last executing test programs: 5.504338861s ago: executing program 2 (id=3): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES8], &(0x7f0000000040)='syzkaller\x00', 0xa, 0x0, 0x0, 0x56aaa7a79eba33be, 0x2b}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000700)=ANY=[@ANYBLOB='b ', @ANYRESDEC=0x0], 0xf) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x185001, 0x0) write$proc_mixer(r6, 0x0, 0xb8) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) getgid() dup3(r7, r6, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) r9 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffd000/0x3000)=nil) shmat(r9, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r9, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000feffffff0000000092c900009500000000000001752f4e36a3c94f4ce3aaa644e77929b3dbb3dea9bdef"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 4.946373399s ago: executing program 2 (id=6): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) (async) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r0 = getpid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000001400)={{0x80, 0x2}, 'port1\x00', 0xe3, 0x1b1c07}) (async) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/62, 0x3e}], 0x1) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r4, 0x7a9, &(0x7f00000000c0)={{@any, 0x7f}, 0xfffffffffffffff8, 0x64, 0x1, 0x5, 0xe04000, 0x8, 0x9, 0x3}) (async) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r5, 0x40043d0d, 0x0) 4.833506715s ago: executing program 2 (id=7): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1c, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r5, 0x0, 0x0}, 0x20) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r1, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xf}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000580)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000010", 0x8, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], {0x2, 0x0, 0x8}}}}}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x24, r1, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x24}}, 0x0) 4.730754581s ago: executing program 1 (id=2): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x14, r1, 0x701}, 0x14}, 0x1, 0x2403}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r3, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa8, r3, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVKEY={0x4c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x48, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x5555555555550101}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x50}, 0x8084) 4.284093807s ago: executing program 1 (id=8): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x3000000) 4.205211201s ago: executing program 1 (id=9): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x20044840) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000200)='maps\x00') r5 = open_tree(r4, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c4b20710200e01015a000000000109021b00010000000009040000012e6d0a000905ff"], 0x0) move_mount(r5, 0x0, 0xffffffffffffff9c, 0x0, 0x244) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x5, 0x2, 0x39, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x8, 0x6, 0x354}}) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x7, 0x3, @vifc_lcl_ifindex=r6, @multicast2}, 0x10) 4.205006294s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/cpu_byteorder', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x453, 0x800, 0x70bd25, 0x25dfdbfb, "eb1f81e73e453f2b41c7e13dff4bdeec7aa11d99267ba6689288f5e15ee74bbf966d866eb451323009", ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) fdatasync(r2) 4.139912229s ago: executing program 0 (id=1): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r6, 0x84, 0x74, 0x0, &(0x7f0000000340)) listen(r5, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = dup(0xffffffffffffffff) ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f0000000380)={{r8}, "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"}) recvfrom(r7, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 4.118021079s ago: executing program 4 (id=5): openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="030000000000000001000000070000000400000000000000010000006cffffff810000a492b13199ce3170dbc5cdbc68a1d9000000000000000000000000000a0000000800000001000009000000050000000000000000000000000000885769bef7000471000100000002000000957a000003ddffff02020000000000000000000000660802110e65d8aecc720dab1111c8e4fa1365"]) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x3ff, 0x3, 0x7, 0xe51, 0xffffffffffffffff, 0x5478, 0x103f, 0x6, 0x3, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x102cd2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 3) 3.124132472s ago: executing program 2 (id=10): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c01000019000100000000000000000020010000000000000000000000000000ac1414aa0000000000000061b802c00000000000000000000a00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000a900"/32], 0x13c}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0xff88, &(0x7f0000000340)={&(0x7f0000000080)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@dev, @in6=@mcast2, @in=@multicast2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}]}]}, 0xa0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000084) 3.123662558s ago: executing program 3 (id=11): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x20, 0x8, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000200)={0x20, 0x30, 0x3, "129fed"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x5, 0xc4, &(0x7f0000000440)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb2, 0x3, 0x1, 0x5, 0x10, 0xc, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x90}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x301, 0x5, 0x5, 0x1}, @extension_unit={0xc, 0x24, 0x8, 0x4, 0x9, 0x1, "cb097cea2d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x0, 0x4, 'a', "181f87"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x36, 0x1, 0xff, 0xe, "cb715416900e"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x8, 0x2, 0x0, 0x3, "64b358d51e"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xd1, 0x2, 0xfc, 0xc, "4a2811bff10b83c9"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x5, 0xa, 0x80, {0x7, 0x25, 0x1, 0x2, 0x8, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x7, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x3, 0x9, 0xdd, {0x7, 0x25, 0x1, 0x81, 0x3, 0x9}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x10, 0x0, 0x3, 0x0, 0xdc}, 0xa7, &(0x7f0000000540)={0x5, 0xf, 0xa7, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x9, 0xf00, 0xf219, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xa, 0xff, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0xf7, "5e199f6d0477c45bd956e992f530c13a"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x6, 0x8, 0x800}, @ptm_cap={0x3}, @generic={0x67, 0x10, 0x1, "db926372d350f9d9f9bd59e431d7f561e419d3ae7856a4cb62d455ebec84260e25d6f151cc2858ec185e24cdc0a5888e8207fca0f29e5ce4a7b36773e81f9b01988d9d5100f0022b50b9c104731ffb88f762bc26a01aa59af6139a9f3cb6259181ae6352"}]}, 0x2, [{0xe2, &(0x7f00000008c0)=@string={0xe2, 0x3, "21202248394f04e9a55869a6626ef6489935dd6947cd6a79e97fdf5b7be48106a82a9c8308ff08ee7d127c0c561d06b98f1d20bb6f5d09c70ca1bb293e563e0bbc3e29f1fff8d425a591c4ae871a756c39ce75b169e444038fe6b2f1f735df70d06b657db6496e5c31ae854167f3279f6546d1f23660d2bf70c86d586a197034f736062f62223a2963b299be56edcfe99f8c3bd220747c17ac9e6f3c990b4963a6dbf2cd93f6795e104c6f98c01e40ab9fed656effcf9be96045b2a6ee8cb87c419372a67cca8559ca738e48afdd48b13613f113b90163f39bea9e223e7bb4df"}}, {0x48, &(0x7f0000000380)=@string={0x48, 0x3, "9363b292c4999d7e83703a89182c9c39dbdd3284527abbdea37734b8b706feb2a894f6d99ed5c69841336da09efbf68298c98c444d4a619264ac2800b9e847174e9c6faa8d0f"}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000002c0)={0x20, 0xe7e8fa71447d4e79, 0xd, "a55c44d94cf22866bf243c82b7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, &(0x7f0000000280)='m', 0x1, 0x20008005, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @broadcast}, {0x0, @link_local}, 0x4a, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'veth0_to_team\x00'}) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x3) 3.110527208s ago: executing program 0 (id=12): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 2.982355899s ago: executing program 4 (id=13): pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{0x6, 0x7, 0x2, 0x8}]}) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000001880), 0x40101, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000600)={0x11, 0x8000000000000001, 0x0, 0x4, 0xfffffffffffffffe, 0x100000000000000, 0x5, 0x8}, 0x0, &(0x7f0000000680)={0x5, 0x1, 0x800000, 0x3, 0x7, 0x4bf, 0x4}, 0x0, 