last executing test programs: 14.865461414s ago: executing program 4 (id=362): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b3", 0x40}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getpid() 13.281207431s ago: executing program 4 (id=365): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32, @ANYBLOB="0000000000000000008000"/20, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB="000000000000000001"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r5 = socket$kcm(0x10, 0x5, 0x0) write$cgroup_subtree(r5, &(0x7f0000000580)=ANY=[], 0xfe33) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc085}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRESHEX=r4, @ANYRES16=r6, @ANYRESHEX], 0x44}, 0x1, 0x300000000000000}, 0x4040) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x18, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}], {0x95, 0x0, 0x0, 0x20}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147}, 0x80) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_setup(0x4, &(0x7f0000000040)) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfc, 0x1000}, 0xc) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r11, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 12.151696768s ago: executing program 3 (id=367): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setpgid(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x18) syz_open_procfs$pagemap(r0, &(0x7f0000000240)) syz_open_dev$loop(&(0x7f00000001c0), 0x1, 0xc4000) fcntl$getown(r3, 0x9) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="60010000", @ANYRES16=r5, @ANYBLOB="010028bd7000fbdbdf250c0000004c0105802c00028008000200da0800000800040003000000080001001d000000080002000000000008000300580f00003400028008000400f9ffffff080002000400000008000300dc0000000800040040000000080002000008000008000200080000003c000280080003000c00000008000200e303000008000300ff07000008000200faffffff080003000400000008000100060000000800020000100000080001"], 0x160}, 0x1, 0x0, 0x0, 0x28000021}, 0x24008854) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newsa={0x13c, 0x10, 0x1, 0x70bd28, 0x0, {{@in=@private=0xa010102, @in=@private, 0x0, 0xecdf, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3c}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x80000000}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2e}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0xc000) 11.093332033s ago: executing program 3 (id=369): openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$inet6(0xa, 0x3, 0x9) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x12e010, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, r1, 0x9c3fa077fa966179, 0x70bd2d, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000010) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x1) lseek(0xffffffffffffffff, 0xfffffffffffffff9, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010027bd7000fbc8df2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201ef00000000206e051c0100000000000109022400010000b010090400080103000100092107000801810300000706200000000000"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="2011060000000623074c0000"], 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 10.512377581s ago: executing program 2 (id=371): r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x8000000000, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x4, {0x0, @vbi={0x41, 0x3ff, 0xdd56, 0x4f424752, [0x81, 0x80], [0xffffffff, 0x4], 0x13a}}, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000280)={0x6, 0x7, 0x4, {0x2, @raw_data="2e05d16eb38942f4b3929e32eb4c004aa7ebf544df3e59d3777c3fbc378802427cd355736a65cda50500b7db24f8bb708d5ffb488c3b968809076903102e6555cd4f9f6abb603b3b1e9e65108e145b5fc63c655f5aeffafa83c8985f606af0ea712dd3e42ee15c0d9cb4ed37913530d8641a3b32d7df7ef28081454c62b394cf2bf133cd5a04aa1ddeaf71d1c7213f6502e7bdff029c8a4739400fdaeb03e6fb0b82648779fe27db5666a8e38edcdd12350378cc5e0950346a99a5c3eabd436b365b76a278b3fb42"}, 0xb146}) r1 = syz_usb_connect(0x4, 0x3f, &(0x7f0000000600)=ANY=[], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req3={0x5, 0x7778, 0xfffffffa, 0x4, 0xbbdc, 0xdcd, 0xf4ed}, 0x1c) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040)) accept4(r2, 0x0, &(0x7f0000000180), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5}, 0x5}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = fsopen(&(0x7f0000000080)='pipefs\x00', 0x0) fsmount(r5, 0x1, 0x77) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) 9.472969971s ago: executing program 0 (id=372): io_setup(0x10000, &(0x7f0000000800)=0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/209, 0xd1}, {&(0x7f00000000c0)=""/9, 0x9}, {&(0x7f00000006c0)=""/249, 0xf9}, {&(0x7f0000000440)=""/152, 0x98}, {&(0x7f0000000100)=""/69, 0x45}, {&(0x7f0000002c40)=""/215, 0xd7}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000540)=""/176, 0xb0}], 0x8, &(0x7f0000001940)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000380)=""/101, 0x65}, {&(0x7f0000001a40)=""/119, 0x77}, {&(0x7f0000001ac0)=""/122, 0x7a}, {&(0x7f0000001b40)=""/150, 0x96}, {&(0x7f0000002e80)=""/4096, 0x1000}], 0x5, &(0x7f0000001c80)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x160}}, {{&(0x7f0000001e00)=@abs, 0x6e, &(0x7f0000002440)=[{&(0x7f0000001e80)=""/140, 0x8c}, {&(0x7f0000001f40)=""/124, 0x7c}, {&(0x7f0000001fc0)=""/177, 0xb1}, {&(0x7f0000003e80)=""/4096, 0x1000}, {&(0x7f0000002280)=""/137, 0x89}], 0x5}}, {{&(0x7f00000024c0)=@abs, 0x6e, &(0x7f0000002700)=[{&(0x7f0000004e80)=""/4096, 0x1000}, {&(0x7f0000002540)=""/120, 0x78}, {&(0x7f00000007c0)=""/13, 0xd}, {&(0x7f0000002080)}, {&(0x7f00000025c0)=""/138, 0x8a}, {&(0x7f0000002a80)=""/105, 0x69}], 0x6, &(0x7f0000002780)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000002840), 0x6e, &(0x7f0000002100)=[{&(0x7f00000028c0)=""/245, 0xf5}, {&(0x7f00000029c0)=""/173, 0xad}], 0x2, &(0x7f0000006340)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{&(0x7f0000002bc0), 0x6e, &(0x7f0000002dc0)=[{&(0x7f0000006440)=""/230, 0xe6}, {&(0x7f0000002d40)=""/110, 0x6e}, {&(0x7f0000005e80)=""/177, 0xb1}], 0x3}}, {{&(0x7f0000005f40), 0x6e, &(0x7f00000060c0)=[{&(0x7f0000005fc0)=""/163, 0xa3}, {&(0x7f0000002e00)=""/15, 0xf}, {&(0x7f0000006080)=""/43, 0x2b}], 0x3, &(0x7f0000006100)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}], 0x7, 0x80000122, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) io_setup(0x7a, &(0x7f0000000000)) io_cancel(r0, 0x0, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) read$FUSE(r4, 0x0, 0x0) write$FUSE_STATX(r4, &(0x7f0000002140)={0x130, 0xfffffffffffffffe, 0x0, {0x9, 0xc1, 0x0, '\x00', {0x100, 0x1, 0x9, 0x7, 0x0, 0x0, 0x8000, '\x00', 0x2a8, 0x80000000, 0x5, 0x6, {0x3, 0x7}, {0x4, 0x3e3}, {0x1, 0x1}, {0x1, 0x51bb}, 0xff, 0xffffffa8, 0x2, 0x10000000}}}, 0x130) r7 = syz_io_uring_setup(0x239, &(0x7f0000000100)={0x0, 0x8901, 0x400, 0x0, 0x39f}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r9, &(0x7f0000002080)=@IORING_OP_MKDIRAT={0x25, 0x57, 0x0, r1, 0x0, &(0x7f0000006300)='./file0\x00', 0x181}) io_uring_enter(r7, 0x47ba, 0x0, 0x0, 0x0, 0x0) splice(r4, 0x0, r6, 0x0, 0x2000, 0x8) r10 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x4f, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1f, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r10, 0xae80, 0x0) io_setup(0x9, &(0x7f0000002e40)) 8.964065007s ago: executing program 2 (id=374): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1}) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000002300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000100)) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) iopl(0x3) timer_create(0x0, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2d, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000440)={0x2d, 0x0, 0x1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bind$xdp(r3, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x1c}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 8.234495157s ago: executing program 4 (id=375): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b3", 0x40}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getpid() 8.036882067s ago: executing program 2 (id=376): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) r4 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) userfaultfd(0x801) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x20, 0x35, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$FS_IOC_GETFSLABEL(r2, 0x541b, &(0x7f0000000100)) 7.454984706s ago: executing program 0 (id=377): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000100)={0x0, 'pimreg1\x00', {0x1}, 0x60d}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00i\x00\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'], 0x20}}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_create1(0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000), 0x5, &(0x7f0000000180)={&(0x7f0000000200)=@can={{0x3, 0x1}, 0x6, 0x0, 0x0, 0x0, "41523f8f79f1c2a0"}, 0x10}, 0x1, 0x0, 0x0, 0x20004080}, 0x4044081) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0xe4, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x10000000}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 7.275250869s ago: executing program 4 (id=378): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x154, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in6=@empty, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9, 0x2}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e23, 0x4e21, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}}]}, 0x154}}, 0x1000000) 7.021876622s ago: executing program 2 (id=379): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x8986010000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) 6.746112341s ago: executing program 0 (id=380): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newsa={0x13c, 0x10, 0x1, 0x70bd28, 0x0, {{@in=@private=0xa010102, @in=@private, 0x0, 0xecdf, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3c}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x80000000}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2e}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0xc000) 6.704093198s ago: executing program 3 (id=381): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}]}]}}]}, 0x40}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000054000380500000803e0001"], 0x80}}, 0x8000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x388, 0x41d9fda7) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e00000000000000ca0000000300000000000000", @ANYRES32=0x1, @ANYBLOB="00000000080000000000000000000000d254e86ab8862db32a000000002df51900000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0x37) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x27, &(0x7f0000000800)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x59}}, {}, [@map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3156}, @generic={0x2, 0x7, 0x2, 0xc, 0xb}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}}]}, &(0x7f0000000c80)='syzkaller\x00'}, 0x94) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="0a012a20", @ANYRES16=0x0, @ANYBLOB="e60f000901008b00005d33cdc96be58bd5b3274e000f", @ANYRES32, @ANYBLOB="0c001a804800030001"], 0x2c}}, 0x1) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x12, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000024000000000000000500000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014020000b7030000000000008500000083000000bf0900000000000055090100000000009510000000000000181100001b09669f60a4f83c7fe842a4fdc70ab670dcf94280813479d91fa9d8feedc9cc1749b1852f16b1b1f6b8ad2ac8120cef3e076b7f78b5a35b7a20b299be4dd3af49f2b22b5a7971f5f7b26342b1877ceb9c5b2fa94168f2ad45e89d674986ce1092e9", @ANYRES32=r9, @ANYBLOB="0000000000000000850000007b000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.629654747s ago: executing program 2 (id=382): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b3", 0x40}], 0x2}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4086, 0xff6}], 0x1}, 0x0) 6.629342161s ago: executing program 4 (id=383): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x3, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f00001b2000/0x2000)=nil, 0x2000, 0xfffffffffefffff6, 0x10, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x103) write$cgroup_int(r2, &(0x7f0000000000)=0x800, 0x12) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)='./file0\x00', 0x8, 0x1) r3 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) poll(&(0x7f00000000c0)=[{r3, 0xe7d4c009da6c1985}], 0x1, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 6.389258087s ago: executing program 0 (id=384): sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x4001) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x90, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x7c, 0x1, [@m_ife={0x78, 0x1, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x5}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x7, 0x5, 0x1}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x90}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x290040, 0x0) name_to_handle_at(r3, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)=@OVL_FILEID_V1={0xb2, 0xf8, {'\x00', {0x0, 0xfb, 0xaf, 0x6, 0x7, "62b768ae59914ddb8134e463520dc494", "f249a1579d61bdeb3036fa3455c345f0c86a6d107f4fbd22ad5625679263b2c37ac29b863803046c33103d657387ac2278a1c350c4f6131453ad065eaa4cb617bdc840ffe4413d71e5b0eeeddbb106dd1e01c08ecd1b687660fe86c96620471a1f0d9e5a74ea50e2d4391283356ed8ed3ed37bc7f0b2aa74ec25a1245e299b82a0bc9f3f632a37972e7c3b30c389972975db69237e91e006a800"}}}, &(0x7f0000000400), 0x400) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x500, 0x40) r5 = open_tree(r4, &(0x7f0000000300)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r8, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) write$cgroup_int(r7, &(0x7f00000000c0), 0x12) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r2, &(0x7f0000000040)={0x8}) 5.221002799s ago: executing program 2 (id=386): openat$ttyS3(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="0d01"], 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x7d68, 0x0, 0x2, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80001, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000003c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f00000011c0)={'wg2\x00'}) sendmmsg$inet6(r4, &(0x7f0000003600), 0x0, 0x8841) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0xfffffffffffffe1c, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a69702c6d61726b"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 5.219546705s ago: executing program 3 (id=387): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102390, 0x19008) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x1, 0xb7}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 4.336788636s ago: executing program 3 (id=388): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b3", 0x40}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getpid() 3.996684445s ago: executing program 1 (id=389): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0, 0x0, 0x63}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={@dev, 0x26}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x600, 0x25dfcbfb, {0x0, 0x0, 0x0, r6, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0xe}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 3.229226513s ago: executing program 0 (id=390): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) msync(&(0x7f0000ff6000/0x7000)=nil, 0x7000, 0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a01000000b8481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4b", 0xbd) 3.228431088s ago: executing program 3 (id=391): socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x801, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) mq_timedsend(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x800c, 0x4, 0x4, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f00000ab000/0x2000)=nil, 0x2000, 0x2, 0x13, r3, 0x80927000) mmap(&(0x7f00000ab000/0x1000)=nil, 0x1000, 0x6, 0x11012, r3, 0xffffe000) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x80, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x4360}, 0x8, 0x10000007, 0x80, 0x0, 0x1, 0x101, 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$packet(0x11, 0xa, 0x300) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 2.962140939s ago: executing program 0 (id=392): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x3, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f00001b2000/0x2000)=nil, 0x2000, 0xfffffffffefffff6, 0x10, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x103) write$cgroup_int(r2, &(0x7f0000000000)=0x800, 0x12) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)='./file0\x00', 0x8, 0x1) r3 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) poll(&(0x7f00000000c0)=[{r3, 0xe7d4c009da6c1985}], 0x1, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.426992773s ago: executing program 1 (id=393): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='.\x00', &(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x50, 0xffffffffffffffff, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0xc0044dff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/16, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000140)={0xc, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x4, r3, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6}) ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="18fdfd7f000000000020"]) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r5 = accept4(r4, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0x24, 0x25, 0x0, 0x2, 0x0, {0x0, 0x0, 0x0, r6, {0x10}, {0x0, 0x4}}}, 0x24}}, 0x0) 1.481875284s ago: executing program 1 (id=394): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newsa={0x13c, 0x10, 0x1, 0x70bd28, 0x0, {{@in=@private=0xa010102, @in=@private, 0x0, 0xecdf, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3c}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x80000000}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2e}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0xc000) 1.344296078s ago: executing program 1 (id=395): socket$kcm(0x29, 0x5, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000040)={0x43, 0x2, 0x2, 0xeaf, "2561b529370c41166364c0f075c767831fc7866042587ddc16c204b04178f03b8a63a36adaa90b9f248f75"}) keyctl$setperm(0x5, 0x0, 0x62814) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x3, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x165301) getpid() ioctl$FICLONE(r1, 0x40049409, r2) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$tcp_congestion(r3, &(0x7f0000000180)='westwood\x00', 0x9) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000240)=@mangle={'mangle\x00', 0x1f, 0x6, 0x648, 0x4a8, 0x298, 0x390, 0x4a8, 0x390, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, &(0x7f00000001c0), {[{{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0x0, 0xff000000, 0xffffff00], [0x0, 0xff0000ff, 0xff000000, 0xffffffff], 'veth0_to_bridge\x00', 'lo\x00', {}, {}, 0x4, 0x9, 0x7}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@hbh={{0x48}, {0x400, 0x2, 0x1, [0x7f, 0x5400, 0x2, 0x2, 0x6, 0x4, 0xffff, 0xc83, 0xa7, 0xd, 0x4, 0x10, 0x246, 0x3, 0x3, 0x2]}}, @inet=@rpfilter={{0x28}, {0x10}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@loopback, 0x29, 0x16, 0xbcde}}}, {{@ipv6={@private1, @local, [0xff], [0x0, 0x44ac5128658c89b0, 0xffffffff, 0xffffff00], 'veth0_to_batadv\x00', 'veth1_macvtap\x00', {0xff}, {}, 0x32, 0x3, 0x8, 0x4}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x3, 0x0, [0x7e, 0x0, 0x0, 0x5, 0x800, 0x3, 0xfff6, 0x1000, 0x7, 0x7ff, 0x7, 0x9082, 0x3, 0x7f, 0x101, 0x512]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x3e, 0x34, 0x535}}}, {{@ipv6={@local, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xffffff00], [0xffffffff, 0xff, 0xff000000, 0xff000000], 'macvlan0\x00', 'bridge_slave_1\x00', {0xff}, {0xff}, 0x5e, 0x3, 0x2, 0x20}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x5}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@dev={0xac, 0x14, 0x14, 0x36}, 0x13, 0x8, 0x52e2}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xd38f0c0ef94b2bb1, 0x807fff00, 0xffffff00, 0xff000000], [0xff, 0xff, 0xff, 0xff], 'veth0_macvtap\x00', 'pim6reg\x00', {0xff}, {0xff}, 0x4, 0x4, 0x1}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) fsetxattr$security_capability(r0, &(0x7f0000000900), &(0x7f0000000940)=@v2={0x2000000, [{0x3, 0xc}, {0x1, 0x10001}]}, 0x14, 0x3) r5 = memfd_secret(0x80000) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000980)) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000009c0), 0x40, 0x0) ioctl$PIO_UNISCRNMAP(r6, 0x4b6a, &(0x7f0000000a00)="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") ioctl$FIBMAP(r2, 0x1, &(0x7f0000001a00)=0x4) ioctl$FS_IOC_GETFSSYSFSPATH(r2, 0x80811501, &(0x7f0000001a40)={0x80}) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f0000001b00)={0x57, 0x8, 0x0, {0x9f73, 0xeac3}, {0x0, 0xe}, @ramp={0x1e59, 0x4, {0x3, 0x7, 0x5, 0x9}}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000001b40)={@id={0x2, 0x0, @b}}) ioctl$TIOCSBRK(r6, 0x5427) r7 = syz_open_dev$sg(&(0x7f0000001b80), 0x7, 0x800) ioctl$SG_NEXT_CMD_LEN(r7, 0x2283, &(0x7f0000001bc0)=0xfa) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000001c00)={{0x1, 0x1, 0x18, r5, {0x2, 0x1}}, './file0\x00'}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x1c, r9, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 1.162432601s ago: executing program 4 (id=396): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x1c03e, 0x800, 0x8, 0x2}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) socket$key(0xf, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x20000045) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000600)) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) sendmsg$NFC_CMD_SE_IO(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_APDU={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000003b80)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000005200)) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000001e580)=@newtaction={0x44, 0x1e, 0x109, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x8, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x44}, 0x1, 0x2b1e}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x64c, &(0x7f0000000a00)={{0x12, 0x1, 0x0, 0x17, 0xde, 0x77, 0x10, 0x1b3d, 0x930e, 0x788e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63a, 0x4, 0x6, 0x8, 0x50, 0x42, [{{0x9, 0x4, 0x83, 0x0, 0x2, 0x44, 0xcd, 0xb9, 0x6, [@hid_hid={0x9, 0x21, 0x1000, 0x9, 0x1, {0x22, 0xf49}}, @uac_control={{0xa, 0x24, 0x1, 0x0, 0x4}, [@selector_unit={0x9, 0x24, 0x5, 0x5, 0x0, "d2291e8d"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x100, 0x6, 0x0, 0x3, 0x5, 0x6}, @feature_unit={0xb, 0x24, 0x6, 0x1, 0x2, 0x2, [0x3, 0xa], 0x9}, @processing_unit={0x8, 0x24, 0x7, 0x2, 0x4, 0x28, 'V'}, @selector_unit={0x8, 0x24, 0x5, 0x3, 0x5, "d1a12f"}]}], [{{0x9, 0x5, 0x7, 0x8, 0x200, 0x8, 0x4, 0x2}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0xd, 0x0, 0xaf, [@generic={0xf5, 0x6, "80c4873a8f1ea4d47764747a877764c23ae3911d9176863ec11931322267e82443bdb8daf23f27c66603839aea48771d07f0cf38645d40328372ebc8414e7fc954d6f808d573013613f56af2d9ba22abd5faec5659c31cf93cfb2a71187c1080e81ffa006bda91506ea9bde902ae5889823fe6b66878f6a2a33e68fa33f6b54bdbf4fe093072358b17a8456a5392af05be999e8e1df438806a8bfa638a90fc139ba05490dfe7337fce0fcba1e46219cd54e5ebdd02a497f6c1bdc1997d47d30a4036612666c9172fc26cb23cf3968cca3ee40bf90714938ddf4d5764841af3f680b385f674ddb82e879d073eb4753b1b709609"}]}}]}}, {{0x9, 0x4, 0x59, 0x3, 0x5, 0x6e, 0x9e, 0xab, 0xf5, [], [{{0x9, 0x5, 0xb, 0x18, 0x400, 0x0, 0x17, 0x4}}, {{0x9, 0x5, 0x8, 0x4, 0x400, 0x4, 0x7, 0x81}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x2, 0xe, 0x2, [@generic={0x1b, 0x23, "b4e6d84c5d5084d22ab0b3d8f90a310aea32fbabd0866ec5f3"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xff, 0x1}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0xd, 0x1, 0x7}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0x9, 0x7, 0xd1, [@generic={0xc0, 0x30, "1c7b2eebe461539e2fd0c5b5b386008199803f7f90fe51dee31b0eb406458126993eb64e0fc89d83bdfb4067ca14e2ca6e36341ed4fcc0a3d3c4b6854031582379a1db367a0f07149c6f068cbb71111d812ae007871703d834c21afa7b733cf0da479829be74641668228a3e6e923d5e75788f9bbe4070ddfdca9db9e425944dc0b5d62ea49dc7fe43b63b0de7b5d347cf9e39b6e62d8d10ea5bdd218b8af8a39026508fac9891b43673e452a927f222cae334e3aff7775eb2da241d91ed"}, @generic={0x15, 0x1, "17c11565ebb73b0ac67c4bc7b8fdc48af8f03e"}]}}]}}, {{0x9, 0x4, 0xda, 0x7, 0x5, 0xfe, 0x43, 0xdd, 0xff, [], [{{0x9, 0x5, 0x5, 0x8, 0x40, 0x21, 0x0, 0xb, [@generic={0x79, 0x23, "64ccde99925b55b2c721a1d62a5f27b310cd61a984ff71cdd39a671277415be605895b445679883ad555192b959dfe3503be2c5610b84d110a703c2e72a9efc908ee546c00f42180b2f2c4a3789fbdc0b59ea0df73778f3597e4d2fab91382ed6cdb5ab82aa63243ecaffd72630945926ba063f25370d3"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x8, 0x88, 0x2}}, {{0x9, 0x5, 0x4, 0x4, 0x8, 0xf6, 0xa, 0x66, [@generic={0x94, 0x24, "aec92938e349266c17be71257f459b55f3c7baae8bbb40b283f070d0be63c7cd0923a62fdeac9a182d118d9c43c317ce2b608cd1fd6a534dff4f9486bc6fb0ed11bc7cb3b63d5758e4ecc553b65b63bdcec038dc1554d9cbb0ceac79221a1d21729c130f51d4a56542079193d391b01d26cf5a0bcdf249d44761d3c187f2dd11d20b218db85d5d8d511da61d2531b6a7a781"}, @generic={0xa3, 0x4, "9381bcee277dd5b7bd7d10b007224a8bef9856f991714725b71e34a782de42520f7427a8d9b1041539598814c8ffcd6c88eb4fd2e8b5d822086f26294cba5f04fdaa02a6ed6b0d0a790ccb93e809b67063b891d7d0590163cb15269b63a50b86b73d1dec7a48fac568e76d44d303b0722eb1cc4ae0826a8211f8d61c000c99a5cf5c815d6627e0eb6b4bd4db4bec4b14a5a644a2b570f4fb46711313904a0fa46f"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x7ae, 0x5, 0x5}}, {{0x9, 0x5, 0x0, 0x4, 0x10, 0xa5, 0x6}}]}}, {{0x9, 0x4, 0x5f, 0xb2, 0x7, 0x4f, 0x84, 0xfd, 0x6, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "38518181f2"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0xd3, 0x1, 0x100, 0x6}, {0x6, 0x24, 0x1a, 0x5}, [@mbim_extended={0x8, 0x24, 0x1c, 0x8001, 0x4a, 0xfe2d}, @mdlm_detail={0x4, 0x24, 0x13, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x3}, @acm={0x4}]}], [{{0x9, 0x5, 0x6, 0x1, 0x210, 0x80, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xff, 0x645}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0xe, 0x1, 0xe0, [@generic={0xe3, 0xb, "b455a9c4f245af9fbdf41e46a83e78e5399d7720ccdf4bfae1112b5a0868a7bba49d0d07ed032dfbcc71dbf4fbfb0d7342879baeb9461f09bd583557de8716493e2d0ca9f8620df1117c9031abc93d9fbb15b266e31c5d3f00389a60fb47f57f72beff2f3c96509cf03b7aba61de93b33b5b46aab174abee8967ad0b5a640da60dcf9889352d9141851d2b3b4a7cfa91653f31bb2a35489a19f0963fefef78df82668bb3f024c886a4f14855fa3a9e01ff66bcd4fa8c66f3d7e6c15fe353fa22ae696c9535c2aa0bd9633961e0f71c9ee41b10c99f6591b9364cd41dcec3a0e623"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x8}]}}, {{0x9, 0x5, 0xc, 0x3, 0x0, 0x5, 0x80, 0xb, [@generic={0x22, 0xf, "b0d47200fe8dc8a2d7ed06fa233de7ca1e337c1d451cd60afcbb4e3e1eeb899d"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0xb}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x6, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xe0, 0x9}, @generic={0x23, 0xf, "affc6a36fff67fb1e39d0260badd3ddb909785b47f0c79cda5e6cede05e3104cd7"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x400, 0xff, 0x5, 0xda, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x40}]}}, {{0x9, 0x5, 0xa, 0xc, 0x20, 0x10, 0xe0, 0xf}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x7, 0x7e, 0x6, [@generic={0x2, 0x21}]}}]}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x3, 0x4, 0x0, 0x8, 0xf}, 0x51, &(0x7f0000000080)={0x5, 0xf, 0x51, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x7fffe01, 0x1100f, 0x0, [0xff0000]}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "9758dd9657a6c504cd959e06fa418912"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "f92790716f29d5fd3dc5b8d1d44b52d6"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x8, 0xab}, @ext_cap={0x7, 0x10, 0x2, 0x32, 0x0, 0xd, 0xfff}]}}) 1.025053702s ago: executing program 1 (id=397): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b3", 0x40}], 0x2}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4086, 0xff6}], 0x1}, 0x0) 0s ago: executing program 1 (id=398): openat$iommufd(0xffffffffffffff9c, &(0x7f00000005c0), 0x222000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000600)={0xc}) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000700)={0x28, 0x2, r1, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x64, 0x21c) capset(0x0, &(0x7f0000000080)={0x0, 0x0, 0x5}) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r6, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) kernel console output (not intermixed with test programs): context=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 66.117613][ T30] audit: type=1400 audit(1763038314.034:71): avc: denied { read } for pid=5479 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 67.074278][ T5797] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.393985][ T5809] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.405233][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.412961][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.420732][ T5815] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.431686][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.439578][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.443753][ T5821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.455622][ T5821] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.456235][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.464007][ T5821] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.477882][ T5821] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.485592][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.485745][ T5821] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.501298][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.501653][ T5821] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.509582][ T5823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.516677][ T5821] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.526313][ T5135] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.531523][ T5821] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.543731][ T5135] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.544355][ T5821] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.558941][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.566270][ T5135] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.576055][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.584127][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.974382][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 70.161576][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.168730][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.176447][ T5807] bridge_slave_0: entered allmulticast mode [ 70.185069][ T5807] bridge_slave_0: entered promiscuous mode [ 70.197242][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.204414][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.211597][ T5807] bridge_slave_1: entered allmulticast mode [ 70.218321][ T5807] bridge_slave_1: entered promiscuous mode [ 70.265793][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.276353][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 70.285882][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 70.309096][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.405014][ T5807] team0: Port device team_slave_0 added [ 70.413324][ T5807] team0: Port device team_slave_1 added [ 70.432765][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 70.498033][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 70.520353][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.527291][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.553226][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.587364][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.594583][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.620573][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.647296][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.654481][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.661697][ T5811] bridge_slave_0: entered allmulticast mode [ 70.668411][ T5811] bridge_slave_0: entered promiscuous mode [ 70.699624][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.706824][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.714176][ T5811] bridge_slave_1: entered allmulticast mode [ 70.721083][ T5811] bridge_slave_1: entered promiscuous mode [ 70.741804][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.748955][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.756616][ T5819] bridge_slave_0: entered allmulticast mode [ 70.763529][ T5819] bridge_slave_0: entered promiscuous mode [ 70.802438][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.809598][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.816935][ T5819] bridge_slave_1: entered allmulticast mode [ 70.823751][ T5819] bridge_slave_1: entered promiscuous mode [ 70.884458][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.894049][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.901278][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.908435][ T5812] bridge_slave_0: entered allmulticast mode [ 70.915492][ T5812] bridge_slave_0: entered promiscuous mode [ 70.926538][ T5807] hsr_slave_0: entered promiscuous mode [ 70.933065][ T5807] hsr_slave_1: entered promiscuous mode [ 70.941973][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.961557][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.971698][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.978826][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.986051][ T5812] bridge_slave_1: entered allmulticast mode [ 70.992997][ T5812] bridge_slave_1: entered promiscuous mode [ 71.005372][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.048677][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.056260][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.063989][ T5816] bridge_slave_0: entered allmulticast mode [ 71.071604][ T5816] bridge_slave_0: entered promiscuous mode [ 71.094024][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.100606][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.111282][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.137106][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.144380][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.151657][ T5816] bridge_slave_1: entered allmulticast mode [ 71.158750][ T5816] bridge_slave_1: entered promiscuous mode [ 71.166831][ T5811] team0: Port device team_slave_0 added [ 71.174734][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.199539][ T5819] team0: Port device team_slave_0 added [ 71.215563][ T5811] team0: Port device team_slave_1 added [ 71.240103][ T5819] team0: Port device team_slave_1 added [ 71.272514][ T5812] team0: Port device team_slave_0 added [ 71.303902][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.314631][ T5812] team0: Port device team_slave_1 added [ 71.321263][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.328285][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.354413][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.382081][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.400939][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.407884][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.434438][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.449848][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.457118][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.483230][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.521123][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.528072][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.554471][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.572318][ T5815] Bluetooth: hci0: command tx timeout [ 71.579241][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.586260][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.612326][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.624912][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.631892][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.657951][ T5815] Bluetooth: hci3: command tx timeout [ 71.658082][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.663896][ T5823] Bluetooth: hci4: command tx timeout [ 71.674319][ T5817] Bluetooth: hci2: command tx timeout [ 71.680065][ T5815] Bluetooth: hci1: command tx timeout [ 71.698204][ T5816] team0: Port device team_slave_0 added [ 71.743932][ T5816] team0: Port device team_slave_1 added [ 71.768159][ T5811] hsr_slave_0: entered promiscuous mode [ 71.774660][ T5811] hsr_slave_1: entered promiscuous mode [ 71.780758][ T5811] debugfs: 'hsr0' already exists in 'hsr' [ 71.786542][ T5811] Cannot create hsr debugfs directory [ 71.861661][ T5812] hsr_slave_0: entered promiscuous mode [ 71.867945][ T5812] hsr_slave_1: entered promiscuous mode [ 71.874667][ T5812] debugfs: 'hsr0' already exists in 'hsr' [ 71.880426][ T5812] Cannot create hsr debugfs directory [ 71.899731][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.906821][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.932917][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.945125][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.952221][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.978411][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.004446][ T5819] hsr_slave_0: entered promiscuous mode [ 72.010751][ T5819] hsr_slave_1: entered promiscuous mode [ 72.016654][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 72.022724][ T5819] Cannot create hsr debugfs directory [ 72.135719][ T5816] hsr_slave_0: entered promiscuous mode [ 72.142190][ T5816] hsr_slave_1: entered promiscuous mode [ 72.148114][ T5816] debugfs: 'hsr0' already exists in 'hsr' [ 72.154602][ T5816] Cannot create hsr debugfs directory [ 72.268926][ T5807] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.318331][ T5807] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.357416][ T5807] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.367717][ T5807] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.503572][ T5811] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.513417][ T5811] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.525490][ T5811] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.547221][ T5811] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.615451][ T5816] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.628209][ T5816] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.638799][ T5816] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.649065][ T5816] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.739866][ T5812] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.756395][ T5812] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.767682][ T5812] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.779050][ T5812] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.796202][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.842797][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.909272][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.916547][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.929914][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.939388][ T5819] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.948859][ T5819] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.960972][ T5819] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.973544][ T3466] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.980674][ T3466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.000737][ T5819] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.048864][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.085272][ T3466] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.092377][ T3466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.102259][ T3466] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.109321][ T3466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.129478][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.160957][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.184913][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.205883][ T3466] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.213024][ T3466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.248154][ T5811] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.278685][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.288931][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.296290][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.317080][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 73.317096][ T30] audit: type=1400 audit(1763038321.344:86): avc: denied { sys_module } for pid=5811 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 73.349784][ T5812] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.360494][ T5812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.395797][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.403119][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.424371][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.431546][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.484557][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.565130][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.634215][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.641365][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.652767][ T5823] Bluetooth: hci0: command tx timeout [ 73.667044][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.674203][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.731076][ T5823] Bluetooth: hci4: command tx timeout [ 73.736506][ T5823] