last executing test programs: 11.929696736s ago: executing program 3 (id=118): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f00000000c0)={0x1, 0x0, 0x3ff, 0x8}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x7, 0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) sendmmsg$inet6(r7, 0x0, 0x0, 0x4001c00) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan0\x00'}) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x0, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0/../file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES8=r1, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)='r', 0x1}], 0x1}}], 0x1, 0x4c040) (fail_nth: 3) syz_io_uring_setup(0x1f85, 0x0, &(0x7f0000000100), &(0x7f0000000300)) mknod(0x0, 0xaa504579ad4e1bcd, 0xea) socket(0x10, 0x3, 0x0) 10.753797491s ago: executing program 0 (id=122): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f00000000c0)={0x1, 0x0, 0x3ff, 0x8}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x7, 0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) sendmmsg$inet6(r7, 0x0, 0x0, 0x4001c00) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan0\x00'}) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x0, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0/../file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES8=r1, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)='r', 0x1}], 0x1}}], 0x1, 0x4c040) syz_io_uring_setup(0x1f85, 0x0, &(0x7f0000000100), &(0x7f0000000300)) mknod(0x0, 0xaa504579ad4e1bcd, 0xea) socket(0x10, 0x3, 0x0) 8.452593964s ago: executing program 3 (id=128): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) connect$can_j1939(r1, &(0x7f00000002c0)={0x1d, r2, 0x0, {0xe1646c3a43d0cff8, 0x1}, 0x1}, 0x18) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1, 0x8c0, 0x2bd6) 7.889141944s ago: executing program 1 (id=129): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x8000000000000, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8001], 0x1, 0x3c4210}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000700", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 7.74448635s ago: executing program 1 (id=130): r0 = io_uring_setup(0x648e, &(0x7f0000000240)={0x0, 0x7ef1, 0x1000, 0x3, 0x1fe}) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = eventfd(0xff7ffff7) r5 = eventfd(0x2) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000280)={r4, 0x202, 0x2, r5}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000080)={r5, 0x1}) r6 = eventfd(0x7) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000180)={r6, 0x6}) bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r7 = io_uring_setup(0x4372, &(0x7f00000049c0)={0x0, 0x4055d0, 0x400, 0xffffffff, 0x8000030b, 0x0, r0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000c93000/0x4000)=nil) r8 = userfaultfd(0x80001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[{0x2, 0x2, 0x5, 0x4}], 0x10, 0x1}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r11 = memfd_create(&(0x7f0000000c40)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xf8\x036\xc8~\xa8\f\x00\x00\xb5U\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262-\x00\x00\x00\x00\xc8X\xdaNz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[R\xc36b\xa2]\xed\xe8\xb0\xfd\"\xa2\xd27)\xd5yQ\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cL\x8aC\x81\x16tZ\xff\x9b\x066U\x8f-\x9c\xa3B\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x00P\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\xf6]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1n 1\x8d \xc1\xaf\x19\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00x}Y\xa3T\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa8\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xab\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01|&\"a\xd1\x91\xb9\xb1\xa9\x11\x91\x86\x92\xd8\xd5\x02~\x9b\x83\xc70\xd1)y\xd2V\x97\xfe\xcf\xffj\x1ey\x89E\x97\xa9\xef\xectKAL\\\xb8\t\xf8\x1b\xc5y@\xc0', 0x6) fcntl$setstatus(r11, 0x4, 0x40000) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r7, 0xf504, 0x0) write$tun(r9, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b4000000907800040a0300050200000000000000000002d58838068b91000000"], 0x4e) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x7c}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) recvmmsg(r10, &(0x7f0000004780)=[{{&(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000300)=""/86, 0x56}, {&(0x7f0000000680)=""/178, 0xb2}, {&(0x7f0000000740)=""/207, 0xcf}, {&(0x7f0000000840)=""/92, 0x5c}, {&(0x7f00000008c0)=""/76, 0x4c}, {&(0x7f0000000080)=""/23, 0x17}], 0x6, &(0x7f00000009c0)=""/154, 0x9a}, 0x2}, {{&(0x7f0000000a80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000b00)=""/195, 0xc3}, {&(0x7f0000000c00)=""/76, 0x4c}, {&(0x7f0000000c80)=""/235, 0xeb}], 0x3, &(0x7f0000000d80)=""/245, 0xf5}, 0x6}, {{&(0x7f0000000e80)=@xdp, 0x80, &(0x7f0000001180)=[{&(0x7f0000000f00)=""/130, 0x82}, {&(0x7f0000000fc0)=""/246, 0xf6}, {&(0x7f0000000380)=""/37, 0x25}, {&(0x7f00000010c0)=""/133, 0x85}], 0x4, &(0x7f00000011c0)=""/4096, 0x1000}}, {{&(0x7f00000021c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000003700)=[{&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000002300)}, {&(0x7f0000002340)=""/209, 0xd1}, {&(0x7f0000002440)=""/124, 0x7c}, {&(0x7f00000024c0)=""/242, 0xf2}, {&(0x7f00000025c0)=""/174, 0xae}, {&(0x7f0000002680)=""/99, 0x63}, {&(0x7f0000002700)=""/4096, 0x1000}], 0x8, &(0x7f0000003780)=""/92, 0x5c}, 0x8}, {{&(0x7f0000003800)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000003880)=""/224, 0xe0}, {&(0x7f0000003980)=""/2, 0x2}, {&(0x7f00000039c0)=""/50, 0x32}, {&(0x7f0000003a00)=""/7, 0x7}, {&(0x7f0000003a40)=""/201, 0xc9}, {&(0x7f0000003b40)}, {&(0x7f0000003b80)=""/163, 0xa3}], 0x7, &(0x7f0000003cc0)=""/215, 0xd7}, 0xffff}, {{&(0x7f0000003dc0)=@ax25={{0x3, @netrom}, [@null, @remote, @netrom, @null, @remote, @default, @default, @bcast]}, 0x80, &(0x7f0000004100)=[{&(0x7f0000003e40)=""/175, 0xaf}, {&(0x7f0000003f00)=""/157, 0x9d}, {&(0x7f0000003fc0)=""/6, 0x6}, {&(0x7f0000004000)=""/237, 0xed}], 0x4, &(0x7f0000004140)=""/110, 0x6e}, 0xff}, {{&(0x7f00000041c0)=@nfc_llcp, 0x80, &(0x7f0000004580)=[{&(0x7f0000004240)=""/99, 0x63}, {&(0x7f00000042c0)=""/113, 0x71}, {&(0x7f0000004340)=""/51, 0x33}, {&(0x7f0000004380)=""/132, 0x84}, {&(0x7f0000004440)=""/28, 0x1c}, {&(0x7f0000004480)=""/236, 0xec}], 0x6}, 0x2}, {{0x0, 0x0, &(0x7f00000046c0)=[{&(0x7f0000004600)=""/36, 0x24}, {&(0x7f0000004640)=""/50, 0x32}, {0x0}, {&(0x7f0000004680)=""/11, 0xb}], 0x4, &(0x7f0000004700)=""/86, 0x56}, 0xfffffff7}], 0x8, 0x2000, &(0x7f0000004980)={0x0, 0x3938700}) 7.62101405s ago: executing program 4 (id=131): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x1, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000), 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000280)=""/174, 0xae}, {&(0x7f0000000400)=""/240, 0xf0}, {&(0x7f0000000340)=""/72, 0x48}, {&(0x7f0000000500)=""/129, 0x81}], 0x4, 0x5, 0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000003000000", 0xfe60) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x138, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "52087def75c736f85cc7d27338360e8cb966058f66908611a2da3e15d87ea4bbea3d646bddcbf88d74a8f9e560e73cc92e50a1e1eb696bc28149a6f97bca767db6d5a2e4a0ce4e1f337f52af8d065ab3903bf929f30662e91d6466b050411964902e6bfd3d89271fd28b48677d5cf2caefd8a40abbe65daabf39f028156294855a66954d2349461e5b3fdf380433eb7182203d89bd1637c99109d611ac6ddd1f8bd70df15be1196d73cf82360c81beb73bd89d4e22511b72fa9373f5ff75156b83de4ba43f4325cb81ad4e1ebabd12279a1c2cb16d9b64ac46472168b729780d5697663cde109a2ea16079fdfb016066bd7f663500"}]}}]}, 0x138}}, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000000740)='/(^/[,\x00', 0x7) r7 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x11, 0x2}) 6.927036076s ago: executing program 0 (id=132): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000080)={'wlan0\x00', @broadcast}) 6.836585761s ago: executing program 4 (id=133): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xac19dab3f8fec634, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x222, &(0x7f0000000180)) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0xf) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r2, &(0x7f0000000300), &(0x7f0000000400)=""/154}, 0x20) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) close(r3) eventfd2(0x80, 0x801) r4 = timerfd_create(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d6ab09b8b6541047e67c8a4337b258aa019985ef659d196885c0c57f53584de0a574d0004c0eeeda7dd88030e224337353faa041e3cded3fc006ad855483e52e9b5c54fb3a967f00250f4b98735e8c456459c92749554f1fe8f5d8aefe2e57396333b6a5572da88ac4e02950a13dcf1338a0a4bc7fa", @ANYBLOB="28161cccf95526034bd803b25376350ea55f98432525ab979c7a376d442d8d58839064e8197f9e527fb07e9f8b9f1e6af62adc6b30a490503ffa8ac478a5efab647de0e10fbb2a4f725a92621b1a154d3912f28bc3230b2749cc81d107b46e6f6f02ea49ba8ccce9eac567f23361b5a5fe247c08591a005d315e9b67fd8f", @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYRES8=r1]) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) read$msr(r3, &(0x7f00000000c0)=""/170, 0xaa) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000040)=0x8) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000494fa1dfe976597300000001000000002b000000fc0003000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb257557dae1a6d0e0f7513175cd4167a08c110ccb2ba676d438117aa7"], 0x104}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 6.836180677s ago: executing program 3 (id=134): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) prlimit64(r0, 0xb, &(0x7f0000000000)={0x8, 0x5}, &(0x7f0000000040)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)) flock(0xffffffffffffffff, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000007e40)={'wpan0\x00'}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x4000000}}], 0x400000000000172, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00120000009404006c0012800b00010062726964676500005c0002800c001e00000000000000000005002a00ff0000000500260001000000050019000000000008001a00d80300000c001f000000000000000000050024"], 0x9c}}, 0x40) ioctl$TCSETSW2(r1, 0x5453, 0x0) 6.166049261s ago: executing program 1 (id=135): r0 = socket(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x3c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}]}, 0x3c}}, 0x840) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0x1}, {0xc, 0x4, {0x3, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write$P9_RREMOVE(r4, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = dup(r5) connect$bt_rfcomm(r6, &(0x7f00000008c0)={0x1f, @none, 0x6}, 0xa) bind$bt_l2cap(r5, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f00000000c0)={@local}) sched_setaffinity(0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}, 0x1c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 6.004871597s ago: executing program 0 (id=136): r0 = socket$packet(0x11, 0x0, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000140)=0x6b) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000740)=0x7) (async) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000740)=0x7) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r3}, 0x90) getuid() (async) getuid() r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) membarrier(0x2, 0x0) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000180)=0xc) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000180)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) mmap(&(0x7f0000bb0000/0x1000)=nil, 0x1000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000bb0000/0x1000)=nil, 0x1000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000140)="ac951aed947951f5d50eaeb0e6c309fc5cd1bb306f75a5d0e188aeb38b4deb7b570d7c25", 0x24) modify_ldt$write2(0x11, &(0x7f0000000040)={0x0, 0x20000000, 0xffffffffffffffff}, 0x10) modify_ldt$read(0x0, &(0x7f0000001840)=""/4105, 0x1009) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) (async) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) 5.95996076s ago: executing program 2 (id=137): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd5e, 0x240000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000480)=@broute={'broute\x00', 0x5e04, 0x0, 0x90, [0x0, 0x0, 0x200000000140], 0x2, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff000000000000"]}, 0x108) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x100}]}}]}, 0x38}}, 0x20040054) 5.537015948s ago: executing program 4 (id=138): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f00000000c0)={0x1, 0x0, 0x3ff, 0x8}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x7, 0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) sendmmsg$inet6(r7, 0x0, 0x0, 0x4001c00) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan0\x00'}) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x0, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0/../file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES8=r1, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)='r', 0x1}], 0x1}}], 0x1, 0x4c040) (fail_nth: 4) syz_io_uring_setup(0x1f85, 0x0, &(0x7f0000000100), &(0x7f0000000300)) mknod(0x0, 0xaa504579ad4e1bcd, 0xea) socket(0x10, 0x3, 0x0) 5.127563242s ago: executing program 2 (id=139): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000054c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000010800034000000014080002400000000208000440000000150900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x719, 0x120, 0x2f8, 0x440, 0x510, 0x2f8, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@ipv6={@private2, @loopback, [0xff000000, 0xffffffff, 0xffffff00, 0xff000000], [0xff000000, 0xffffff00, 0x0, 0xffffff00], 'vlan1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x3, 0x3, 0x14}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x70}, {0x2}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x6, 0x7}}}, {{@ipv6={@remote, @local, [0x0, 0xffffffff], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x0, 0x4}, 0x0, 0x198, 0x1d8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@remote, [], @ipv6=@private1, [0xffffffff, 0xff000000, 0xffffffff], @ipv4=@multicast2, [0x0, 0xffffffff, 0xffffffff, 0xffffffff], @ipv4=@empty, [0x0, 0x0, 0xff000000, 0xff], 0x0, 0x0, 0x42, 0x4e22, 0x4e24, 0x4e20, 0x4e24, 0x0, 0x23ccf3e9fd2b5143}, 0x0, 0x80, 0x0, 0x4e20, 0x4e24, 0x4e23}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private2, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xc}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x2]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7a0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x512c}, [@printk={@p, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0xe1}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x0, 0x30000000}, {}, {}, {}, {0x85, 0x0, 0x0, 0x11}}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 4.822757356s ago: executing program 2 (id=140): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000300)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000140)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x4, 0x1b9bb5, 0x11af75}) chdir(0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="010725bd700000000000fe000000"], 0x14}}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x800) recvmmsg(r10, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}, 0xffff}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)=""/85, 0x55}], 0x1}, 0x4}], 0x2, 0x10022, 0x0) 4.706546724s ago: executing program 3 (id=141): socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="8ab6a8976d06f57bd07ddb5f1a8b8245576b55bc8c319a9001e277ecb704e061c463d861ba"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4}, 0x94) r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, 0x0, 0x20000811) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xc4062, &(0x7f0000000300)={[{}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040ed7e54e20"], 0x7) socket$inet6_udp(0xa, 0x2, 0x0) 4.205724228s ago: executing program 0 (id=142): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$watch_queue(0x0, 0x80) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000002c0)={@host, 0x2}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, 0x0) unshare(0xa000400) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0x129282, 0x0) write$FUSE_INIT(r2, &(0x7f0000002300)={0x50, 0x0, r3, {0x7, 0x9, 0x0, 0xffffffff90809082, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2}}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f0000007080)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r2, &(0x7f00000024c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) fanotify_mark(0xffffffffffffffff, 0x65a, 0x40000008, 0xffffffffffffff9c, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x441, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 3.640762983s ago: executing program 2 (id=143): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x50) recvfrom$inet6(r0, &(0x7f0000000300)=""/218, 0xda, 0x120, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000080)={@host}) close_range(r2, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r4, 0x0, 0x0}, 0x10) shutdown(r0, 0x0) 3.283893136s ago: executing program 1 (id=144): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) (async) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async) r2 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x89b8, 0x8, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r5}, 0x10) r6 = fanotify_init(0x0, 0x0) fanotify_mark(r6, 0x90, 0x0, 0xffffffffffffffff, 