0x0) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x60881, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000140)={@my=0x0}) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000100)={@local}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000580)=[{{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f00000003c0)="a1bc1efb3ee2f37f91512c1e904f268ca7614ad5483ab473a72a6b4cf8c45db0da958a15f8f44fb57cb99f3644bd16e26c0ab0c0391eac253062e9d2a415fc3226761f14c00198c1c2d7feace370687378728bbe45fb9ccf23a8e3ec218a8da2ef64fca8c8590eede594b4", 0x6b}, {&(0x7f0000000440)="d0346120839b38cb275c17fdcfa5df814077874e96d23259a8fba0a8779be82a2f3864ff12d52e58d6ebed4118cdf9768ecad4e5c8676471750839b1094a4657aee10c662ea7a24c459d1ad55800f3db7926b3cf8f3d72e3792009e55c641adda4ffa5fc98e445b16260b1d78a9069", 0x6f}, {&(0x7f0000000500)="6f9aef034a23978605033d0a2d829f9a38b2f4227ae5ac5ceabc6a19df81057c6fcf152627e495f673a91af2126381e13003b4a8baa039319948bc2511c6b8d41c5d0f10b3c705f4e581aa6a0fe73934d4a5501114", 0x55}, {&(0x7f0000000180)="99c18c62ee8fafb8973c57bfbf8d47893e790d9481", 0x15}, {&(0x7f0000000280)="7dc4c142b4aba13724a60d95fee43dd1b843805aa74ee665988dc0cea7cb3dab8406ea21e53df0b76afe6c17cae3f2382b017c95294eb57dd024", 0x3a}, {&(0x7f00000006c0)="21384faba07f73999d987aeffd71224ede9050cd8be86550d4f025b767ca73f2e1e2b67775d04a823daf2069aa05a7686656958b1d0f724b8f2393d6cfda703ed6576f0ddaa29b7c2df17f24254e2ead6914ba755bb6e0b9ab5a1a65ca402e22bf2e987f087e92bd8a87deaf921dfd02740b095875279311b769e89cdc43f4a396acc518249a7d83ad6b7398f0098e080f3a515903fd893975341d18d8bfd81aa30635494756719c3862c03854dc2061287aba752ac0c74e1cbf4b564ba075e2ba1126cfc76a41f6e55cae001d56fa3eeb32a0f79bc0ff25a72b338850c49ee42570e4320318c8955cc28e8f03dab893057b18400f1be31534f36c71", 0xfc}, {&(0x7f0000000880)="d4e1c65e42dcc1b6b4d574e6dfbaf66133f8535fc5cab54075315f5a51eeaa5593b75108c258492e61eca414cd9b53ebfe8084d21b731d98a3902b95b41ee3f617399ab7b60eb9483d72ec3a90a674baf17f4ddfbea3acd4f5252891289cc03658dda179ba8730e4388f97475c7e9839a4b08a037d476fe3033292c190b9dd6354b0551870871cc9e0565583bdf5dd36d01cbd6095a7610d60fcce7459f455246cac0ee04ef2e7423a9cd5e6f4a26829", 0xb0}, {&(0x7f0000000940)="76cf384aa19434bf68c3755f09a200c2b36c694c3bacfa78a907c06480f7e73781f6e4ed92258cdcd0571b0f695ec0cd63a3ac437ba05ed9c47c4576d5649dfa8c424213cc909a50a80f396eea9fcd3a4fbd9120307c8f4a8d2dfe6c244084995e9b9a9b8143fb5fb360ed4e77283233d123860d69ec166983005f83a93ad0880a4c42b3f17c48523da28e6afbb63c2b08d8069503d6944895942036aeda0971c6b932a4e297f3f0bc5f4cc470db2acef87f3e1745728d9f178f99bf0f14e92d6e05a2ed81b929b54eae26f18a1b876701784d91f121b353fc6b956046c9ab46e1357ff9675904e92c5298651c0c288cca3a3843de3b517c", 0xf8}, {&(0x7f0000000a40)="22028d8067833b04d3a1ee94b73bb035d08be849a5787e4eca082b1c126ffae072617ead0a1b2894fd5df316e314864bb50716a3ad4fa59061713f900074c161a9177899112666a1357df0d47cf19d3b1d91796bd343d399b3b005f35b89fcec5ad0121a88af7a7e586e4c3cdba0d8ce744ede51aa682606db9267a0a95fd0b7e88d635bd22b6de48632111749f1d4c4fe68ceaab5ba0d650b484d3fd7e1417c46fe0132546c18", 0xa7}, {&(0x7f0000000b00)="37ca00b99fcad10b8fa068b3a37be958b80bdacf7755aef8692f8993c2357e8c77d1e7f1053aef52c665f2efc74fd14f6e5e3e83e90212f00a9f59837596e635814c48081b4e8c787f6462fcefefc837da453f7ad2c652569b59074a6ee70c380363e3a48f5add7bdf2efa220b6ce90c3185dc13b9486f753b734c22c0ee31ce3bbedea228d843c712d4c67aa2445edeb34999a10964818524d40442f7079ec16d0e045969168516c48779", 0xab}], 0xa, &(0x7f0000000d40)=ANY=[@ANYBLOB="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", @ANYRES32=r10, @ANYRES32=r4, @ANYRES32=r10, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r4, @ANYRES32=r7, @ANYRES32=r10, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x88, 0x1}}], 0x1, 0x8840) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.885064545s ago: executing program 2 (id=14): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096010006010003000000002a90a02700000000b3813e"], 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r5, 0x89ec, &(0x7f0000000380)={0x5, 0x9}) 2.391961842s ago: executing program 0 (id=15): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) iopl(0x3) gettid() timer_create(0x7, 0x0, &(0x7f0000bbdffc)) r3 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x1d5, &(0x7f0000000000)={0x0, 0x1, 0x8}) mq_timedreceive(r3, 0x0, 0x0, 0x9, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x7, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000003, 0x20010, 0xffffffffffffffff, 0x3000) r4 = fsopen(&(0x7f00000003c0)='zonefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000001680)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xe8\xdc\xbb\xd9\x8d\x1d\xa7\xb7\xad\xa7L\xecD\xafO\xbf \r\x86\xffh\x84\xf7\xef\xff\xb5\xba\xe5\xab\xb1\xbaX\xc5\x9a\xad4\x19\xd7\xfe\xab+\xeb?\xb2\xbd', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000ec0)='\xcfD\xbc\xbf\x95@\xd6j\'$\x1d\x14\xb7!\x8b\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\x04[\x02\xa9[>\xf9\x9c\x83@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby\xe1\xdf\x1a\xae\xd6ez\xe5\xa8\xe1\'', 0x0, r4) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000a40)='\xcfD\xbc\xbf\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\xec\xe6\x04T\xcbn\xa5\xc3\x04[\x02\xa9[=\xf9\x8b\xf7\xc1\x9c\x83@\x1e\x99\xca\xc3\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby:\xd8\xc5\xccrun4\xe0\xca\xc1\x0f\xc3\x03D\xe1\f\xb3O\xa4\x1c\x04]8)}\x83:\x9e\xc0X\xdb\xd9\x89\x94\x9b(\x19\\\xf5!w\xbafo\xea\xe4\xb5Xe\x84\xbc\xcdw\x802\xb4\xb8\x1f\xc2\x97\xbfi\xe8\xf8\xbd\x1d,\xffUX\xbeA\x00{\"\xdbya#I\x03\xec\xed\x8b\x97\xff\x1eiq\xd1n\xf99\xc6\a\a\xed\x0f\x15x\x91\xdc\x05P\xf7\xf3\xad\xa3\xbc\xe4[\xa2\xc7\xfa\x9e\xad\xa2\xad\x86\xc4\aD\xc9\xdf\xf8\xf7\xc1\xc5\xc5.\x8a&:\x90\xb2\x8c\x86\xb2\\\xa8%!\x98TQ\x91\x00\x00\x00\x00$\x99\xbf', &(0x7f00000006c0)='\x01\x8dik\xc2\xed\xf9\x8a\xae\x86\xae)Dn<(\x02:cU\xa0d\xd4\x1f\xd4\x95\x93\xb7\xc1\xcc\x84\x8c\xdd\xbf^]~\xcf\xcb6w\xb3\xfa0b\x88\x04\x10\x9d_\x97\x9f\x89\xb7\xe35C\xf3\x1b\xafV\\wGU\xaf\xa4\f&\xe7m\xf0\xaa{\xb2\xe5\xe2\xeb\x9bN#\x99\xdc\x9f\"\xab&\x8f\x01\x17Y\xaf\xb7\xdc`r\x9c6\\\x0e\x94\xc0a\xf7\xd4u\xdf\xf0\x9b\xb0p\v\xa1\x8a\x145\x9b\xd95\xc8U\xe4V\x81-1\xb0K\x9a\xa3+\x03\xc1\xf0\xeb\xafYI&\x9e\xd0\xe1\x148\xfe\x10\x0f\xbd\xa2\xed}\xe6\x1asT\x1f\x92\xdb\xa1&\'\xc7\xe9\xa5\xd0\x89\x8d\xf1$\"\xdc\xe5\xfcT\xad\fj\xfe\'t', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='\x01\xdc', &(0x7f0000000340)='{)+}@@!}\x00', 0x0) read(r4, 0x0, 0x0) 1.808050868s ago: executing program 4 (id=16): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 1.585273256s ago: executing program 4 (id=17): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000240), 0x2, 0x0) (async) r2 = openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x2, 0x281) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x2, @empty, 0xfff}, 0x1c) (async) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @remote, 0xb}, 0x1c) (async, rerun: 64) syz_emit_ethernet(0xa2, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60010100006c1100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) (rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r5) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) (async, rerun: 32) r8 = msgget$private(0x0, 0xfffffffffffffffd) (rerun: 32) msgrcv(r8, 0x0, 0x0, 0x1, 0x3000) (async) msgrcv(r8, 0x0, 0x0, 0x1, 0x0) (async, rerun: 64) msgsnd(r8, &(0x7f0000000000)={0x1}, 0x8, 0x0) (async, rerun: 64) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fddbdf250f00000008000300", @ANYRES32=r7, @ANYBLOB="05002d0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8008001}, 0x0) (async) ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f00000000c0)=0x1d) (async, rerun: 32) r9 = socket(0x2, 0x80805, 0x0) (async, rerun: 32) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x7a, &(0x7f0000000340)={r11, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r11, 0x9, 0x3}, 0xc) (async) write$cgroup_subtree(r2, 0x0, 0xfffffffffffffcba) 1.555046558s ago: executing program 0 (id=18): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) r5 = inotify_init() inotify_add_watch(r5, &(0x7f00000000c0)='.\x00', 0x5000009) fallocate(r4, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.407935009s ago: executing program 4 (id=19): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) prlimit64(r0, 0x5, 0x0, &(0x7f0000000040)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r1, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f00000000c0)={0x574, 0x15, 0x2, 0x70bd27, 0x25dfdbfe, {0x29}, [@INET_DIAG_REQ_BYTECODE={0x86, 0x1, "692b9d017b0e51388c73cf6111be21f99f7d0ea1ab4cc7fc5c17cec8102802da78867e8227e8caad7074d7e5924cdc5e2d364947eba42aa007d5531a90ff5353f8499e85057762aecf9bf2348059dce1f3a3479a971c370864ff0dae54369dad99020fc6afcd49fa759a565449fe03c7433866365efdc0d0fe0d204e042e5eb3dd3f"}, @INET_DIAG_REQ_BYTECODE={0xf7, 0x1, "bd9ef70cac27cc2496cac1a96593faa6b6ec497541627e1430e5f9acf2f9f191e90db2f5e60a745a8e6080acf42a6b702909a8a3fefb99e2c5c5d7a477b18c52d45804fc604d4a767bef5c06b7406ae25da6e3e32b5978913c3866c358282dfb32eb44c0fe54525ac7baed87eb21f798656a3cc579001690a96da6f57bdd904e44738c0bdd759370a938f82007b1a8aff43e9232b0b7cd483703f332203f759c924ace2b2aaea196f1dbbf2051f6ee091a5af192b813717c8819815c73a87c023da628bcdf62f84801e4477655f925ef2f6fa499964d42902f6dcc4b122012215667325f25ef8a652243fd8ff31ab4d61ade65"}, @INET_DIAG_REQ_BYTECODE={0x96, 0x1, "672a539ccb223278d4afcdc5e7f361e4f5806cfc87874faff1013465d260a2f3d39a0936b5b1f5194edc1442d7a1dc1f7e29c2bd728fa729b3206b4a4347444545351e9e62df84de463f422cc90929d50da1df865c4bca6495556287ed4d151425bdf05b4d781e64331b9444c8b4942edab3d0a955d7a14ed71d439f17b760558c460e30b5ce413f0b64e35dbdc4253194d6"}, @INET_DIAG_REQ_BYTECODE={0x33, 0x1, "4843118938433a11a243ab636d87970c4fb9822a9c511937c20d1f76f88d0093cb0411a523933309b69d89d574e907"}, @INET_DIAG_REQ_BYTECODE={0x37, 0x1, "549659dcfb562275366e453249e2387ae562749fe6c384a731b162fed1b658b746e20d3d0e7797da1c6f382430438727c902eb"}, @INET_DIAG_REQ_BYTECODE={0xcc, 0x1, "254bf1c3f79a7823eefedbaf16f7c76b2907cbef3fcc193becab827a85e35e3556eaa226818d41b354463a6d31256ebe15f427fc304bdf853adf2f45d890076c04428007696a4d0a8a7cab7b931c5e32dd92ff9543708b7ce66875ba56b93a4f09695ba102895411e3dfd5ce228355f42e0bada95df6c2dce47a2886a5c99be6c1af01cc044d137145c1d5393a389c25f84be7af63dff7a089ea09384d16e865caf43444a45fd3aebe2a6ea9fbeccd4fe53def32e4dca32e8d529e856648a4f3bfecd88c0266f77d"}, @INET_DIAG_REQ_BYTECODE={0xaf, 0x1, "cc0c4e72663d06312bc3fe0400d17734b3c37ae2d13d2657cbeb8f9a6cc0ed742d5625eff531816d25ff7ee5016f2fb70d77afba06505af129bebadeaac0171a66c7e37f3d847c0b0bf4ab087f3722be74c9a9d03087cfa2c4623dd1f2f8d07f094d64c68f3cbccfcfd2e2c212868051388f147d27862220d544a77edcbe38f345de86e2a7cea32e2b159cf2a7fe185f3e91aab241cc5a2b64ed61dbe9e1b7dd4189fffa6b9006d5eaf605"}, @INET_DIAG_REQ_BYTECODE={0x39, 0x1, "4b0d7de7c2eb34989ffc63a3ea441859430f74cf6d16479557b68bf6f4d79d1821033e8a29dc2ce82175978ce8bea961b3c95f4a97"}, @INET_DIAG_REQ_BYTECODE={0xe8, 0x1, "e75f054964ecb418598477ac91385d67056f2fbb1f454296091b2b1a1d58d3e734056e3e790e4b59d74a9bc3f651f592db652e8a294ff2c226e3c65f9a06fd31de18235afcc46375a9775b1ebe3f3740f321e627440e0a7abe18f57e845dc8717c34968b046ef15b0c6e99af5fa14d8703d55a97f4e30edc1912c0498826d6dcb7b57d77b0bab0629745947315b1e020d1891e5a6ea8c739ad6a0e49e9d82f47440037f6bb6a2978a59f681b511a1377a1bdf6dfcb689976a2809973675098e3566fc515139874a120ed1d48883e3c4023ab0473974b403479180dcab9d37e2ba97c7a4b"}, @INET_DIAG_REQ_BYTECODE={0x3c, 0x1, "d764511fd361078a1036d0f6b403d3ce9967a9ce8aeb51e2a2f8f96a1c25014d2020a38fc898b20ae35a3d93f761c1b77b398975b285eeab"}]}, 0x574}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000006c0), 0x400, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x3c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd0}, 0x8000) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000800)={0x18, 0x0, {0x0, @remote, 'macvtap0\x00'}}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x6, 0xcb) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8884}, 0x1) fsopen(&(0x7f0000000980)='hfs\x00', 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000b, 0x8010, r2, 0x5cc43000) r5 = getpid() socket(0x10, 0x6, 0x8) socket$igmp6(0xa, 0x3, 0x2) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x44000) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) read$FUSE(r6, &(0x7f0000000b00)={0x2020, 0x0, 0x0}, 0x2020) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b80), r2) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r8, &(0x7f0000002c40)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002c00)={&(0x7f0000002bc0)={0x3c, r9, 0x200, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x1) prlimit64(r5, 0xe, &(0x7f0000002c80)={0x4, 0x401}, &(0x7f0000002cc0)) socket$pppoe(0x18, 0x1, 0x0) r10 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETS(r10, 0x5402, &(0x7f0000002d00)={0x5a, 0x6, 0x4, 0x9, 0x1, "ea30a2427ebfb769c5a1fe13687067005f78e7"}) write$FUSE_INTERRUPT(r2, &(0x7f0000002d40)={0x10, 0x0, r7}, 0x10) dup(r3) socket$nl_netfilter(0x10, 0x3, 0xc) 1.227311305s ago: executing program 1 (id=20): mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0]) r0 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x20002) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000400)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x43, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000005c0)={@private2, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0x0, r7}) syz_emit_ethernet(0x82, &(0x7f0000000100)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) 47.057857ms ago: executing program 0 (id=21): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) r5 = inotify_init() inotify_add_watch(r5, &(0x7f00000000c0)='.\x00', 0x5000009) fallocate(r4, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 0s ago: executing program 4 (id=22): openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$vim2m(0x0, 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x2098f907, 0x5}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) shutdown(r0, 0x2) sendto$inet6(r0, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty, 0xfe800000}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x20000023896) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.137' (ED25519) to the list of known hosts. [ 59.060005][ T30] audit: type=1400 audit(1751512309.560:62): avc: denied { mounton } for pid=5799 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 59.063681][ T5799] cgroup: Unknown subsys name 'net' [ 59.082770][ T30] audit: type=1400 audit(1751512309.560:63): avc: denied { mount } for pid=5799 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.110152][ T30] audit: type=1400 audit(1751512309.600:64): avc: denied { unmount } for pid=5799 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.256140][ T5799] cgroup: Unknown subsys name 'cpuset' [ 59.264260][ T5799] cgroup: Unknown subsys name 'rlimit' [ 59.370838][ T30] audit: type=1400 audit(1751512309.870:65): avc: denied { setattr } for pid=5799 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.394612][ T30] audit: type=1400 audit(1751512309.870:66): avc: denied { create } for pid=5799 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.427243][ T30] audit: type=1400 audit(1751512309.870:67): avc: denied { write } for pid=5799 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.447944][ T30] audit: type=1400 audit(1751512309.870:68): avc: denied { read } for pid=5799 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.468261][ T30] audit: type=1400 audit(1751512309.900:69): avc: denied { mounton } for pid=5799 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 59.493243][ T30] audit: type=1400 audit(1751512309.900:70): avc: denied { mount } for pid=5799 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 59.515435][ T5801] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 59.525195][ T30] audit: type=1400 audit(1751512309.910:71): avc: denied { read } for pid=5481 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 60.459246][ T5799] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.292082][ T5813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.300842][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.309147][ T5819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.317319][ T5819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.324793][ T5819] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.332136][ T5819] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.340730][ T5819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.348912][ T5819] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.356768][ T5819] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.365386][ T5137] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.378880][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.388008][ T5823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.395782][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.401420][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.412161][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.415632][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.419798][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.426880][ T5819] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.441883][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.450123][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.461496][ T5823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.474615][ T5823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.482013][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.490435][ T5823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.500376][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.865869][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 63.952759][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 63.983792][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 64.035313][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 64.110403][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 64.175559][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.182663][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.190241][ T5818] bridge_slave_0: entered allmulticast mode [ 64.198247][ T5818] bridge_slave_0: entered promiscuous mode [ 64.221119][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.228728][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.235850][ T5810] bridge_slave_0: entered allmulticast mode [ 64.242807][ T5810] bridge_slave_0: entered promiscuous mode [ 64.249609][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.257030][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.264583][ T5816] bridge_slave_0: entered allmulticast mode [ 64.271290][ T5816] bridge_slave_0: entered promiscuous mode [ 64.278910][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.286327][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.293705][ T5816] bridge_slave_1: entered allmulticast mode [ 64.300302][ T5816] bridge_slave_1: entered promiscuous mode [ 64.307342][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.314628][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.321862][ T5818] bridge_slave_1: entered allmulticast mode [ 64.328767][ T5818] bridge_slave_1: entered promiscuous mode [ 64.346629][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.353728][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.360811][ T5810] bridge_slave_1: entered allmulticast mode [ 64.368412][ T5810] bridge_slave_1: entered promiscuous mode [ 64.426958][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.455975][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.466976][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.477973][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.487166][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.494427][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.501575][ T5809] bridge_slave_0: entered allmulticast mode [ 64.508868][ T5809] bridge_slave_0: entered promiscuous mode [ 64.519903][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.538202][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.547683][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.554923][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.562002][ T5809] bridge_slave_1: entered allmulticast mode [ 64.568809][ T5809] bridge_slave_1: entered promiscuous mode [ 64.607737][ T5816] team0: Port device team_slave_0 added [ 64.638416][ T5810] team0: Port device team_slave_0 added [ 64.645638][ T5816] team0: Port device team_slave_1 added [ 64.666483][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.673669][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.680745][ T5824] bridge_slave_0: entered allmulticast mode [ 64.688241][ T5824] bridge_slave_0: entered promiscuous mode [ 64.696233][ T5810] team0: Port device team_slave_1 added [ 64.711613][ T5818] team0: Port device team_slave_0 added [ 64.719578][ T5818] team0: Port device team_slave_1 added [ 64.727085][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.736408][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.743882][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.750988][ T5824] bridge_slave_1: entered allmulticast mode [ 64.757695][ T5824] bridge_slave_1: entered promiscuous mode [ 64.787408][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.818564][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.825741][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.852629][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.865531][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.872479][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.898679][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.922992][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.929990][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.956832][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.977607][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.987774][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.995141][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.021251][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.040046][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.047229][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.073783][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.088409][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.095719][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.122084][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.141323][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.169788][ T5809] team0: Port device team_slave_0 added [ 65.198550][ T5824] team0: Port device team_slave_0 added [ 65.223583][ T5809] team0: Port device team_slave_1 added [ 65.232717][ T5810] hsr_slave_0: entered promiscuous mode [ 65.239015][ T5810] hsr_slave_1: entered promiscuous mode [ 65.247403][ T5824] team0: Port device team_slave_1 added [ 65.266521][ T5816] hsr_slave_0: entered promiscuous mode [ 65.272559][ T5816] hsr_slave_1: entered promiscuous mode [ 65.278593][ T5816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.286279][ T5816] Cannot create hsr debugfs directory [ 65.332966][ T5818] hsr_slave_0: entered promiscuous mode [ 65.339516][ T5818] hsr_slave_1: entered promiscuous mode [ 65.345555][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.353100][ T5818] Cannot create hsr debugfs directory [ 65.370137][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.377820][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.404045][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.416444][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.423507][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.424335][ T5819] Bluetooth: hci0: command tx timeout [ 65.451616][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.489329][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.496309][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.503447][ T5819] Bluetooth: hci2: command tx timeout [ 65.522440][ T5823] Bluetooth: hci1: command tx timeout [ 65.527948][ T5815] Bluetooth: hci3: command tx timeout [ 65.539436][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.573926][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.580867][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.606944][ T5815] Bluetooth: hci4: command tx timeout [ 65.607003][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.729718][ T5824] hsr_slave_0: entered promiscuous mode [ 65.735759][ T5824] hsr_slave_1: entered promiscuous mode [ 65.741555][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.750121][ T5824] Cannot create hsr debugfs directory [ 65.797585][ T5809] hsr_slave_0: entered promiscuous mode [ 65.804709][ T5809] hsr_slave_1: entered promiscuous mode [ 65.810586][ T5809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.818443][ T5809] Cannot create hsr debugfs directory [ 65.979183][ T5810] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.991211][ T5810] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.030864][ T5810] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.058993][ T5810] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.119004][ T5816] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.128193][ T5816] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.145741][ T5816] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.166022][ T5816] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.210654][ T5818] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.224128][ T5818] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.242831][ T5818] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.262168][ T5818] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.330559][ T5824] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.354885][ T5824] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.378816][ T5824] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.405280][ T5824] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.440818][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.462597][ T5809] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.479850][ T5809] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.490525][ T5809] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.501016][ T5809] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.516761][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.526954][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.570728][ T190] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.578001][ T190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.589198][ T190] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.596287][ T190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.613741][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.651399][ T4593] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.658600][ T4593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.688266][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.706726][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.713837][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.749926][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.782239][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.789198][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 66.789209][ T30] audit: type=1400 audit(1751512317.300:87): avc: denied { sys_module } for pid=5810 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 66.853245][ T2207] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.860380][ T2207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.869922][ T2207] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.877057][ T2207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.901796][ T5816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.928325][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.940836][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.963922][ T2207] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.971042][ T2207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.001486][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.008648][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.038843][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.098852][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.106019][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.151017][ T4593] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.158146][ T4593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.206899][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.226531][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.415348][ T5816] veth0_vlan: entered promiscuous mode [ 67.467021][ T5816] veth1_vlan: entered promiscuous mode [ 67.479600][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.508610][ T5815] Bluetooth: hci0: command tx timeout [ 67.563180][ T5816] veth0_macvtap: entered promiscuous mode [ 67.584296][ T5815] Bluetooth: hci1: command tx timeout [ 67.589723][ T5815] Bluetooth: hci3: command tx timeout [ 67.593626][ T5819] Bluetooth: hci2: command tx timeout [ 67.601061][ T5816] veth1_macvtap: entered promiscuous mode [ 67.673607][ T5819] Bluetooth: hci4: command tx timeout [ 67.690660][ T5818] veth0_vlan: entered promiscuous mode [ 67.710981][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.730726][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.755939][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.767955][ T5818] veth1_vlan: entered promiscuous mode [ 67.780449][ T5816] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.790481][ T5816] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.800952][ T5816] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.809705][ T5816] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.854989][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.886404][ T5810] veth0_vlan: entered promiscuous mode [ 67.911124][ T5818] veth0_macvtap: entered promiscuous mode [ 67.935673][ T5824] veth0_vlan: entered promiscuous mode [ 67.944955][ T5810] veth1_vlan: entered promiscuous mode [ 67.956044][ T5818] veth1_macvtap: entered promiscuous mode [ 67.987803][ T5824] veth1_vlan: entered promiscuous mode [ 68.001963][ T5809] veth0_vlan: entered promiscuous mode [ 68.009029][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.023096][ T5809] veth1_vlan: entered promiscuous mode [ 68.030625][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.077486][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.096497][ T190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.103100][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.111604][ T190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.132557][ T5824] veth0_macvtap: entered promiscuous mode [ 68.149752][ T5818] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.158865][ T5818] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.169130][ T5818] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.177994][ T5818] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.194531][ T5809] veth0_macvtap: entered promiscuous mode [ 68.201328][ T5824] veth1_macvtap: entered promiscuous mode [ 68.213413][ T30] audit: type=1400 audit(1751512318.720:88): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/root/syzkaller.PGRSpr/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 68.236474][ T5809] veth1_macvtap: entered promiscuous mode [ 68.238629][ T30] audit: type=1400 audit(1751512318.720:89): avc: denied { mount } for pid=5816 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.257417][ T5810] veth0_macvtap: entered promiscuous mode [ 68.272887][ T30] audit: type=1400 audit(1751512318.720:90): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/root/syzkaller.PGRSpr/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.300221][ T30] audit: type=1400 audit(1751512318.720:91): avc: denied { mount } for pid=5816 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 68.326509][ T30] audit: type=1400 audit(1751512318.720:92): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/root/syzkaller.PGRSpr/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 68.356329][ T30] audit: type=1400 audit(1751512318.720:93): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/root/syzkaller.PGRSpr/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 68.395933][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.405001][ T30] audit: type=1400 audit(1751512318.720:94): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.411796][ T5816] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.452029][ T5810] veth1_macvtap: entered promiscuous mode [ 68.461269][ T30] audit: type=1400 audit(1751512318.780:95): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 68.463098][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.495073][ T30] audit: type=1400 audit(1751512318.810:96): avc: denied { mount } for pid=5816 comm="syz-executor" name="/" dev="gadgetfs" ino=6356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 68.497402][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.528111][ T5824] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.537990][ T5824] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.547627][ T5824] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.556529][ T5824] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.580991][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.610670][ T5809] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.630202][ T5809] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.640572][ T5809] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.649912][ T5809] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.667066][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.833087][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.859612][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.879954][ T5810] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.899172][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.914662][ T5810] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.926863][ T5810] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.936187][ T5810] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.044387][ T5925] mmap: syz.2.3 (5925) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 69.125355][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.147135][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.190352][ T190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.206010][ T190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.291172][ T2207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.312822][ T2207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.447802][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.468810][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.514018][ T190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.521859][ T190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.525555][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.544627][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.583627][ T5819] Bluetooth: hci0: command tx timeout [ 69.664820][ T5823] Bluetooth: hci1: command tx timeout [ 69.670479][ T5823] Bluetooth: hci2: command tx timeout [ 69.676280][ T5819] Bluetooth: hci3: command tx timeout [ 69.729060][ T190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.744822][ T5815] Bluetooth: hci4: command tx timeout [ 69.759877][ T190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.118442][ T5960] FAULT_INJECTION: forcing a failure. [ 70.118442][ T5960] name failslab, interval 1, probability 0, space 0, times 1 [ 70.132074][ T5960] CPU: 1 UID: 0 PID: 5960 Comm: syz.4.5 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 70.132099][ T5960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 70.132109][ T5960] Call Trace: [ 70.132115][ T5960] [ 70.132122][ T5960] dump_stack_lvl+0x16c/0x1f0 [ 70.132151][ T5960] should_fail_ex+0x512/0x640 [ 70.132173][ T5960] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 70.132197][ T5960] should_failslab+0xc2/0x120 [ 70.132221][ T5960] __kmalloc_cache_noprof+0x6a/0x3e0 [ 70.132240][ T5960] ? __pfx___might_resched+0x10/0x10 [ 70.132262][ T5960] ? vhost_task_create+0xe5/0x2e0 [ 70.132278][ T5960] ? rcu_is_watching+0x12/0xc0 [ 70.132298][ T5960] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 70.132323][ T5960] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 70.132353][ T5960] vhost_task_create+0xe5/0x2e0 [ 70.132369][ T5960] ? __pfx_vhost_task_create+0x10/0x10 [ 70.132393][ T5960] ? __pfx_vhost_task_fn+0x10/0x10 [ 70.132421][ T5960] kvm_mmu_post_init_vm+0x1b7/0x370 [ 70.132446][ T5960] kvm_arch_vcpu_ioctl_run+0x66/0x18c0 [ 70.132467][ T5960] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 70.132492][ T5960] kvm_vcpu_ioctl+0x5eb/0x1690 [ 70.132522][ T5960] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 70.132550][ T5960] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 70.132578][ T5960] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 70.132615][ T5960] ? hook_file_ioctl_common+0x145/0x410 [ 70.132650][ T5960] ? selinux_file_ioctl+0x180/0x270 [ 70.132672][ T5960] ? selinux_file_ioctl+0xb4/0x270 [ 70.132696][ T5960] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 70.132717][ T5960] __x64_sys_ioctl+0x18b/0x210 [ 70.132739][ T5960] do_syscall_64+0xcd/0x4c0 [ 70.132766][ T5960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.132783][ T5960] RIP: 0033:0x7f13b978e929 [ 70.132798][ T5960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.132814][ T5960] RSP: 002b:00007f13ba68a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.132831][ T5960] RAX: ffffffffffffffda RBX: 00007f13b99b6080 RCX: 00007f13b978e929 [ 70.132842][ T5960] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 70.132852][ T5960] RBP: 00007f13ba68a090 R08: 0000000000000000 R09: 0000000000000000 [ 70.132862][ T5960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.132872][ T5960] R13: 0000000000000000 R14: 00007f13b99b6080 R15: 00007fff7207a588 [ 70.132895][ T5960] [ 70.953694][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.960871][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.966636][ T5923] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 71.118256][ T5965] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10'. [ 71.123517][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.160012][ T5923] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 71.172653][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.248894][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 71.358755][ T5923] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 71.454362][ T5820] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 71.532093][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 71.548362][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.583208][ T5923] usb 2-1: config 0 descriptor?? [ 71.664701][ T5815] Bluetooth: hci0: command tx timeout [ 71.677470][ T5923] pegasus_notetaker 2-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 71.736727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 71.746944][ T5815] Bluetooth: hci3: command tx timeout [ 71.752439][ T5819] Bluetooth: hci2: command tx timeout [ 71.753703][ T5823] Bluetooth: hci1: command tx timeout [ 71.758034][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.873678][ T5815] Bluetooth: hci4: command tx timeout [ 71.990913][ T43] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 72.018743][ T5820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.030449][ T5820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.041525][ T5820] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 72.043979][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 72.051683][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.110267][ T5923] usb 2-1: USB disconnect, device number 2 [ 72.146518][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.305827][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 72.313640][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.329916][ T5820] usb 4-1: config 0 descriptor?? [ 72.359032][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.403442][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.424456][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 72.448560][ T43] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 72.459107][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.465439][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 72.499364][ T43] usb 3-1: config 0 descriptor?? [ 72.577459][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 72.577473][ T30] audit: type=1400 audit(1751512323.080:135): avc: denied { name_bind } for pid=5985 comm="syz.4.17" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 72.693962][ T30] audit: type=1400 audit(1751512323.200:136): avc: denied { read append } for pid=5992 comm="syz.4.19" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 72.774594][ T30] audit: type=1400 audit(1751512323.220:137): avc: denied { open } for pid=5992 comm="syz.4.19" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 72.801141][ T30] audit: type=1400 audit(1751512323.220:138): avc: denied { create } for pid=5992 comm="syz.4.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.821131][ T30] audit: type=1400 audit(1751512323.220:139): avc: denied { ioctl } for pid=5992 comm="syz.4.19" path="socket:[6883]" dev="sockfs" ino=6883 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.865061][ T30] audit: type=1400 audit(1751512323.220:140): avc: denied { create } for pid=5992 comm="syz.4.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.665950][ T5820] pyra 0003:1E7D:2CF6.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 73.701499][ T43] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 73.752064][ T30] audit: type=1400 audit(1751512323.280:141): avc: denied { map } for pid=5992 comm="syz.4.19" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 73.776724][ T30] audit: type=1400 audit(1751512323.280:142): avc: denied { create } for pid=5992 comm="syz.4.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 73.782142][ T43] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 73.809412][ T43] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 73.811435][ T30] audit: type=1400 audit(1751512323.280:143): avc: denied { open } for pid=5992 comm="syz.4.19" path="/dev/ttyqc" dev="devtmpfs" ino=387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 73.817560][ T43] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 73.848620][ T43] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 73.860894][ T43] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 73.879017][ T43] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 73.896372][ T43] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 73.961997][ T5971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.970937][ T5971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.979721][ T30] audit: type=1400 audit(1751512323.460:144): avc: denied { read append } for pid=5988 comm="syz.0.18" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 74.060783][ T43] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 74.070217][ T43] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 74.077519][ T43] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 74.084979][ T43] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 74.095562][ T43] ================================================================== [ 74.103634][ T43] BUG: KASAN: slab-out-of-bounds in mon_copy_to_buff+0xc2/0x170 [ 74.111274][ T43] Read of size 3904 at addr ffff88807d20c581 by task kworker/1:1/43 [ 74.119243][ T43] [ 74.121556][ T43] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 74.121575][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 74.121585][ T43] Workqueue: usb_hub_wq hub_event [ 74.121603][ T43] Call Trace: [ 74.121608][ T43] [ 74.121614][ T43] dump_stack_lvl+0x116/0x1f0 [ 74.121635][ T43] print_report+0xcd/0x680 [ 74.121654][ T43] ? __virt_addr_valid+0x81/0x610 [ 74.121670][ T43] ? __phys_addr+0xe8/0x180 [ 74.121684][ T43] ? mon_copy_to_buff+0xc2/0x170 [ 74.121703][ T43] kasan_report+0xe0/0x110 [ 74.121722][ T43] ? mon_copy_to_buff+0xc2/0x170 [ 74.121748][ T43] kasan_check_range+0x100/0x1b0 [ 74.121762][ T43] __asan_memcpy+0x23/0x60 [ 74.121777][ T43] mon_copy_to_buff+0xc2/0x170 [ 74.121798][ T43] mon_bin_event+0x1071/0x2050 [ 74.121821][ T43] ? __pfx_mon_bin_event+0x10/0x10 [ 74.121842][ T43] mon_bus_submit+0xcf/0x140 [ 74.121860][ T43] usb_hcd_submit_urb+0x12d/0x1c60 [ 74.121878][ T43] ? __device_attach+0x1e4/0x4b0 [ 74.121896][ T43] ? bus_probe_device+0x17f/0x1c0 [ 74.121911][ T43] ? device_add+0x1148/0x1a70 [ 74.121931][ T43] ? usb_set_configuration+0x1187/0x1e20 [ 74.121945][ T43] ? usb_generic_driver_probe+0xb1/0x110 [ 74.121968][ T43] usb_submit_urb+0x87c/0x1790 [ 74.121989][ T43] ? lockdep_set_lock_cmp_fn+0xb1/0xe0 [ 74.122011][ T43] ? __init_swait_queue_head+0xca/0x150 [ 74.122027][ T43] usb_start_wait_urb+0x104/0x4b0 [ 74.122048][ T43] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 74.122071][ T43] ? __asan_memset+0x23/0x50 [ 74.122086][ T43] usb_control_msg+0x326/0x4a0 [ 74.122106][ T43] ? __pfx_usb_control_msg+0x10/0x10 [ 74.122129][ T43] usbhid_raw_request+0x58f/0x700 [ 74.122151][ T43] ? __pfx_usbhid_raw_request+0x10/0x10 [ 74.122171][ T43] __hid_request+0x299/0x3c0 [ 74.122187][ T43] hidinput_connect+0x1ada/0x2bd0 [ 74.122210][ T43] hid_connect+0x13f3/0x1a60 [ 74.122224][ T43] ? trace_kmalloc+0x2b/0xd0 [ 74.122243][ T43] ? __kmalloc_noprof+0x242/0x510 [ 74.122260][ T43] ? __asan_memset+0x23/0x50 [ 74.122276][ T43] ? __pfx_hid_connect+0x10/0x10 [ 74.122294][ T43] hid_hw_start+0xaa/0x140 [ 74.122309][ T43] ms_probe+0x195/0x500 [ 74.122329][ T43] ? __pfx_ms_probe+0x10/0x10 [ 74.122349][ T43] hid_device_probe+0x363/0x720 [ 74.122364][ T43] ? __pfx_hid_device_probe+0x10/0x10 [ 74.122380][ T43] really_probe+0x241/0xa90 [ 74.122398][ T43] __driver_probe_device+0x1de/0x440 [ 74.122417][ T43] driver_probe_device+0x4c/0x1b0 [ 74.122434][ T43] __device_attach_driver+0x1df/0x310 [ 74.122453][ T43] ? __pfx___device_attach_driver+0x10/0x10 [ 74.122471][ T43] bus_for_each_drv+0x159/0x1e0 [ 74.122485][ T43] ? __pfx_bus_for_each_drv+0x10/0x10 [ 74.122500][ T43] ? lockdep_hardirqs_on+0x7c/0x110 [ 74.122519][ T43] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 74.122538][ T43] __device_attach+0x1e4/0x4b0 [ 74.122555][ T43] ? __pfx___device_attach+0x10/0x10 [ 74.122573][ T43] ? do_raw_spin_unlock+0x172/0x230 [ 74.122589][ T43] bus_probe_device+0x17f/0x1c0 [ 74.122605][ T43] device_add+0x1148/0x1a70 [ 74.122626][ T43] ? __pfx_device_add+0x10/0x10 [ 74.122647][ T43] ? debugfs_create_file_full+0x41/0x60 [ 74.122667][ T43] hid_add_device+0x373/0xa60 [ 74.122682][ T43] ? __pfx_hid_add_device+0x10/0x10 [ 74.122694][ T43] ? lockdep_init_map_type+0x5c/0x280 [ 74.122715][ T43] ? lockdep_init_map_type+0x5c/0x280 [ 74.122742][ T43] usbhid_probe+0xd38/0x13f0 [ 74.122763][ T43] usb_probe_interface+0x300/0x9c0 [ 74.122782][ T43] ? __pfx_usb_probe_interface+0x10/0x10 [ 74.122799][ T43] really_probe+0x241/0xa90 [ 74.122817][ T43] __driver_probe_device+0x1de/0x440 [ 74.122835][ T43] driver_probe_device+0x4c/0x1b0 [ 74.122853][ T43] __device_attach_driver+0x1df/0x310 [ 74.122871][ T43] ? __pfx___device_attach_driver+0x10/0x10 [ 74.122889][ T43] bus_for_each_drv+0x159/0x1e0 [ 74.122903][ T43] ? __pfx_bus_for_each_drv+0x10/0x10 [ 74.122917][ T43] ? lockdep_hardirqs_on+0x7c/0x110 [ 74.122935][ T43] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 74.122953][ T43] __device_attach+0x1e4/0x4b0 [ 74.122971][ T43] ? __pfx___device_attach+0x10/0x10 [ 74.122989][ T43] ? do_raw_spin_unlock+0x172/0x230 [ 74.123004][ T43] bus_probe_device+0x17f/0x1c0 [ 74.123020][ T43] device_add+0x1148/0x1a70 [ 74.123041][ T43] ? __pfx_device_add+0x10/0x10 [ 74.123060][ T43] ? preempt_schedule_thunk+0x16/0x30 [ 74.123079][ T43] usb_set_configuration+0x1187/0x1e20 [ 74.123099][ T43] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 74.123119][ T43] usb_generic_driver_probe+0xb1/0x110 [ 74.123140][ T43] usb_probe_device+0xec/0x3e0 [ 74.123155][ T43] ? __pfx_usb_probe_device+0x10/0x10 [ 74.123170][ T43] really_probe+0x241/0xa90 [ 74.123188][ T43] __driver_probe_device+0x1de/0x440 [ 74.123205][ T43] ? usb_driver_applicable+0x1c7/0x220 [ 74.123223][ T43] driver_probe_device+0x4c/0x1b0 [ 74.123241][ T43] __device_attach_driver+0x1df/0x310 [ 74.123259][ T43] ? __pfx___device_attach_driver+0x10/0x10 [ 74.123277][ T43] bus_for_each_drv+0x159/0x1e0 [ 74.123291][ T43] ? __pfx_bus_for_each_drv+0x10/0x10 [ 74.123308][ T43] ? lockdep_hardirqs_on+0x7c/0x110 [ 74.123328][ T43] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 74.123347][ T43] __device_attach+0x1e4/0x4b0 [ 74.123364][ T43] ? __pfx___device_attach+0x10/0x10 [ 74.123382][ T43] ? do_raw_spin_unlock+0x172/0x230 [ 74.123398][ T43] bus_probe_device+0x17f/0x1c0 [ 74.123414][ T43] device_add+0x1148/0x1a70 [ 74.123434][ T43] ? __pfx_device_add+0x10/0x10 [ 74.123454][ T43] ? usb_detect_static_quirks+0x335/0x3e0 [ 74.123476][ T43] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 74.123495][ T43] usb_new_device+0xd07/0x1a20 [ 74.123510][ T43] ? do_raw_spin_lock+0x12c/0x2b0 [ 74.123524][ T43] ? __pfx_usb_new_device+0x10/0x10 [ 74.123538][ T43] ? mark_held_locks+0x49/0x80 [ 74.123558][ T43] hub_event+0x2eb7/0x4fa0 [ 74.123580][ T43] ? __pfx_hub_event+0x10/0x10 [ 74.123593][ T43] ? assoc_array_gc+0x1260/0x15b0 [ 74.123617][ T43] ? rcu_is_watching+0x12/0xc0 [ 74.123634][ T43] process_one_work+0x9cf/0x1b70 [ 74.123650][ T43] ? __pfx_hcd_resume_work+0x10/0x10 [ 74.123666][ T43] ? __pfx_process_one_work+0x10/0x10 [ 74.123682][ T43] ? assign_work+0x1a0/0x250 [ 74.123703][ T43] worker_thread+0x6c8/0xf10 [ 74.123719][ T43] ? __pfx_worker_thread+0x10/0x10 [ 74.123733][ T43] kthread+0x3c2/0x780 [ 74.123749][ T43] ? __pfx_kthread+0x10/0x10 [ 74.123761][ T43] ? rcu_is_watching+0x12/0xc0 [ 74.123777][ T43] ? __pfx_kthread+0x10/0x10 [ 74.123789][ T43] ret_from_fork+0x5d4/0x6f0 [ 74.123808][ T43] ? __pfx_kthread+0x10/0x10 [ 74.123819][ T43] ret_from_fork_asm+0x1a/0x30 [ 74.123837][ T43] [ 74.123842][ T43] [ 74.781196][ T43] Allocated by task 43: [ 74.785335][ T43] kasan_save_stack+0x33/0x60 [ 74.790019][ T43] kasan_save_track+0x14/0x30 [ 74.794681][ T43] __kasan_kmalloc+0xaa/0xb0 [ 74.799255][ T43] __kmalloc_noprof+0x223/0x510 [ 74.804092][ T43] __hid_request+0x2c/0x3c0 [ 74.808585][ T43] hidinput_connect+0x1ada/0x2bd0 [ 74.813608][ T43] hid_connect+0x13f3/0x1a60 [ 74.818190][ T43] hid_hw_start+0xaa/0x140 [ 74.822587][ T43] ms_probe+0x195/0x500 [ 74.827253][ T43] hid_device_probe+0x363/0x720 [ 74.832086][ T43] really_probe+0x241/0xa90 [ 74.836572][ T43] __driver_probe_device+0x1de/0x440 [ 74.841838][ T43] driver_probe_device+0x4c/0x1b0 [ 74.846845][ T43] __device_attach_driver+0x1df/0x310 [ 74.852199][ T43] bus_for_each_drv+0x159/0x1e0 [ 74.857031][ T43] __device_attach+0x1e4/0x4b0 [ 74.861780][ T43] bus_probe_device+0x17f/0x1c0 [ 74.866613][ T43] device_add+0x1148/0x1a70 [ 74.871141][ T43] hid_add_device+0x373/0xa60 [ 74.875810][ T43] usbhid_probe+0xd38/0x13f0 [ 74.880405][ T43] usb_probe_interface+0x300/0x9c0 [ 74.885514][ T43] really_probe+0x241/0xa90 [ 74.890019][ T43] __driver_probe_device+0x1de/0x440 [ 74.895307][ T43] driver_probe_device+0x4c/0x1b0 [ 74.900346][ T43] __device_attach_driver+0x1df/0x310 [ 74.905718][ T43] bus_for_each_drv+0x159/0x1e0 [ 74.910567][ T43] __device_attach+0x1e4/0x4b0 [ 74.915328][ T43] bus_probe_device+0x17f/0x1c0 [ 74.920171][ T43] device_add+0x1148/0x1a70 [ 74.924667][ T43] usb_set_configuration+0x1187/0x1e20 [ 74.930109][ T43] usb_generic_driver_probe+0xb1/0x110 [ 74.935559][ T43] usb_probe_device+0xec/0x3e0 [ 74.940307][ T43] really_probe+0x241/0xa90 [ 74.944794][ T43] __driver_probe_device+0x1de/0x440 [ 74.950066][ T43] driver_probe_device+0x4c/0x1b0 [ 74.955077][ T43] __device_attach_driver+0x1df/0x310 [ 74.960432][ T43] bus_for_each_drv+0x159/0x1e0 [ 74.965261][ T43] __device_attach+0x1e4/0x4b0 [ 74.970009][ T43] bus_probe_device+0x17f/0x1c0 [ 74.974844][ T43] device_add+0x1148/0x1a70 [ 74.979334][ T43] usb_new_device+0xd07/0x1a20 [ 74.984081][ T43] hub_event+0x2eb7/0x4fa0 [ 74.988480][ T43] process_one_work+0x9cf/0x1b70 [ 74.993401][ T43] worker_thread+0x6c8/0xf10 [ 74.997971][ T43] kthread+0x3c2/0x780 [ 75.002020][ T43] ret_from_fork+0x5d4/0x6f0 [ 75.006598][ T43] ret_from_fork_asm+0x1a/0x30 [ 75.011344][ T43] [ 75.013654][ T43] The buggy address belongs to the object at ffff88807d20c580 [ 75.013654][ T43] which belongs to the cache kmalloc-8 of size 8 [ 75.027343][ T43] The buggy address is located 1 bytes inside of [ 75.027343][ T43] allocated 7-byte region [ffff88807d20c580, ffff88807d20c587) [ 75.041121][ T43] [ 75.043430][ T43] The buggy address belongs to the physical page: [ 75.049816][ T43] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d20c [ 75.058570][ T43] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 75.065657][ T43] page_type: f5(slab) [ 75.069636][ T43] raw: 00fff00000000000 ffff88801b841500 dead000000000122 0000000000000000 [ 75.078208][ T43] raw: 0000000000000000 0000000080800080 00000000f5000000 0000000000000000 [ 75.086785][ T43] page dumped because: kasan: bad access detected [ 75.093183][ T43] page_owner tracks the page as allocated [ 75.098891][ T43] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 43, tgid 43 (kworker/1:1), ts 72518351004, free_ts 72495972946 [ 75.117810][ T43] post_alloc_hook+0x1c0/0x230 [ 75.122564][ T43] get_page_from_freelist+0x1321/0x3890 [ 75.128094][ T43] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 75.133982][ T43] alloc_pages_mpol+0x1fb/0x550 [ 75.138835][ T43] new_slab+0x23b/0x330 [ 75.142989][ T43] ___slab_alloc+0xd9c/0x1940 [ 75.147654][ T43] __slab_alloc.constprop.0+0x56/0xb0 [ 75.153019][ T43] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 75.159419][ T43] kstrdup+0x53/0x100 [ 75.163396][ T43] kstrdup_const+0x63/0x80 [ 75.167810][ T43] __kernfs_new_node+0x9b/0x8e0 [ 75.172646][ T43] kernfs_new_node+0x13c/0x1e0 [ 75.177405][ T43] kernfs_create_link+0xcc/0x240 [ 75.182325][ T43] sysfs_do_create_link_sd+0x90/0x140 [ 75.187684][ T43] sysfs_create_link+0x61/0xc0 [ 75.192434][ T43] driver_sysfs_add+0x91/0x2d0 [ 75.197187][ T43] page last free pid 5984 tgid 5983 stack trace: [ 75.203495][ T43] __free_frozen_pages+0x7fe/0x1180 [ 75.208680][ T43] tlb_finish_mmu+0x237/0x7c0 [ 75.213341][ T43] exit_mmap+0x403/0xb90 [ 75.217564][ T43] __mmput+0x12a/0x410 [ 75.221618][ T43] mmput+0x62/0x70 [ 75.225324][ T43] do_exit+0x7c4/0x2bd0 [ 75.229487][ T43] do_group_exit+0xd3/0x2a0 [ 75.233976][ T43] get_signal+0x2673/0x26d0 [ 75.238467][ T43] arch_do_signal_or_restart+0x8f/0x7d0 [ 75.244001][ T43] exit_to_user_mode_loop+0x84/0x110 [ 75.249266][ T43] do_syscall_64+0x3f6/0x4c0 [ 75.253841][ T43] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.259714][ T43] [ 75.262020][ T43] Memory state around the buggy address: [ 75.267628][ T43] ffff88807d20c480: fa fc fc fc 05 fc fc fc fa fc fc fc fa fc fc fc [ 75.275682][ T43] ffff88807d20c500: fa fc fc fc fa fc fc fc 00 fc fc fc 00 fc fc fc [ 75.283725][ T43] >ffff88807d20c580: 07 fc fc fc 00 fc fc fc fc fc fc fc fc fc fc fc [ 75.291760][ T43] ^ [ 75.295807][ T43] ffff88807d20c600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 75.303854][ T43] ffff88807d20c680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 75.311896][ T43] ================================================================== [ 75.319933][ T43] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 75.327112][ T43] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 75.338982][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 75.349020][ T43] Workqueue: usb_hub_wq hub_event [ 75.354131][ T43] Call Trace: [ 75.357390][ T43] [ 75.360302][ T43] dump_stack_lvl+0x3d/0x1f0 [ 75.364886][ T43] panic+0x71c/0x800 [ 75.368767][ T43] ? __pfx_panic+0x10/0x10 [ 75.373169][ T43] ? __pfx__printk+0x10/0x10 [ 75.377740][ T43] ? end_report+0x4c/0x170 [ 75.382143][ T43] ? mon_copy_to_buff+0xc2/0x170 [ 75.387073][ T43] check_panic_on_warn+0xab/0xb0 [ 75.391998][ T43] end_report+0x107/0x170 [ 75.396316][ T43] kasan_report+0xee/0x110 [ 75.400717][ T43] ? mon_copy_to_buff+0xc2/0x170 [ 75.405645][ T43] kasan_check_range+0x100/0x1b0 [ 75.410563][ T43] __asan_memcpy+0x23/0x60 [ 75.414965][ T43] mon_copy_to_buff+0xc2/0x170 [ 75.419720][ T43] mon_bin_event+0x1071/0x2050 [ 75.424483][ T43] ? __pfx_mon_bin_event+0x10/0x10 [ 75.429587][ T43] mon_bus_submit+0xcf/0x140 [ 75.434164][ T43] usb_hcd_submit_urb+0x12d/0x1c60 [ 75.439263][ T43] ? __device_attach+0x1e4/0x4b0 [ 75.444184][ T43] ? bus_probe_device+0x17f/0x1c0 [ 75.449206][ T43] ? device_add+0x1148/0x1a70 [ 75.453873][ T43] ? usb_set_configuration+0x1187/0x1e20 [ 75.459501][ T43] ? usb_generic_driver_probe+0xb1/0x110 [ 75.465140][ T43] usb_submit_urb+0x87c/0x1790 [ 75.469909][ T43] ? lockdep_set_lock_cmp_fn+0xb1/0xe0 [ 75.475367][ T43] ? __init_swait_queue_head+0xca/0x150 [ 75.480899][ T43] usb_start_wait_urb+0x104/0x4b0 [ 75.485915][ T43] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 75.491453][ T43] ? __asan_memset+0x23/0x50 [ 75.496030][ T43] usb_control_msg+0x326/0x4a0 [ 75.500782][ T43] ? __pfx_usb_control_msg+0x10/0x10 [ 75.506060][ T43] usbhid_raw_request+0x58f/0x700 [ 75.511072][ T43] ? __pfx_usbhid_raw_request+0x10/0x10 [ 75.516605][ T43] __hid_request+0x299/0x3c0 [ 75.521179][ T43] hidinput_connect+0x1ada/0x2bd0 [ 75.526194][ T43] hid_connect+0x13f3/0x1a60 [ 75.530766][ T43] ? trace_kmalloc+0x2b/0xd0 [ 75.535346][ T43] ? __kmalloc_noprof+0x242/0x510 [ 75.540358][ T43] ? __asan_memset+0x23/0x50 [ 75.544935][ T43] ? __pfx_hid_connect+0x10/0x10 [ 75.549864][ T43] hid_hw_start+0xaa/0x140 [ 75.554262][ T43] ms_probe+0x195/0x500 [ 75.558406][ T43] ? __pfx_ms_probe+0x10/0x10 [ 75.563070][ T43] hid_device_probe+0x363/0x720 [ 75.567903][ T43] ? __pfx_hid_device_probe+0x10/0x10 [ 75.573257][ T43] really_probe+0x241/0xa90 [ 75.577760][ T43] __driver_probe_device+0x1de/0x440 [ 75.583039][ T43] driver_probe_device+0x4c/0x1b0 [ 75.588055][ T43] __device_attach_driver+0x1df/0x310 [ 75.593435][ T43] ? __pfx___device_attach_driver+0x10/0x10 [ 75.599338][ T43] bus_for_each_drv+0x159/0x1e0 [ 75.604175][ T43] ? __pfx_bus_for_each_drv+0x10/0x10 [ 75.609530][ T43] ? lockdep_hardirqs_on+0x7c/0x110 [ 75.614719][ T43] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 75.620517][ T43] __device_attach+0x1e4/0x4b0 [ 75.625271][ T43] ? __pfx___device_attach+0x10/0x10 [ 75.630543][ T43] ? do_raw_spin_unlock+0x172/0x230 [ 75.635736][ T43] bus_probe_device+0x17f/0x1c0 [ 75.640574][ T43] device_add+0x1148/0x1a70 [ 75.645078][ T43] ? __pfx_device_add+0x10/0x10 [ 75.649920][ T43] ? debugfs_create_file_full+0x41/0x60 [ 75.655493][ T43] hid_add_device+0x373/0xa60 [ 75.660177][ T43] ? __pfx_hid_add_device+0x10/0x10 [ 75.665373][ T43] ? lockdep_init_map_type+0x5c/0x280 [ 75.670741][ T43] ? lockdep_init_map_type+0x5c/0x280 [ 75.676106][ T43] usbhid_probe+0xd38/0x13f0 [ 75.680688][ T43] usb_probe_interface+0x300/0x9c0 [ 75.685796][ T43] ? __pfx_usb_probe_interface+0x10/0x10 [ 75.691509][ T43] really_probe+0x241/0xa90 [ 75.696013][ T43] __driver_probe_device+0x1de/0x440 [ 75.701283][ T43] driver_probe_device+0x4c/0x1b0 [ 75.706293][ T43] __device_attach_driver+0x1df/0x310 [ 75.711649][ T43] ? __pfx___device_attach_driver+0x10/0x10 [ 75.717526][ T43] bus_for_each_drv+0x159/0x1e0 [ 75.722358][ T43] ? __pfx_bus_for_each_drv+0x10/0x10 [ 75.727711][ T43] ? lockdep_hardirqs_on+0x7c/0x110 [ 75.732897][ T43] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 75.738692][ T43] __device_attach+0x1e4/0x4b0 [ 75.743443][ T43] ? __pfx___device_attach+0x10/0x10 [ 75.748716][ T43] ? do_raw_spin_unlock+0x172/0x230 [ 75.753987][ T43] bus_probe_device+0x17f/0x1c0 [ 75.758824][ T43] device_add+0x1148/0x1a70 [ 75.763320][ T43] ? __pfx_device_add+0x10/0x10 [ 75.768162][ T43] ? preempt_schedule_thunk+0x16/0x30 [ 75.773522][ T43] usb_set_configuration+0x1187/0x1e20 [ 75.778969][ T43] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 75.785022][ T43] usb_generic_driver_probe+0xb1/0x110 [ 75.790468][ T43] usb_probe_device+0xec/0x3e0 [ 75.795219][ T43] ? __pfx_usb_probe_device+0x10/0x10 [ 75.800572][ T43] really_probe+0x241/0xa90 [ 75.805061][ T43] __driver_probe_device+0x1de/0x440 [ 75.810341][ T43] ? usb_driver_applicable+0x1c7/0x220 [ 75.815787][ T43] driver_probe_device+0x4c/0x1b0 [ 75.820795][ T43] __device_attach_driver+0x1df/0x310 [ 75.826153][ T43] ? __pfx___device_attach_driver+0x10/0x10 [ 75.832030][ T43] bus_for_each_drv+0x159/0x1e0 [ 75.836881][ T43] ? __pfx_bus_for_each_drv+0x10/0x10 [ 75.842251][ T43] ? lockdep_hardirqs_on+0x7c/0x110 [ 75.847454][ T43] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 75.853263][ T43] __device_attach+0x1e4/0x4b0 [ 75.858025][ T43] ? __pfx___device_attach+0x10/0x10 [ 75.863308][ T43] ? do_raw_spin_unlock+0x172/0x230 [ 75.868513][ T43] bus_probe_device+0x17f/0x1c0 [ 75.873361][ T43] device_add+0x1148/0x1a70 [ 75.877874][ T43] ? __pfx_device_add+0x10/0x10 [ 75.882726][ T43] ? usb_detect_static_quirks+0x335/0x3e0 [ 75.888443][ T43] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 75.894326][ T43] usb_new_device+0xd07/0x1a20 [ 75.899084][ T43] ? do_raw_spin_lock+0x12c/0x2b0 [ 75.904130][ T43] ? __pfx_usb_new_device+0x10/0x10 [ 75.909328][ T43] ? mark_held_locks+0x49/0x80 [ 75.914100][ T43] hub_event+0x2eb7/0x4fa0 [ 75.918519][ T43] ? __pfx_hub_event+0x10/0x10 [ 75.923269][ T43] ? assoc_array_gc+0x1260/0x15b0 [ 75.928301][ T43] ? rcu_is_watching+0x12/0xc0 [ 75.933051][ T43] process_one_work+0x9cf/0x1b70 [ 75.937978][ T43] ? __pfx_hcd_resume_work+0x10/0x10 [ 75.943249][ T43] ? __pfx_process_one_work+0x10/0x10 [ 75.948608][ T43] ? assign_work+0x1a0/0x250 [ 75.953189][ T43] worker_thread+0x6c8/0xf10 [ 75.957774][ T43] ? __pfx_worker_thread+0x10/0x10 [ 75.962867][ T43] kthread+0x3c2/0x780 [ 75.966918][ T43] ? __pfx_kthread+0x10/0x10 [ 75.971492][ T43] ? rcu_is_watching+0x12/0xc0 [ 75.976256][ T43] ? __pfx_kthread+0x10/0x10 [ 75.980829][ T43] ret_from_fork+0x5d4/0x6f0 [ 75.985409][ T43] ? __pfx_kthread+0x10/0x10 [ 75.989982][ T43] ret_from_fork_asm+0x1a/0x30 [ 75.994747][ T43] [ 75.997941][ T43] Kernel Offset: disabled [ 76.002242][ T43] Rebooting in 86400 seconds..