043f529db04185b557910009d92cdfaa07c0533483459294a3e3da555c29416e1af2ec90b4b891e028e5af3ff5b274a0dc93ad4a3a33f886675f86bd1573bea665221e6bda9e2682bc00de3e603531f5e7d7a52c5fec65f478414833e22f36fe2b18930be9e4ef6367955623a9b938f79ff7e288678344c378b2bfd168e4c929357ab39640d677bcc17ac12fd999f3d4cd17b25a26e2bf78bcf9f898e89af6af47390908d5ea767f516cd4194165cea481c8f7ab946b66aa3083f21c02e7d61c19a4358c1cc92503c6e3bb1e7bdeb5badafdda9cec995830f5fadfb3fffe12426db1253db1268e4d3a24ca1d3d06822a439d8ccfb26af736751ac2d6dcec3763eba1c56d8a9f0bb66edb73e0dc9d5b56b23058fa9afa3667ac6188027bda68211b45b5451fb5a7e359fc61cdcf13d1f0965d9fddfd3d5d75684353a8687d18c3970b1c89e217b6cc1c7a34cec7c1e667dcd205346c2a8f85835c186811ab1121136ea83d297eb05a9ac1afa3b33346b392c3e9f479a19f7563531d0519f29868015ff20163530ce8d31bb298801b772dbb65d5caeda85982798a5ccdb4576ecc9378dadb21b3bfbb4cc33b3883164fbb6ac1a0401492c453fe2430a9de3b96d445b2c36e9a82200e00df7649544966c8f39a2d173fd8529ff8ac0f068216ae62f68c21485d6a5638f916cb5c27e5b4859c799b0a6786fd48fbacd83a9a472f50e024fa394537b33d3b4f9301266ea5e2462310ee2b862635d32d780d6411e4e6eb49d1e3732d1a0b8f0aef5bb7fd71cf9f861fad635e321fa146a630ac18d45c425214d79becc8cb97b8cac0ed0155daa9861c57ad549ae9d3cab7259a4b1eeaa72f7fb575f1dfd7268365e194e15518e176a32b82cc13544e75170bccf49161b67f649ebd1b81c85b128312b78e93750bbe9a2c456be9743859c8d80c4ec1dc4fd9d1a059042b058347b8bd02e65d469448953ac787b827fc95071d67ba047ac40ddd8a2503f62bf94457ea53073336cc284b2af1ef5598b0c0a0df3e2d729c43a7307dedb785240ab9cbe89075fb6b7ab8e6482b1ce31332e1bfa3f72e850bcea57260e4ee064ea5cfb629a058fba119e7d09ea4abd1f3b13d5ba5f8fc8abf967baf2da74099fd298e3bf3dc19ccbfe4c5e6be8cdb5e10066eceef59da3fef70c4b3d0d3f1ab7c347b63e3373e3327f9df11c73283234de66a9fa7bd2465318c6ef3a6f6a90b09c547bb93c2e5a1d12af02a0abfbc697c38ae95e1cbfd12706e96bbb2e12aaf6d40b032d61f9ee527bf464d51cc1a80ea0baebaeb8fd0523a7028387c43fc27f5fe6d2880a9f2b69eae550e3dcad889ae61abbfca58140760b53c85cea987e242f9ac38ba50ae7da73", 0xd41}, {&(0x7f0000000a00)=',', 0x1}, {&(0x7f00000022c0)='Z', 0x1}, {&(0x7f00000005c0)="f5364e548c550000000000000000000000009c20aa8f88f2a2e98330e3799522896ebfddd4848b9deeecae27e7d77317facda9ee98b10c68444b7c094658bed24fd6766444ba58941c4d2a2cea03546fa8d215c3547d076a9543f841b2add236c19bdcf172a69ab70a7df1ad7ebc55e947f2c7a7a356fd68dbce155d2e22d72a5a65dbc16f7103ee6d06748b2ddf2799d94bfbcf1140285facb31bce2fba7fe3617478337692b1236f", 0xa9}, {&(0x7f0000003240)="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", 0xdc1}, {&(0x7f0000002380)='L', 0x1}], 0x7}}], 0x4, 0xf000000) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 2.401464782s ago: executing program 0 (id=2279): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)="8bcf8f1fa96957e39beec9373e997338474a66dea5f9be6a0087eb960a3e8f42e3ebd3397af7b6c0d5f672f30da67e1a1b5ae4b6a78e0f3673cf1d30f10dd41daeff11766bf88db0038dbb0ae422fa1f6f2a40d47700b4c4da63acf6f3b8cc4044e23f5d0a9d2bfa6cc51fa9fe05683a2f5d626fed8bb0174e333623ea1dd14d", &(0x7f0000000180), 0xc9dc, r2}, 0x38) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500ff000004000000000300", 0x36}], 0x1, 0x0, 0x0, 0x2663}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="110000001400a10c000000d5b400000002000000", @ANYRES32=0x0], 0x18}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$pppoe(0x18, 0x1, 0x0) socket$inet(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x80005b, 0x10089, 0x2053, 0xffffffffffffffff, 0x3ee, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x48) socket$pppoe(0x18, 0x1, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) socket$packet(0x11, 0x2, 0x300) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r7}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb010018000000000000001800dd040000000000000000000000000000000905000000630dcbb40488ad8ca9dbc4a9509a000000000000"], 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000003c06000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000000000018200000", @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91f4ff2769a9aab702000000fbd6315f63f5a4dbd3f53eec0000008500000002000000b7000000000000ea9400000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_genetlink_get_family_id$auto(&(0x7f0000000180)='@\x00', r6) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r9, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r10, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x2}}, 0x18) 1.820717871s ago: executing program 0 (id=2280): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x5, &(0x7f00000002c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ff", 0x3, 0x0, 0x0, 0x2}]) 1.401529037s ago: executing program 3 (id=2281): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1a"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000300), 0xd) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000340)) sched_setscheduler(0x0, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f33129f74b5bd7f106000000000000005ec66d", @ANYRES16=0x0, @ANYBLOB="000000000020000000000500000028000180080003000200000008000100"], 0x3c}}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000000)) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r3, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r5, &(0x7f0000000a40)={0x2020}, 0x2020) write(r6, &(0x7f0000000140)="94", 0xfffffdef) 1.373382648s ago: executing program 0 (id=2282): flock(0xffffffffffffffff, 0x1) flock(0xffffffffffffffff, 0x5) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x5451, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e0023"], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, 0x0) pipe2(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_io_uring_setup(0x6167, 0x0, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) r0 = syz_open_dev$evdev(&(0x7f0000005e80), 0x4, 0x42) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000005ec0)={0x4, 0x2, 0x2002, 0xb, "a2196bf0ae9048ced3900813726203ea0337b065c6b388e3cdf73cb18bfd1b04"}) syz_usb_connect(0x3, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100000b2a9c0821044520e3000000000109021200010000a1000904b40400cf3b2702"], 0x0) 614.782143ms ago: executing program 2 (id=2283): r0 = socket$inet6(0xa, 0x80000, 0x8) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0xe, 0x0, &(0x7f0000000900)) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="736563757269747900000000000000000000000000000000000000000000000041020010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e29390773cb749aaf7f24418ea79e80ec8ed93d7430f4bcf293cbe2167ea744d7619ad"], 0x78) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/snmp6\x00') syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x80402) r3 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c46000000000400000000000004000000000000000000000000000000004000000000000000000000000000000000000000000038000000000000000000020000000b"], 0x78) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x105000, 0x0) preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000001640)=""/4108, 0x100c}], 0x1, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60000000121440082bbd7000fcdbdf250800030002000000080015000400000008004b001300000008004f000200000008001500ffffffffffffff7f040000000800030003a7ef80bc4cc9bf590000130800030004000000"], 0x60}, 0x1, 0x0, 0x0, 0xd0}, 0x40010) r6 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000351930404516080036cf000000010902120001000000000904"], 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r8}, 0x10) times(0xfffffffffffffffe) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, 0x0) 468.643755ms ago: executing program 1 (id=2284): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x7ab400, 0x0) r2 = accept$netrom(r1, &(0x7f0000000080)={{0x3, @default}, [@bcast, @null, @remote, @bcast, @rose, @netrom, @remote, @default]}, &(0x7f0000000100)=0x48) getsockname$netrom(r2, &(0x7f0000000140)={{0x3, @null}, [@null, @rose, @rose, @null, @default, @remote, @rose, @bcast]}, &(0x7f00000001c0)=0x48) r3 = syz_open_dev$I2C(&(0x7f0000000200), 0x1, 0x140) ioctl$I2C_SLAVE_FORCE(r3, 0x706, 0x60) ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f0000000240)={@dev={0xac, 0x14, 0x14, 0x1a}, @local}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000002c0)={0x0, 0xab, 0x6, &(0x7f0000000280)={0x18, "a773d10fb88f6204e985f55778a4adf01c358a8e9846e41083a5639670ee15ef16"}}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r4, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x2}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x24}}, 0x10) r5 = signalfd4(r3, &(0x7f0000000440)={[0x5]}, 0x8, 0x80000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, {0x1dac8000000000}}, './file0\x00'}) ioctl$F2FS_IOC_GET_FEATURES(r6, 0x8004f50c, &(0x7f00000004c0)) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000500)={0x1, 0x2, 0xdddd0000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) bind$tipc(r6, &(0x7f0000000540)=@name={0x1e, 0x2, 0x0, {{0x0, 0x4}, 0x4}}, 0x10) r7 = add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f0000000580), &(0x7f00000005c0)={'fscrypt:', @desc1}, &(0x7f0000000600)={0x0, "0b40783a32a7611781342796cb0d435356759c1d5c94a64c78813e1fdae038eb12c4e7942aa85fffc92b276b4289045bd370bcb4671f7abb218918ccb796e60d", 0x1a}, 0x48, r7) unlink(&(0x7f0000000700)='./file0\x00') ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000740)={0x0, 0x80000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='rxrpc_rx_abort\x00', r1, 0x0, 0x9d}, 0x18) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r6) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xec, r8, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xd7, 0xbe, "afd62d8ffdf0a297dcd83b3e9ed7baff662acb368eaa878ab962af901c417218d4d9836e3486db2c7f3999c5af3d27386230dd476b068d284acb01948e8ab785261966b984a687ecb291f9a20fe258f5215e15ba5d3982d841d43707becca3c8efd8799858c649941b0eef7546896ba861d4536ca9688cd0e857a6e474ca4959b3e92a68c3002c2164d8ae4bb7a51ee575cf88d10fe24843e45f317e32584754bf0a4d082480d010b9c9478595e2e0e4b095d7aa9718161c17000ecd287db2428088625dab0b0f6cb928b410557d0d5d75af84"}]}, 0xec}, 0x1, 0x0, 0x0, 0x200080c0}, 0x4000) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000a00)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000a40)='vlan0\x00', 0x10) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000a80)={0x2}) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000ac0)={@multicast1, @remote, @rand_addr=0x64010101}, 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000ec0), 0x4) 0s ago: executing program 1 (id=2285): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "00629a7d82000000000000000000f7ffffff00"}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x402c542c, &(0x7f0000000000)) kernel console output (not intermixed with test programs): entered promiscuous mode [ 2014.235542][T19298] veth1_macvtap: entered promiscuous mode [ 2014.319685][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2014.327671][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2014.362870][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2014.375570][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2014.466509][T19298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2014.529959][T19298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2014.564226][T19298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2014.577003][T19298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2014.587060][T19298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2014.587122][ T5276] usb 3-1: Using ep0 maxpacket: 8 [ 2014.601112][T19298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2014.605607][ T5276] usb 3-1: New USB device found, idVendor=045e, idProduct=0437, bcdDevice= 5.ab [ 2014.624519][ T5276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2014.635771][ T5276] usb 3-1: config 0 descriptor?? [ 2014.672987][T19298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2014.726810][T19298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2014.748493][T19298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2014.760412][T19298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2014.771575][T19298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2014.782394][T19298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2014.793435][T19298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2014.805817][T19298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2014.895806][T19298] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2014.927352][T19298] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2014.997157][T19298] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2015.014567][T19298] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2015.757703][ T5379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2015.770612][T19476] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2015.777426][ T5379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2015.835289][T19476] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2015.879621][T19476] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2016.024039][T19476] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2016.063029][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2016.117022][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2016.356684][T19476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2017.125602][T19476] 8021q: adding VLAN 0 to HW filter on device team0 [ 2017.140006][ T5381] bridge0: port 1(bridge_slave_0) entered blocking state [ 2017.147174][ T5381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2017.241276][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 2017.248499][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2017.266076][T13289] usb 3-1: USB disconnect, device number 10 [ 2019.032436][ T29] audit: type=1400 audit(1729540218.772:1005): avc: denied { create } for pid=19650 comm="syz.1.2154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2019.769341][ T29] audit: type=1400 audit(1729540219.462:1006): avc: denied { connect } for pid=19659 comm="syz.1.2155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2019.905988][T19476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2020.056600][T19476] veth0_vlan: entered promiscuous mode [ 2020.110699][T19476] veth1_vlan: entered promiscuous mode [ 2020.182881][T19476] veth0_macvtap: entered promiscuous mode [ 2020.215813][T19476] veth1_macvtap: entered promiscuous mode [ 2020.254730][T19476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2020.275713][T19476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2020.289380][ T1176] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 2020.296246][T19476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2020.328446][T19476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2020.339930][ T5329] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 2020.358543][T19476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2020.399388][T19476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2020.420060][T19476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2020.449501][ T1176] usb 3-1: Using ep0 maxpacket: 8 [ 2020.457517][T19476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2020.481287][ T1176] usb 3-1: New USB device found, idVendor=045e, idProduct=0437, bcdDevice= 5.ab [ 2020.499671][ T5329] usb 2-1: Using ep0 maxpacket: 8 [ 2020.500893][T19476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2020.516193][ T5329] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 37, changing to 9 [ 2020.519345][ T1176] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2020.543405][ T5329] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 8194, setting to 1024 [ 2020.562408][T19476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2020.575493][ T5329] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 2020.595868][ T1176] usb 3-1: config 0 descriptor?? [ 2020.601245][T19476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2020.612173][ T5329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2020.639414][T19476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2020.679263][T19476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2020.689146][T19476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2020.749380][T19476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2020.789297][T19476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2020.811817][T19476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2020.828984][T19476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2020.868696][T19476] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2020.886054][T19476] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2020.907906][ T29] audit: type=1400 audit(1729540220.652:1007): avc: denied { setopt } for pid=19665 comm="syz.1.2157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 2020.925285][T19666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2020.950149][T19476] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2020.966549][T19476] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2020.983650][T19666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2020.993035][ T29] audit: type=1400 audit(1729540220.662:1008): avc: denied { write } for pid=19665 comm="syz.1.2157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2021.069686][ T29] audit: type=1400 audit(1729540220.662:1009): avc: denied { write } for pid=19665 comm="syz.1.2157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2022.173829][ T5329] usb 2-1: string descriptor 0 read error: -71 [ 2022.237508][ T5329] hub 2-1:32.0: USB hub found [ 2022.264224][ T5329] hub 2-1:32.0: config failed, can't read hub descriptor (err -22) [ 2022.288937][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2022.301227][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2022.325687][ T29] audit: type=1400 audit(1729540222.072:1010): avc: denied { mount } for pid=19686 comm="syz.4.2159" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 2022.397331][ T29] audit: type=1400 audit(1729540222.152:1011): avc: denied { unmount } for pid=19169 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 2022.417309][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2022.417340][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2022.588041][ T5329] usb 2-1: USB disconnect, device number 2 [ 2023.713213][ T5329] usb 3-1: USB disconnect, device number 11 [ 2023.764136][ T29] audit: type=1400 audit(1729540223.522:1012): avc: denied { ioctl } for pid=19692 comm="syz.4.2160" path="/dev/video7" dev="devtmpfs" ino=866 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 2024.086674][T19701] FAULT_INJECTION: forcing a failure. [ 2024.086674][T19701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2024.180321][T19701] CPU: 0 UID: 0 PID: 19701 Comm: syz.3.2162 Not tainted 6.12.0-rc4-syzkaller #0 [ 2024.189452][T19701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2024.199560][T19701] Call Trace: [ 2024.202916][T19701] [ 2024.205907][T19701] dump_stack_lvl+0x16c/0x1f0 [ 2024.210670][T19701] should_fail_ex+0x497/0x5b0 [ 2024.215429][T19701] _copy_to_user+0x30/0xc0 [ 2024.219915][T19701] simple_read_from_buffer+0xd0/0x160 [ 2024.225353][T19701] proc_fail_nth_read+0x198/0x270 [ 2024.230431][T19701] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2024.236022][T19701] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2024.241601][T19701] vfs_read+0x1ce/0xbd0 [ 2024.245811][T19701] ? __fget_files+0x23a/0x3f0 [ 2024.250537][T19701] ? fdget_pos+0x24c/0x360 [ 2024.254992][T19701] ? __pfx_lock_release+0x10/0x10 [ 2024.260064][T19701] ? trace_lock_acquire+0x14a/0x1d0 [ 2024.265301][T19701] ? __pfx_vfs_read+0x10/0x10 [ 2024.270023][T19701] ? __pfx___mutex_lock+0x10/0x10 [ 2024.275101][T19701] ? __fget_files+0x244/0x3f0 [ 2024.279836][T19701] ksys_read+0x12f/0x260 [ 2024.284131][T19701] ? __pfx_ksys_read+0x10/0x10 [ 2024.288952][T19701] do_syscall_64+0xcd/0x250 [ 2024.293498][T19701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2024.299430][T19701] RIP: 0033:0x7f2fe297ca3c [ 2024.303894][T19701] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 2024.323531][T19701] RSP: 002b:00007f2fe3860030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2024.331980][T19701] RAX: ffffffffffffffda RBX: 00007f2fe2b35f80 RCX: 00007f2fe297ca3c [ 2024.339988][T19701] RDX: 000000000000000f RSI: 00007f2fe38600a0 RDI: 0000000000000003 [ 2024.347995][T19701] RBP: 00007f2fe3860090 R08: 0000000000000000 R09: 0000000000000000 [ 2024.355995][T19701] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 2024.363992][T19701] R13: 0000000000000000 R14: 00007f2fe2b35f80 R15: 00007ffc8f8d3598 [ 2024.372007][T19701] [ 2024.549457][ T1176] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 2024.634278][T19720] FAULT_INJECTION: forcing a failure. [ 2024.634278][T19720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2024.669787][ T5299] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 2024.679350][ T1176] usb 3-1: device descriptor read/64, error -71 [ 2024.717789][T19720] CPU: 1 UID: 0 PID: 19720 Comm: syz.3.2166 Not tainted 6.12.0-rc4-syzkaller #0 [ 2024.726909][T19720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2024.737019][T19720] Call Trace: [ 2024.740351][T19720] [ 2024.743329][T19720] dump_stack_lvl+0x16c/0x1f0 [ 2024.748089][T19720] should_fail_ex+0x497/0x5b0 [ 2024.752820][T19720] _copy_from_user+0x30/0xf0 [ 2024.757453][T19720] do_sock_getsockopt+0x5f6/0x800 [ 2024.762521][T19720] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 2024.768122][T19720] ? __fget_files+0x244/0x3f0 [ 2024.772874][T19720] __sys_getsockopt+0x1a1/0x270 [ 2024.777757][T19720] ? __pfx___sys_getsockopt+0x10/0x10 [ 2024.783163][T19720] ? fput+0x30/0x390 [ 2024.787111][T19720] ? ksys_write+0x1ad/0x260 [ 2024.791679][T19720] ? __pfx_ksys_write+0x10/0x10 [ 2024.796583][T19720] __x64_sys_getsockopt+0xbd/0x160 [ 2024.801739][T19720] ? do_syscall_64+0x91/0x250 [ 2024.806458][T19720] ? lockdep_hardirqs_on+0x7c/0x110 [ 2024.811698][T19720] do_syscall_64+0xcd/0x250 [ 2024.816248][T19720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2024.822178][T19720] RIP: 0033:0x7f2fe297dff9 [ 2024.826618][T19720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2024.846266][T19720] RSP: 002b:00007f2fe3860038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 2024.854726][T19720] RAX: ffffffffffffffda RBX: 00007f2fe2b35f80 RCX: 00007f2fe297dff9 [ 2024.862730][T19720] RDX: 0000000000000018 RSI: 0000000000000084 RDI: 0000000000000003 [ 2024.870736][T19720] RBP: 00007f2fe3860090 R08: 0000000020002380 R09: 0000000000000000 [ 2024.878745][T19720] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 2024.886748][T19720] R13: 0000000000000000 R14: 00007f2fe2b35f80 R15: 00007ffc8f8d3598 [ 2024.894773][T19720] [ 2024.933592][ T5299] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2024.991929][ T5299] usb 5-1: not running at top speed; connect to a high speed hub [ 2025.001283][ T5299] usb 5-1: config 201 has an invalid interface number: 86 but max is 1 [ 2025.009843][ T5299] usb 5-1: config 201 has an invalid interface number: 143 but max is 1 [ 2025.018307][ T5299] usb 5-1: config 201 has no interface number 0 [ 2025.045650][ T5299] usb 5-1: config 201 has no interface number 1 [ 2025.053832][ T5299] usb 5-1: config 201 interface 143 has no altsetting 0 [ 2025.061003][ T1176] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 2025.079493][ T5299] usb 5-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=30.25 [ 2025.088612][ T5299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2025.118350][ T5299] usb 5-1: Product: syz [ 2025.128462][ T5299] usb 5-1: Manufacturer: syz [ 2025.138613][ T5299] usb 5-1: SerialNumber: syz [ 2025.204355][ T29] audit: type=1400 audit(1729540224.952:1013): avc: denied { mounton } for pid=19727 comm="syz.0.2168" path="/proc/1172/task" dev="proc" ino=96346 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 2025.228624][ T1176] usb 3-1: device descriptor read/64, error -71 [ 2025.377704][T19734] capability: warning: `syz.0.2168' uses deprecated v2 capabilities in a way that may be insecure [ 2025.439266][ T1176] usb usb3-port1: attempt power cycle [ 2025.482823][ T29] audit: type=1400 audit(1729540225.122:1014): avc: denied { create } for pid=19727 comm="syz.0.2168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2025.869686][T17385] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 2026.113515][ T29] audit: type=1400 audit(1729540225.122:1015): avc: denied { write } for pid=19727 comm="syz.0.2168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2026.149483][ T1176] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 2026.195638][ T1176] usb 3-1: device descriptor read/8, error -71 [ 2026.422672][T17385] usb 1-1: Using ep0 maxpacket: 16 [ 2026.806040][ T5299] kaweth 5-1:201.86: Firmware present in device. [ 2026.820168][ T1176] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 2026.833679][T17385] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 2026.852024][ T5299] kaweth 5-1:201.86: Error reading configuration (-71), no net device created [ 2026.867881][T17385] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2026.882181][ T1176] usb 3-1: device descriptor read/8, error -71 [ 2026.889120][ T5299] kaweth 5-1:201.86: probe with driver kaweth failed with error -5 [ 2026.927365][T17385] usb 1-1: config 0 descriptor?? [ 2026.952255][T17385] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 2026.977164][ T5299] kaweth 5-1:201.143: Firmware present in device. [ 2026.999056][ T5299] kaweth 5-1:201.143: Error reading configuration (-71), no net device created [ 2027.025614][ T1176] usb usb3-port1: unable to enumerate USB device [ 2027.034450][ T5299] kaweth 5-1:201.143: probe with driver kaweth failed with error -5 [ 2027.074888][ T5299] usb 5-1: USB disconnect, device number 4 [ 2027.108552][T19745] FAULT_INJECTION: forcing a failure. [ 2027.108552][T19745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2027.159609][T19745] CPU: 1 UID: 0 PID: 19745 Comm: syz.3.2170 Not tainted 6.12.0-rc4-syzkaller #0 [ 2027.168735][T19745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2027.178850][T19745] Call Trace: [ 2027.182172][T19745] [ 2027.185145][T19745] dump_stack_lvl+0x16c/0x1f0 [ 2027.189901][T19745] should_fail_ex+0x497/0x5b0 [ 2027.194645][T19745] _copy_to_user+0x30/0xc0 [ 2027.199137][T19745] simple_read_from_buffer+0xd0/0x160 [ 2027.204580][T19745] proc_fail_nth_read+0x198/0x270 [ 2027.209678][T19745] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2027.215299][T19745] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2027.220910][T19745] vfs_read+0x1ce/0xbd0 [ 2027.225150][T19745] ? __fget_files+0x23a/0x3f0 [ 2027.229903][T19745] ? fdget_pos+0x24c/0x360 [ 2027.234400][T19745] ? __pfx_lock_release+0x10/0x10 [ 2027.239484][T19745] ? trace_lock_acquire+0x14a/0x1d0 [ 2027.244756][T19745] ? __pfx_vfs_read+0x10/0x10 [ 2027.249503][T19745] ? __pfx___mutex_lock+0x10/0x10 [ 2027.254620][T19745] ? __fget_files+0x244/0x3f0 [ 2027.259386][T19745] ksys_read+0x12f/0x260 [ 2027.263708][T19745] ? __pfx_ksys_read+0x10/0x10 [ 2027.268559][T19745] do_syscall_64+0xcd/0x250 [ 2027.273146][T19745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2027.279111][T19745] RIP: 0033:0x7f2fe297ca3c [ 2027.283583][T19745] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 2027.303254][T19745] RSP: 002b:00007f2fe383f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2027.311734][T19745] RAX: ffffffffffffffda RBX: 00007f2fe2b36058 RCX: 00007f2fe297ca3c [ 2027.319761][T19745] RDX: 000000000000000f RSI: 00007f2fe383f0a0 RDI: 0000000000000005 [ 2027.327784][T19745] RBP: 00007f2fe383f090 R08: 0000000000000000 R09: 0000000000000000 [ 2027.335817][T19745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2027.343851][T19745] R13: 0000000000000001 R14: 00007f2fe2b36058 R15: 00007ffc8f8d3598 [ 2027.351907][T19745] [ 2027.867575][ T5299] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 2027.881740][T13201] Bluetooth: hci1: Malformed LE Event: 0x0b [ 2028.039412][ T5299] usb 3-1: Using ep0 maxpacket: 8 [ 2028.070264][ T5299] usb 3-1: New USB device found, idVendor=045e, idProduct=0437, bcdDevice= 5.ab [ 2028.115053][ T5299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2028.202701][ T5299] usb 3-1: config 0 descriptor?? [ 2028.222491][T17385] usb 1-1: Detected FT232A [ 2028.277465][T17385] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2028.325571][T17385] usb 1-1: USB disconnect, device number 3 [ 2028.395124][T17385] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2028.438614][T17385] ftdi_sio 1-1:0.0: device disconnected [ 2028.506632][T19769] process 'syz.0.2176' launched './file0' with NULL argv: empty string added [ 2028.543377][ T5276] usb 3-1: USB disconnect, device number 16 [ 2028.591138][ T29] audit: type=1400 audit(1729540228.342:1016): avc: denied { execute_no_trans } for pid=19766 comm="syz.0.2176" path="/278/file0" dev="tmpfs" ino=1481 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2028.845512][ T29] audit: type=1400 audit(1729540228.602:1017): avc: denied { bind } for pid=19774 comm="syz.4.2177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2028.925269][ T29] audit: type=1400 audit(1729540228.662:1018): avc: denied { listen } for pid=19774 comm="syz.4.2177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2031.648951][ T29] audit: type=1400 audit(1729540231.402:1019): avc: denied { create } for pid=19797 comm="syz.0.2182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2031.730633][ T29] audit: type=1400 audit(1729540231.432:1020): avc: denied { setopt } for pid=19797 comm="syz.0.2182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2031.829448][T17385] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 2032.029540][T17385] usb 5-1: Using ep0 maxpacket: 8 [ 2032.050184][T17385] usb 5-1: config 0 has an invalid interface number: 125 but max is 2 [ 2032.071103][T17385] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2032.107007][T17385] usb 5-1: config 0 has no interface number 0 [ 2032.119275][T17385] usb 5-1: config 0 interface 125 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2032.163249][T17385] usb 5-1: config 0 interface 125 has no altsetting 0 [ 2032.201701][T17385] usb 5-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=8a.dd [ 2032.239442][T17385] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2032.268610][T17385] usb 5-1: Product: syz [ 2032.284435][T17385] usb 5-1: Manufacturer: syz [ 2032.294576][T17385] usb 5-1: SerialNumber: syz [ 2032.326117][T17385] usb 5-1: config 0 descriptor?? [ 2033.109773][T19796] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2181'. [ 2033.119521][T19796] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2033.587192][T17385] hub 5-1:0.125: bad descriptor, ignoring hub [ 2033.629379][T17385] hub 5-1:0.125: probe with driver hub failed with error -5 [ 2034.198157][T17385] usb 5-1: Found UVC 15.ff device syz (17dc:0202) [ 2034.204773][T17385] usb 5-1: No valid video chain found. [ 2034.260427][T17385] usb 5-1: USB disconnect, device number 5 [ 2035.198268][T19828] FAULT_INJECTION: forcing a failure. [ 2035.198268][T19828] name failslab, interval 1, probability 0, space 0, times 1 [ 2035.247808][T19828] CPU: 0 UID: 0 PID: 19828 Comm: syz.4.2185 Not tainted 6.12.0-rc4-syzkaller #0 [ 2035.256946][T19828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2035.267045][T19828] Call Trace: [ 2035.270361][T19828] [ 2035.273329][T19828] dump_stack_lvl+0x16c/0x1f0 [ 2035.278104][T19828] should_fail_ex+0x497/0x5b0 [ 2035.282833][T19828] ? fs_reclaim_acquire+0xae/0x150 [ 2035.288010][T19828] should_failslab+0xc2/0x120 [ 2035.292752][T19828] __kmalloc_noprof+0xcb/0x400 [ 2035.297579][T19828] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2035.303276][T19828] tomoyo_realpath_from_path+0xb9/0x720 [ 2035.308880][T19828] ? tomoyo_path_number_perm+0x232/0x590 [ 2035.314590][T19828] tomoyo_path_number_perm+0x245/0x590 [ 2035.320119][T19828] ? tomoyo_path_number_perm+0x232/0x590 [ 2035.325827][T19828] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2035.331953][T19828] ? trace_lock_acquire+0x14a/0x1d0 [ 2035.337224][T19828] ? lock_acquire+0x2f/0xb0 [ 2035.341781][T19828] ? __fget_files+0x40/0x3f0 [ 2035.346440][T19828] ? __fget_files+0x244/0x3f0 [ 2035.351217][T19828] security_file_ioctl+0x9b/0x240 [ 2035.356306][T19828] __x64_sys_ioctl+0xbb/0x220 [ 2035.361058][T19828] do_syscall_64+0xcd/0x250 [ 2035.365636][T19828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2035.371616][T19828] RIP: 0033:0x7fc46637dff9 [ 2035.376077][T19828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2035.395742][T19828] RSP: 002b:00007fc465dff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2035.404217][T19828] RAX: ffffffffffffffda RBX: 00007fc466535f80 RCX: 00007fc46637dff9 [ 2035.412235][T19828] RDX: 0000000000000000 RSI: 0000000080047455 RDI: 0000000000000004 [ 2035.420254][T19828] RBP: 00007fc465dff090 R08: 0000000000000000 R09: 0000000000000000 [ 2035.428268][T19828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2035.436304][T19828] R13: 0000000000000000 R14: 00007fc466535f80 R15: 00007ffd62dd0a38 [ 2035.444343][T19828] [ 2038.809004][T19828] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2039.681401][T17078] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2039.710904][T17078] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2039.721225][T17078] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2039.729746][T17078] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2039.737438][T17078] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2039.744952][T17078] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2039.754036][T17078] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2039.766328][T17078] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2039.776244][T13201] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2040.022563][T13201] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2040.114253][T19851] FAULT_INJECTION: forcing a failure. [ 2040.114253][T19851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2040.130520][T19851] CPU: 0 UID: 0 PID: 19851 Comm: syz.0.2189 Not tainted 6.12.0-rc4-syzkaller #0 [ 2040.139610][T19851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2040.149723][T19851] Call Trace: [ 2040.153057][T19851] [ 2040.156030][T19851] dump_stack_lvl+0x16c/0x1f0 [ 2040.159287][T13201] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2040.160762][T19851] should_fail_ex+0x497/0x5b0 [ 2040.168196][T13201] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2040.172369][T19851] _copy_from_user+0x30/0xf0 [ 2040.172416][T19851] do_sock_getsockopt+0x5f6/0x800 [ 2040.189070][T19851] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 2040.194685][T19851] ? __fget_files+0x244/0x3f0 [ 2040.199452][T19851] __sys_getsockopt+0x1a1/0x270 [ 2040.204383][T19851] ? __pfx___sys_getsockopt+0x10/0x10 [ 2040.209809][T19851] ? fput+0x30/0x390 [ 2040.213782][T19851] ? ksys_write+0x1ad/0x260 [ 2040.218390][T19851] ? __pfx_ksys_write+0x10/0x10 [ 2040.223316][T19851] __x64_sys_getsockopt+0xbd/0x160 [ 2040.228486][T19851] ? do_syscall_64+0x91/0x250 [ 2040.233235][T19851] ? lockdep_hardirqs_on+0x7c/0x110 [ 2040.238514][T19851] do_syscall_64+0xcd/0x250 [ 2040.243091][T19851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2040.249047][T19851] RIP: 0033:0x7fd79e37dff9 [ 2040.253508][T19851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2040.273171][T19851] RSP: 002b:00007fd79f166038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 2040.281648][T19851] RAX: ffffffffffffffda RBX: 00007fd79e535f80 RCX: 00007fd79e37dff9 [ 2040.289666][T19851] RDX: 0000000000000025 RSI: 0000000000000084 RDI: 0000000000000005 [ 2040.297688][T19851] RBP: 00007fd79f166090 R08: 0000000020000000 R09: 0000000000000000 [ 2040.305724][T19851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2040.313745][T19851] R13: 0000000000000000 R14: 00007fd79e535f80 R15: 00007ffd63096558 [ 2040.321779][T19851] [ 2040.555449][T19836] chnl_net:caif_netlink_parms(): no params data found [ 2041.037569][T19862] FAULT_INJECTION: forcing a failure. [ 2041.037569][T19862] name failslab, interval 1, probability 0, space 0, times 0 [ 2041.051782][T19862] CPU: 0 UID: 0 PID: 19862 Comm: syz.1.2191 Not tainted 6.12.0-rc4-syzkaller #0 [ 2041.060844][T19862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2041.070912][T19862] Call Trace: [ 2041.074200][T19862] [ 2041.077144][T19862] dump_stack_lvl+0x16c/0x1f0 [ 2041.081853][T19862] should_fail_ex+0x497/0x5b0 [ 2041.086544][T19862] ? fs_reclaim_acquire+0xae/0x150 [ 2041.091675][T19862] should_failslab+0xc2/0x120 [ 2041.096373][T19862] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 2041.101768][T19862] ? getname_flags.part.0+0x4c/0x550 [ 2041.107076][T19862] ? vfs_write+0x14d/0x1140 [ 2041.111611][T19862] getname_flags.part.0+0x4c/0x550 [ 2041.116750][T19862] getname+0x8d/0xe0 [ 2041.120671][T19862] do_sys_openat2+0x104/0x1e0 [ 2041.125375][T19862] ? __pfx_do_sys_openat2+0x10/0x10 [ 2041.130623][T19862] ? __fget_files+0x244/0x3f0 [ 2041.135336][T19862] __x64_sys_openat+0x175/0x210 [ 2041.140211][T19862] ? __pfx___x64_sys_openat+0x10/0x10 [ 2041.145615][T19862] do_syscall_64+0xcd/0x250 [ 2041.150150][T19862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2041.156081][T19862] RIP: 0033:0x7fdb6d37dff9 [ 2041.160529][T19862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2041.180152][T19862] RSP: 002b:00007fdb6e1c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2041.188582][T19862] RAX: ffffffffffffffda RBX: 00007fdb6d535f80 RCX: 00007fdb6d37dff9 [ 2041.196564][T19862] RDX: 000000000000275a RSI: 0000000020000000 RDI: ffffffffffffff9c [ 2041.204546][T19862] RBP: 00007fdb6e1c2090 R08: 0000000000000000 R09: 0000000000000000 [ 2041.212527][T19862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2041.220519][T19862] R13: 0000000000000000 R14: 00007fdb6d535f80 R15: 00007fffca682dd8 [ 2041.228520][T19862] [ 2041.299369][T17385] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 2041.363543][ T1911] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2041.462864][T17385] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2041.480719][T17385] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2041.495194][T17385] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 2041.505576][T17385] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2041.528811][T17385] usb 1-1: config 0 descriptor?? [ 2041.552693][T17385] usbhid 1-1:0.0: can't add hid device: -22 [ 2041.558764][T17385] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 2041.589347][ T1176] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 2041.598669][ T1911] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2041.637946][T19836] bridge0: port 1(bridge_slave_0) entered blocking state [ 2041.645717][T19836] bridge0: port 1(bridge_slave_0) entered disabled state [ 2041.654000][T19836] bridge_slave_0: entered allmulticast mode [ 2041.664066][T19836] bridge_slave_0: entered promiscuous mode [ 2041.697302][ T1911] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2041.713609][T19836] bridge0: port 2(bridge_slave_1) entered blocking state [ 2041.721283][T19836] bridge0: port 2(bridge_slave_1) entered disabled state [ 2041.779360][ T1176] usb 2-1: Using ep0 maxpacket: 32 [ 2041.788792][ T1176] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 2041.798780][ T1176] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 2041.813820][ T1176] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=6d.22 [ 2041.823330][ T1176] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2041.832604][ T1176] usb 2-1: Product: syz [ 2041.839619][T19836] bridge_slave_1: entered allmulticast mode [ 2041.847335][ T1176] usb 2-1: Manufacturer: syz [ 2041.858346][ T1176] usb 2-1: SerialNumber: syz [ 2041.864711][T19836] bridge_slave_1: entered promiscuous mode [ 2041.884800][ T1176] usb 2-1: config 0 descriptor?? [ 2041.909556][ T1176] usbserial_generic 2-1:0.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 2041.923584][ T1176] usbserial_generic 2-1:0.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 2041.951690][T13204] Bluetooth: hci5: command tx timeout [ 2041.978645][ T1176] usbserial_generic 2-1:0.0: generic converter detected [ 2042.002010][ T1911] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2042.019827][ T1176] usb 2-1: generic converter now attached to ttyUSB0 [ 2042.118768][ T1176] usb 2-1: USB disconnect, device number 3 [ 2042.147009][T19838] chnl_net:caif_netlink_parms(): no params data found [ 2042.216085][ T1176] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 2042.860813][ T1176] usbserial_generic 2-1:0.0: device disconnected [ 2042.938733][ T29] audit: type=1400 audit(1729540242.132:1021): avc: denied { create } for pid=19858 comm="syz.0.2190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2042.968287][T13204] Bluetooth: hci6: command tx timeout [ 2042.968287][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2042.974021][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2042.988645][ T29] audit: type=1400 audit(1729540242.152:1022): avc: denied { setopt } for pid=19858 comm="syz.0.2190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2043.164371][T19836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2043.279800][T19836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2043.544044][T19836] team0: Port device team_slave_0 added [ 2043.687358][T19836] team0: Port device team_slave_1 added [ 2043.738353][T19838] bridge0: port 1(bridge_slave_0) entered blocking state [ 2043.753767][T19838] bridge0: port 1(bridge_slave_0) entered disabled state [ 2043.777261][T19838] bridge_slave_0: entered allmulticast mode [ 2043.785103][T19838] bridge_slave_0: entered promiscuous mode [ 2043.820904][T19836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2043.837649][T19836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2043.899423][T19836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2043.941627][T19838] bridge0: port 2(bridge_slave_1) entered blocking state [ 2043.962002][ T29] audit: type=1400 audit(1729540243.722:1023): avc: denied { unlink } for pid=19876 comm="syz.1.2193" name="#1" dev="tmpfs" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2043.991870][T19838] bridge0: port 2(bridge_slave_1) entered disabled state [ 2044.006948][T19838] bridge_slave_1: entered allmulticast mode [ 2044.015443][T13204] Bluetooth: hci5: command tx timeout [ 2044.025814][T19838] bridge_slave_1: entered promiscuous mode [ 2044.037057][ T5329] usb 1-1: USB disconnect, device number 4 [ 2044.048838][ T29] audit: type=1400 audit(1729540243.802:1024): avc: denied { mount } for pid=19876 comm="syz.1.2193" name="/" dev="overlay" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2044.118410][T19880] netlink: 284 bytes leftover after parsing attributes in process `syz.1.2193'. [ 2044.159028][T19836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2044.173718][T19836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2044.201336][T19836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2044.248432][T19838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2044.297133][T19838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2045.060250][T13204] Bluetooth: hci6: command tx timeout [ 2045.406280][ T1911] bridge_slave_1: left allmulticast mode [ 2045.429321][ T1911] bridge_slave_1: left promiscuous mode [ 2045.435255][ T1911] bridge0: port 2(bridge_slave_1) entered disabled state [ 2045.467089][ T1911] bridge_slave_0: left allmulticast mode [ 2045.495045][ T1911] bridge_slave_0: left promiscuous mode [ 2045.508263][ T1911] bridge0: port 1(bridge_slave_0) entered disabled state [ 2046.060639][T13204] Bluetooth: hci5: command tx timeout [ 2046.349947][T19895] FAULT_INJECTION: forcing a failure. [ 2046.349947][T19895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2046.398858][T19895] CPU: 0 UID: 0 PID: 19895 Comm: syz.1.2197 Not tainted 6.12.0-rc4-syzkaller #0 [ 2046.407987][T19895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2046.419520][T19895] Call Trace: [ 2046.419551][T19895] [ 2046.419565][T19895] dump_stack_lvl+0x16c/0x1f0 [ 2046.430624][T19895] should_fail_ex+0x497/0x5b0 [ 2046.435378][T19895] _copy_to_user+0x30/0xc0 [ 2046.435426][T19895] simple_read_from_buffer+0xd0/0x160 [ 2046.445253][T19895] proc_fail_nth_read+0x198/0x270 [ 2046.450345][T19895] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2046.455962][T19895] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2046.461566][T19895] vfs_read+0x1ce/0xbd0 [ 2046.465797][T19895] ? __fget_files+0x23a/0x3f0 [ 2046.470586][T19895] ? fdget_pos+0x24c/0x360 [ 2046.475074][T19895] ? __pfx_lock_release+0x10/0x10 [ 2046.480155][T19895] ? trace_lock_acquire+0x14a/0x1d0 [ 2046.485422][T19895] ? __pfx_vfs_read+0x10/0x10 [ 2046.490174][T19895] ? __pfx___mutex_lock+0x10/0x10 [ 2046.495284][T19895] ? __fget_files+0x244/0x3f0 [ 2046.500049][T19895] ksys_read+0x12f/0x260 [ 2046.504360][T19895] ? __pfx_ksys_read+0x10/0x10 [ 2046.509183][T19895] do_syscall_64+0xcd/0x250 [ 2046.513740][T19895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2046.519676][T19895] RIP: 0033:0x7fdb6d37ca3c [ 2046.524135][T19895] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 2046.543774][T19895] RSP: 002b:00007fdb6e1c2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2046.552243][T19895] RAX: ffffffffffffffda RBX: 00007fdb6d535f80 RCX: 00007fdb6d37ca3c [ 2046.560240][T19895] RDX: 000000000000000f RSI: 00007fdb6e1c20a0 RDI: 0000000000000003 [ 2046.568238][T19895] RBP: 00007fdb6e1c2090 R08: 0000000000000000 R09: 0000000000000000 [ 2046.576235][T19895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2046.584231][T19895] R13: 0000000000000000 R14: 00007fdb6d535f80 R15: 00007fffca682dd8 [ 2046.592248][T19895] [ 2046.951602][ T29] audit: type=1400 audit(1729540246.622:1025): avc: denied { read write } for pid=19900 comm="syz.1.2200" name="uhid" dev="devtmpfs" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2047.210400][T13204] Bluetooth: hci6: command tx timeout [ 2047.247444][T17385] IPVS: starting estimator thread 0... [ 2047.299573][ T1176] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2047.313168][ T1176] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2047.329147][ T1176] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2047.334868][ T29] audit: type=1400 audit(1729540246.622:1026): avc: denied { open } for pid=19900 comm="syz.1.2200" path="/dev/uhid" dev="devtmpfs" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2047.362342][ T1176] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2047.363601][T19904] IPVS: using max 17 ests per chain, 40800 per kthread [ 2047.377426][ T1176] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2047.463267][ T1176] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2047.490284][ T1176] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2047.509484][ T1176] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2047.509753][ T29] audit: type=1400 audit(1729540246.642:1027): avc: denied { create } for pid=19900 comm="syz.1.2200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2047.517057][ T1176] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2047.589114][ T29] audit: type=1400 audit(1729540246.642:1028): avc: denied { setopt } for pid=19900 comm="syz.1.2200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2047.666004][ T1176] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2047.677389][ T1176] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2047.685770][ T1176] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2047.694660][ T1176] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2047.702258][ T1176] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2047.709786][ T1176] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2047.719439][ T1176] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2047.726895][ T1176] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2047.734495][ T1176] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2047.742009][ T1176] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2047.749518][ T1176] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2047.759247][ T1176] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2047.769395][ T1176] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2047.776964][ T1176] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2047.785179][ T1176] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2047.793400][ T1176] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2047.800942][ T1176] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2047.808537][ T1176] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2047.816158][ T1176] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2047.823664][ T1176] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2047.831295][ T1176] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2047.839371][ T1176] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2047.848029][ T1176] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2047.863789][ T1176] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2048.105705][ T1911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2048.129557][T13204] Bluetooth: hci5: command tx timeout [ 2048.146285][ T1911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2048.196468][ T1911] bond0 (unregistering): Released all slaves [ 2048.335347][T19836] hsr_slave_0: entered promiscuous mode [ 2048.359006][T19836] hsr_slave_1: entered promiscuous mode [ 2048.385888][T19836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2048.406807][T19836] Cannot create hsr debugfs directory [ 2048.469055][T19838] team0: Port device team_slave_0 added [ 2049.250057][T13204] Bluetooth: hci6: command tx timeout [ 2049.286458][T19838] team0: Port device team_slave_1 added [ 2050.263301][T19838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2050.292489][T19838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2050.327621][T19838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2050.363794][T19838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2050.395233][T19838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2050.427752][T19838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2050.484149][ T1911] hsr_slave_0: left promiscuous mode [ 2050.493343][ T1911] hsr_slave_1: left promiscuous mode [ 2050.507485][ T1911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2050.522358][ T1911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2050.534796][ T1911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2050.565788][ T1911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2050.615992][ T1911] veth1_macvtap: left promiscuous mode [ 2050.629838][ T1911] veth0_macvtap: left promiscuous mode [ 2050.645554][ T1911] veth1_vlan: left promiscuous mode [ 2050.690104][ T1911] veth0_vlan: left promiscuous mode [ 2050.876482][T19936] FAULT_INJECTION: forcing a failure. [ 2050.876482][T19936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2050.899277][T19936] CPU: 1 UID: 0 PID: 19936 Comm: syz.1.2205 Not tainted 6.12.0-rc4-syzkaller #0 [ 2050.908388][T19936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2050.918490][T19936] Call Trace: [ 2050.921805][T19936] [ 2050.924778][T19936] dump_stack_lvl+0x16c/0x1f0 [ 2050.929493][T19936] should_fail_ex+0x497/0x5b0 [ 2050.934205][T19936] _copy_from_user+0x30/0xf0 [ 2050.938815][T19936] rose_setsockopt+0x334/0x500 [ 2050.943608][T19936] ? __pfx_rose_setsockopt+0x10/0x10 [ 2050.948963][T19936] ? selinux_socket_setsockopt+0x6a/0x80 [ 2050.954639][T19936] ? __pfx_rose_setsockopt+0x10/0x10 [ 2050.959970][T19936] do_sock_setsockopt+0x222/0x480 [ 2050.965042][T19936] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 2050.970636][T19936] ? fdget+0x176/0x210 [ 2050.974749][T19936] __sys_setsockopt+0x1a4/0x270 [ 2050.979644][T19936] ? __pfx___sys_setsockopt+0x10/0x10 [ 2050.985066][T19936] ? fput+0x30/0x390 [ 2050.988997][T19936] ? ksys_write+0x1ad/0x260 [ 2050.993542][T19936] ? __pfx_ksys_write+0x10/0x10 [ 2050.998438][T19936] __x64_sys_setsockopt+0xbd/0x160 [ 2051.003592][T19936] ? do_syscall_64+0x91/0x250 [ 2051.008308][T19936] ? lockdep_hardirqs_on+0x7c/0x110 [ 2051.013547][T19936] do_syscall_64+0xcd/0x250 [ 2051.018098][T19936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2051.024031][T19936] RIP: 0033:0x7fdb6d37dff9 [ 2051.028471][T19936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2051.048107][T19936] RSP: 002b:00007fdb6e1c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2051.056549][T19936] RAX: ffffffffffffffda RBX: 00007fdb6d535f80 RCX: 00007fdb6d37dff9 [ 2051.064549][T19936] RDX: 0000000000000005 RSI: 0000000000000104 RDI: 0000000000000004 [ 2051.072559][T19936] RBP: 00007fdb6e1c2090 R08: 0000000000000004 R09: 0000000000000000 [ 2051.080570][T19936] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 2051.088582][T19936] R13: 0000000000000000 R14: 00007fdb6d535f80 R15: 00007fffca682dd8 [ 2051.096620][T19936] [ 2051.380830][ T29] audit: type=1400 audit(1729540251.082:1029): avc: denied { create } for pid=19939 comm="syz.0.2207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2052.545603][ T29] audit: type=1400 audit(1729540252.292:1030): avc: denied { read write } for pid=19947 comm="syz.4.2210" name="raw-gadget" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2052.569784][ T29] audit: type=1400 audit(1729540252.292:1031): avc: denied { open } for pid=19947 comm="syz.4.2210" path="/dev/raw-gadget" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2052.575399][ T1911] team0 (unregistering): Port device team_slave_1 removed [ 2052.599302][ T29] audit: type=1400 audit(1729540252.302:1032): avc: denied { ioctl } for pid=19947 comm="syz.4.2210" path="/dev/raw-gadget" dev="devtmpfs" ino=732 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2052.676314][ T1911] team0 (unregistering): Port device team_slave_0 removed [ 2052.868870][ T5299] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 2053.099219][ T5299] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2053.120204][ T5299] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2053.229356][ T5299] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2053.365842][ T5299] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2053.418809][ T5299] usb 5-1: config 1 interface 1 has no altsetting 0 [ 2053.452796][ T5299] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2053.462422][ T5299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2053.477152][ T5299] usb 5-1: Product: syz [ 2053.482248][ T5299] usb 5-1: Manufacturer: syz [ 2053.487529][ T5299] usb 5-1: SerialNumber: syz [ 2053.582716][ T29] audit: type=1400 audit(1729540253.342:1033): avc: denied { create } for pid=19957 comm="syz.1.2212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2053.596395][T19958] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 2053.708125][T19948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2053.727110][T19948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2053.754684][T19948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2053.768571][T19948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2053.824253][ T5299] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 2053.859711][ T5299] usb 5-1: MIDIStreaming interface descriptor not found [ 2053.942685][ T5299] usb 5-1: USB disconnect, device number 6 [ 2054.691135][T19969] udevd[19969]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2054.790395][T19958] 8021q: VLANs not supported on hsr0 [ 2054.820151][T19959] netdevsim netdevsim1: Direct firmware load for /card# failed with error -2 [ 2054.839344][T19959] netdevsim netdevsim1: Falling back to sysfs fallback for: /card# [ 2054.858922][T19838] hsr_slave_0: entered promiscuous mode [ 2054.877900][T19838] hsr_slave_1: entered promiscuous mode [ 2055.100553][T19976] FAULT_INJECTION: forcing a failure. [ 2055.100553][T19976] name fail_futex, interval 1, probability 0, space 0, times 1 [ 2055.113459][T19976] CPU: 0 UID: 0 PID: 19976 Comm: syz.0.2214 Not tainted 6.12.0-rc4-syzkaller #0 [ 2055.122527][T19976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2055.132604][T19976] Call Trace: [ 2055.135909][T19976] [ 2055.138859][T19976] dump_stack_lvl+0x16c/0x1f0 [ 2055.143585][T19976] should_fail_ex+0x497/0x5b0 [ 2055.148295][T19976] get_futex_key+0x482/0x1090 [ 2055.153009][T19976] ? hlock_class+0x4e/0x130 [ 2055.157555][T19976] ? __lock_acquire+0x163e/0x3ce0 [ 2055.162605][T19976] ? __pfx_get_futex_key+0x10/0x10 [ 2055.167760][T19976] futex_wake+0xe8/0x4e0 [ 2055.172055][T19976] ? exit_mm_release+0x19/0x30 [ 2055.176866][T19976] ? __pfx_futex_wake+0x10/0x10 [ 2055.181776][T19976] ? find_held_lock+0x2d/0x110 [ 2055.186583][T19976] do_futex+0x1e5/0x350 [ 2055.190778][T19976] ? __pfx_do_futex+0x10/0x10 [ 2055.195492][T19976] ? __might_fault+0xe3/0x190 [ 2055.200233][T19976] ? __might_fault+0xe3/0x190 [ 2055.204954][T19976] mm_release+0x24e/0x300 [ 2055.209360][T19976] do_exit+0x88b/0x2d70 [ 2055.213563][T19976] ? get_signal+0x8f2/0x2770 [ 2055.218184][T19976] ? __pfx_do_exit+0x10/0x10 [ 2055.222812][T19976] ? do_raw_spin_lock+0x12d/0x2c0 [ 2055.227868][T19976] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2055.233275][T19976] do_group_exit+0xd3/0x2a0 [ 2055.237821][T19976] get_signal+0x25fb/0x2770 [ 2055.242365][T19976] ? __pfx_get_signal+0x10/0x10 [ 2055.247257][T19976] ? __do_sys_waitid+0x170/0x250 [ 2055.252244][T19976] ? __pfx___do_sys_waitid+0x10/0x10 [ 2055.257585][T19976] arch_do_signal_or_restart+0x90/0x7e0 [ 2055.263179][T19976] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2055.269394][T19976] syscall_exit_to_user_mode+0x150/0x2a0 [ 2055.275080][T19976] do_syscall_64+0xda/0x250 [ 2055.279631][T19976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2055.285567][T19976] RIP: 0033:0x7fd79e37dff9 [ 2055.290008][T19976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2055.309655][T19976] RSP: 002b:00007fd79f124038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f7 [ 2055.318126][T19976] RAX: fffffffffffffe00 RBX: 00007fd79e536130 RCX: 00007fd79e37dff9 [ 2055.326119][T19976] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2055.334125][T19976] RBP: 00007fd79f124090 R08: 0000000020000100 R09: 0000000000000000 [ 2055.342205][T19976] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 2055.350196][T19976] R13: 0000000000000000 R14: 00007fd79e536130 R15: 00007ffd63096558 [ 2055.358208][T19976] [ 2055.733626][ T29] audit: type=1400 audit(1729540255.492:1034): avc: denied { create } for pid=19979 comm="syz.0.2215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2056.931160][ T29] audit: type=1400 audit(1729540256.692:1035): avc: denied { ioctl } for pid=19992 comm="syz.0.2219" path="socket:[97862]" dev="sockfs" ino=97862 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2057.279400][ T5329] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 2058.010644][ T1911] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2058.245354][ T5329] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2058.255318][ T5329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2058.303588][ T5329] usb 1-1: Product: syz [ 2058.308007][ T5329] usb 1-1: Manufacturer: syz [ 2058.326096][ T5329] usb 1-1: SerialNumber: syz [ 2058.959097][ T1911] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2059.135492][ T5329] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2059.205398][T13289] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2059.214665][ T5276] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 2059.252142][T20020] FAULT_INJECTION: forcing a failure. [ 2059.252142][T20020] name failslab, interval 1, probability 0, space 0, times 0 [ 2059.312411][T20020] CPU: 1 UID: 0 PID: 20020 Comm: syz.4.2222 Not tainted 6.12.0-rc4-syzkaller #0 [ 2059.321539][T20020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2059.331638][T20020] Call Trace: [ 2059.334941][T20020] [ 2059.337891][T20020] dump_stack_lvl+0x16c/0x1f0 [ 2059.342613][T20020] should_fail_ex+0x497/0x5b0 [ 2059.347316][T20020] ? fs_reclaim_acquire+0xae/0x150 [ 2059.352463][T20020] should_failslab+0xc2/0x120 [ 2059.357178][T20020] kmem_cache_alloc_node_noprof+0x71/0x310 [ 2059.363022][T20020] ? __alloc_skb+0x2b1/0x380 [ 2059.367662][T20020] __alloc_skb+0x2b1/0x380 [ 2059.372126][T20020] ? __pfx___alloc_skb+0x10/0x10 [ 2059.377114][T20020] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2059.383142][T20020] netlink_alloc_large_skb+0x69/0x130 [ 2059.388558][T20020] netlink_sendmsg+0x689/0xd70 [ 2059.393371][T20020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2059.398706][T20020] ? __import_iovec+0x1fd/0x6e0 [ 2059.403604][T20020] ____sys_sendmsg+0xaaf/0xc90 [ 2059.408406][T20020] ? copy_msghdr_from_user+0x10b/0x160 [ 2059.413892][T20020] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2059.419242][T20020] ? __pfx___lock_acquire+0x10/0x10 [ 2059.424471][T20020] ___sys_sendmsg+0x135/0x1e0 [ 2059.429182][T20020] ? __pfx____sys_sendmsg+0x10/0x10 [ 2059.434439][T20020] ? lock_acquire+0x2f/0xb0 [ 2059.438965][T20020] ? __fget_files+0x40/0x3f0 [ 2059.443607][T20020] ? fdget+0x176/0x210 [ 2059.447724][T20020] __sys_sendmsg+0x117/0x1f0 [ 2059.452344][T20020] ? __pfx___sys_sendmsg+0x10/0x10 [ 2059.457480][T20020] ? __fget_files+0x244/0x3f0 [ 2059.462242][T20020] do_syscall_64+0xcd/0x250 [ 2059.466790][T20020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2059.472720][T20020] RIP: 0033:0x7fc46637dff9 [ 2059.477162][T20020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2059.496799][T20020] RSP: 002b:00007fc465dff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2059.505242][T20020] RAX: ffffffffffffffda RBX: 00007fc466535f80 RCX: 00007fc46637dff9 [ 2059.513239][T20020] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 2059.521236][T20020] RBP: 00007fc465dff090 R08: 0000000000000000 R09: 0000000000000000 [ 2059.529230][T20020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2059.537225][T20020] R13: 0000000000000000 R14: 00007fc466535f80 R15: 00007ffd62dd0a38 [ 2059.545237][T20020] [ 2059.548381][ C1] vkms_vblank_simulate: vblank timer overrun [ 2059.626080][ T5276] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2059.644601][ T5276] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2059.656603][ T1911] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2059.687805][ T5276] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2059.708253][ T5276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2059.747217][ T5276] usb 2-1: config 0 descriptor?? [ 2059.824110][ T5276] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2059.833729][ T1911] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2059.854014][ T5276] dvb-usb: bulk message failed: -22 (3/0) [ 2059.898997][ T5276] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2059.916014][ T5276] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2059.929410][ T5276] usb 2-1: media controller created [ 2059.954723][ T5276] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2059.988299][T19836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2060.019461][T20015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2060.034384][ T5276] dvb-usb: bulk message failed: -22 (6/0) [ 2060.035854][T19836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2060.062319][T20015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2060.070359][ T5276] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2060.084870][ T8] usb 1-1: USB disconnect, device number 5 [ 2060.099874][T19836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2060.129987][T20015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2060.129990][ T5276] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 2060.152767][T19836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2060.179369][ T29] audit: type=1400 audit(1729540259.932:1036): avc: denied { read } for pid=4658 comm="acpid" name="event4" dev="devtmpfs" ino=2463 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2060.203105][ T5276] dvb-usb: schedule remote query interval to 150 msecs. [ 2060.219614][T20015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2060.234183][ T5276] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2060.299284][ T29] audit: type=1400 audit(1729540259.932:1037): avc: denied { open } for pid=4658 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2463 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2060.392214][ T5329] dvb-usb: bulk message failed: -22 (1/0) [ 2060.400900][ T5329] dvb-usb: error while querying for an remote control event. [ 2060.400978][ T29] audit: type=1400 audit(1729540259.932:1038): avc: denied { ioctl } for pid=4658 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2463 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2060.474801][ T1911] bridge_slave_1: left allmulticast mode [ 2060.482333][ T1911] bridge_slave_1: left promiscuous mode [ 2060.499536][ T1911] bridge0: port 2(bridge_slave_1) entered disabled state [ 2060.553703][ T1911] bridge_slave_0: left allmulticast mode [ 2060.581704][ T1911] bridge_slave_0: left promiscuous mode [ 2060.595522][ T29] audit: type=1400 audit(1729540260.352:1039): avc: denied { create } for pid=20013 comm="syz.1.2221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2060.619619][ T5329] dvb-usb: bulk message failed: -22 (1/0) [ 2060.625685][ T1911] bridge0: port 1(bridge_slave_0) entered disabled state [ 2060.650504][ T5329] dvb-usb: error while querying for an remote control event. [ 2060.689503][T13289] usb 1-1: Service connection timeout for: 256 [ 2060.696292][T13289] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2060.707510][T13289] ath9k_htc: Failed to initialize the device [ 2060.740124][ T8] usb 1-1: ath9k_htc: USB layer deinitialized [ 2060.839864][ T5329] dvb-usb: bulk message failed: -22 (1/0) [ 2060.848025][ T5329] dvb-usb: error while querying for an remote control event. [ 2061.062683][T13289] dvb-usb: bulk message failed: -22 (1/0) [ 2061.079559][T13289] dvb-usb: error while querying for an remote control event. [ 2061.261158][T13289] dvb-usb: bulk message failed: -22 (1/0) [ 2061.290989][T13289] dvb-usb: error while querying for an remote control event. [ 2061.469421][T13289] dvb-usb: bulk message failed: -22 (1/0) [ 2061.480563][T13289] dvb-usb: error while querying for an remote control event. [ 2061.897032][T13289] dvb-usb: bulk message failed: -22 (1/0) [ 2061.911888][T13289] dvb-usb: error while querying for an remote control event. [ 2062.110235][T13289] dvb-usb: bulk message failed: -22 (1/0) [ 2062.119498][T13289] dvb-usb: error while querying for an remote control event. [ 2062.322043][ T5329] dvb-usb: bulk message failed: -22 (1/0) [ 2062.328044][ T5329] dvb-usb: error while querying for an remote control event. [ 2062.395307][ T5329] usb 2-1: USB disconnect, device number 4 [ 2062.491166][ T5329] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2062.752977][T20056] FAULT_INJECTION: forcing a failure. [ 2062.752977][T20056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2062.799505][T20056] CPU: 1 UID: 0 PID: 20056 Comm: syz.0.2227 Not tainted 6.12.0-rc4-syzkaller #0 [ 2062.808630][T20056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2062.818737][T20056] Call Trace: [ 2062.822053][T20056] [ 2062.825047][T20056] dump_stack_lvl+0x16c/0x1f0 [ 2062.829812][T20056] should_fail_ex+0x497/0x5b0 [ 2062.834554][T20056] strncpy_from_user+0x3b/0x2a0 [ 2062.839481][T20056] getname_flags.part.0+0x8f/0x550 [ 2062.844669][T20056] getname+0x8d/0xe0 [ 2062.848637][T20056] do_sys_openat2+0x104/0x1e0 [ 2062.853377][T20056] ? __pfx_do_sys_openat2+0x10/0x10 [ 2062.858643][T20056] ? __fget_files+0x244/0x3f0 [ 2062.863418][T20056] __x64_sys_openat+0x175/0x210 [ 2062.868345][T20056] ? __pfx___x64_sys_openat+0x10/0x10 [ 2062.873780][T20056] ? ksys_write+0x1ad/0x260 [ 2062.878371][T20056] do_syscall_64+0xcd/0x250 [ 2062.882949][T20056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2062.888905][T20056] RIP: 0033:0x7fd79e37c990 [ 2062.893362][T20056] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 2062.913029][T20056] RSP: 002b:00007fd79f165f70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2062.921502][T20056] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd79e37c990 [ 2062.929522][T20056] RDX: 0000000000000000 RSI: 00007fd79e3f03ae RDI: 00000000ffffff9c [ 2062.937531][T20056] RBP: 00007fd79e3f03ae R08: 0000000000000000 R09: 0000000000000000 [ 2062.945539][T20056] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 2062.953534][T20056] R13: 0000000000000001 R14: 00007fd79e535f80 R15: 00007ffd63096558 [ 2062.961546][T20056] [ 2064.599744][ T1911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2064.682481][ T1911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2064.761522][ T1911] bond0 (unregistering): Released all slaves [ 2065.065655][T20086] FAULT_INJECTION: forcing a failure. [ 2065.065655][T20086] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2065.119738][T20086] CPU: 0 UID: 0 PID: 20086 Comm: syz.4.2232 Not tainted 6.12.0-rc4-syzkaller #0 [ 2065.128881][T20086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2065.138995][T20086] Call Trace: [ 2065.142314][T20086] [ 2065.145289][T20086] dump_stack_lvl+0x16c/0x1f0 [ 2065.150044][T20086] should_fail_ex+0x497/0x5b0 [ 2065.154799][T20086] _copy_from_user+0x30/0xf0 [ 2065.159451][T20086] __sys_bpf+0x21c/0x49a0 [ 2065.163830][T20086] ? ksys_write+0x21e/0x260 [ 2065.168405][T20086] ? reacquire_held_locks+0x450/0x4c0 [ 2065.173833][T20086] ? __pfx___sys_bpf+0x10/0x10 [ 2065.178650][T20086] ? vfs_write+0x14d/0x1140 [ 2065.183230][T20086] ? __mutex_unlock_slowpath+0x164/0x650 [ 2065.188971][T20086] ? fput+0x30/0x390 [ 2065.192930][T20086] ? ksys_write+0x1ad/0x260 [ 2065.197516][T20086] ? __pfx_ksys_write+0x10/0x10 [ 2065.202442][T20086] __x64_sys_bpf+0x78/0xc0 [ 2065.206916][T20086] ? lockdep_hardirqs_on+0x7c/0x110 [ 2065.212182][T20086] do_syscall_64+0xcd/0x250 [ 2065.216756][T20086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2065.222719][T20086] RIP: 0033:0x7fc46637dff9 [ 2065.227184][T20086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2065.246851][T20086] RSP: 002b:00007fc465dff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2065.255327][T20086] RAX: ffffffffffffffda RBX: 00007fc466535f80 RCX: 00007fc46637dff9 [ 2065.263349][T20086] RDX: 0000000000000094 RSI: 0000000020000500 RDI: 0000000000000005 [ 2065.271361][T20086] RBP: 00007fc465dff090 R08: 0000000000000000 R09: 0000000000000000 [ 2065.279380][T20086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2065.287394][T20086] R13: 0000000000000000 R14: 00007fc466535f80 R15: 00007ffd62dd0a38 [ 2065.295434][T20086] [ 2066.073301][T20110] FAULT_INJECTION: forcing a failure. [ 2066.073301][T20110] name failslab, interval 1, probability 0, space 0, times 0 [ 2066.089917][ T29] audit: type=1400 audit(1729540265.852:1040): avc: denied { write } for pid=20103 comm="syz.4.2235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2066.095549][T20110] CPU: 1 UID: 0 PID: 20110 Comm: syz.1.2236 Not tainted 6.12.0-rc4-syzkaller #0 [ 2066.118404][T20110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2066.128511][T20110] Call Trace: [ 2066.131832][T20110] [ 2066.134808][T20110] dump_stack_lvl+0x16c/0x1f0 [ 2066.139561][T20110] should_fail_ex+0x497/0x5b0 [ 2066.144292][T20110] ? fs_reclaim_acquire+0xae/0x150 [ 2066.149462][T20110] should_failslab+0xc2/0x120 [ 2066.154202][T20110] __kmalloc_cache_noprof+0x6b/0x300 [ 2066.159542][T20110] ? keyctl_watch_key+0x151/0x500 [ 2066.164648][T20110] keyctl_watch_key+0x151/0x500 [ 2066.169581][T20110] __do_sys_keyctl+0x123/0x590 [ 2066.174421][T20110] do_syscall_64+0xcd/0x250 [ 2066.178998][T20110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2066.184951][T20110] RIP: 0033:0x7fdb6d37dff9 [ 2066.189436][T20110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2066.209098][T20110] RSP: 002b:00007fdb6e1c2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 2066.217573][T20110] RAX: ffffffffffffffda RBX: 00007fdb6d535f80 RCX: 00007fdb6d37dff9 [ 2066.225601][T20110] RDX: 0000000000000003 RSI: 000000002e321fee RDI: 0000000000000020 [ 2066.233622][T20110] RBP: 00007fdb6e1c2090 R08: 0000000000000000 R09: 0000000000000000 [ 2066.241637][T20110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2066.249660][T20110] R13: 0000000000000000 R14: 00007fdb6d535f80 R15: 00007fffca682dd8 [ 2066.257701][T20110] [ 2066.365088][ T1911] hsr_slave_0: left promiscuous mode [ 2066.378666][ T1911] hsr_slave_1: left promiscuous mode [ 2066.392560][ T1911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2066.413007][ T1911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2066.451882][ T1911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2066.461974][ T1911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2066.517214][ T1911] veth1_macvtap: left promiscuous mode [ 2066.562499][ T1911] veth0_macvtap: left promiscuous mode [ 2066.568357][ T1911] veth1_vlan: left promiscuous mode [ 2066.589432][ T1911] veth0_vlan: left promiscuous mode [ 2067.159853][ T29] audit: type=1400 audit(1729540266.922:1041): avc: denied { create } for pid=20124 comm="syz.1.2239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2067.562963][ T5299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 2067.579306][ T5299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 2068.056978][ T5299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 2068.070351][ T5299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 2068.090181][ T5299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 2068.119883][ T5299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 2068.170215][ T5299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 2068.177685][ T5299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 2068.220072][ T5299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 2068.237877][ T5299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 2068.270818][ T5299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 2068.278334][ T5299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 2068.307900][ T5299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 2068.324425][ T5299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 2068.342693][ T5299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 2068.350431][ T5299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 2068.357889][ T5299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 2068.379290][ T5299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 2068.387061][ T5299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 2068.399048][ T5299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 2068.408808][ T5299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 2068.416723][ T5299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 2068.499022][ T5299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 2068.529115][ T5299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 2068.567736][ T5299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 2068.632014][ T5299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 2068.658501][ T5299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 2069.454554][ T5299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 2069.462190][ T5299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 2069.469921][ T5299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 2069.477364][ T5299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 2069.485093][ T5299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 2069.505615][ T5299] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2069.929427][ T29] audit: type=1400 audit(1729540269.672:1042): avc: denied { listen } for pid=20143 comm="syz.1.2243" lport=55813 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2069.987716][ T29] audit: type=1400 audit(1729540269.742:1043): avc: denied { accept } for pid=20143 comm="syz.1.2243" lport=55813 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2070.259974][ T1911] team0 (unregistering): Port device team_slave_1 removed [ 2070.368517][ T1911] team0 (unregistering): Port device team_slave_0 removed [ 2070.566805][ T8] kernel write not supported for file /103/attr/keycreate (pid: 8 comm: kworker/0:0) [ 2070.681217][ T29] audit: type=1400 audit(1729540270.442:1044): avc: denied { write } for pid=20152 comm="syz.1.2245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 2070.730245][T20157] FAULT_INJECTION: forcing a failure. [ 2070.730245][T20157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2070.771375][T20157] CPU: 0 UID: 0 PID: 20157 Comm: syz.0.2247 Not tainted 6.12.0-rc4-syzkaller #0 [ 2070.780497][T20157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2070.790613][T20157] Call Trace: [ 2070.793929][T20157] [ 2070.796901][T20157] dump_stack_lvl+0x16c/0x1f0 [ 2070.801658][T20157] should_fail_ex+0x497/0x5b0 [ 2070.806408][T20157] strncpy_from_user+0x3b/0x2a0 [ 2070.811863][T20157] getname_flags.part.0+0x8f/0x550 [ 2070.817057][T20157] getname_flags+0x93/0xf0 [ 2070.821565][T20157] user_path_at+0x24/0x60 [ 2070.825978][T20157] __x64_sys_chdir+0xbf/0x270 [ 2070.830730][T20157] ? ksys_write+0x1ad/0x260 [ 2070.835304][T20157] ? __pfx___x64_sys_chdir+0x10/0x10 [ 2070.840659][T20157] do_syscall_64+0xcd/0x250 [ 2070.845236][T20157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2070.851204][T20157] RIP: 0033:0x7fd79e37dff9 [ 2070.855681][T20157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2070.875352][T20157] RSP: 002b:00007fd79f166038 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 [ 2070.883835][T20157] RAX: ffffffffffffffda RBX: 00007fd79e535f80 RCX: 00007fd79e37dff9 [ 2070.891855][T20157] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200001c0 [ 2070.899858][T20157] RBP: 00007fd79f166090 R08: 0000000000000000 R09: 0000000000000000 [ 2070.907860][T20157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2070.915856][T20157] R13: 0000000000000000 R14: 00007fd79e535f80 R15: 00007ffd63096558 [ 2070.923872][T20157] [ 2073.914680][T20180] FAULT_INJECTION: forcing a failure. [ 2073.914680][T20180] name failslab, interval 1, probability 0, space 0, times 0 [ 2073.943078][T20180] CPU: 0 UID: 0 PID: 20180 Comm: syz.4.2253 Not tainted 6.12.0-rc4-syzkaller #0 [ 2073.952197][T20180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2073.962317][T20180] Call Trace: [ 2073.965610][T20180] [ 2073.968551][T20180] dump_stack_lvl+0x16c/0x1f0 [ 2073.973270][T20180] should_fail_ex+0x497/0x5b0 [ 2073.977962][T20180] ? fs_reclaim_acquire+0xae/0x150 [ 2073.983140][T20180] should_failslab+0xc2/0x120 [ 2073.987843][T20180] __kmalloc_cache_noprof+0x6b/0x300 [ 2073.993186][T20180] ? lock_acquire+0x2f/0xb0 [ 2073.997720][T20180] ? sctp_association_new+0x97/0x2ab0 [ 2074.003141][T20180] sctp_association_new+0x97/0x2ab0 [ 2074.008391][T20180] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2074.014351][T20180] ? sctp_v4_scope+0x183/0x1a0 [ 2074.019144][T20180] sctp_connect_new_asoc+0x1b7/0x790 [ 2074.024472][T20180] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 2074.030300][T20180] ? lock_acquire+0x2f/0xb0 [ 2074.034820][T20180] ? sctp_endpoint_lookup_assoc+0xac/0x2a0 [ 2074.040665][T20180] __sctp_connect+0x3f5/0xc60 [ 2074.045366][T20180] ? sctp_inet_connect+0xac/0x200 [ 2074.050411][T20180] ? __pfx___sctp_connect+0x10/0x10 [ 2074.055626][T20180] ? __pfx_sctp_inet_connect+0x10/0x10 [ 2074.061120][T20180] ? sctp_inet_connect+0xac/0x200 [ 2074.066206][T20180] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2074.072145][T20180] ? __pfx_sctp_inet_connect+0x10/0x10 [ 2074.077655][T20180] sctp_inet_connect+0x15f/0x200 [ 2074.082641][T20180] __sys_connect_file+0x14d/0x190 [ 2074.087704][T20180] __sys_connect+0x147/0x180 [ 2074.092330][T20180] ? __pfx___sys_connect+0x10/0x10 [ 2074.097488][T20180] ? __pfx_ksys_write+0x10/0x10 [ 2074.102397][T20180] __x64_sys_connect+0x72/0xb0 [ 2074.107223][T20180] ? lockdep_hardirqs_on+0x7c/0x110 [ 2074.112451][T20180] do_syscall_64+0xcd/0x250 [ 2074.116988][T20180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2074.122908][T20180] RIP: 0033:0x7fc46637dff9 [ 2074.127337][T20180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2074.146965][T20180] RSP: 002b:00007fc465dff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2074.155410][T20180] RAX: ffffffffffffffda RBX: 00007fc466535f80 RCX: 00007fc46637dff9 [ 2074.163403][T20180] RDX: 000000000000001c RSI: 0000000020000040 RDI: 0000000000000003 [ 2074.171397][T20180] RBP: 00007fc465dff090 R08: 0000000000000000 R09: 0000000000000000 [ 2074.179393][T20180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2074.187377][T20180] R13: 0000000000000000 R14: 00007fc466535f80 R15: 00007ffd62dd0a38 [ 2074.195397][T20180] [ 2074.226541][ T29] audit: type=1400 audit(1729540273.972:1045): avc: denied { search } for pid=4655 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2074.875893][T19836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2074.930406][T19836] 8021q: adding VLAN 0 to HW filter on device team0 [ 2074.986543][ T5506] bridge0: port 1(bridge_slave_0) entered blocking state [ 2074.993871][ T5506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2075.084323][ T5506] bridge0: port 2(bridge_slave_1) entered blocking state [ 2075.091557][ T5506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2075.125889][T19838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2075.132953][T16508] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 2075.147905][T19838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2075.161797][T19838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2075.174539][T19838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2075.295391][ T5329] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 2075.381740][T16508] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2075.392526][T16508] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2075.401930][T16508] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2075.446604][T16508] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2075.486221][ T5329] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 2075.528081][ T5329] usb 1-1: config 0 has no interface number 0 [ 2075.591986][ T5329] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 2075.707183][T16508] usb 2-1: config 0 descriptor?? [ 2075.730685][ T5329] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2076.040944][ T5329] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 2076.068288][T20191] FAULT_INJECTION: forcing a failure. [ 2076.068288][T20191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2076.245778][T20191] CPU: 0 UID: 0 PID: 20191 Comm: syz.1.2255 Not tainted 6.12.0-rc4-syzkaller #0 [ 2076.254902][T20191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2076.265001][T20191] Call Trace: [ 2076.268323][T20191] [ 2076.271275][T20191] dump_stack_lvl+0x16c/0x1f0 [ 2076.276000][T20191] should_fail_ex+0x497/0x5b0 [ 2076.280715][T20191] strncpy_from_user+0x3b/0x2a0 [ 2076.285619][T20191] getname_flags.part.0+0x8f/0x550 [ 2076.290781][T20191] getname+0x8d/0xe0 [ 2076.294728][T20191] do_sys_openat2+0x104/0x1e0 [ 2076.299445][T20191] ? __pfx_do_sys_openat2+0x10/0x10 [ 2076.304693][T20191] __x64_sys_openat+0x175/0x210 [ 2076.309579][T20191] ? __pfx___x64_sys_openat+0x10/0x10 [ 2076.315002][T20191] do_syscall_64+0xcd/0x250 [ 2076.319555][T20191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2076.325486][T20191] RIP: 0033:0x7fdb6d37c990 [ 2076.329924][T20191] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 2076.349564][T20191] RSP: 002b:00007fdb6e1bfef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2076.358006][T20191] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fdb6d37c990 [ 2076.366004][T20191] RDX: 0000000000000002 RSI: 00007fdb6d3f002c RDI: 00000000ffffff9c [ 2076.374000][T20191] RBP: 00007fdb6d3f002c R08: 0000000000000000 R09: 0000000000000000 [ 2076.382010][T20191] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2076.390021][T20191] R13: 000000000000002d R14: 0000000020000000 R15: 00007fffca682dd8 [ 2076.398036][T20191] [ 2076.402567][ T5329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2076.410690][ T5329] usb 1-1: Product: syz [ 2076.414900][ T5329] usb 1-1: Manufacturer: syz [ 2076.419650][ T5329] usb 1-1: SerialNumber: syz [ 2076.470154][T19838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2076.493427][T20191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2076.498385][T19838] 8021q: adding VLAN 0 to HW filter on device team0 [ 2076.509932][ T5329] usb 1-1: config 0 descriptor?? [ 2076.518272][T18141] bridge0: port 1(bridge_slave_0) entered blocking state [ 2076.525453][T18141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2076.533439][T16508] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2076.555795][T20193] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2076.566108][T16508] dvb-usb: bulk message failed: -22 (3/0) [ 2076.572685][T20191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2076.575791][ T5329] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 2076.613109][T16508] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2076.634555][ T5329] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 2076.643476][T18141] bridge0: port 2(bridge_slave_1) entered blocking state [ 2076.650712][ T29] audit: type=1400 audit(1729540276.412:1046): avc: denied { read } for pid=4658 comm="acpid" name="event4" dev="devtmpfs" ino=2474 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 2076.651021][T18141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2076.682789][T16508] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2076.891660][T16508] usb 2-1: media controller created [ 2077.223062][T16508] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2077.256507][T20205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2077.440628][ T29] audit: type=1400 audit(1729540276.412:1047): avc: denied { open } for pid=4658 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2474 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 2077.535963][ T29] audit: type=1400 audit(1729540276.412:1048): avc: denied { ioctl } for pid=4658 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2474 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 2077.540927][T20205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2077.561033][T16508] dvb-usb: bulk message failed: -22 (6/0) [ 2077.589386][T16508] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2077.616968][T16508] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 2077.661788][T16508] dvb-usb: schedule remote query interval to 150 msecs. [ 2077.760495][T16508] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2077.822720][T14991] libceph: connect (1)[c::]:6789 error -101 [ 2077.833820][T19836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2077.841218][T14991] libceph: mon0 (1)[c::]:6789 connect error [ 2077.854906][T14991] libceph: connect (1)[c::]:6789 error -101 [ 2077.865233][T16508] usb 2-1: USB disconnect, device number 5 [ 2077.883813][T20194] usb 1-1: USB disconnect, device number 6 [ 2077.893822][T14991] libceph: mon0 (1)[c::]:6789 connect error [ 2077.912115][T20194] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 2077.933149][T20194] cyberjack 1-1:0.69: device disconnected [ 2077.940716][T16508] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2077.965482][T20215] syz.4.2259: attempt to access beyond end of device [ 2077.965482][T20215] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 2078.013776][T20211] ceph: No mds server is up or the cluster is laggy [ 2078.107332][T19836] veth0_vlan: entered promiscuous mode [ 2078.131982][T19836] veth1_vlan: entered promiscuous mode [ 2078.252470][T19836] veth0_macvtap: entered promiscuous mode [ 2078.299076][T19838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2078.338441][T19836] veth1_macvtap: entered promiscuous mode [ 2078.590422][T19836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2078.609945][T19836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2078.627380][T19836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2078.651013][T19836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2078.674824][T19836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2078.838053][T19836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2078.924737][T19836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2079.262594][T19836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2079.280699][T19836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2079.297254][T19836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2079.309291][T19836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2079.322269][T19836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2079.337242][T19836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2079.351820][T19836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2079.485407][T20238] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2079.493319][T20238] vhci_hcd: invalid port number 10 [ 2079.498577][T20238] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 2079.599526][ T29] audit: type=1400 audit(1729540279.212:1049): avc: denied { watch watch_reads } for pid=20234 comm="syz.0.2262" path="/302/file1" dev="tmpfs" ino=1615 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2080.123287][ T29] audit: type=1400 audit(1729540279.272:1050): avc: denied { ioctl } for pid=20234 comm="syz.0.2262" path="socket:[98664]" dev="sockfs" ino=98664 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2080.131984][T19838] veth0_vlan: entered promiscuous mode [ 2080.148259][ C0] vkms_vblank_simulate: vblank timer overrun [ 2080.326750][T19836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2080.349098][T19836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2080.463256][T19836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2080.500965][T19836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2080.746525][T19838] veth1_vlan: entered promiscuous mode [ 2080.769762][T13204] Bluetooth: hci3: command 0x0406 tx timeout [ 2082.034122][T19838] veth0_macvtap: entered promiscuous mode [ 2082.090731][T20194] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2082.098212][T20194] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2082.105926][T20194] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2082.113551][T20194] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2082.121075][T20194] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2082.128574][T20194] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2082.136254][T20194] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2082.143848][T20194] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2082.151382][T20194] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2082.158821][T20194] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2082.167513][T20194] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2082.175046][T20194] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2082.366835][T20194] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2082.375133][T20194] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2082.382987][T20194] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2082.392445][T20194] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2082.400427][T20194] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2082.407935][T20194] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2082.415652][T20194] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2082.423302][T20194] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2082.675174][T19838] veth1_macvtap: entered promiscuous mode [ 2082.763880][ T29] audit: type=1400 audit(1729540282.512:1051): avc: denied { ioctl } for pid=20255 comm="syz.0.2267" path="/dev/ptp0" dev="devtmpfs" ino=1073 ioctlcmd=0x3d08 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2082.788979][ C0] vkms_vblank_simulate: vblank timer overrun [ 2083.221007][T20194] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2083.229062][T20194] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2083.237900][T20194] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2083.245415][T20194] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2083.253105][T20194] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2083.253156][T20194] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2083.253194][T20194] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2083.275856][T20194] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2083.283502][T20194] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2083.291050][T20194] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2083.298486][T20194] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2083.305998][T20194] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2083.345332][T20194] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2083.580302][T19838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2083.591624][T19838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2083.608889][T19838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2083.633631][T19838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2083.645299][T19838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2083.666798][T19838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2083.677290][T19838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2083.691295][T19838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2083.702873][T19838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2083.716763][T18141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2083.728225][T19838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2083.750847][T18141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2083.766985][T19838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2083.777769][T19838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2083.780057][ T5299] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 2083.788480][T19838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2083.808287][T19838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2083.833158][T19838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2083.843521][T19838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2083.854634][T19838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2083.878990][T19838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2083.962147][ T5299] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2084.006165][ T5299] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2084.023475][T19838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2084.028257][ T5299] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2084.048179][T19838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2084.057322][T19838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2084.059464][ T5299] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2084.066542][T19838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2084.084455][ T5299] usb 1-1: Product: syz [ 2084.088688][ T5299] usb 1-1: Manufacturer: syz [ 2084.104919][ T5299] usb 1-1: SerialNumber: syz [ 2084.153927][T18141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2084.166806][T18141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2084.249309][ T29] audit: type=1400 audit(1729540284.002:1052): avc: denied { mounton } for pid=19836 comm="syz-executor" path="/root/syzkaller.OSNUOS/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 2084.315548][T18141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2084.382002][T18141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2084.446785][ T5299] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2084.491050][ T5299] usb 1-1: MIDIStreaming interface descriptor not found [ 2084.510425][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2084.531859][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2084.600209][ T5299] usb 1-1: USB disconnect, device number 7 [ 2084.762951][T19840] udevd[19840]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2085.767539][ T5329] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 2085.944667][ T5329] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 2086.049371][T16508] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 2086.117599][ T5329] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 2086.156075][ T5329] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 2086.360177][ T5329] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 2087.141132][ T5329] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 2087.148603][ T5329] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 2087.156141][ T5329] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 2087.163662][ T5329] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 2087.171205][ T5329] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 2087.178654][ T5329] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 2087.259819][ T5329] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 2087.441865][ T29] audit: type=1400 audit(1729540287.202:1053): avc: denied { ioctl } for pid=20300 comm="syz.0.2279" path="socket:[99708]" dev="sockfs" ino=99708 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2087.519301][T16508] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2087.528854][T16508] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2087.537141][T16508] usb 3-1: Product: syz [ 2087.541465][T16508] usb 3-1: Manufacturer: syz [ 2087.546117][T16508] usb 3-1: SerialNumber: syz [ 2087.558272][ T29] audit: type=1400 audit(1729540287.322:1054): avc: denied { create } for pid=20300 comm="syz.0.2279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2087.589925][T20301] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.2279'. [ 2087.633631][T16508] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2087.672055][T20308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2279'. [ 2087.686699][ T29] audit: type=1400 audit(1729540287.452:1055): avc: denied { bind } for pid=20300 comm="syz.0.2279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2087.717088][ T5329] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2087.740661][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 2087.919422][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 2087.975146][ T8] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 2088.004803][ T8] usb 5-1: config 179 has no interface number 0 [ 2088.045137][ T8] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 2088.077404][T20289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2088.098468][ T8] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 2088.143153][ T8] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2088.144449][T20289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2088.166995][ T8] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2088.248412][ T29] audit: type=1400 audit(1729540288.002:1056): avc: denied { read } for pid=20286 comm="syz.2.2274" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2088.249229][ T8] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2088.314744][ T46] usb 3-1: USB disconnect, device number 17 [ 2088.368451][ T8] usb 5-1: config 179 interface 65 has no altsetting 0 [ 2088.395491][ T29] audit: type=1400 audit(1729540288.002:1057): avc: denied { open } for pid=20286 comm="syz.2.2274" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2088.438614][ T8] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 2088.448403][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2088.484967][T20304] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2088.619669][ T8] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input7 [ 2088.904163][ T5329] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2088.948067][T14991] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 2088.958609][T20319] netlink: 'syz.4.2276': attribute type 1 has an invalid length. [ 2088.966580][T20319] netlink: 512 bytes leftover after parsing attributes in process `syz.4.2276'. [ 2088.998136][ T5329] ath9k_htc: Failed to initialize the device [ 2089.167764][T14991] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2089.189562][T14991] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2089.243822][T14991] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2089.280931][ T46] usb 3-1: ath9k_htc: USB layer deinitialized [ 2089.393815][T14991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2089.426177][T14991] usb 1-1: config 0 descriptor?? [ 2089.482005][T14991] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2089.515110][ T29] audit: type=1400 audit(1729540289.272:1058): avc: denied { write } for pid=20320 comm="syz.1.2284" name="uinput" dev="devtmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2089.540618][T14991] dvb-usb: bulk message failed: -22 (3/0) [ 2089.584730][T14991] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2089.631540][T14991] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2089.673401][ T29] audit: type=1400 audit(1729540289.332:1059): avc: denied { ioctl } for pid=20320 comm="syz.1.2284" path="/dev/uinput" dev="devtmpfs" ino=835 ioctlcmd=0x720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2089.709541][T14991] usb 1-1: media controller created [ 2089.718391][T20316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2089.743231][T14991] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2089.772707][T20316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2089.803682][T14991] dvb-usb: bulk message failed: -22 (6/0) [ 2089.822405][T20316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2089.831356][ T29] audit: type=1400 audit(1729540289.342:1060): avc: denied { read } for pid=20321 comm="syz.2.2283" name="mouse0" dev="devtmpfs" ino=838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 2089.854996][T14991] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2089.871258][T14991] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 2089.879624][ T5329] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 2089.903357][T20316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2089.959709][T14991] dvb-usb: schedule remote query interval to 150 msecs. [ 2089.964641][ T29] audit: type=1400 audit(1729540289.342:1061): avc: denied { open } for pid=20321 comm="syz.2.2283" path="/dev/input/mouse0" dev="devtmpfs" ino=838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 2090.004878][T14991] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2090.074212][ T5329] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 2090.083645][ T29] audit: type=1400 audit(1729540289.342:1062): avc: denied { append } for pid=20321 comm="syz.2.2283" name="event3" dev="devtmpfs" ino=839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2090.140246][ T5329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2090.160381][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2090.160433][ T5299] dvb-usb: error while querying for an remote control event. [ 2090.161088][ T5329] usb 3-1: config 0 descriptor?? [ 2090.319360][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2090.319401][ T5299] dvb-usb: error while querying for an remote control event. [ 2091.413101][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2091.413142][ T5299] dvb-usb: error while querying for an remote control event. [ 2092.396635][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 2092.396678][ T8] dvb-usb: error while querying for an remote control event. [ 2093.407095][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2093.407195][ T5299] dvb-usb: error while querying for an remote control event. [ 2094.395240][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 2094.395283][ T8] dvb-usb: error while querying for an remote control event. [ 2094.396108][T20313] sched: DL replenish lagged too much [ 2095.397448][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 2095.397491][ T8] dvb-usb: error while querying for an remote control event. [ 2096.408643][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2096.408682][ T5299] dvb-usb: error while querying for an remote control event. [ 2097.395785][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 2097.395901][ T8] dvb-usb: error while querying for an remote control event. [ 2097.396393][T13201] Bluetooth: hci4: command 0x0406 tx timeout [ 2098.400037][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2098.400074][ T5299] dvb-usb: error while querying for an remote control event. [ 2100.397630][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 2100.397673][ T8] dvb-usb: error while querying for an remote control event. [ 2101.422845][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 2101.423009][ T8] dvb-usb: error while querying for an remote control event. [ 2102.488051][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2102.488094][ T5299] dvb-usb: error while querying for an remote control event. [ 2103.422669][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2103.422712][ T5299] dvb-usb: error while querying for an remote control event. [ 2104.429107][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 2104.429313][ T8] dvb-usb: error while querying for an remote control event. [ 2105.458016][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2105.458148][ T5299] dvb-usb: error while querying for an remote control event. [ 2106.444239][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2106.444282][ T5299] dvb-usb: error while querying for an remote control event. [ 2108.200168][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2108.200239][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2108.578390][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2108.578500][ T5299] dvb-usb: error while querying for an remote control event. [ 2109.504084][T14991] dvb-usb: bulk message failed: -22 (1/0) [ 2109.504162][T14991] dvb-usb: error while querying for an remote control event. [ 2111.111537][ T5329] kaweth 3-1:0.0: Firmware present in device. [ 2112.109657][ T5329] kaweth 3-1:0.0: Error reading configuration (-32), no net device created [ 2112.109802][ T5329] kaweth 3-1:0.0: probe with driver kaweth failed with error -5 [ 2112.539466][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 2112.539576][ T8] dvb-usb: error while querying for an remote control event. [ 2113.532148][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2113.532191][ T5299] dvb-usb: error while querying for an remote control event. [ 2117.533249][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2117.533365][ T5299] dvb-usb: error while querying for an remote control event. [ 2118.533367][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2118.533409][ T5299] dvb-usb: error while querying for an remote control event. [ 2119.609970][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 2119.610081][ T8] dvb-usb: error while querying for an remote control event. [ 2120.624224][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2120.624338][ T5299] dvb-usb: error while querying for an remote control event. [ 2121.605268][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 2121.605313][ T8] dvb-usb: error while querying for an remote control event. [ 2122.601532][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 2122.601562][ T8] dvb-usb: error while querying for an remote control event. [ 2123.618601][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 2123.618713][ T8] dvb-usb: error while querying for an remote control event. [ 2124.602209][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 2124.602241][ T8] dvb-usb: error while querying for an remote control event. [ 2125.619065][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 2125.619105][ T8] dvb-usb: error while querying for an remote control event. [ 2126.604224][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 2126.604335][ T8] dvb-usb: error while querying for an remote control event. [ 2127.609622][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 2127.609652][ T8] dvb-usb: error while querying for an remote control event. [ 2128.604826][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 2128.604868][ T8] dvb-usb: error while querying for an remote control event. [ 2129.602521][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 2129.602553][ T8] dvb-usb: error while querying for an remote control event. [ 2130.605061][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 2130.605103][ T8] dvb-usb: error while querying for an remote control event. [ 2131.610035][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 2131.610065][ T8] dvb-usb: error while querying for an remote control event. [ 2132.701508][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2132.701539][ T5299] dvb-usb: error while querying for an remote control event. [ 2133.742322][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 2133.742451][ T8] dvb-usb: error while querying for an remote control event. [ 2134.734767][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2134.734878][ T5299] dvb-usb: error while querying for an remote control event. [ 2135.810958][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2135.810988][ T5299] dvb-usb: error while querying for an remote control event. [ 2137.872304][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 2137.872336][ T8] dvb-usb: error while querying for an remote control event. [ 2138.887398][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 2138.887441][ T8] dvb-usb: error while querying for an remote control event. [ 2139.897469][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2139.897512][ T5299] dvb-usb: error while querying for an remote control event. [ 2140.889098][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2140.889273][ T5299] dvb-usb: error while querying for an remote control event. [ 2141.895847][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 2141.895889][ T8] dvb-usb: error while querying for an remote control event. [ 2142.883217][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2142.883260][ T5299] dvb-usb: error while querying for an remote control event. [ 2143.903073][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 2143.903116][ T8] dvb-usb: error while querying for an remote control event. [ 2144.881015][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 2144.881127][ T8] dvb-usb: error while querying for an remote control event. [ 2146.985596][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 2146.985627][ T8] dvb-usb: error while querying for an remote control event. [ 2147.983165][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 2147.983271][ T8] dvb-usb: error while querying for an remote control event. [ 2149.971303][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 2149.971336][ T8] dvb-usb: error while querying for an remote control event. [ 2150.160817][T14991] dvb-usb: bulk message failed: -22 (1/0) [ 2150.160857][T14991] dvb-usb: error while querying for an remote control event. [ 2151.224373][T14991] dvb-usb: bulk message failed: -22 (1/0) [ 2151.224485][T14991] dvb-usb: error while querying for an remote control event. [ 2152.170418][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 2152.170448][ T8] dvb-usb: error while querying for an remote control event. [ 2153.282182][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2153.282287][ T5299] dvb-usb: error while querying for an remote control event. [ 2155.255391][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2155.255422][ T5299] dvb-usb: error while querying for an remote control event. [ 2156.263992][T14991] dvb-usb: bulk message failed: -22 (1/0) [ 2156.264023][T14991] dvb-usb: error while querying for an remote control event. [ 2157.264755][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2157.264796][ T5299] dvb-usb: error while querying for an remote control event. [ 2158.272951][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2158.273060][ T5299] dvb-usb: error while querying for an remote control event. [ 2160.312639][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2160.312681][ T5299] dvb-usb: error while querying for an remote control event. [ 2162.313861][T14991] dvb-usb: bulk message failed: -22 (1/0) [ 2162.313972][T14991] dvb-usb: error while querying for an remote control event. [ 2163.386105][T14991] dvb-usb: bulk message failed: -22 (1/0) [ 2163.386218][T14991] dvb-usb: error while querying for an remote control event. [ 2164.364401][T14991] dvb-usb: bulk message failed: -22 (1/0) [ 2164.364432][T14991] dvb-usb: error while querying for an remote control event. [ 2166.420056][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2166.420100][ T5299] dvb-usb: error while querying for an remote control event. [ 2167.399430][T14991] dvb-usb: bulk message failed: -22 (1/0) [ 2167.399506][T14991] dvb-usb: error while querying for an remote control event. [ 2168.457144][T14991] dvb-usb: bulk message failed: -22 (1/0) [ 2168.457186][T14991] dvb-usb: error while querying for an remote control event. [ 2169.487720][T14991] dvb-usb: bulk message failed: -22 (1/0) [ 2169.487750][T14991] dvb-usb: error while querying for an remote control event. [ 2170.561637][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2170.561745][ T5299] dvb-usb: error while querying for an remote control event. [ 2171.560040][T14991] dvb-usb: bulk message failed: -22 (1/0) [ 2171.560070][T14991] dvb-usb: error while querying for an remote control event. [ 2172.560923][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2172.560994][ T5299] dvb-usb: error while querying for an remote control event. [ 2172.619814][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2172.619911][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2173.635269][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2173.635300][ T5299] dvb-usb: error while querying for an remote control event. [ 2175.641567][T14991] dvb-usb: bulk message failed: -22 (1/0) [ 2175.641639][T14991] dvb-usb: error while querying for an remote control event. [ 2176.650786][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2176.650818][ T5299] dvb-usb: error while querying for an remote control event. [ 2178.653931][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2178.653960][ T5299] dvb-usb: error while querying for an remote control event. [ 2179.698295][T14991] dvb-usb: bulk message failed: -22 (1/0) [ 2179.698405][T14991] dvb-usb: error while querying for an remote control event. [ 2180.668548][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2180.668591][ T5299] dvb-usb: error while querying for an remote control event. [ 2181.650561][T14991] dvb-usb: bulk message failed: -22 (1/0) [ 2181.650633][T14991] dvb-usb: error while querying for an remote control event. [ 2182.669324][T14991] dvb-usb: bulk message failed: -22 (1/0) [ 2182.669435][T14991] dvb-usb: error while querying for an remote control event. [ 2183.650658][T14991] dvb-usb: bulk message failed: -22 (1/0) [ 2183.650689][T14991] dvb-usb: error while querying for an remote control event. [ 2184.669602][T14991] dvb-usb: bulk message failed: -22 (1/0) [ 2184.669644][T14991] dvb-usb: error while querying for an remote control event. [ 2185.649987][T14991] dvb-usb: bulk message failed: -22 (1/0) [ 2185.650019][T14991] dvb-usb: error while querying for an remote control event. [ 2186.672634][T14991] dvb-usb: bulk message failed: -22 (1/0) [ 2186.672678][T14991] dvb-usb: error while querying for an remote control event. [ 2187.649749][T14991] dvb-usb: bulk message failed: -22 (1/0) [ 2187.649780][T14991] dvb-usb: error while querying for an remote control event. [ 2188.665099][T14991] dvb-usb: bulk message failed: -22 (1/0) [ 2188.665212][T14991] dvb-usb: error while querying for an remote control event. [ 2189.647342][T14991] dvb-usb: bulk message failed: -22 (1/0) [ 2189.647373][T14991] dvb-usb: error while querying for an remote control event. [ 2190.669253][T14991] dvb-usb: bulk message failed: -22 (1/0) [ 2190.669295][T14991] dvb-usb: error while querying for an remote control event. [ 2191.669632][T14991] dvb-usb: bulk message failed: -22 (1/0) [ 2191.669663][T14991] dvb-usb: error while querying for an remote control event. [ 2193.687628][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2193.687659][ T5299] dvb-usb: error while querying for an remote control event. [ 2195.807964][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2195.807995][ T5299] dvb-usb: error while querying for an remote control event. [ 2196.853163][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2196.853270][ T5299] dvb-usb: error while querying for an remote control event. [ 2197.855396][T14991] dvb-usb: bulk message failed: -22 (1/0) [ 2197.855428][T14991] dvb-usb: error while querying for an remote control event. [ 2199.840460][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2199.840533][ T5299] dvb-usb: error while querying for an remote control event. [ 2200.844209][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2200.844240][ T5299] dvb-usb: error while querying for an remote control event. [ 2201.846535][T14991] dvb-usb: bulk message failed: -22 (1/0) [ 2201.846565][T14991] dvb-usb: error while querying for an remote control event. [ 2203.843576][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2203.843608][ T5299] dvb-usb: error while querying for an remote control event. [ 2205.871236][T14991] dvb-usb: bulk message failed: -22 (1/0) [ 2205.871267][T14991] dvb-usb: error while querying for an remote control event. [ 2206.870247][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2206.870322][ T5299] dvb-usb: error while querying for an remote control event. [ 2207.907398][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2207.907442][ T5299] dvb-usb: error while querying for an remote control event. [ 2208.888270][T14991] dvb-usb: bulk message failed: -22 (1/0) [ 2208.888302][T14991] dvb-usb: error while querying for an remote control event. [ 2209.940164][ T1176] dvb-usb: bulk message failed: -22 (1/0) [ 2209.940209][ T1176] dvb-usb: error while querying for an remote control event. [ 2209.941522][T17078] Bluetooth: hci5: command tx timeout [ 2209.941590][T17078] Bluetooth: hci6: command 0x0406 tx timeout [ 2210.905762][T14991] dvb-usb: bulk message failed: -22 (1/0) [ 2210.905807][T14991] dvb-usb: error while querying for an remote control event. [ 2211.886146][T14991] dvb-usb: bulk message failed: -22 (1/0) [ 2211.886183][T14991] dvb-usb: error while querying for an remote control event. [ 2212.909562][T14991] dvb-usb: bulk message failed: -22 (1/0) [ 2212.909605][T14991] dvb-usb: error while querying for an remote control event. [ 2213.887186][ T1176] dvb-usb: bulk message failed: -22 (1/0) [ 2213.887217][ T1176] dvb-usb: error while querying for an remote control event. [ 2214.954380][T14991] dvb-usb: bulk message failed: -22 (1/0) [ 2214.954423][T14991] dvb-usb: error while querying for an remote control event. [ 2215.933585][ T1176] dvb-usb: bulk message failed: -22 (1/0) [ 2215.933626][ T1176] dvb-usb: error while querying for an remote control event. [ 2216.936761][ T1176] dvb-usb: bulk message failed: -22 (1/0) [ 2216.936793][ T1176] dvb-usb: error while querying for an remote control event. [ 2219.001341][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2219.001370][ T5299] dvb-usb: error while querying for an remote control event. [ 2220.011305][ T1176] dvb-usb: bulk message failed: -22 (1/0) [ 2220.011347][ T1176] dvb-usb: error while querying for an remote control event. [ 2221.016693][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2221.016767][ T5299] dvb-usb: error while querying for an remote control event. [ 2223.005891][ T1176] dvb-usb: bulk message failed: -22 (1/0) [ 2223.005923][ T1176] dvb-usb: error while querying for an remote control event. [ 2223.184522][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2223.184566][ T5299] dvb-usb: error while querying for an remote control event. [ 2224.070904][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2224.070947][ T5299] dvb-usb: error while querying for an remote control event. [ 2225.009758][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2225.009831][ T5299] dvb-usb: error while querying for an remote control event. [ 2226.007003][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2226.007048][ T5299] dvb-usb: error while querying for an remote control event. [ 2227.014185][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2227.014217][ T5299] dvb-usb: error while querying for an remote control event. [ 2228.017589][ T1176] dvb-usb: bulk message failed: -22 (1/0) [ 2228.017632][ T1176] dvb-usb: error while querying for an remote control event. [ 2229.047072][ T1176] dvb-usb: bulk message failed: -22 (1/0) [ 2229.047115][ T1176] dvb-usb: error while querying for an remote control event. [ 2230.024700][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2230.024732][ T5299] dvb-usb: error while querying for an remote control event. [ 2231.022851][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2231.022894][ T5299] dvb-usb: error while querying for an remote control event. [ 2232.095394][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2232.095504][ T5299] dvb-usb: error while querying for an remote control event. [ 2234.077305][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2234.077335][ T5299] dvb-usb: error while querying for an remote control event. [ 2235.162780][T14991] dvb-usb: bulk message failed: -22 (1/0) [ 2235.162821][T14991] dvb-usb: error while querying for an remote control event. [ 2236.169591][T14991] dvb-usb: bulk message failed: -22 (1/0) [ 2236.169622][T14991] dvb-usb: error while querying for an remote control event. [ 2238.165345][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2238.165378][ T5299] dvb-usb: error while querying for an remote control event. [ 2239.263781][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2239.263823][ T5299] dvb-usb: error while querying for an remote control event. [ 2240.302763][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2240.302870][ T5299] dvb-usb: error while querying for an remote control event. [ 2241.339395][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 2241.339426][ T8] dvb-usb: error while querying for an remote control event. [ 2242.356066][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2242.356110][ T5299] dvb-usb: error while querying for an remote control event. [ 2243.368031][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2243.368064][ T5299] dvb-usb: error while querying for an remote control event. [ 2244.353560][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2244.353592][ T5299] dvb-usb: error while querying for an remote control event. [ 2245.380206][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2245.380238][ T5299] dvb-usb: error while querying for an remote control event. [ 2246.398895][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2246.398967][ T5299] dvb-usb: error while querying for an remote control event. [ 2247.401616][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2247.401647][ T5299] dvb-usb: error while querying for an remote control event. [ 2248.396884][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2248.396917][ T5299] dvb-usb: error while querying for an remote control event. [ 2249.422594][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2249.422626][ T5299] dvb-usb: error while querying for an remote control event. [ 2250.440408][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2250.440440][ T5299] dvb-usb: error while querying for an remote control event. [ 2251.439050][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2251.439198][ T5299] dvb-usb: error while querying for an remote control event. [ 2251.489744][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2251.489824][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2252.453200][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 2252.453242][ T8] dvb-usb: error while querying for an remote control event. [ 2255.459485][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2255.459562][ T5299] dvb-usb: error while querying for an remote control event. [ 2256.514605][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 2256.514712][ T8] dvb-usb: error while querying for an remote control event. [ 2257.568047][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 2257.568161][ T8] dvb-usb: error while querying for an remote control event. [ 2258.509660][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 2258.509700][ T8] dvb-usb: error while querying for an remote control event. [ 2260.500075][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 2260.500106][ T8] dvb-usb: error while querying for an remote control event. [ 2262.539432][ T30] INFO: task syz.4.2276:20303 blocked for more than 152 seconds. [ 2262.539540][ T30] Not tainted 6.12.0-rc4-syzkaller #0 [ 2262.539563][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2262.539578][ T30] task:syz.4.2276 state:D stack:25824 pid:20303 tgid:20303 ppid:19169 flags:0x00000006 [ 2262.539763][ T30] Call Trace: [ 2262.539776][ T30] [ 2262.539798][ T30] __schedule+0xe55/0x5730 [ 2262.539917][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 2262.539958][ T30] ? lockdep_hardirqs_on_prepare+0x370/0x420 [ 2262.540014][ T30] ? __pfx___schedule+0x10/0x10 [ 2262.540128][ T30] ? schedule+0x298/0x350 [ 2262.540175][ T30] ? __pfx_lock_release+0x10/0x10 [ 2262.540210][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 2262.540334][ T30] ? lock_acquire+0x2f/0xb0 [ 2262.540369][ T30] ? schedule+0x1fd/0x350 [ 2262.540420][ T30] schedule+0xe7/0x350 [ 2262.540531][ T30] schedule_preempt_disabled+0x13/0x30 [ 2262.540582][ T30] __mutex_lock+0x5b8/0x9c0 [ 2262.540709][ T30] ? tty_release_struct+0xad/0xe0 [ 2262.540771][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2262.540898][ T30] ? __pfx___might_resched+0x10/0x10 [ 2262.540945][ T30] ? ldsem_up_write+0x44/0x70 [ 2262.541057][ T30] ? tty_release_struct+0xad/0xe0 [ 2262.541132][ T30] tty_release_struct+0xad/0xe0 [ 2262.541257][ T30] tty_release+0xe25/0x1410 [ 2262.541340][ T30] ? __pfx_tty_release+0x10/0x10 [ 2262.541460][ T30] __fput+0x3f6/0xb60 [ 2262.541516][ T30] task_work_run+0x14e/0x250 [ 2262.541555][ T30] ? __pfx_task_work_run+0x10/0x10 [ 2262.541659][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 2262.541713][ T30] get_signal+0x1ca/0x2770 [ 2262.541760][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 2262.541861][ T30] ? find_held_lock+0x2d/0x110 [ 2262.541918][ T30] ? __pfx_get_signal+0x10/0x10 [ 2262.541962][ T30] ? __pfx_lock_release+0x10/0x10 [ 2262.542062][ T30] ? do_raw_spin_lock+0x12d/0x2c0 [ 2262.542116][ T30] arch_do_signal_or_restart+0x90/0x7e0 [ 2262.542234][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2262.542314][ T30] syscall_exit_to_user_mode+0x150/0x2a0 [ 2262.542433][ T30] do_syscall_64+0xda/0x250 [ 2262.542491][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2262.542606][ T30] RIP: 0033:0x7fc46637dff9 [ 2262.542637][ T30] RSP: 002b:00007ffd62dd0b98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 2262.542675][ T30] RAX: 0000000000000000 RBX: 00007fc466537a80 RCX: 00007fc46637dff9 [ 2262.542708][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 2262.542798][ T30] RBP: 00007fc466537a80 R08: 0000000000000006 R09: 00007ffd62dd0e8f [ 2262.542825][ T30] R10: 00000000005d3ae8 R11: 0000000000000246 R12: 00000000001feb9a [ 2262.542851][ T30] R13: 00007ffd62dd0ca0 R14: 0000000000000032 R15: ffffffffffffffff [ 2262.542899][ T30] [ 2262.542982][ T30] INFO: task syz.1.2285:20329 blocked for more than 152 seconds. [ 2262.543008][ T30] Not tainted 6.12.0-rc4-syzkaller #0 [ 2262.543029][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2262.543044][ T30] task:syz.1.2285 state:D stack:28624 pid:20329 tgid:20327 ppid:19298 flags:0x00004004 [ 2262.543224][ T30] Call Trace: [ 2262.543238][ T30] [ 2262.543331][ T30] __schedule+0xe55/0x5730 [ 2262.543377][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 2262.543414][ T30] ? lockdep_hardirqs_on_prepare+0x370/0x420 [ 2262.543525][ T30] ? __pfx___schedule+0x10/0x10 [ 2262.543573][ T30] ? schedule+0x298/0x350 [ 2262.543636][ T30] ? __pfx_lock_release+0x10/0x10 [ 2262.543738][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 2262.543796][ T30] ? lock_acquire+0x2f/0xb0 [ 2262.543832][ T30] ? schedule+0x1fd/0x350 [ 2262.543953][ T30] schedule+0xe7/0x350 [ 2262.544002][ T30] schedule_preempt_disabled+0x13/0x30 [ 2262.544114][ T30] __mutex_lock+0x5b8/0x9c0 [ 2262.544173][ T30] ? tty_open+0x53d/0xf80 [ 2262.544220][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2262.544383][ T30] ? tty_open+0x53d/0xf80 [ 2262.544420][ T30] tty_open+0x53d/0xf80 [ 2262.544458][ T30] ? chrdev_open+0x596/0x6a0 [ 2262.544569][ T30] ? __pfx_tty_open+0x10/0x10 [ 2262.544606][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2262.544651][ T30] ? lock_acquire+0x2f/0xb0 [ 2262.544763][ T30] ? chrdev_open+0x36b/0x6a0 [ 2262.544807][ T30] ? __pfx_tty_open+0x10/0x10 [ 2262.544846][ T30] chrdev_open+0x237/0x6a0 [ 2262.544950][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 2262.544996][ T30] ? bpf_lsm_file_open+0x9/0x10 [ 2262.545034][ T30] ? security_file_open+0x62a/0x9d0 [ 2262.545165][ T30] do_dentry_open+0x6ca/0x1530 [ 2262.545228][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 2262.545344][ T30] vfs_open+0x82/0x3f0 [ 2262.545397][ T30] dentry_open+0x71/0xd0 [ 2262.545507][ T30] ptm_open_peer+0x1c0/0x290 [ 2262.545563][ T30] ? __pfx_ptm_open_peer+0x10/0x10 [ 2262.545679][ T30] ? do_vfs_ioctl+0x513/0x1990 [ 2262.545740][ T30] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2262.545865][ T30] tty_ioctl+0x12a6/0x15d0 [ 2262.545928][ T30] ? __pfx_tty_ioctl+0x10/0x10 [ 2262.546053][ T30] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 2262.546110][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 2262.546245][ T30] ? selinux_file_ioctl+0x180/0x270 [ 2262.546290][ T30] ? selinux_file_ioctl+0xb4/0x270 [ 2262.546410][ T30] ? __pfx_tty_ioctl+0x10/0x10 [ 2262.546470][ T30] __x64_sys_ioctl+0x18f/0x220 [ 2262.546587][ T30] do_syscall_64+0xcd/0x250 [ 2262.546645][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2262.546763][ T30] RIP: 0033:0x7fdb6d37dff9 [ 2262.546794][ T30] RSP: 002b:00007fdb6e1a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2262.546831][ T30] RAX: ffffffffffffffda RBX: 00007fdb6d536058 RCX: 00007fdb6d37dff9 [ 2262.546858][ T30] RDX: 0000000000000000 RSI: 0000000000005441 RDI: 0000000000000003 [ 2262.546947][ T30] RBP: 00007fdb6d3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 2262.546974][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2262.547000][ T30] R13: 0000000000000000 R14: 00007fdb6d536058 R15: 00007fffca682dd8 [ 2262.547048][ T30] [ 2262.547132][ T30] INFO: task syz.1.2285:20330 blocked for more than 152 seconds. [ 2262.547158][ T30] Not tainted 6.12.0-rc4-syzkaller #0 [ 2262.547179][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2262.547193][ T30] task:syz.1.2285 state:D stack:28384 pid:20330 tgid:20327 ppid:19298 flags:0x00004004 [ 2262.547394][ T30] Call Trace: [ 2262.547408][ T30] [ 2262.547515][ T30] __schedule+0xe55/0x5730 [ 2262.547565][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 2262.547606][ T30] ? lockdep_hardirqs_on_prepare+0x371/0x420 [ 2262.547745][ T30] ? __pfx___schedule+0x10/0x10 [ 2262.547795][ T30] ? schedule+0x298/0x350 [ 2262.547925][ T30] ? __pfx_lock_release+0x10/0x10 [ 2262.547962][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 2262.548019][ T30] ? lock_acquire+0x2f/0xb0 [ 2262.548120][ T30] ? schedule+0x1fd/0x350 [ 2262.548175][ T30] schedule+0xe7/0x350 [ 2262.548223][ T30] schedule_preempt_disabled+0x13/0x30 [ 2262.548340][ T30] __mutex_lock+0x5b8/0x9c0 [ 2262.548401][ T30] ? tty_open+0x53d/0xf80 [ 2262.548443][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2262.548588][ T30] ? tty_open+0x53d/0xf80 [ 2262.548636][ T30] tty_open+0x53d/0xf80 [ 2262.548674][ T30] ? chrdev_open+0x10e/0x6a0 [ 2262.548787][ T30] ? __pfx_tty_open+0x10/0x10 [ 2262.548825][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2262.548870][ T30] ? lock_acquire+0x2f/0xb0 [ 2262.548962][ T30] ? chrdev_open+0x80/0x6a0 [ 2262.549007][ T30] ? __pfx_tty_open+0x10/0x10 [ 2262.549044][ T30] chrdev_open+0x237/0x6a0 [ 2264.524991][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2264.525034][ T5299] dvb-usb: error while querying for an remote control event. [ 2265.519250][ T5299] dvb-usb: bulk message failed: -22 (1/0) [ 2265.519290][ T5299] dvb-usb: error while querying for an remote control event. [ 2265.559488][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 2265.559542][ T30] ? bpf_lsm_file_open+0x9/0x10 [ 2265.559661][ T30] ? security_file_open+0x62a/0x9d0 [ 2265.559723][ T30] do_dentry_open+0x6ca/0x1530 [ 2265.559778][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 2265.559896][ T30] ? inode_permission+0xdd/0x5f0 [ 2265.559949][ T30] vfs_open+0x82/0x3f0 [ 2265.559990][ T30] ? may_open+0x1f2/0x400 [ 2265.560108][ T30] path_openat+0x1e6a/0x2d60 [ 2265.560162][ T30] ? __pfx_path_openat+0x10/0x10 [ 2265.560201][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 2265.560311][ T30] do_filp_open+0x1dc/0x430 [ 2265.560350][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 2265.560386][ T30] ? find_held_lock+0x2d/0x110 [ 2265.560535][ T30] ? _raw_spin_unlock+0x28/0x50 [ 2265.560582][ T30] ? alloc_fd+0x2d7/0x6c0 [ 2265.560710][ T30] do_sys_openat2+0x17a/0x1e0 [ 2265.560758][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 2265.560866][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 2265.560934][ T30] __x64_sys_openat+0x175/0x210 [ 2265.561045][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 2265.561110][ T30] ? selinux_file_ioctl+0xb4/0x270 [ 2265.561242][ T30] do_syscall_64+0xcd/0x250 [ 2265.561304][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2265.561421][ T30] RIP: 0033:0x7fdb6d37c990 [ 2265.561459][ T30] RSP: 002b:00007fdb6e17ff00 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2265.561510][ T30] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdb6d37c990 [ 2265.561536][ T30] RDX: 0000000000000000 RSI: 00007fdb6e17ffa0 RDI: 00000000ffffff9c [ 2265.561628][ T30] RBP: 00007fdb6e17ffa0 R08: 0000000000000000 R09: 00007fdb6e17fd17 [ 2265.561656][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2265.561681][ T30] R13: 0000000000000001 R14: 00007fdb6d536130 R15: 00007fffca682dd8 [ 2265.561728][ T30] [ 2265.561813][ T30] [ 2265.561813][ T30] Showing all locks held in the system: [ 2265.561829][ T30] 2 locks held by kthreadd/2: [ 2265.561853][ T30] 3 locks held by kworker/u8:0/11: [ 2265.561875][ T30] 4 locks held by kworker/u8:1/12: [ 2265.561900][ T30] 1 lock held by khungtaskd/30: [ 2265.562007][ T30] #0: ffffffff8e1b8380 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x7f/0x390 [ 2265.562104][ T30] 3 locks held by kworker/u8:2/35: [ 2265.562193][ T30] 4 locks held by kworker/1:1/46: [ 2265.562216][ T30] #0: ffff88801b081948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 2265.562380][ T30] #1: ffffc90000b77d80 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 2265.562472][ T30] #2: ffffffff8fee24a8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x84/0x1130 [ 2265.562635][ T30] #3: ffff888068128768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: reg_check_chans_work+0x111/0x1130 [ 2265.562797][ T30] 3 locks held by kworker/u8:3/52: [ 2265.562818][ T30] 3 locks held by kworker/u8:4/57: [ 2265.562912][ T30] 3 locks held by kworker/u8:6/1911: [ 2265.562934][ T30] #0: ffff88802e662948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 2265.563082][ T30] #1: ffffc9000464fd80 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 2265.563190][ T30] #2: ffffffff8fee24a8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x12/0x30 [ 2265.563367][ T30] 2 locks held by syslogd/4655: [ 2265.563459][ T30] 2 locks held by klogd/4662: [ 2265.563483][ T30] 2 locks held by udevd/4673: [ 2265.563506][ T30] 1 lock held by dhcpcd/4886: [ 2265.563528][ T30] 1 lock held by dhcpcd/4887: [ 2265.563551][ T30] 2 locks held by getty/4978: [ 2265.563636][ T30] #0: ffff8880321820a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 2265.563741][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfba/0x1480 [ 2265.563905][ T30] 4 locks held by kworker/1:8/5329: [ 2265.563990][ T30] 3 locks held by kworker/u8:9/5379: [ 2265.564015][ T30] 3 locks held by kworker/u8:10/5381: [ 2265.564037][ T30] 3 locks held by kworker/u8:12/5506: [ 2265.564060][ T30] 3 locks held by kworker/u8:13/5507: [ 2265.564083][ T30] 3 locks held by kworker/u8:15/8460: [ 2265.564171][ T30] 6 locks held by kworker/u9:3/13204: [ 2265.564194][ T30] 2 locks held by kworker/u8:8/13406: [ 2265.564216][ T30] 4 locks held by kworker/1:0/16508: [ 2265.564239][ T30] 5 locks held by kworker/u8:5/18132: [ 2265.564261][ T30] 3 locks held by kworker/u8:14/18141: [ 2265.564348][ T30] 3 locks held by kworker/u8:16/18142: [ 2265.564375][ T30] 1 lock held by syz-executor/19836: [ 2265.564416][ T30] 2 locks held by syz.4.2270/20280: [ 2265.564445][ T30] 1 lock held by syz.4.2276/20303: [ 2265.564531][ T30] #0: ffffffff8ee69848 (tty_mutex){+.+.}-{3:3}, at: tty_release_struct+0xad/0xe0 [ 2265.564703][ T30] 1 lock held by syz.4.2276/20304: [ 2265.564728][ T30] 4 locks held by syz.0.2282/20316: [ 2265.564752][ T30] 1 lock held by syz.1.2285/20327: [ 2265.564775][ T30] 1 lock held by syz.1.2285/20329: [ 2265.564797][ T30] #0: ffffffff8ee69848 (tty_mutex){+.+.}-{3:3}, at: tty_open+0x53d/0xf80 [ 2265.564972][ T30] 1 lock held by syz.1.2285/20330: [ 2265.564994][ T30] #0: ffffffff8ee69848 (tty_mutex){+.+.}-{3:3}, at: tty_open+0x53d/0xf80 [ 2265.565170][ T30] 2 locks held by udevd/20333: [ 2265.565193][ T30] [ 2265.565203][ T30] ============================================= [ 2265.565203][ T30] [ 2265.565297][ T30] NMI backtrace for cpu 0 [ 2265.565316][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc4-syzkaller #0 [ 2265.565356][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2265.565378][ T30] Call Trace: [ 2265.565392][ T30] [ 2265.565407][ T30] dump_stack_lvl+0x116/0x1f0 [ 2265.565469][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 2265.565514][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2265.565574][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 2265.565623][ T30] watchdog+0xf0c/0x1240 [ 2265.565666][ T30] ? __pfx_watchdog+0x10/0x10 [ 2265.565700][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 2265.565753][ T30] ? __kthread_parkme+0x148/0x220 [ 2265.565803][ T30] ? __pfx_watchdog+0x10/0x10 [ 2265.565839][ T30] kthread+0x2c1/0x3a0 [ 2265.565881][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 2265.565926][ T30] ? __pfx_kthread+0x10/0x10 [ 2265.565974][ T30] ret_from_fork+0x45/0x80 [ 2265.566009][ T30] ? __pfx_kthread+0x10/0x10 [ 2265.566055][ T30] ret_from_fork_asm+0x1a/0x30 [ 2265.566127][ T30] [ 2265.566204][ T30] Sending NMI from CPU 0 to CPUs 1: [ 2265.566240][ C1] NMI backtrace for cpu 1 [ 2265.566255][ C1] CPU: 1 UID: 0 PID: 20319 Comm: syz.4.2276 Not tainted 6.12.0-rc4-syzkaller #0 [ 2265.566285][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2265.566302][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x5a/0x70 [ 2265.566365][ C1] Code: 35 8b 82 1c 16 00 00 85 c0 74 2b 8b 82 f8 15 00 00 83 f8 02 75 20 48 8b 8a 00 16 00 00 8b 92 fc 15 00 00 48 8b 01 48 83 c0 01 <48> 39 d0 73 07 48 89 01 48 89 34 c1 c3 cc cc cc cc 0f 1f 44 00 00 [ 2265.566394][ C1] RSP: 0018:ffffc90002defcd0 EFLAGS: 00000016 [ 2265.566415][ C1] RAX: 0000000000040000 RBX: 0000000000000001 RCX: ffffc9001325f000 [ 2265.566434][ C1] RDX: 0000000000040000 RSI: ffffffff81531a73 RDI: 0000000000000011 [ 2265.566452][ C1] RBP: ffff88801cf95a00 R08: 0000000000000002 R09: fffffbfff2dc538a [ 2265.566469][ C1] R10: ffffffff96e29c57 R11: 0000000000000000 R12: 0000000000000011 [ 2265.566486][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000001 [ 2265.566504][ C1] FS: 00007fc465dbd6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 2265.566536][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2265.566558][ C1] CR2: 00000000201e0030 CR3: 000000006957e000 CR4: 00000000003526f0 [ 2265.566576][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2265.566592][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2265.566609][ C1] Call Trace: [ 2265.566617][ C1] [ 2265.566626][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 2265.566658][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2265.566706][ C1] ? nmi_handle+0x1a9/0x5c0 [ 2265.566737][ C1] ? __sanitizer_cov_trace_pc+0x5a/0x70 [ 2265.566778][ C1] ? default_do_nmi+0x6a/0x160 [ 2265.566805][ C1] ? exc_nmi+0x170/0x1e0 [ 2265.566832][ C1] ? end_repeat_nmi+0xf/0x53 [ 2265.566895][ C1] ? send_signal_locked+0x413/0x800 [ 2265.566923][ C1] ? __sanitizer_cov_trace_pc+0x5a/0x70 [ 2265.566961][ C1] ? __sanitizer_cov_trace_pc+0x5a/0x70 [ 2265.567000][ C1] ? __sanitizer_cov_trace_pc+0x5a/0x70 [ 2265.567044][ C1] [ 2265.567053][ C1] [ 2265.567063][ C1] send_signal_locked+0x413/0x800 [ 2265.567090][ C1] ? __lock_task_sighand+0x146/0x340 [ 2265.567115][ C1] group_send_sig_info+0x2aa/0x300 [ 2265.567146][ C1] ? __pfx_group_send_sig_info+0x10/0x10 [ 2265.567185][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2265.567216][ C1] ? rcu_is_watching+0x12/0xc0 [ 2265.567251][ C1] bpf_send_signal_common+0x2e8/0x3a0 [ 2265.567287][ C1] bpf_send_signal+0x19/0x30 [ 2265.567318][ C1] bpf_prog_7ba5217f62dcd359+0x41/0x45 [ 2265.567338][ C1] bpf_trace_run2+0x231/0x590 [ 2265.567379][ C1] ? __pfx_bpf_trace_run2+0x10/0x10 [ 2265.567418][ C1] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 2265.567457][ C1] syscall_trace_enter+0x1b2/0x240 [ 2265.567503][ C1] do_syscall_64+0x1ee/0x250 [ 2265.567546][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2265.567587][ C1] RIP: 0033:0x7fc466319959 [ 2265.567606][ C1] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 2265.567631][ C1] RSP: 002b:00007fc465dbcb40 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 2265.567655][ C1] RAX: ffffffffffffffda RBX: 00007fc466536138 RCX: 00007fc466319959 [ 2265.567674][ C1] RDX: 00007fc465dbcb40 RSI: 00007fc465dbcc70 RDI: 0000000000000011 [ 2265.567691][ C1] RBP: 00007fc466536130 R08: 0000000000000000 R09: 0000000000000000 [ 2265.567711][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc46653613c [ 2265.567731][ C1] R13: 0000000000000000 R14: 00007ffd62dd0950 R15: 00007ffd62dd0a38 [ 2265.567760][ C1] [ 2265.568270][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 2265.568288][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc4-syzkaller #0 [ 2265.568324][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2265.568342][ T30] Call Trace: [ 2265.568352][ T30] [ 2265.568383][ T30] dump_stack_lvl+0x3d/0x1f0 [ 2265.568446][ T30] panic+0x71d/0x800 [ 2265.568497][ T30] ? __pfx_panic+0x10/0x10 [ 2265.568554][ T30] ? __irq_work_queue_local+0x136/0x440 [ 2265.568611][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2265.568666][ T30] ? irq_work_queue+0x2a/0x80 [ 2265.568720][ T30] ? watchdog+0xd76/0x1240 [ 2265.568753][ T30] ? watchdog+0xd69/0x1240 [ 2265.568791][ T30] watchdog+0xd87/0x1240 [ 2265.568832][ T30] ? __pfx_watchdog+0x10/0x10 [ 2265.568865][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 2265.568915][ T30] ? __kthread_parkme+0x148/0x220 [ 2265.568963][ T30] ? __pfx_watchdog+0x10/0x10 [ 2265.568998][ T30] kthread+0x2c1/0x3a0 [ 2265.569039][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 2265.569081][ T30] ? __pfx_kthread+0x10/0x10 [ 2265.569123][ T30] ret_from_fork+0x45/0x80 [ 2265.569154][ T30] ? __pfx_kthread+0x10/0x10 [ 2265.569196][ T30] ret_from_fork_asm+0x1a/0x30 [ 2265.569261][ T30] [ 2265.569642][ T30] Kernel Offset: disabled