0x0) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x0, 0x2}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x20000000008) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @broadcast}}) (async) mount$bpf(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x880, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2e}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) (async) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r10, 0x0, 0x0) 2.826762492s ago: executing program 3 (id=145): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x32d6f000) open(&(0x7f0000000100)='./file0\x00', 0x10100, 0x34) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x3, 0x0, &(0x7f00000001c0)=[{}, {}, {}]}) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffbd) 2.741565276s ago: executing program 2 (id=146): ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0xa9, 0x7, {0xffffffffffffffff}, {0xee00}, 0x8000, 0xdf97}) prlimit64(r0, 0xe, &(0x7f0000000140)={0x7, 0x101000008d}, 0x0) setrlimit(0x5, &(0x7f00000000c0)={0x5, 0xe8}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6], 0x0, 0x8340}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000080)=@x86={0x7c, 0x3, 0xfd, 0x0, 0x1, 0x7e, 0xcb, 0x10, 0x8, 0x5, 0xb, 0x8, 0x0, 0x10003, 0x9, 0xff, 0x6, 0x8, 0xc, '\x00', 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x28011) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x54, r6, 0x1, 0x2000000, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x16, 0x3ed5}, {0x5, 0x12, 0x1}}]}, 0x54}}, 0x0) r7 = socket(0x1, 0x800, 0x10) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 2.740793299s ago: executing program 0 (id=147): syz_open_procfs(0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) listen(0xffffffffffffffff, 0x5) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = socket(0x10, 0x3, 0x0) syncfs(r5) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000}) (async) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000180)=0xffff0018) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) (async) read$dsp(r6, &(0x7f0000000440)=""/205, 0xcd) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) (async) r8 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x8c36, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000), &(0x7f00000000c0)) setrlimit(0xb, &(0x7f0000000100)={0x40d4, 0x7ff}) (async) io_uring_enter(r8, 0x47f6, 0x0, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 2.70497893s ago: executing program 1 (id=148): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x10000) write$sndseq(r2, &(0x7f0000000440)=[{0x6, 0x5, 0x2, 0xb, @time={0x3ff, 0x2}, {0x0, 0x86}, {0x9, 0xa1}, @quote={{0x9, 0x90}, 0x5, &(0x7f0000000380)={0x7, 0x5, 0x1, 0x2, @time={0x588, 0x200}, {0x0, 0x2}, {0x4}, @time=@tick=0x6}}}, {0x8, 0xd6, 0x1, 0x47, @tick=0x3, {0x9, 0x2}, {0xc, 0x3}, @queue={0x2, {0xf, 0xfffffffa}}}, {0x4e, 0x64, 0x3, 0x2, @time={0x3, 0x8}, {0x8b, 0x7f}, {0x2, 0x8}, @quote={{0x9, 0x63}, 0xfffc, &(0x7f0000000400)={0xf0, 0xa9, 0xa, 0x9, @time={0xb7, 0x10001}, {0x2, 0xfe}, {0xd, 0x4}, @control={0xd, 0xfffffffc, 0xe7}}}}], 0x54) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r3}, 0x0) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r4}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) close(r0) mknodat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x81c0, 0x0) 2.414455164s ago: executing program 4 (id=149): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000580)={0x21e, 0x2, 0x0, {{0x500, 0xdd, 0x0, 0x0, {}, 0x2810000, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0x0, 0xee01}}, 0x21e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x4081) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000050000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c0003801d000380140001007465616d300000000000000000000000080007"], 0xd8}}, 0x20000000) r2 = fsopen(&(0x7f0000000180)='virtiofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 2.064727509s ago: executing program 3 (id=150): io_uring_setup(0x1946, &(0x7f0000000a80)={0x0, 0xa94d, 0x1, 0xfffffffd, 0x179}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_usb_connect(0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) select(0x40, &(0x7f0000000000)={0xe, 0x92f, 0xfffffffffffffffc, 0x20000000007, 0xd82b, 0x882b, 0x7, 0x3}, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000000)=ANY=[]) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) inotify_init() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000100)=0x8) r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x101000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r4, 0x1000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000001340)={0x0, 0x7b5, 0xfffffff5, {0xfffffffc, 0xfffffffd}, 0xfffffff7, 0x5}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./bus\x00', 0x1b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) ioprio_set$uid(0x3, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x7, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x4003ff, 0x1}}, {0x0, 0x8}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 2.064404868s ago: executing program 1 (id=151): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) prlimit64(r0, 0xb, &(0x7f0000000000)={0x8, 0x5}, &(0x7f0000000040)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)) flock(0xffffffffffffffff, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000007e40)={'wpan0\x00'}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x4000000}}], 0x400000000000172, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00120000009404006c0012800b00010062726964676500005c0002800c001e00000000000000000005002a00ff0000000500260001000000050019000000000008001a00d80300000c001f000000000000000000050024"], 0x9c}}, 0x40) ioctl$TCSETSW2(r1, 0x5453, 0x0) 1.972995635s ago: executing program 2 (id=152): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x4, 0x10a, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf8, 0x3, 0x1, 0x2, 0x98, 0xc2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf7, 0x9}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x306, 0x1, 0x5, 0x8}, @processing_unit={0xd, 0x24, 0x7, 0x4, 0x2, 0x3, "3ba0407fd967"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x307, 0x2, 0x6, 0x9}, @feature_unit={0x13, 0x24, 0x6, 0x6, 0x5, 0x6, [0x2, 0x6, 0x3, 0x9, 0x3, 0xa], 0x8}, @selector_unit={0xb, 0x24, 0x5, 0x1, 0x9, "099d1d43e9ac"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x4, 0x6, 0x8, "d2", 'm|'}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x2, 0x80, 0x6, "c9b6d130a2610f10"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x8, 0x1, 0x7, 0x4, "eae8f9"}, @as_header={0x7, 0x24, 0x1, 0x40, 0x4, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x81, 0x6, 0x5, {0x7, 0x25, 0x1, 0x3, 0x6, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x27}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x8, 0x2, 0x5, 0xfb, "9778"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x8, 0x2, 0x9, 0x40, "6e05"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x81, 0x3, 0x74, 0x8, "aceb34fb"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x38, 0x0, 0xfc, 0x5, {0x7, 0x25, 0x1, 0x81, 0x7, 0xa8b5}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x2, 0xbf, 0x70, 0x40, 0x7}, 0x19, &(0x7f0000000240)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "ae25b1fd05d849921ff66de5c710f842"}]}, 0x5, [{0x2d, &(0x7f0000000280)=@string={0x2d, 0x3, "c13df9cec7e71338269820d444fae321ea1605b8c68c82a2961b62c010206b7959d0977cf4334a502b3836"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1407}}, {0xec, &(0x7f0000000340)=@string={0xec, 0x3, "6130cb1ee54920c10c2f1694681901162e6b43f7b608676d140a1df43425e46d3d49c9ea1214b522f8cb795c3d2a1b8e75b5e5974f2b62d2f0f354caa89b518f7f523bc2939e9fa9c4ea4c06e31c15bd3b6009487e9bb94f9b1ecf8c1eb147f917fb985a6694e6c963bfd0586ec55e4a0c0c1f863d2ccad8c155e107558152d0ea9c1ca133c9a6d3b62c5a60593dbb55b61f9251ad76eed9f40bfb46b538ace73cfb9d9220c902591654ca56d70d1a426345fba526309d25d7f660511388354268ce69b04c7f2db01332b63cae0c2afe073090c7a2f56c224c09bc29eee6383780739b76851e8b9fccb7"}}, {0x4, &(0x7f0000000440)=@lang_id={0xffffffffffffffbf, 0x3, 0x860}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_4={0x3, 0x1, 0x2}, @main=@item_4={0x3, 0x0, 0xb, "813e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dde84050"}, @local=@item_4={0x3, 0x2, 0x3, "5d8c3dda"}]}}, 0x0}, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x8f) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x7f) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.970823597s ago: executing program 4 (id=153): socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000200)={0xcc, 0x0, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r3, 0x0, 0x4004) set_mempolicy(0x4003, 0x0, 0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_int(r6, &(0x7f0000000540), 0xfffffdd8) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x6020a, &(0x7f0000000440)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [{@obj_role={'obj_role', 0x3d, 'csum\x00'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@smackfsdef={'smackfsdef', 0x3d, '_-/^&+*\'%'}}, {@subj_role={'subj_role', 0x3d, 'csum\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x32, 0x61, 0x65, 0x66, 0x66, 0x35, 0x39], 0x2d, [0x31, 0x66, 0x64, 0x61], 0x2d, [0x35, 0x61, 0x33, 0x64], 0x2d, [0x65, 0x37, 0x33, 0x63], 0x2d, [0x33, 0x64, 0x65, 0x31, 0x66, 0x36, 0x37, 0x31]}}}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@gettaction={0xe0, 0x32, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xed}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x142f}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}]}, 0xe0}}, 0x0) 1.894771613s ago: executing program 0 (id=154): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000ac0)=ANY=[@ANYRES8=0xffffffffffffffff, @ANYRES64=r0, @ANYRESOCT=r0, @ANYBLOB="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", @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYBLOB="fa4f74728a01e0b52318f5b64ae4c3156c557c0f6e316a0775f6765b073471ec675949ad8d4ceb0452187f"], 0x18) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000c80)=ANY=[], 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f00000000c0)={0x1, 0x0, 0x3ff, 0x8}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x7, 0x4) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r8, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) sendmmsg$inet6(r8, 0x0, 0x0, 0x4001c00) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b1a, &(0x7f0000000000)={'wlan0\x00'}) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x0, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0/../file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f0000000100)=ANY=[@ANYRES16=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)='r', 0x1}], 0x1}}], 0x1, 0x4c040) syz_io_uring_setup(0x4e26, 0x0, &(0x7f0000000280), &(0x7f0000000240)) mknod(0x0, 0xaa504579ad4e1bcd, 0xea) socket(0x10, 0x3, 0x0) 0s ago: executing program 4 (id=155): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000009c0)={0x1, &(0x7f0000000980)=[{0x6, 0x7f, 0xe6, 0x7}]}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000020000007b4b143b7461fd771f95048f939e73e57d881cc3ffce7b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b34772592f6942d6643f"], 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffe}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80015}, 0x4000) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYRESDEC=r1], 0x0, 0x3, 0x4e, 0x0, 0x0, 0x4}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) sched_rr_get_interval(0x0, &(0x7f00000000c0)) socket$inet6(0xa, 0x80000, 0x2) socket(0x10, 0x803, 0x0) socket$xdp(0x2c, 0x3, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.2' (ED25519) to the list of known hosts. [ 66.577017][ T30] audit: type=1400 audit(1751983199.391:62): avc: denied { mounton } for pid=5817 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 66.581040][ T5817] cgroup: Unknown subsys name 'net' [ 66.599813][ T30] audit: type=1400 audit(1751983199.401:63): avc: denied { mount } for pid=5817 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.627240][ T30] audit: type=1400 audit(1751983199.421:64): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.791001][ T5817] cgroup: Unknown subsys name 'cpuset' [ 66.799005][ T5817] cgroup: Unknown subsys name 'rlimit' [ 66.936833][ T30] audit: type=1400 audit(1751983199.751:65): avc: denied { setattr } for pid=5817 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.969450][ T30] audit: type=1400 audit(1751983199.751:66): avc: denied { create } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.002732][ T30] audit: type=1400 audit(1751983199.751:67): avc: denied { write } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.023487][ T30] audit: type=1400 audit(1751983199.761:68): avc: denied { read } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.032921][ T5819] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 67.044127][ T30] audit: type=1400 audit(1751983199.771:69): avc: denied { mounton } for pid=5817 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 67.078074][ T30] audit: type=1400 audit(1751983199.771:70): avc: denied { mount } for pid=5817 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 67.101459][ T30] audit: type=1400 audit(1751983199.801:71): avc: denied { read } for pid=5499 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 68.051489][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.366206][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.374290][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.392690][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.401437][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.409387][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.418655][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.426937][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.436011][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.438289][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.444325][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.451235][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.458114][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.465979][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.479672][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.487551][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.487701][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.503863][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.512188][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.513491][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.526825][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.539361][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.546800][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.555379][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.563048][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.574556][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.909291][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 70.978809][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 71.177229][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.185970][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.193404][ T5827] bridge_slave_0: entered allmulticast mode [ 71.201836][ T5827] bridge_slave_0: entered promiscuous mode [ 71.209892][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 71.239962][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.247078][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.255046][ T5827] bridge_slave_1: entered allmulticast mode [ 71.262440][ T5827] bridge_slave_1: entered promiscuous mode [ 71.293878][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.312529][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.327668][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.329419][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.341228][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.348449][ T5831] bridge_slave_0: entered allmulticast mode [ 71.355241][ T5831] bridge_slave_0: entered promiscuous mode [ 71.362813][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.369982][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.377355][ T5831] bridge_slave_1: entered allmulticast mode [ 71.384449][ T5831] bridge_slave_1: entered promiscuous mode [ 71.403207][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 71.421253][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.473670][ T5827] team0: Port device team_slave_0 added [ 71.534864][ T5827] team0: Port device team_slave_1 added [ 71.543011][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.566256][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.574052][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.581360][ T5837] bridge_slave_0: entered allmulticast mode [ 71.588148][ T5837] bridge_slave_0: entered promiscuous mode [ 71.603827][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.636962][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.644409][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.652192][ T5837] bridge_slave_1: entered allmulticast mode [ 71.659618][ T5837] bridge_slave_1: entered promiscuous mode [ 71.673895][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 71.685187][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.692340][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.718290][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.731606][ T5831] team0: Port device team_slave_0 added [ 71.764121][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.771172][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.797176][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.810389][ T5831] team0: Port device team_slave_1 added [ 71.829676][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.875961][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.898472][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.905434][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.931695][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.944028][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.951126][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.977059][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.988657][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.995816][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.003197][ T5833] bridge_slave_0: entered allmulticast mode [ 72.010528][ T5833] bridge_slave_0: entered promiscuous mode [ 72.054825][ T5827] hsr_slave_0: entered promiscuous mode [ 72.061130][ T5827] hsr_slave_1: entered promiscuous mode [ 72.070395][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.077495][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.084705][ T5833] bridge_slave_1: entered allmulticast mode [ 72.092366][ T5833] bridge_slave_1: entered promiscuous mode [ 72.151853][ T5837] team0: Port device team_slave_0 added [ 72.157802][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.165575][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.173155][ T5832] bridge_slave_0: entered allmulticast mode [ 72.179949][ T5832] bridge_slave_0: entered promiscuous mode [ 72.203752][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.215921][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.226218][ T5837] team0: Port device team_slave_1 added [ 72.233003][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.241542][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.249342][ T5832] bridge_slave_1: entered allmulticast mode [ 72.256201][ T5832] bridge_slave_1: entered promiscuous mode [ 72.281273][ T5831] hsr_slave_0: entered promiscuous mode [ 72.287440][ T5831] hsr_slave_1: entered promiscuous mode [ 72.293742][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.301614][ T5831] Cannot create hsr debugfs directory [ 72.356349][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.382458][ T5833] team0: Port device team_slave_0 added [ 72.391319][ T5833] team0: Port device team_slave_1 added [ 72.397604][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.404634][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.430742][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.443226][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.450318][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.476329][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.488827][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.508819][ T5841] Bluetooth: hci0: command tx timeout [ 72.565325][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.572562][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.599114][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.609650][ T5841] Bluetooth: hci1: command tx timeout [ 72.626793][ T5832] team0: Port device team_slave_0 added [ 72.650413][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.657366][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.683972][ T5841] Bluetooth: hci2: command tx timeout [ 72.688208][ T5835] Bluetooth: hci3: command tx timeout [ 72.689558][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.695166][ T5841] Bluetooth: hci4: command tx timeout [ 72.726377][ T5832] team0: Port device team_slave_1 added [ 72.762694][ T5833] hsr_slave_0: entered promiscuous mode [ 72.769286][ T5833] hsr_slave_1: entered promiscuous mode [ 72.775189][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.783278][ T5833] Cannot create hsr debugfs directory [ 72.810244][ T5837] hsr_slave_0: entered promiscuous mode [ 72.816429][ T5837] hsr_slave_1: entered promiscuous mode [ 72.822754][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.830651][ T5837] Cannot create hsr debugfs directory [ 72.868661][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.875645][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.903171][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.915495][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.922758][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.948931][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.110476][ T5832] hsr_slave_0: entered promiscuous mode [ 73.116599][ T5832] hsr_slave_1: entered promiscuous mode [ 73.123133][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.130754][ T5832] Cannot create hsr debugfs directory [ 73.247534][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.285489][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.296131][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.327016][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.412995][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.436322][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.465613][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.478861][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.522169][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.552483][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.562516][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.600791][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.643475][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.656473][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.669064][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.684397][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.769500][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.809677][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.820211][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.831893][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.842025][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.862596][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.892410][ T3015] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.899692][ T3015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.915884][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.947058][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.954199][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.985934][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.026934][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.034128][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.067503][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.074669][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.100964][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.179096][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.194775][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.221904][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 74.221919][ T30] audit: type=1400 audit(1751983207.041:86): avc: denied { sys_module } for pid=5827 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 74.232411][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.304705][ T3448] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.311897][ T3448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.332103][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.360514][ T3448] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.367707][ T3448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.380308][ T3448] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.387487][ T3448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.423907][ T3448] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.431183][ T3448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.526157][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.539013][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.571204][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.589513][ T5841] Bluetooth: hci0: command tx timeout [ 74.634074][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.665485][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.672295][ T5841] Bluetooth: hci1: command tx timeout [ 74.744238][ T2973] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.751465][ T2973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.763042][ T5841] Bluetooth: hci4: command tx timeout [ 74.763056][ T5835] Bluetooth: hci3: command tx timeout [ 74.763086][ T5835] Bluetooth: hci2: command tx timeout [ 74.781424][ T5827] veth0_vlan: entered promiscuous mode [ 74.802758][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.809911][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.864365][ T5827] veth1_vlan: entered promiscuous mode [ 74.994059][ T5827] veth0_macvtap: entered promiscuous mode [ 75.004195][ T5827] veth1_macvtap: entered promiscuous mode [ 75.035415][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.072062][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.081372][ T5831] veth0_vlan: entered promiscuous mode [ 75.090497][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.107627][ T5827] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.140746][ T5827] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.149877][ T5827] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.158758][ T5827] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.175250][ T5831] veth1_vlan: entered promiscuous mode [ 75.186178][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.311375][ T5831] veth0_macvtap: entered promiscuous mode [ 75.355748][ T5837] veth0_vlan: entered promiscuous mode [ 75.370675][ T5831] veth1_macvtap: entered promiscuous mode [ 75.443710][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.460675][ T5837] veth1_vlan: entered promiscuous mode [ 75.476165][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.476494][ T3448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.487154][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.508525][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.517710][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.531032][ T3448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.535289][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.572203][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.693317][ T3448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.702570][ T3448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.711098][ T5837] veth0_macvtap: entered promiscuous mode [ 75.733064][ T2909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.744877][ T2909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.753208][ T30] audit: type=1400 audit(1751983208.561:87): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/root/syzkaller.4jQI85/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 75.779547][ T5832] veth0_vlan: entered promiscuous mode [ 75.787673][ T30] audit: type=1400 audit(1751983208.561:88): avc: denied { mount } for pid=5827 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 75.799240][ T5837] veth1_macvtap: entered promiscuous mode [ 75.815666][ T30] audit: type=1400 audit(1751983208.571:89): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/root/syzkaller.4jQI85/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 75.871627][ T30] audit: type=1400 audit(1751983208.571:90): avc: denied { mount } for pid=5827 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 75.893949][ T30] audit: type=1400 audit(1751983208.571:91): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/root/syzkaller.4jQI85/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 75.925232][ T30] audit: type=1400 audit(1751983208.601:92): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/root/syzkaller.4jQI85/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6556 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 75.962382][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.966532][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.985399][ T30] audit: type=1400 audit(1751983208.601:93): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 76.001281][ T5833] veth0_vlan: entered promiscuous mode [ 76.010852][ T30] audit: type=1400 audit(1751983208.661:94): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 76.046175][ T5832] veth1_vlan: entered promiscuous mode [ 76.063463][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.081622][ T30] audit: type=1400 audit(1751983208.661:95): avc: denied { mount } for pid=5827 comm="syz-executor" name="/" dev="gadgetfs" ino=6561 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 76.115917][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.126731][ T2909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.137119][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.146059][ T2909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.154320][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.163878][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.194293][ T5833] veth1_vlan: entered promiscuous mode [ 76.693009][ T5835] Bluetooth: hci0: command tx timeout [ 76.749286][ T5835] Bluetooth: hci1: command tx timeout [ 76.828176][ T5835] Bluetooth: hci2: command tx timeout [ 76.834243][ T5835] Bluetooth: hci4: command tx timeout [ 76.843887][ T5155] Bluetooth: hci3: command tx timeout [ 76.889100][ T5947] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1'. [ 76.904043][ T5833] veth0_macvtap: entered promiscuous mode [ 76.913153][ T5832] veth0_macvtap: entered promiscuous mode [ 76.924993][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.940849][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.942677][ T5833] veth1_macvtap: entered promiscuous mode [ 76.977200][ T5832] veth1_macvtap: entered promiscuous mode [ 77.012935][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.032578][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.052353][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.064928][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.120639][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.177639][ T5833] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.192466][ T5833] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.201307][ T5833] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.210192][ T5833] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.236833][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.280821][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.295892][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.306427][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.315434][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.372599][ T5958] input: syz1 as /devices/virtual/input/input5 [ 77.583749][ T2973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.602589][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.614101][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.622817][ T2973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.633825][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.658276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.768487][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.846375][ T2909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.975870][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 78.033599][ T2909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.085497][ T5969] block device autoloading is deprecated and will be removed. [ 78.178145][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.187252][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.269399][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.386288][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 78.395594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.404281][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.778241][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.827742][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.836136][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.847537][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.866230][ T5835] Bluetooth: hci0: command tx timeout [ 78.871764][ T5835] Bluetooth: hci1: command tx timeout [ 78.909154][ T5155] Bluetooth: hci4: command tx timeout [ 78.914651][ T5155] Bluetooth: hci3: command tx timeout [ 78.919884][ T2973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.920502][ T5835] Bluetooth: hci2: command tx timeout [ 78.927818][ T2973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.041543][ T5973] __vm_enough_memory: pid: 5973, comm: syz.3.10, bytes: 21200116555776 not enough memory for the allocation [ 79.234483][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 79.234728][ T30] audit: type=1400 audit(1751983212.041:136): avc: denied { create } for pid=5977 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 79.557277][ T5981] syz.1.9 uses obsolete (PF_INET,SOCK_PACKET) [ 79.668085][ T30] audit: type=1400 audit(1751983212.051:137): avc: denied { read } for pid=5976 comm="syz.1.9" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 79.724871][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.757680][ T30] audit: type=1400 audit(1751983212.051:138): avc: denied { open } for pid=5976 comm="syz.1.9" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 79.766100][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.816421][ T30] audit: type=1400 audit(1751983212.061:139): avc: denied { create } for pid=5977 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.839066][ T30] audit: type=1400 audit(1751983212.331:140): avc: denied { create } for pid=5976 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 79.864039][ T30] audit: type=1400 audit(1751983212.391:141): avc: denied { create } for pid=5976 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 79.886821][ T30] audit: type=1400 audit(1751983212.471:142): avc: denied { write } for pid=5976 comm="syz.1.9" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.963466][ T918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.976873][ T30] audit: type=1400 audit(1751983212.611:143): avc: denied { read } for pid=5984 comm="syz.4.5" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 80.076629][ T2909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.087188][ T2909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.253181][ T30] audit: type=1400 audit(1751983212.611:144): avc: denied { open } for pid=5984 comm="syz.4.5" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 80.323226][ T30] audit: type=1400 audit(1751983212.871:145): avc: denied { connect } for pid=5984 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 80.732289][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.075977][ T5992] Zero length message leads to an empty skb [ 81.438497][ T5882] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 81.578670][ T978] cfg80211: failed to load regulatory.db [ 81.718408][ T5882] usb 1-1: Using ep0 maxpacket: 32 [ 81.728320][ T6005] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 81.735068][ T6005] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 81.743772][ T6005] vhci_hcd vhci_hcd.0: Device attached [ 81.757131][ T6005] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(10) [ 81.763806][ T6005] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 81.772999][ T6005] vhci_hcd vhci_hcd.0: Device attached [ 81.781710][ T6006] vhci_hcd: cannot find the pending unlink 7 [ 81.793343][ T6005] warning: `syz.2.16' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.899078][ T5882] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 81.907495][ T5882] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 81.923307][ T5882] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 81.935720][ T5882] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 81.951181][ T5882] usb 1-1: config 0 interface 0 has no altsetting 0 [ 81.962062][ T5882] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 81.984832][ T5882] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 82.015819][ T5882] usb 1-1: Product: syz [ 82.022876][ T5882] usb 1-1: Manufacturer: syz [ 82.030149][ T5882] usb 1-1: SerialNumber: syz [ 82.045271][ T5882] usb 1-1: config 0 descriptor?? [ 82.050619][ T918] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 82.079383][ T5882] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 82.102958][ T5882] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 82.277426][ T6015] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17'. [ 82.288838][ T6015] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17'. [ 82.325126][ T6008] vhci_hcd: connection closed [ 82.327308][ T66] vhci_hcd: stop threads [ 82.421235][ T6006] vhci_hcd: connection reset by peer [ 82.522476][ T66] vhci_hcd: release socket [ 82.626128][ T66] vhci_hcd: disconnect device [ 82.745250][ T66] vhci_hcd: stop threads [ 82.750883][ T5945] net_ratelimit: 9 callbacks suppressed [ 82.750899][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.765410][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.776508][ T66] vhci_hcd: release socket [ 82.785856][ T66] vhci_hcd: disconnect device [ 83.074547][ T6015] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 83.083260][ T5882] usb 1-1: USB disconnect, device number 2 [ 83.083338][ C0] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 83.091369][ T5882] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 83.438555][ T6025] SELinux: syz.2.19 (6025) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 83.874907][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.309684][ T6001] ldusb: No device or device unplugged -19 [ 84.476657][ T6031] netlink: 48 bytes leftover after parsing attributes in process `syz.2.22'. [ 84.508352][ T978] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 85.043894][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.067630][ T978] usb 5-1: device descriptor read/64, error -71 [ 85.074271][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.082841][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.149179][ T93] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.321060][ T93] usb 3-1: Using ep0 maxpacket: 32 [ 85.345877][ T93] usb 3-1: config 0 interface 0 has no altsetting 0 [ 85.368150][ T93] usb 3-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 85.377257][ T93] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.387323][ T978] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 85.540078][ T93] usb 3-1: config 0 descriptor?? [ 85.626219][ T6039] comedi comedi0: Minor 14 could not be opened [ 86.135755][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.212686][ T978] usb 5-1: device descriptor read/64, error -71 [ 86.230781][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 86.230800][ T30] audit: type=1400 audit(1751983219.051:192): avc: denied { append } for pid=6037 comm="syz.0.24" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 86.298262][ T30] audit: type=1400 audit(1751983219.101:193): avc: denied { allowed } for pid=6037 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 86.317347][ C1] vkms_vblank_simulate: vblank timer overrun [ 86.323943][ T30] audit: type=1400 audit(1751983219.101:194): avc: denied { create } for pid=6037 comm="syz.0.24" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 86.379101][ T978] usb usb5-port1: attempt power cycle [ 86.475740][ T6041] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 87.138201][ T918] vhci_hcd: vhci_device speed not set [ 87.927182][ T6052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27'. [ 87.937342][ T6052] openvswitch: netlink: nsh attr 801 is out of range max 3 [ 87.944746][ T6052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.641192][ T30] audit: type=1400 audit(1751983221.151:195): avc: denied { mount } for pid=6043 comm="syz.4.25" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 88.942286][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.955475][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.037086][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.066749][ T30] audit: type=1400 audit(1751983221.231:196): avc: denied { unmount } for pid=6043 comm="syz.4.25" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 89.097868][ T93] usbhid 3-1:0.0: can't add hid device: -71 [ 89.132717][ T93] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 89.167527][ T93] usb 3-1: USB disconnect, device number 2 [ 89.293185][ T6058] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 89.481455][ T30] audit: type=1400 audit(1751983222.211:197): avc: denied { name_bind } for pid=6056 comm="syz.3.28" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 89.635558][ T6063] 9pnet_fd: Insufficient options for proto=fd [ 89.838122][ T30] audit: type=1400 audit(1751983222.211:198): avc: denied { node_bind } for pid=6056 comm="syz.3.28" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 89.860824][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.926276][ T6066] comedi comedi0: Minor 14 could not be opened [ 90.325480][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.548893][ T30] audit: type=1400 audit(1751983223.351:199): avc: denied { ioctl } for pid=6061 comm="syz.2.30" path="socket:[7144]" dev="sockfs" ino=7144 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 90.958142][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 91.146080][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.157201][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.260179][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 91.707530][ T9] usb 4-1: config 5 has an invalid interface number: 89 but max is 0 [ 91.778688][ T30] audit: type=1400 audit(1751983224.401:200): avc: denied { mount } for pid=6061 comm="syz.2.30" name="/" dev="ramfs" ino=8199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 91.823749][ T9] usb 4-1: config 5 has no interface number 0 [ 91.880961][ T93] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.931280][ T9] usb 4-1: config 5 interface 89 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 16 [ 92.059321][ T9] usb 4-1: config 5 interface 89 has no altsetting 0 [ 92.137979][ T30] audit: type=1400 audit(1751983224.401:201): avc: denied { ioctl } for pid=6061 comm="syz.2.30" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 92.180531][ T978] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 92.223448][ T918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.253007][ T9] usb 4-1: string descriptor 0 read error: -71 [ 92.390280][ T9] usb 4-1: New USB device found, idVendor=07fa, idProduct=0847, bcdDevice=b9.2f [ 92.400215][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.408616][ T30] audit: type=1400 audit(1751983225.081:202): avc: denied { setopt } for pid=6074 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 92.440140][ T9] usb 4-1: can't set config #5, error -71 [ 92.469103][ T9] usb 4-1: USB disconnect, device number 2 [ 93.005029][ T30] audit: type=1400 audit(1751983225.361:203): avc: denied { bind } for pid=6074 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 93.027019][ T30] audit: type=1400 audit(1751983225.361:204): avc: denied { name_bind } for pid=6074 comm="syz.0.33" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 93.058810][ T978] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 93.069013][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.235964][ T918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.246565][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.258065][ T30] audit: type=1400 audit(1751983225.361:205): avc: denied { node_bind } for pid=6074 comm="syz.0.33" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 93.307389][ T30] audit: type=1400 audit(1751983225.361:206): avc: denied { name_connect } for pid=6074 comm="syz.0.33" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 93.318484][ T978] usb 5-1: config 0 descriptor?? [ 93.344729][ T6080] netlink: 16 bytes leftover after parsing attributes in process `syz.3.34'. [ 93.378145][ T6080] netlink: 24 bytes leftover after parsing attributes in process `syz.3.34'. [ 93.429210][ T30] audit: type=1400 audit(1751983226.241:207): avc: denied { write } for pid=6083 comm="syz.1.36" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 93.441004][ T6080] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 94.350032][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.372533][ T918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.015704][ T30] audit: type=1400 audit(1751983227.521:208): avc: denied { block_suspend } for pid=6081 comm="syz.0.35" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 95.108364][ T6099] netlink: 28 bytes leftover after parsing attributes in process `syz.0.35'. [ 95.140693][ T30] audit: type=1400 audit(1751983227.861:209): avc: denied { map } for pid=6083 comm="syz.1.36" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8058 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 95.928465][ T978] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 95.974562][ T978] [drm:udl_init] *ERROR* Selecting channel failed [ 96.054322][ T918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.179180][ T978] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 96.185479][ T6097] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 96.193159][ T978] [drm] Initialized udl on minor 2 [ 96.200454][ T978] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 96.211817][ T978] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 96.220019][ T9] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 96.228291][ T9] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 96.238066][ T978] usb 5-1: USB disconnect, device number 5 [ 96.891912][ T6097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.928057][ T5890] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 97.041917][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 97.041948][ T30] audit: type=1400 audit(1751983229.831:211): avc: denied { setopt } for pid=6111 comm="syz.4.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 97.072083][ T918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.131801][ T30] audit: type=1400 audit(1751983229.951:212): avc: denied { read write } for pid=6111 comm="syz.4.41" name="sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 97.158241][ T30] audit: type=1400 audit(1751983229.951:213): avc: denied { open } for pid=6111 comm="syz.4.41" path="/dev/sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 97.186063][ T5890] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 97.200400][ T5890] usb 3-1: can't read configurations, error -61 [ 97.393527][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.413949][ T5890] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 97.524882][ T6116] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.727284][ T5890] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 97.735376][ T5890] usb 3-1: can't read configurations, error -61 [ 97.744933][ T5890] usb usb3-port1: attempt power cycle [ 97.778001][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 97.848049][ T93] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 97.929613][ T9] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 97.939037][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.998617][ T9] usb 4-1: config 0 descriptor?? [ 98.015638][ T93] usb 5-1: unable to get BOS descriptor or descriptor too short [ 98.034294][ T93] usb 5-1: not running at top speed; connect to a high speed hub [ 98.079672][ T93] usb 5-1: config 8 has an invalid interface number: 24 but max is 0 [ 98.087893][ T93] usb 5-1: config 8 has no interface number 0 [ 98.088099][ T5890] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 98.102022][ T93] usb 5-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 64 [ 98.123515][ T93] usb 5-1: config 8 interface 24 altsetting 2 endpoint 0x85 has invalid maxpacket 63008, setting to 64 [ 98.125172][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.134897][ T93] usb 5-1: config 8 interface 24 has no altsetting 0 [ 98.323945][ T93] usb 5-1: New USB device found, idVendor=10cf, idProduct=54fc, bcdDevice=75.af [ 98.364484][ T93] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 98.373299][ T93] usb 5-1: Product: syz [ 98.377551][ T93] usb 5-1: Manufacturer: syz [ 98.395000][ T6116] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 98.409010][ T6116] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 98.430136][ T5890] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 98.437845][ T5890] usb 3-1: can't read configurations, error -61 [ 99.161277][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.188518][ T5890] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 99.214713][ T5890] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 99.214760][ T5890] usb 3-1: can't read configurations, error -61 [ 99.215131][ T5890] usb usb3-port1: unable to enumerate USB device [ 99.242654][ T30] audit: type=1400 audit(1751983232.061:214): avc: denied { append } for pid=6115 comm="syz.4.43" name="media5" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.242757][ T30] audit: type=1400 audit(1751983232.061:215): avc: denied { ioctl } for pid=6115 comm="syz.4.43" path="socket:[8081]" dev="sockfs" ino=8081 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 99.404150][ T30] audit: type=1400 audit(1751983232.221:216): avc: denied { create } for pid=6129 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 99.494580][ T93] usb 5-1: USB disconnect, device number 6 [ 99.534931][ T5890] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.721956][ T6134] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.123048][ T6136] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 100.143353][ T6136] SELinux: failed to load policy [ 100.154479][ T30] audit: type=1400 audit(1751983232.521:217): avc: denied { create } for pid=6129 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 100.191934][ T30] audit: type=1400 audit(1751983232.521:218): avc: denied { create } for pid=6129 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 100.199157][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.212299][ T30] audit: type=1400 audit(1751983232.921:219): avc: denied { load_policy } for pid=6135 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 100.263224][ T5890] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 100.315349][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.402702][ T5890] usb 2-1: config 0 descriptor?? [ 100.485926][ T9] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 100.493659][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.503392][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 100.532625][ T6144] netlink: 16 bytes leftover after parsing attributes in process `syz.0.49'. [ 100.551184][ T30] audit: type=1400 audit(1751983233.361:220): avc: denied { execute } for pid=6141 comm="syz.2.51" path="/9/bus" dev="tmpfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 100.581182][ T9] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 100.604285][ T6144] netlink: 24 bytes leftover after parsing attributes in process `syz.0.49'. [ 100.629992][ T9] [drm] Initialized udl on minor 2 [ 101.318128][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 101.330534][ T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 101.340187][ T978] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 101.343304][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 101.350078][ T978] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 101.357254][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.363400][ T9] usb 4-1: USB disconnect, device number 3 [ 101.422627][ T6144] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 101.540793][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.563511][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.638117][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 101.646998][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 101.655554][ T24] usb 5-1: config 0 has no interface number 0 [ 101.703677][ T24] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 101.742922][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.781390][ T24] usb 5-1: Product: syz [ 101.795760][ T24] usb 5-1: Manufacturer: syz [ 101.803819][ T6153] netlink: 16 bytes leftover after parsing attributes in process `syz.3.52'. [ 101.805562][ T24] usb 5-1: SerialNumber: syz [ 101.823417][ T6153] netlink: 24 bytes leftover after parsing attributes in process `syz.3.52'. [ 101.838892][ T24] usb 5-1: config 0 descriptor?? [ 101.879704][ T24] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 101.985854][ T6153] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 102.225742][ T30] audit: type=1400 audit(1751983235.041:221): avc: denied { write } for pid=6155 comm="syz.2.53" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 102.269485][ T5945] kernel write not supported for file /cpu/0/msr (pid: 5945 comm: kworker/1:6) [ 102.355923][ T6157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.53'. [ 102.389399][ T30] audit: type=1400 audit(1751983235.201:222): avc: denied { ioctl } for pid=6155 comm="syz.2.53" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x7210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 102.682400][ T30] audit: type=1400 audit(1751983235.241:223): avc: denied { getopt } for pid=6155 comm="syz.2.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 102.798088][ T5890] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 102.826083][ T5890] [drm:udl_init] *ERROR* Selecting channel failed [ 102.850133][ T30] audit: type=1400 audit(1751983235.471:224): avc: denied { write } for pid=6140 comm="syz.4.50" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 102.850679][ T918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.875777][ T5890] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 3 [ 103.342958][ T93] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 103.402454][ T24] gspca_spca1528: reg_w err -110 [ 103.428160][ T24] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 103.449425][ T5890] [drm] Initialized udl on minor 3 [ 103.475329][ T5890] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 103.522412][ T5890] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 103.538072][ T93] usb 3-1: device descriptor read/64, error -71 [ 103.547856][ T5910] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 103.568296][ T5890] usb 2-1: USB disconnect, device number 2 [ 103.577270][ T5910] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 103.954006][ T30] audit: type=1400 audit(1751983236.621:225): avc: denied { read } for pid=6163 comm="syz.1.55" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 103.984472][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.995481][ T30] audit: type=1400 audit(1751983236.621:226): avc: denied { open } for pid=6163 comm="syz.1.55" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 104.019107][ T93] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 104.028597][ T30] audit: type=1400 audit(1751983236.631:227): avc: denied { ioctl } for pid=6163 comm="syz.1.55" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 104.178260][ T93] usb 3-1: device descriptor read/64, error -71 [ 104.306128][ T30] audit: type=1400 audit(1751983237.121:228): avc: denied { write } for pid=6171 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 104.326965][ T93] usb usb3-port1: attempt power cycle [ 104.338343][ T30] audit: type=1400 audit(1751983237.151:229): avc: denied { write } for pid=6171 comm="syz.0.58" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 104.367628][ T30] audit: type=1400 audit(1751983237.181:230): avc: denied { create } for pid=6175 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 104.369516][ T6177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.59'. [ 104.399176][ T6178] netlink: 16 bytes leftover after parsing attributes in process `syz.1.57'. [ 104.409115][ T6178] netlink: 24 bytes leftover after parsing attributes in process `syz.1.57'. [ 104.490538][ T6178] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 104.499724][ T5910] usb 5-1: USB disconnect, device number 7 [ 104.590604][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.744553][ T93] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 105.474409][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.671179][ T93] usb 3-1: device not accepting address 9, error -71 [ 106.318543][ T6198] comedi comedi3: adq12b: I/O port conflict (0xfffffffffffffffb,16) [ 106.376457][ T6199] bridge_slave_0: left allmulticast mode [ 106.396983][ T6200] comedi comedi3: adq12b: I/O port conflict (0xfffffffffffffffb,16) [ 106.408149][ T6199] bridge_slave_0: left promiscuous mode [ 106.414523][ T6199] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.518665][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.526824][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.582328][ T6199] bridge_slave_1: left allmulticast mode [ 106.639392][ T6199] bridge_slave_1: left promiscuous mode [ 106.711820][ T6199] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.764690][ T6199] bond0: (slave bond_slave_0): Releasing backup interface [ 106.849500][ T6199] bond0: (slave bond_slave_1): Releasing backup interface [ 106.995301][ T6199] team0: Port device team_slave_0 removed [ 107.037074][ T6199] team0: Port device team_slave_1 removed [ 107.092791][ T6199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.101299][ T6199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.118441][ T5883] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 107.202848][ T6199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.233646][ T6199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.257184][ T6203] team0: Mode changed to "roundrobin" [ 107.268703][ T5883] usb 1-1: Using ep0 maxpacket: 16 [ 107.284068][ T5883] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 107.405999][ T5883] usb 1-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 107.415423][ T5883] usb 1-1: Product: syz [ 107.421211][ T5883] usb 1-1: Manufacturer: syz [ 107.425822][ T5883] usb 1-1: SerialNumber: syz [ 107.432790][ T5883] usb 1-1: config 0 descriptor?? [ 107.445793][ T5883] usb 1-1: selecting invalid altsetting 1 [ 107.537769][ T5883] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 107.562290][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.628470][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.644457][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.736999][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 107.737019][ T30] audit: type=1400 audit(1751983240.541:234): avc: denied { ioctl } for pid=6213 comm="syz.0.67" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 107.768629][ C1] vkms_vblank_simulate: vblank timer overrun [ 107.795184][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.902950][ T6231] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(14) [ 107.909618][ T6231] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 107.936000][ T5890] usb 1-1: USB disconnect, device number 3 [ 107.937612][ T30] audit: type=1400 audit(1751983240.741:235): avc: denied { create } for pid=6234 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 108.101605][ T6237] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(17) [ 108.108289][ T6237] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 108.322457][ T6231] vhci_hcd vhci_hcd.0: Device attached [ 108.367300][ T6237] vhci_hcd vhci_hcd.0: Device attached [ 108.375892][ T30] audit: type=1400 audit(1751983241.051:236): avc: denied { ioctl } for pid=6234 comm="syz.2.72" path="socket:[8607]" dev="sockfs" ino=8607 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 108.400122][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.460738][ T6244] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(16) [ 108.467395][ T6244] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 108.536317][ T6244] vhci_hcd vhci_hcd.0: Device attached [ 108.546686][ T6248] netlink: 64 bytes leftover after parsing attributes in process `syz.4.73'. [ 108.658177][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.678519][ T6226] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 108.691122][ T5910] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 108.781820][ T6251] Can't find a SQUASHFS superblock on nullb0 [ 108.868158][ T30] audit: type=1400 audit(1751983241.591:237): avc: denied { mounton } for pid=6247 comm="syz.4.73" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 109.124699][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.139134][ T6226] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(23) [ 109.145771][ T6226] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 109.178854][ T30] audit: type=1400 audit(1751983241.611:238): avc: denied { ioctl } for pid=6247 comm="syz.4.73" path="socket:[8627]" dev="sockfs" ino=8627 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.182781][ T6226] vhci_hcd vhci_hcd.0: Device attached [ 109.217862][ T6231] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(26) [ 109.224501][ T6231] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 109.254255][ T6231] vhci_hcd vhci_hcd.0: Device attached [ 109.284686][ T6226] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 109.327610][ T6226] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(29) [ 109.334260][ T6226] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 109.367586][ T6226] vhci_hcd vhci_hcd.0: Device attached [ 109.376366][ T6231] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 109.514446][ T6226] vhci_hcd vhci_hcd.0: port 0 already used [ 109.550712][ T6257] vhci_hcd: connection closed [ 109.552009][ T6261] vhci_hcd: connection closed [ 109.552143][ T3015] vhci_hcd: stop threads [ 109.569999][ T6252] vhci_hcd: connection closed [ 109.580869][ T3015] vhci_hcd: release socket [ 109.709039][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.743263][ T3015] vhci_hcd: disconnect device [ 109.766467][ T3015] vhci_hcd: stop threads [ 109.770959][ T3015] vhci_hcd: release socket [ 109.776430][ T3015] vhci_hcd: disconnect device [ 109.786039][ T3015] vhci_hcd: stop threads [ 109.790189][ T918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.790924][ T3015] vhci_hcd: release socket [ 109.804213][ T3015] vhci_hcd: disconnect device [ 109.856461][ T30] audit: type=1400 audit(1751983242.661:239): avc: denied { setopt } for pid=6263 comm="syz.0.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 109.928433][ T6245] vhci_hcd: connection closed [ 109.928690][ T66] vhci_hcd: stop threads [ 109.938658][ T6238] vhci_hcd: connection closed [ 109.940573][ T6232] vhci_hcd: connection reset by peer [ 109.960709][ T66] vhci_hcd: release socket [ 109.976630][ T66] vhci_hcd: disconnect device [ 109.986723][ T66] vhci_hcd: stop threads [ 110.008105][ T66] vhci_hcd: release socket [ 110.013547][ T66] vhci_hcd: disconnect device [ 110.027030][ T66] vhci_hcd: stop threads [ 110.050246][ T66] vhci_hcd: release socket [ 110.056488][ T66] vhci_hcd: disconnect device [ 110.452062][ T918] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 110.708092][ T918] usb 3-1: Using ep0 maxpacket: 8 [ 110.782712][ T6278] netlink: 'syz.4.77': attribute type 20 has an invalid length. [ 110.834013][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.847154][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.864631][ T918] usb 3-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 110.899728][ T918] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 110.928597][ T918] usb 3-1: Product: syz [ 110.935832][ T918] usb 3-1: Manufacturer: syz [ 110.972890][ T918] usb 3-1: SerialNumber: syz [ 110.995130][ T918] usb 3-1: config 0 descriptor?? [ 111.103359][ T6283] netlink: 16 bytes leftover after parsing attributes in process `syz.1.79'. [ 111.118163][ T6283] netlink: 24 bytes leftover after parsing attributes in process `syz.1.79'. [ 111.259259][ T6283] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 111.365481][ T6289] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 111.458274][ T30] audit: type=1400 audit(1751983244.281:240): avc: denied { setopt } for pid=6288 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 111.798251][ T30] audit: type=1400 audit(1751983244.611:241): avc: denied { write } for pid=6294 comm="syz.0.83" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 111.893074][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 112.102837][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.191362][ T918] usb 3-1: USB disconnect, device number 11 [ 112.250691][ T9] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 112.260181][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.271128][ T9] usb 5-1: config 0 descriptor?? [ 113.162391][ T918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.308193][ T30] audit: type=1400 audit(1751983246.111:242): avc: denied { setopt } for pid=6300 comm="syz.0.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 113.879261][ T5910] vhci_hcd: vhci_device speed not set [ 114.009366][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.232406][ T30] audit: type=1400 audit(1751983247.021:243): avc: denied { append } for pid=6312 comm="syz.3.86" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 114.265585][ T6313] loop6: detected capacity change from 0 to 7 [ 114.277280][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.350322][ T6313] Dev loop6: unable to read RDB block 7 [ 114.362633][ T6313] loop6: unable to read partition table [ 114.374360][ T6313] loop6: partition table beyond EOD, truncated [ 114.390273][ T6313] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 114.406583][ T30] audit: type=1400 audit(1751983247.221:244): avc: denied { mounton } for pid=6316 comm="syz.2.88" path="/19/file0" dev="tmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 114.469562][ T6319] Driver unsupported XDP return value 0 on prog (id 15) dev N/A, expect packet loss! [ 114.518989][ T6325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.90'. [ 114.661818][ T9] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 114.670302][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 114.719800][ T93] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 115.228674][ T9] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 115.268098][ T30] audit: type=1400 audit(1751983248.081:245): avc: denied { read } for pid=6335 comm="syz.0.93" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 115.315324][ T9] [drm] Initialized udl on minor 2 [ 115.320957][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.338931][ T9] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 115.351049][ T9] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 115.362172][ T10] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 115.374581][ T10] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 115.384830][ T9] usb 5-1: USB disconnect, device number 8 [ 115.397687][ T30] audit: type=1400 audit(1751983248.131:246): avc: denied { unmount } for pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 115.399483][ T93] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.434559][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.94'. [ 115.468407][ T93] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 115.489702][ T93] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.499915][ T93] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 115.514751][ T93] usb 2-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 115.526683][ T93] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.579791][ T6343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'. [ 115.605975][ T93] usb 2-1: config 0 descriptor?? [ 115.623707][ T30] audit: type=1400 audit(1751983248.261:247): avc: denied { listen } for pid=6339 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 115.644194][ T30] audit: type=1400 audit(1751983248.271:248): avc: denied { accept } for pid=6339 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 115.665836][ T30] audit: type=1400 audit(1751983248.271:249): avc: denied { listen } for pid=6339 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 115.675210][ T6343] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.685622][ T5882] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 116.229981][ T5890] usb usb40-port1: attempt power cycle [ 116.257252][ T30] audit: type=1400 audit(1751983248.331:250): avc: denied { accept } for pid=6339 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 116.353054][ T918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.392442][ T93] usbhid 2-1:0.0: can't add hid device: -71 [ 116.408032][ T93] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 116.410374][ T6343] bridge_slave_1 (unregistering): left allmulticast mode [ 116.422424][ T93] usb 2-1: USB disconnect, device number 3 [ 116.445932][ T6343] bridge_slave_1 (unregistering): left promiscuous mode [ 116.453456][ T5882] usb 1-1: Using ep0 maxpacket: 32 [ 116.470199][ T6343] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.479895][ T5882] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 116.494744][ T5882] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 116.504036][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.512960][ T5882] usb 1-1: Product: syz [ 116.524756][ T5882] usb 1-1: Manufacturer: syz [ 116.529947][ T5882] usb 1-1: SerialNumber: syz [ 116.553360][ T5882] usb 1-1: config 0 descriptor?? [ 116.623690][ T6336] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 116.631714][ T30] audit: type=1400 audit(1751983249.441:251): avc: denied { create } for pid=6328 comm="syz.4.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 116.675016][ T5882] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 116.820978][ T6358] netlink: 'syz.3.96': attribute type 1 has an invalid length. [ 116.879874][ T5882] usb 1-1: USB disconnect, device number 4 [ 116.898586][ T5890] usb usb40-port1: unable to enumerate USB device [ 116.942114][ T6055] udevd[6055]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.943209][ T6363] netlink: 16 bytes leftover after parsing attributes in process `syz.2.97'. [ 116.977301][ T93] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 117.034041][ T6363] netlink: 24 bytes leftover after parsing attributes in process `syz.2.97'. [ 117.068153][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.129463][ T93] usb 2-1: device descriptor read/64, error -71 [ 117.234224][ T6363] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 117.388143][ T93] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 117.402995][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.898012][ T5883] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 117.972127][ T6376] netlink: 24 bytes leftover after parsing attributes in process `syz.1.101'. [ 118.028238][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.071937][ T5883] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 118.112842][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.159533][ T5883] usb 4-1: Product: syz [ 118.168340][ T5883] usb 4-1: Manufacturer: syz [ 118.194091][ T5883] usb 4-1: SerialNumber: syz [ 118.299323][ T5883] usb 4-1: config 0 descriptor?? [ 118.424068][ T5890] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 118.640470][ T918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.657497][ T5883] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 118.668989][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.718236][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 118.718255][ T30] audit: type=1400 audit(1751983251.541:263): avc: denied { create } for pid=6385 comm="syz.4.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 118.784569][ T6391] fuse: Unknown parameter '' [ 118.912396][ T5890] usb 1-1: Using ep0 maxpacket: 8 [ 118.923917][ T30] audit: type=1400 audit(1751983251.601:264): avc: denied { create } for pid=6390 comm="syz.1.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 118.965329][ T6389] netlink: 28 bytes leftover after parsing attributes in process `syz.4.104'. [ 119.089788][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 119.253979][ T5890] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 119.271699][ T5890] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.297644][ T30] audit: type=1400 audit(1751983251.921:265): avc: denied { create } for pid=6366 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 119.337567][ T5890] usb 1-1: config 0 has no interfaces? [ 119.350435][ T5890] usb 1-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 119.371195][ T10] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 119.418267][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.429040][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.439959][ T10] usb 3-1: config 0 descriptor?? [ 119.457140][ T5890] usb 1-1: config 0 descriptor?? [ 119.652815][ T30] audit: type=1400 audit(1751983252.461:266): avc: denied { mount } for pid=6395 comm="syz.1.106" name="/" dev="rpc_pipefs" ino=8858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 119.915205][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.972274][ T30] audit: type=1400 audit(1751983252.491:267): avc: denied { unmount } for pid=6395 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 120.122268][ T30] audit: type=1326 audit(1751983252.781:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.0.99" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb17198e929 code=0x0 [ 120.651245][ T93] usb 4-1: USB disconnect, device number 4 [ 120.807470][ T6403] fuse: Unknown parameter 'group_i' [ 120.986286][ T30] audit: type=1400 audit(1751983253.701:269): avc: denied { setopt } for pid=6404 comm="syz.3.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 121.006707][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.118166][ T6408] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 121.278337][ T93] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.518561][ T30] audit: type=1400 audit(1751983253.901:270): avc: denied { mount } for pid=6402 comm="syz.4.107" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 121.579811][ T6410] program syz.3.108 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.661482][ T6411] program syz.3.108 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.671871][ T6411] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 121.896944][ T10] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 121.943239][ T30] audit: type=1400 audit(1751983253.931:271): avc: denied { unlink } for pid=6402 comm="syz.4.107" name="#1" dev="tmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 122.030694][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.071625][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 122.153286][ T30] audit: type=1400 audit(1751983253.951:272): avc: denied { mount } for pid=6402 comm="syz.4.107" name="/" dev="overlay" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 122.217832][ T6413] netlink: 'syz.1.109': attribute type 10 has an invalid length. [ 122.255047][ T6413] batman_adv: batadv0: Adding interface: team0 [ 122.261461][ T6413] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.288281][ T6413] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 122.517871][ T10] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 122.558670][ T10] [drm] Initialized udl on minor 2 [ 122.581589][ T10] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 122.626199][ T10] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 122.634486][ T5910] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 122.673335][ T5910] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 122.699934][ T5883] usb 1-1: USB disconnect, device number 5 [ 122.703058][ T10] usb 3-1: USB disconnect, device number 12 [ 122.715502][ T5910] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 122.749088][ T93] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 123.099580][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.209053][ T93] usb 2-1: Using ep0 maxpacket: 16 [ 123.216608][ T93] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.228108][ T93] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.240341][ T93] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 123.263076][ T93] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.271225][ T5883] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 123.277969][ T93] usb 2-1: Product: syz [ 123.292700][ T6430] netlink: 16 bytes leftover after parsing attributes in process `syz.4.114'. [ 123.306054][ T93] usb 2-1: Manufacturer: syz [ 123.318785][ T6430] netlink: 24 bytes leftover after parsing attributes in process `syz.4.114'. [ 123.322494][ T6431] netlink: 'syz.3.116': attribute type 2 has an invalid length. [ 123.327786][ T93] usb 2-1: SerialNumber: syz [ 123.337816][ T6431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.116'. [ 123.431059][ T6431] trusted_key: encrypted_key: insufficient parameters specified [ 123.450275][ T5883] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x95, changing to 0x85 [ 123.465402][ T6434] loop6: detected capacity change from 0 to 7 [ 123.470164][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 123.477269][ T6430] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 123.498174][ T6434] Dev loop6: unable to read RDB block 7 [ 123.498570][ T5883] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 123.503914][ T6434] loop6: unable to read partition table [ 123.522472][ T6434] loop6: partition table beyond EOD, truncated [ 123.549905][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.560580][ T6434] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 123.579191][ T5883] usb 1-1: config 0 descriptor?? [ 123.624094][ T5883] pegasus_notetaker 1-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 123.767068][ T93] usb 2-1: 0:2 : does not exist [ 123.809719][ T6438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.821206][ T6438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.840571][ T93] usb 2-1: USB disconnect, device number 6 [ 123.842132][ T5883] usb 1-1: USB disconnect, device number 6 [ 123.882412][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 123.882430][ T30] audit: type=1400 audit(1751983256.701:280): avc: denied { sqpoll } for pid=6439 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 123.907864][ T5945] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 124.176754][ T5945] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 124.247620][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.345955][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.358303][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.367334][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.439495][ T5945] usb 4-1: config 0 descriptor?? [ 124.560245][ T6445] sctp: [Deprecated]: syz.0.120 (pid 6445) Use of struct sctp_assoc_value in delayed_ack socket option. [ 124.560245][ T6445] Use struct sctp_sack_info instead [ 124.590326][ T30] audit: type=1400 audit(1751983257.401:281): avc: denied { read } for pid=6442 comm="syz.0.120" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 124.644611][ T30] audit: type=1400 audit(1751983257.401:282): avc: denied { open } for pid=6442 comm="syz.0.120" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 124.783073][ T6449] netlink: 16 bytes leftover after parsing attributes in process `syz.2.121'. [ 125.164899][ T6454] FAULT_INJECTION: forcing a failure. [ 125.164899][ T6454] name failslab, interval 1, probability 0, space 0, times 1 [ 125.177822][ T6454] CPU: 1 UID: 0 PID: 6454 Comm: syz.3.118 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 125.177848][ T6454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 125.177859][ T6454] Call Trace: [ 125.177866][ T6454] [ 125.177873][ T6454] dump_stack_lvl+0x16c/0x1f0 [ 125.177911][ T6454] should_fail_ex+0x512/0x640 [ 125.177939][ T6454] should_failslab+0xc2/0x120 [ 125.177965][ T6454] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 125.177991][ T6454] ? sctp_get_port_local+0x51e/0x1610 [ 125.178024][ T6454] sctp_get_port_local+0x51e/0x1610 [ 125.178059][ T6454] ? __pfx_sctp_get_port_local+0x10/0x10 [ 125.178083][ T6454] ? sctp_bind_addr_match+0x193/0x300 [ 125.178111][ T6454] ? sctp_bind_addr_match+0x19d/0x300 [ 125.178139][ T6454] sctp_do_bind+0x223/0x700 [ 125.178166][ T6454] sctp_connect_new_asoc+0x5fd/0x790 [ 125.178191][ T6454] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 125.178218][ T6454] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 125.178244][ T6454] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 125.178280][ T6454] sctp_sendmsg+0x15f9/0x1ee0 [ 125.178312][ T6454] ? __pfx_sctp_sendmsg+0x10/0x10 [ 125.178342][ T6454] ? rcu_is_watching+0x12/0xc0 [ 125.178377][ T6454] ? __pfx_sctp_sendmsg+0x10/0x10 [ 125.178407][ T6454] ? inet_sendmsg+0x4e/0x140 [ 125.178433][ T6454] ? __pfx_sctp_sendmsg+0x10/0x10 [ 125.178457][ T6454] inet_sendmsg+0x11c/0x140 [ 125.178482][ T6454] ____sys_sendmsg+0x973/0xc70 [ 125.178505][ T6454] ? copy_msghdr_from_user+0x10a/0x160 [ 125.178532][ T6454] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.178549][ T6454] ? trace_sched_exit_tp+0xde/0x130 [ 125.178586][ T6454] ? rcu_watching_snap_stopped_since+0x50/0x110 [ 125.178618][ T6454] ___sys_sendmsg+0x134/0x1d0 [ 125.178647][ T6454] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.178703][ T6454] ? __sys_sendmmsg+0x110/0x420 [ 125.178734][ T6454] __sys_sendmmsg+0x200/0x420 [ 125.178764][ T6454] ? __pfx___sys_sendmmsg+0x10/0x10 [ 125.178801][ T6454] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 125.178844][ T6454] ? fput+0x70/0xf0 [ 125.178862][ T6454] ? ksys_write+0x1ac/0x250 [ 125.178886][ T6454] ? __pfx_ksys_write+0x10/0x10 [ 125.178917][ T6454] __x64_sys_sendmmsg+0x9c/0x100 [ 125.178943][ T6454] ? lockdep_hardirqs_on+0x7c/0x110 [ 125.178969][ T6454] do_syscall_64+0xcd/0x4c0 [ 125.179001][ T6454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.179021][ T6454] RIP: 0033:0x7f442f58e929 [ 125.179039][ T6454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.179058][ T6454] RSP: 002b:00007f443032a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 125.179079][ T6454] RAX: ffffffffffffffda RBX: 00007f442f7b6160 RCX: 00007f442f58e929 [ 125.179091][ T6454] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 125.179103][ T6454] RBP: 00007f443032a090 R08: 0000000000000000 R09: 0000000000000000 [ 125.179115][ T6454] R10: 000000000004c040 R11: 0000000000000246 R12: 0000000000000001 [ 125.179127][ T6454] R13: 0000000000000000 R14: 00007f442f7b6160 R15: 00007ffe65cd9448 [ 125.179154][ T6454] [ 125.508502][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.742393][ T30] audit: type=1400 audit(1751983258.561:283): avc: denied { accept } for pid=6457 comm="syz.1.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 125.803529][ T6459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.818094][ T6459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.858069][ T5910] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 126.019960][ T5910] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 126.033619][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.046878][ T5910] usb 1-1: config 0 descriptor?? [ 126.049284][ T5883] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 126.096122][ T30] audit: type=1400 audit(1751983258.911:284): avc: denied { getattr } for pid=6466 comm="syz.2.125" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=9795 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 126.210806][ T5883] usb 2-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 16 [ 126.228226][ T5883] usb 2-1: config 1 interface 0 has no altsetting 0 [ 126.244359][ T5883] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 126.263435][ T918] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 126.271170][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.279581][ T5883] usb 2-1: Product: 迪껵苄唽奝ॢ英胗߳䍓䚆ҹ専ᗤ㔫Ü齞⑖쪉揔ᣴ웩䁭뢞阘屋솗⅐翎ᰧ輬괸奉릠 [ 126.294455][ T5883] usb 2-1: Manufacturer: Д [ 126.299150][ T5883] usb 2-1: SerialNumber: ࠝ [ 126.373420][ T6458] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 126.424658][ T6474] netlink: 32 bytes leftover after parsing attributes in process `syz.2.127'. [ 126.438120][ T918] usb 5-1: Using ep0 maxpacket: 32 [ 126.460556][ T918] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 126.470028][ T918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.480662][ T918] usb 5-1: Product: syz [ 126.485652][ T918] usb 5-1: Manufacturer: syz [ 126.490390][ T918] usb 5-1: SerialNumber: syz [ 126.498265][ T918] usb 5-1: config 0 descriptor?? [ 127.068187][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.082546][ T5945] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 127.094191][ T5883] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 127.106191][ T5945] [drm:udl_init] *ERROR* Selecting channel failed [ 127.122103][ T918] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 009 [ 127.157288][ T5945] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 127.164498][ T5945] [drm] Initialized udl on minor 2 [ 127.183165][ T5883] usb 2-1: USB disconnect, device number 7 [ 127.194025][ T5945] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 127.216411][ T5945] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 127.224279][ T918] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 127.234714][ T5945] usb 4-1: USB disconnect, device number 5 [ 127.240825][ T918] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 127.312475][ T10] usb 5-1: USB disconnect, device number 9 [ 127.398241][ T93] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.578017][ T5945] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 127.634620][ T6482] loop6: detected capacity change from 0 to 7 [ 127.643987][ T6482] Dev loop6: unable to read RDB block 7 [ 127.652027][ T6482] loop6: unable to read partition table [ 127.658625][ T6482] loop6: partition table beyond EOD, truncated [ 127.665736][ T6482] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 127.761012][ T5945] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.771627][ T5945] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 127.782323][ T5945] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 127.797259][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.809115][ T5945] usb 4-1: config 0 descriptor?? [ 127.821000][ T5945] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 127.831910][ T5945] dvb-usb: bulk message failed: -22 (3/0) [ 127.857455][ T5945] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 127.876244][ T30] audit: type=1400 audit(1751983260.681:285): avc: denied { ioctl } for pid=6483 comm="syz.1.130" path="socket:[8999]" dev="sockfs" ino=8999 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 127.900818][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.921469][ T5945] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 127.930728][ T5945] usb 4-1: media controller created [ 127.942693][ T5945] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 127.962001][ T30] audit: type=1400 audit(1751983260.781:286): avc: denied { getopt } for pid=6485 comm="syz.4.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 128.053460][ T6480] dvb-usb: bulk message failed: -22 (4/0) [ 128.074304][ T30] audit: type=1400 audit(1751983260.861:287): avc: denied { ioctl } for pid=6479 comm="syz.3.128" path="socket:[9908]" dev="sockfs" ino=9908 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.142813][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.170363][ T5945] dvb-usb: bulk message failed: -22 (6/0) [ 128.210665][ T5945] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 128.224010][ T30] audit: type=1400 audit(1751983260.861:288): avc: denied { connect } for pid=6479 comm="syz.3.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.269319][ T93] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.308999][ T5945] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 128.482266][ T5945] dvb-usb: schedule remote query interval to 150 msecs. [ 128.568120][ T5945] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 128.578054][ T5910] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 128.587233][ T5945] usb 4-1: USB disconnect, device number 6 [ 128.613939][ T5910] [drm:udl_init] *ERROR* Selecting channel failed [ 128.686904][ T5910] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 3 [ 128.706339][ T6490] mac80211_hwsim hwsim4 : renamed from wlan0 (while UP) [ 128.709470][ T5910] [drm] Initialized udl on minor 3 [ 128.959293][ T5910] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 128.965071][ T5945] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 129.037956][ T6496] 9pnet_fd: Insufficient options for proto=fd [ 129.142550][ T6497] netlink: 16 bytes leftover after parsing attributes in process `syz.3.134'. [ 129.151013][ T5910] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 129.159338][ T10] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 129.181901][ T6497] netlink: 24 bytes leftover after parsing attributes in process `syz.3.134'. [ 129.204267][ T918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.209810][ T6497] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 129.253177][ T10] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 129.277468][ T5910] usb 1-1: USB disconnect, device number 7 [ 129.288077][ T10] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 129.921932][ T6506] netlink: 212400 bytes leftover after parsing attributes in process `syz.1.135'. [ 130.143130][ T30] audit: type=1400 audit(1751983262.961:289): avc: denied { connect } for pid=6499 comm="syz.1.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 130.217245][ T30] audit: type=1400 audit(1751983263.031:291): avc: denied { getopt } for pid=6507 comm="syz.0.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 130.248727][ T30] audit: type=1400 audit(1751983263.031:290): avc: denied { getopt } for pid=6507 comm="syz.0.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 130.269762][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.418903][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 130.438472][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.542342][ T6515] pim6reg1: entered promiscuous mode [ 130.550870][ T6515] pim6reg1: entered allmulticast mode [ 130.610561][ T10] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 130.643666][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.677830][ T10] usb 5-1: config 0 descriptor?? [ 131.138538][ T6519] process 'syz.2.140' launched './file0' with NULL argv: empty string added [ 131.164499][ T30] audit: type=1400 audit(1751983263.941:292): avc: denied { create } for pid=6516 comm="syz.2.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 131.485687][ T6521] FAULT_INJECTION: forcing a failure. [ 131.485687][ T6521] name failslab, interval 1, probability 0, space 0, times 0 [ 131.498798][ T6521] CPU: 0 UID: 0 PID: 6521 Comm: syz.4.138 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 131.498823][ T6521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 131.498834][ T6521] Call Trace: [ 131.498840][ T6521] [ 131.498847][ T6521] dump_stack_lvl+0x16c/0x1f0 [ 131.498881][ T6521] should_fail_ex+0x512/0x640 [ 131.498908][ T6521] should_failslab+0xc2/0x120 [ 131.498935][ T6521] __kmalloc_cache_noprof+0x6a/0x3e0 [ 131.498955][ T6521] ? __pfx_sctp_get_port_local+0x10/0x10 [ 131.498981][ T6521] ? sctp_bind_addr_match+0x193/0x300 [ 131.499000][ T6521] ? sctp_add_bind_addr+0xae/0x3f0 [ 131.499026][ T6521] sctp_add_bind_addr+0xae/0x3f0 [ 131.499058][ T6521] sctp_do_bind+0x2d6/0x700 [ 131.499082][ T6521] sctp_connect_new_asoc+0x5fd/0x790 [ 131.499103][ T6521] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 131.499129][ T6521] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 131.499160][ T6521] sctp_sendmsg+0x15f9/0x1ee0 [ 131.499188][ T6521] ? __pfx_sctp_sendmsg+0x10/0x10 [ 131.499213][ T6521] ? __pfx_sock_has_perm+0x10/0x10 [ 131.499243][ T6521] ? __import_iovec+0x1dd/0x650 [ 131.499270][ T6521] ? __pfx_sctp_sendmsg+0x10/0x10 [ 131.499289][ T6521] inet_sendmsg+0x11c/0x140 [ 131.499313][ T6521] ____sys_sendmsg+0x973/0xc70 [ 131.499332][ T6521] ? copy_msghdr_from_user+0x10a/0x160 [ 131.499354][ T6521] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.499384][ T6521] ___sys_sendmsg+0x134/0x1d0 [ 131.499408][ T6521] ? __pfx____sys_sendmsg+0x10/0x10 [ 131.499428][ T6521] ? find_held_lock+0x2b/0x80 [ 131.499482][ T6521] __sys_sendmmsg+0x200/0x420 [ 131.499508][ T6521] ? __pfx___sys_sendmmsg+0x10/0x10 [ 131.499539][ T6521] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 131.499576][ T6521] ? fput+0x70/0xf0 [ 131.499591][ T6521] ? ksys_write+0x1ac/0x250 [ 131.499612][ T6521] ? __pfx_ksys_write+0x10/0x10 [ 131.499638][ T6521] __x64_sys_sendmmsg+0x9c/0x100 [ 131.499661][ T6521] ? lockdep_hardirqs_on+0x7c/0x110 [ 131.499683][ T6521] do_syscall_64+0xcd/0x4c0 [ 131.499710][ T6521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.499727][ T6521] RIP: 0033:0x7f27ded8e929 [ 131.499741][ T6521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.499758][ T6521] RSP: 002b:00007f27dfb73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 131.499775][ T6521] RAX: ffffffffffffffda RBX: 00007f27defb6160 RCX: 00007f27ded8e929 [ 131.499786][ T6521] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 131.499796][ T6521] RBP: 00007f27dfb73090 R08: 0000000000000000 R09: 0000000000000000 [ 131.499806][ T6521] R10: 000000000004c040 R11: 0000000000000246 R12: 0000000000000001 [ 131.499816][ T6521] R13: 0000000000000000 R14: 00007f27defb6160 R15: 00007fff1537c9c8 [ 131.499840][ T6521] [ 131.672696][ T30] audit: type=1400 audit(1751983263.971:293): avc: denied { execute_no_trans } for pid=6516 comm="syz.2.140" path="/32/file0" dev="tmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 131.672765][ T30] audit: type=1400 audit(1751983263.981:294): avc: denied { read } for pid=6516 comm="syz.2.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 131.851232][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.901229][ T6525] ======================================================= [ 131.901229][ T6525] WARNING: The mand mount option has been deprecated and [ 131.901229][ T6525] and is ignored by this kernel. Remove the mand [ 131.901229][ T6525] option from the mount to silence this warning. [ 131.901229][ T6525] ======================================================= [ 131.970378][ T30] audit: type=1400 audit(1751983264.711:295): avc: denied { mount } for pid=6522 comm="syz.3.141" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 132.100427][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.163452][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.185666][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.206055][ T5155] Bluetooth: hci4: command 0x0405 tx timeout [ 132.225684][ T30] audit: type=1400 audit(1751983264.721:296): avc: denied { remount } for pid=6522 comm="syz.3.141" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 132.246875][ T30] audit: type=1400 audit(1751983265.041:297): avc: denied { append } for pid=6524 comm="syz.0.142" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.269724][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.642596][ T30] audit: type=1400 audit(1751983265.461:298): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 132.756314][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.763674][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.828369][ T6540] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 132.850082][ T6540] SELinux: failed to load policy [ 132.901092][ T6542] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 132.939416][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.069189][ T10] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 133.166931][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 133.363470][ T10] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 133.406464][ T6553] netlink: 24 bytes leftover after parsing attributes in process `syz.4.149'. [ 133.432313][ T10] [drm] Initialized udl on minor 2 [ 133.452064][ T10] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 133.480123][ T10] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 133.508141][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.519234][ T93] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 133.542966][ T10] usb 5-1: USB disconnect, device number 10 [ 133.549992][ T93] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 133.641791][ T6562] netlink: 16 bytes leftover after parsing attributes in process `syz.1.151'. [ 133.650899][ T6562] netlink: 24 bytes leftover after parsing attributes in process `syz.1.151'. [ 134.312854][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.984583][ T5882] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 135.087100][ T6562] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 135.154530][ T6569] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 135.161311][ T6569] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 135.174799][ T6569] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 135.180779][ T6569] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 135.191382][ T6569] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 135.197294][ T6569] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 135.207464][ T6569] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 135.213438][ T6569] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 135.225111][ T6569] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 135.231421][ T6569] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 135.298628][ T5882] usb 3-1: Using ep0 maxpacket: 16 [ 135.358027][ T5945] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 135.382845][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.405399][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 135.405420][ T30] audit: type=1400 audit(1751983268.221:300): avc: denied { search } for pid=6574 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.443775][ T918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.494578][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.542714][ T5882] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 135.578132][ T5945] usb 1-1: device descriptor read/64, error -71 [ 135.591788][ T30] audit: type=1400 audit(1751983268.221:301): avc: denied { search } for pid=6574 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.615864][ T5882] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 135.627168][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.656704][ T30] audit: type=1400 audit(1751983268.221:302): avc: denied { search } for pid=6574 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1843 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.683635][ T5882] usb 3-1: config 0 descriptor?? [ 135.713346][ T30] audit: type=1400 audit(1751983268.221:303): avc: denied { search } for pid=6574 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.741227][ T30] audit: type=1400 audit(1751983268.231:304): avc: denied { read open } for pid=6575 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.770916][ T30] audit: type=1400 audit(1751983268.231:305): avc: denied { getattr } for pid=6575 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.798706][ T30] audit: type=1400 audit(1751983268.231:306): avc: denied { getattr } for pid=6575 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1880 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 135.845256][ T6584] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 135.868389][ T5945] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 135.920492][ T30] audit: type=1400 audit(1751983268.341:307): avc: denied { read } for pid=6577 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1880 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 135.943602][ T30] audit: type=1400 audit(1751983268.341:308): avc: denied { open } for pid=6577 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1880 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 135.973154][ T30] audit: type=1400 audit(1751983268.661:309): avc: denied { name_bind } for pid=6583 comm="syz.4.155" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 136.038027][ T5945] usb 1-1: device descriptor read/64, error -71 [ 136.120309][ T5882] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 136.142570][ T5882] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 136.151218][ T5945] usb usb1-port1: attempt power cycle [ 136.195175][ T5882] ================================================================== [ 136.203307][ T5882] BUG: KASAN: slab-out-of-bounds in mon_copy_to_buff+0xc2/0x170 [ 136.210987][ T5882] Read of size 256 at addr ffff88807c5199a1 by task kworker/1:3/5882 [ 136.219076][ T5882] [ 136.221400][ T5882] CPU: 1 UID: 0 PID: 5882 Comm: kworker/1:3 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 136.221419][ T5882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 136.221429][ T5882] Workqueue: usb_hub_wq hub_event [ 136.221453][ T5882] Call Trace: [ 136.221459][ T5882] [ 136.221465][ T5882] dump_stack_lvl+0x116/0x1f0 [ 136.221489][ T5882] print_report+0xcd/0x680 [ 136.221509][ T5882] ? __virt_addr_valid+0x81/0x610 [ 136.221528][ T5882] ? __phys_addr+0xe8/0x180 [ 136.221546][ T5882] ? mon_copy_to_buff+0xc2/0x170 [ 136.221570][ T5882] kasan_report+0xe0/0x110 [ 136.221593][ T5882] ? mon_copy_to_buff+0xc2/0x170 [ 136.221616][ T5882] kasan_check_range+0x100/0x1b0 [ 136.221629][ T5882] __asan_memcpy+0x23/0x60 [ 136.221647][ T5882] mon_copy_to_buff+0xc2/0x170 [ 136.221672][ T5882] mon_bin_event+0x1071/0x2050 [ 136.221696][ T5882] ? __pfx_mon_bin_event+0x10/0x10 [ 136.221720][ T5882] mon_bus_submit+0xcf/0x140 [ 136.221739][ T5882] usb_hcd_submit_urb+0x12d/0x1c60 [ 136.221759][ T5882] ? __device_attach+0x1e4/0x4b0 [ 136.221779][ T5882] ? bus_probe_device+0x17f/0x1c0 [ 136.221795][ T5882] ? device_add+0x1148/0x1a70 [ 136.221806][ T5882] ? usb_set_configuration+0x1187/0x1e20 [ 136.221821][ T5882] ? usb_generic_driver_probe+0xb1/0x110 [ 136.221836][ T5882] usb_submit_urb+0x87c/0x1790 [ 136.221849][ T5882] ? __pfx_lockdep_init_map_type+0x1/0x10 [ 136.221863][ T5882] ? __init_swait_queue_head+0xca/0x150 [ 136.221881][ T5882] usb_start_wait_urb+0x104/0x4b0 [ 136.221894][ T5882] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 136.221910][ T5882] ? __asan_memset+0x23/0x50 [ 136.221927][ T5882] usb_control_msg+0x326/0x4a0 [ 136.221941][ T5882] ? __pfx_usb_control_msg+0x10/0x10 [ 136.221960][ T5882] usbhid_raw_request+0x58f/0x700 [ 136.221984][ T5882] ? __pfx_usbhid_raw_request+0x10/0x10 [ 136.222005][ T5882] __hid_request+0x296/0x3c0 [ 136.222025][ T5882] hidinput_connect+0x1ada/0x2bd0 [ 136.222053][ T5882] hid_connect+0x13f3/0x1a60 [ 136.222069][ T5882] ? trace_kmalloc+0x2b/0xd0 [ 136.222090][ T5882] ? __kmalloc_noprof+0x242/0x510 [ 136.222108][ T5882] ? __asan_memset+0x23/0x50 [ 136.222124][ T5882] ? __pfx_hid_connect+0x10/0x10 [ 136.222144][ T5882] hid_hw_start+0xaa/0x140 [ 136.222160][ T5882] ms_probe+0x195/0x500 [ 136.222173][ T5882] ? __pfx_ms_probe+0x10/0x10 [ 136.222185][ T5882] hid_device_probe+0x360/0x720 [ 136.222203][ T5882] ? __pfx_hid_device_probe+0x10/0x10 [ 136.222219][ T5882] really_probe+0x23e/0xa90 [ 136.222239][ T5882] __driver_probe_device+0x1de/0x440 [ 136.222259][ T5882] driver_probe_device+0x4c/0x1b0 [ 136.222278][ T5882] __device_attach_driver+0x1df/0x310 [ 136.222298][ T5882] ? __pfx___device_attach_driver+0x10/0x10 [ 136.222318][ T5882] bus_for_each_drv+0x156/0x1e0 [ 136.222334][ T5882] ? __pfx_bus_for_each_drv+0x10/0x10 [ 136.222350][ T5882] ? lockdep_hardirqs_on+0x7c/0x110 [ 136.222370][ T5882] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 136.222388][ T5882] __device_attach+0x1e4/0x4b0 [ 136.222407][ T5882] ? __pfx___device_attach+0x10/0x10 [ 136.222427][ T5882] ? do_raw_spin_unlock+0x172/0x230 [ 136.222445][ T5882] bus_probe_device+0x17f/0x1c0 [ 136.222463][ T5882] device_add+0x1148/0x1a70 [ 136.222476][ T5882] ? __pfx_device_add+0x10/0x10 [ 136.222489][ T5882] ? debugfs_create_file_full+0x41/0x60 [ 136.222511][ T5882] hid_add_device+0x373/0xa60 [ 136.222527][ T5882] ? __pfx_hid_add_device+0x10/0x10 [ 136.222541][ T5882] ? lockdep_init_map_type+0x5c/0x280 [ 136.222555][ T5882] ? lockdep_init_map_type+0x5c/0x280 [ 136.222569][ T5882] usbhid_probe+0xd38/0x13f0 [ 136.222592][ T5882] usb_probe_interface+0x303/0x9c0 [ 136.222612][ T5882] ? __pfx_usb_probe_interface+0x10/0x10 [ 136.222631][ T5882] really_probe+0x23e/0xa90 [ 136.222650][ T5882] __driver_probe_device+0x1de/0x440 [ 136.222671][ T5882] driver_probe_device+0x4c/0x1b0 [ 136.222690][ T5882] __device_attach_driver+0x1df/0x310 [ 136.222709][ T5882] ? __pfx___device_attach_driver+0x10/0x10 [ 136.222729][ T5882] bus_for_each_drv+0x156/0x1e0 [ 136.222744][ T5882] ? __pfx_bus_for_each_drv+0x10/0x10 [ 136.222759][ T5882] ? lockdep_hardirqs_on+0x7c/0x110 [ 136.222777][ T5882] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 136.222795][ T5882] __device_attach+0x1e4/0x4b0 [ 136.222814][ T5882] ? __pfx___device_attach+0x10/0x10 [ 136.222833][ T5882] ? do_raw_spin_unlock+0x172/0x230 [ 136.222852][ T5882] bus_probe_device+0x17f/0x1c0 [ 136.222870][ T5882] device_add+0x1148/0x1a70 [ 136.222883][ T5882] ? __pfx_device_add+0x10/0x10 [ 136.222896][ T5882] ? mark_held_locks+0x49/0x80 [ 136.222920][ T5882] usb_set_configuration+0x1187/0x1e20 [ 136.222942][ T5882] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 136.222961][ T5882] usb_generic_driver_probe+0xb1/0x110 [ 136.222975][ T5882] usb_probe_device+0xef/0x3e0 [ 136.222991][ T5882] ? __pfx_usb_probe_device+0x10/0x10 [ 136.223008][ T5882] really_probe+0x23e/0xa90 [ 136.223026][ T5882] __driver_probe_device+0x1de/0x440 [ 136.223044][ T5882] ? usb_driver_applicable+0x1c7/0x220 [ 136.223065][ T5882] driver_probe_device+0x4c/0x1b0 [ 136.223087][ T5882] __device_attach_driver+0x1df/0x310 [ 136.223111][ T5882] ? __pfx___device_attach_driver+0x10/0x10 [ 136.223134][ T5882] bus_for_each_drv+0x156/0x1e0 [ 136.223153][ T5882] ? __pfx_bus_for_each_drv+0x10/0x10 [ 136.223172][ T5882] ? lockdep_hardirqs_on+0x7c/0x110 [ 136.223190][ T5882] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 136.223209][ T5882] __device_attach+0x1e4/0x4b0 [ 136.223228][ T5882] ? __pfx___device_attach+0x10/0x10 [ 136.223248][ T5882] ? do_raw_spin_unlock+0x172/0x230 [ 136.223265][ T5882] bus_probe_device+0x17f/0x1c0 [ 136.223282][ T5882] device_add+0x1148/0x1a70 [ 136.223295][ T5882] ? __pfx_device_add+0x10/0x10 [ 136.223307][ T5882] ? usb_detect_static_quirks+0x335/0x3e0 [ 136.223322][ T5882] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 136.223343][ T5882] usb_new_device+0xd07/0x1a20 [ 136.223360][ T5882] ? do_raw_spin_lock+0x12c/0x2b0 [ 136.223375][ T5882] ? __pfx_usb_new_device+0x10/0x10 [ 136.223390][ T5882] ? mark_held_locks+0x49/0x80 [ 136.223413][ T5882] hub_event+0x2eb7/0x4fa0 [ 136.223437][ T5882] ? __pfx_hub_event+0x10/0x10 [ 136.223451][ T5882] ? rcu_is_watching+0x12/0xc0 [ 136.223469][ T5882] ? irqentry_exit+0x3b/0x90 [ 136.223490][ T5882] ? preempt_schedule_thunk+0x16/0x30 [ 136.223510][ T5882] process_one_work+0x9cf/0x1b70 [ 136.223529][ T5882] ? __pfx_hcd_resume_work+0x10/0x10 [ 136.223546][ T5882] ? __pfx_process_one_work+0x10/0x10 [ 136.223564][ T5882] ? assign_work+0x1a0/0x250 [ 136.223578][ T5882] worker_thread+0x6c8/0xf10 [ 136.223596][ T5882] ? __pfx_worker_thread+0x10/0x10 [ 136.223610][ T5882] kthread+0x3c5/0x780 [ 136.223624][ T5882] ? __pfx_kthread+0x10/0x10 [ 136.223637][ T5882] ? rcu_is_watching+0x12/0xc0 [ 136.223655][ T5882] ? __pfx_kthread+0x10/0x10 [ 136.223668][ T5882] ret_from_fork+0x5d4/0x6f0 [ 136.223689][ T5882] ? __pfx_kthread+0x10/0x10 [ 136.223702][ T5882] ret_from_fork_asm+0x1a/0x30 [ 136.223722][ T5882] [ 136.223727][ T5882] [ 136.884876][ T5882] Allocated by task 5882: [ 136.889209][ T5882] kasan_save_stack+0x33/0x60 [ 136.893887][ T5882] kasan_save_track+0x14/0x30 [ 136.898564][ T5882] __kasan_kmalloc+0xaa/0xb0 [ 136.903148][ T5882] __kmalloc_noprof+0x223/0x510 [ 136.907996][ T5882] __hid_request+0x2c/0x3c0 [ 136.912494][ T5882] hidinput_connect+0x1ada/0x2bd0 [ 136.917515][ T5882] hid_connect+0x13f3/0x1a60 [ 136.922102][ T5882] hid_hw_start+0xaa/0x140 [ 136.926503][ T5882] ms_probe+0x195/0x500 [ 136.930642][ T5882] hid_device_probe+0x360/0x720 [ 136.935485][ T5882] really_probe+0x23e/0xa90 [ 136.939999][ T5882] __driver_probe_device+0x1de/0x440 [ 136.945277][ T5882] driver_probe_device+0x4c/0x1b0 [ 136.950294][ T5882] __device_attach_driver+0x1df/0x310 [ 136.955657][ T5882] bus_for_each_drv+0x156/0x1e0 [ 136.960497][ T5882] __device_attach+0x1e4/0x4b0 [ 136.965254][ T5882] bus_probe_device+0x17f/0x1c0 [ 136.970114][ T5882] device_add+0x1148/0x1a70 [ 136.974602][ T5882] hid_add_device+0x373/0xa60 [ 136.979269][ T5882] usbhid_probe+0xd38/0x13f0 [ 136.983856][ T5882] usb_probe_interface+0x303/0x9c0 [ 136.988985][ T5882] really_probe+0x23e/0xa90 [ 136.993489][ T5882] __driver_probe_device+0x1de/0x440 [ 136.998773][ T5882] driver_probe_device+0x4c/0x1b0 [ 137.003792][ T5882] __device_attach_driver+0x1df/0x310 [ 137.009161][ T5882] bus_for_each_drv+0x156/0x1e0 [ 137.014012][ T5882] __device_attach+0x1e4/0x4b0 [ 137.018767][ T5882] bus_probe_device+0x17f/0x1c0 [ 137.023606][ T5882] device_add+0x1148/0x1a70 [ 137.028095][ T5882] usb_set_configuration+0x1187/0x1e20 [ 137.033544][ T5882] usb_generic_driver_probe+0xb1/0x110 [ 137.038988][ T5882] usb_probe_device+0xef/0x3e0 [ 137.043747][ T5882] really_probe+0x23e/0xa90 [ 137.048240][ T5882] __driver_probe_device+0x1de/0x440 [ 137.053519][ T5882] driver_probe_device+0x4c/0x1b0 [ 137.058538][ T5882] __device_attach_driver+0x1df/0x310 [ 137.063918][ T5882] bus_for_each_drv+0x156/0x1e0 [ 137.068759][ T5882] __device_attach+0x1e4/0x4b0 [ 137.073521][ T5882] bus_probe_device+0x17f/0x1c0 [ 137.078366][ T5882] device_add+0x1148/0x1a70 [ 137.082854][ T5882] usb_new_device+0xd07/0x1a20 [ 137.087612][ T5882] hub_event+0x2eb7/0x4fa0 [ 137.092109][ T5882] process_one_work+0x9cf/0x1b70 [ 137.097044][ T5882] worker_thread+0x6c8/0xf10 [ 137.101623][ T5882] kthread+0x3c5/0x780 [ 137.105685][ T5882] ret_from_fork+0x5d4/0x6f0 [ 137.110271][ T5882] ret_from_fork_asm+0x1a/0x30 [ 137.115026][ T5882] [ 137.117343][ T5882] The buggy address belongs to the object at ffff88807c5199a0 [ 137.117343][ T5882] which belongs to the cache kmalloc-8 of size 8 [ 137.131043][ T5882] The buggy address is located 1 bytes inside of [ 137.131043][ T5882] allocated 7-byte region [ffff88807c5199a0, ffff88807c5199a7) [ 137.144830][ T5882] [ 137.147146][ T5882] The buggy address belongs to the physical page: [ 137.153546][ T5882] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c519 [ 137.162301][ T5882] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 137.169399][ T5882] page_type: f5(slab) [ 137.173369][ T5882] raw: 00fff00000000000 ffff88801b841500 dead000000000100 dead000000000122 [ 137.181946][ T5882] raw: 0000000000000000 0000000080800080 00000000f5000000 0000000000000000 [ 137.190534][ T5882] page dumped because: kasan: bad access detected [ 137.196930][ T5882] page_owner tracks the page as allocated [ 137.202633][ T5882] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5837, tgid 5837 (syz-executor), ts 76274714529, free_ts 76271438761 [ 137.221905][ T5882] post_alloc_hook+0x1c0/0x230 [ 137.226665][ T5882] get_page_from_freelist+0x1321/0x3890 [ 137.232222][ T5882] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 137.238123][ T5882] alloc_pages_mpol+0x1fb/0x550 [ 137.242983][ T5882] new_slab+0x23b/0x330 [ 137.247132][ T5882] ___slab_alloc+0xd9c/0x1940 [ 137.251803][ T5882] __slab_alloc.constprop.0+0x56/0xb0 [ 137.257175][ T5882] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 137.263589][ T5882] kvasprintf+0xbc/0x160 [ 137.267825][ T5882] kvasprintf_const+0x66/0x1a0 [ 137.272593][ T5882] kobject_set_name_vargs+0x5a/0x140 [ 137.277886][ T5882] dev_set_name+0xc7/0x100 [ 137.282298][ T5882] wiphy_new_nm+0x811/0x2160 [ 137.286895][ T5882] ieee80211_alloc_hw_nm+0x1b7a/0x2260 [ 137.292349][ T5882] mac80211_hwsim_new_radio+0x1d4/0x54d0 [ 137.297975][ T5882] hwsim_new_radio_nl+0xb51/0x12c0 [ 137.303087][ T5882] page last free pid 5837 tgid 5837 stack trace: [ 137.309402][ T5882] __free_frozen_pages+0x7fe/0x1180 [ 137.314604][ T5882] qlist_free_all+0x4d/0x120 [ 137.319191][ T5882] kasan_quarantine_reduce+0x195/0x1e0 [ 137.324649][ T5882] __kasan_slab_alloc+0x69/0x90 [ 137.329494][ T5882] __kmalloc_node_noprof+0x1d0/0x500 [ 137.334773][ T5882] qdisc_alloc+0xbb/0xc50 [ 137.339098][ T5882] qdisc_create_dflt+0x94/0x490 [ 137.343943][ T5882] dev_activate+0x63f/0x12d0 [ 137.348528][ T5882] __dev_open+0x43a/0x7d0 [ 137.352849][ T5882] __dev_change_flags+0x55d/0x720 [ 137.357874][ T5882] netif_change_flags+0x8d/0x160 [ 137.362816][ T5882] do_setlink.constprop.0+0xb53/0x4380 [ 137.368278][ T5882] rtnl_newlink+0x1446/0x2000 [ 137.372949][ T5882] rtnetlink_rcv_msg+0x95e/0xe90 [ 137.377884][ T5882] netlink_rcv_skb+0x155/0x420 [ 137.382642][ T5882] netlink_unicast+0x53a/0x7f0 [ 137.387398][ T5882] [ 137.389717][ T5882] Memory state around the buggy address: [ 137.395333][ T5882] ffff88807c519880: 05 fc fc fc 05 fc fc fc 05 fc fc fc fa fc fc fc [ 137.403381][ T5882] ffff88807c519900: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 137.411434][ T5882] >ffff88807c519980: fa fc fc fc 07 fc fc fc fa fc fc fc fa fc fc fc [ 137.419487][ T5882] ^ [ 137.424589][ T5882] ffff88807c519a00: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 137.432641][ T5882] ffff88807c519a80: fa fc fc fc fa fc fc fc fa fc fc fc 04 fc fc fc [ 137.440683][ T5882] ================================================================== [ 137.448752][ T5882] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 137.455939][ T5882] CPU: 1 UID: 0 PID: 5882 Comm: kworker/1:3 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 137.466265][ T5882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 137.476313][ T5882] Workqueue: usb_hub_wq hub_event [ 137.481340][ T5882] Call Trace: [ 137.484607][ T5882] [ 137.487528][ T5882] dump_stack_lvl+0x3d/0x1f0 [ 137.492115][ T5882] panic+0x71c/0x800 [ 137.496014][ T5882] ? __pfx_panic+0x10/0x10 [ 137.500430][ T5882] ? __pfx__printk+0x10/0x10 [ 137.505014][ T5882] ? end_report+0x4c/0x170 [ 137.509427][ T5882] ? mon_copy_to_buff+0xc2/0x170 [ 137.514370][ T5882] check_panic_on_warn+0xab/0xb0 [ 137.519321][ T5882] end_report+0x107/0x170 [ 137.523648][ T5882] kasan_report+0xee/0x110 [ 137.528058][ T5882] ? mon_copy_to_buff+0xc2/0x170 [ 137.532999][ T5882] kasan_check_range+0x100/0x1b0 [ 137.537938][ T5882] __asan_memcpy+0x23/0x60 [ 137.542361][ T5882] mon_copy_to_buff+0xc2/0x170 [ 137.547126][ T5882] mon_bin_event+0x1071/0x2050 [ 137.551902][ T5882] ? __pfx_mon_bin_event+0x10/0x10 [ 137.557014][ T5882] mon_bus_submit+0xcf/0x140 [ 137.561599][ T5882] usb_hcd_submit_urb+0x12d/0x1c60 [ 137.566712][ T5882] ? __device_attach+0x1e4/0x4b0 [ 137.571645][ T5882] ? bus_probe_device+0x17f/0x1c0 [ 137.576664][ T5882] ? device_add+0x1148/0x1a70 [ 137.581332][ T5882] ? usb_set_configuration+0x1187/0x1e20 [ 137.586954][ T5882] ? usb_generic_driver_probe+0xb1/0x110 [ 137.592575][ T5882] usb_submit_urb+0x87c/0x1790 [ 137.597324][ T5882] ? __pfx_lockdep_init_map_type+0x1/0x10 [ 137.603031][ T5882] ? __init_swait_queue_head+0xca/0x150 [ 137.608572][ T5882] usb_start_wait_urb+0x104/0x4b0 [ 137.613591][ T5882] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 137.619129][ T5882] ? __asan_memset+0x23/0x50 [ 137.623712][ T5882] usb_control_msg+0x326/0x4a0 [ 137.628461][ T5882] ? __pfx_usb_control_msg+0x10/0x10 [ 137.633737][ T5882] usbhid_raw_request+0x58f/0x700 [ 137.638764][ T5882] ? __pfx_usbhid_raw_request+0x10/0x10 [ 137.644303][ T5882] __hid_request+0x296/0x3c0 [ 137.648898][ T5882] hidinput_connect+0x1ada/0x2bd0 [ 137.653925][ T5882] hid_connect+0x13f3/0x1a60 [ 137.658506][ T5882] ? trace_kmalloc+0x2b/0xd0 [ 137.663099][ T5882] ? __kmalloc_noprof+0x242/0x510 [ 137.668124][ T5882] ? __asan_memset+0x23/0x50 [ 137.672706][ T5882] ? __pfx_hid_connect+0x10/0x10 [ 137.677637][ T5882] hid_hw_start+0xaa/0x140 [ 137.682054][ T5882] ms_probe+0x195/0x500 [ 137.686215][ T5882] ? __pfx_ms_probe+0x10/0x10 [ 137.690877][ T5882] hid_device_probe+0x360/0x720 [ 137.695726][ T5882] ? __pfx_hid_device_probe+0x10/0x10 [ 137.701096][ T5882] really_probe+0x23e/0xa90 [ 137.705591][ T5882] __driver_probe_device+0x1de/0x440 [ 137.710869][ T5882] driver_probe_device+0x4c/0x1b0 [ 137.715923][ T5882] __device_attach_driver+0x1df/0x310 [ 137.721313][ T5882] ? __pfx___device_attach_driver+0x10/0x10 [ 137.727230][ T5882] bus_for_each_drv+0x156/0x1e0 [ 137.732092][ T5882] ? __pfx_bus_for_each_drv+0x10/0x10 [ 137.737455][ T5882] ? lockdep_hardirqs_on+0x7c/0x110 [ 137.742658][ T5882] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 137.748464][ T5882] __device_attach+0x1e4/0x4b0 [ 137.753224][ T5882] ? __pfx___device_attach+0x10/0x10 [ 137.758506][ T5882] ? do_raw_spin_unlock+0x172/0x230 [ 137.763702][ T5882] bus_probe_device+0x17f/0x1c0 [ 137.768548][ T5882] device_add+0x1148/0x1a70 [ 137.773042][ T5882] ? __pfx_device_add+0x10/0x10 [ 137.777878][ T5882] ? debugfs_create_file_full+0x41/0x60 [ 137.783446][ T5882] hid_add_device+0x373/0xa60 [ 137.788118][ T5882] ? __pfx_hid_add_device+0x10/0x10 [ 137.793306][ T5882] ? lockdep_init_map_type+0x5c/0x280 [ 137.798670][ T5882] ? lockdep_init_map_type+0x5c/0x280 [ 137.804031][ T5882] usbhid_probe+0xd38/0x13f0 [ 137.808624][ T5882] usb_probe_interface+0x303/0x9c0 [ 137.813741][ T5882] ? __pfx_usb_probe_interface+0x10/0x10 [ 137.819458][ T5882] really_probe+0x23e/0xa90 [ 137.823962][ T5882] __driver_probe_device+0x1de/0x440 [ 137.829246][ T5882] driver_probe_device+0x4c/0x1b0 [ 137.834268][ T5882] __device_attach_driver+0x1df/0x310 [ 137.839636][ T5882] ? __pfx___device_attach_driver+0x10/0x10 [ 137.845528][ T5882] bus_for_each_drv+0x156/0x1e0 [ 137.850375][ T5882] ? __pfx_bus_for_each_drv+0x10/0x10 [ 137.855745][ T5882] ? lockdep_hardirqs_on+0x7c/0x110 [ 137.860938][ T5882] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 137.866742][ T5882] __device_attach+0x1e4/0x4b0 [ 137.871530][ T5882] ? __pfx___device_attach+0x10/0x10 [ 137.876841][ T5882] ? do_raw_spin_unlock+0x172/0x230 [ 137.882044][ T5882] bus_probe_device+0x17f/0x1c0 [ 137.886887][ T5882] device_add+0x1148/0x1a70 [ 137.891379][ T5882] ? __pfx_device_add+0x10/0x10 [ 137.896223][ T5882] ? mark_held_locks+0x49/0x80 [ 137.900987][ T5882] usb_set_configuration+0x1187/0x1e20 [ 137.906470][ T5882] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 137.912559][ T5882] usb_generic_driver_probe+0xb1/0x110 [ 137.918021][ T5882] usb_probe_device+0xef/0x3e0 [ 137.922776][ T5882] ? __pfx_usb_probe_device+0x10/0x10 [ 137.928141][ T5882] really_probe+0x23e/0xa90 [ 137.932642][ T5882] __driver_probe_device+0x1de/0x440 [ 137.937925][ T5882] ? usb_driver_applicable+0x1c7/0x220 [ 137.943380][ T5882] driver_probe_device+0x4c/0x1b0 [ 137.948403][ T5882] __device_attach_driver+0x1df/0x310 [ 137.953772][ T5882] ? __pfx___device_attach_driver+0x10/0x10 [ 137.959662][ T5882] bus_for_each_drv+0x156/0x1e0 [ 137.964511][ T5882] ? __pfx_bus_for_each_drv+0x10/0x10 [ 137.969874][ T5882] ? lockdep_hardirqs_on+0x7c/0x110 [ 137.975069][ T5882] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 137.980871][ T5882] __device_attach+0x1e4/0x4b0 [ 137.985633][ T5882] ? __pfx___device_attach+0x10/0x10 [ 137.990916][ T5882] ? do_raw_spin_unlock+0x172/0x230 [ 137.996194][ T5882] bus_probe_device+0x17f/0x1c0 [ 138.001052][ T5882] device_add+0x1148/0x1a70 [ 138.005547][ T5882] ? __pfx_device_add+0x10/0x10 [ 138.010388][ T5882] ? usb_detect_static_quirks+0x335/0x3e0 [ 138.016099][ T5882] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 138.021991][ T5882] usb_new_device+0xd07/0x1a20 [ 138.026749][ T5882] ? do_raw_spin_lock+0x12c/0x2b0 [ 138.031761][ T5882] ? __pfx_usb_new_device+0x10/0x10 [ 138.036955][ T5882] ? mark_held_locks+0x49/0x80 [ 138.041716][ T5882] hub_event+0x2eb7/0x4fa0 [ 138.046142][ T5882] ? __pfx_hub_event+0x10/0x10 [ 138.050911][ T5882] ? rcu_is_watching+0x12/0xc0 [ 138.055669][ T5882] ? irqentry_exit+0x3b/0x90 [ 138.060259][ T5882] ? preempt_schedule_thunk+0x16/0x30 [ 138.065628][ T5882] process_one_work+0x9cf/0x1b70 [ 138.070566][ T5882] ? __pfx_hcd_resume_work+0x10/0x10 [ 138.075844][ T5882] ? __pfx_process_one_work+0x10/0x10 [ 138.081209][ T5882] ? assign_work+0x1a0/0x250 [ 138.085790][ T5882] worker_thread+0x6c8/0xf10 [ 138.090371][ T5882] ? __pfx_worker_thread+0x10/0x10 [ 138.095466][ T5882] kthread+0x3c5/0x780 [ 138.099518][ T5882] ? __pfx_kthread+0x10/0x10 [ 138.104093][ T5882] ? rcu_is_watching+0x12/0xc0 [ 138.108849][ T5882] ? __pfx_kthread+0x10/0x10 [ 138.114206][ T5882] ret_from_fork+0x5d4/0x6f0 [ 138.118796][ T5882] ? __pfx_kthread+0x10/0x10 [ 138.123380][ T5882] ret_from_fork_asm+0x1a/0x30 [ 138.128137][ T5882] [ 138.131377][ T5882] Kernel Offset: disabled [ 138.135681][ T5882] Rebooting in 86400 seconds..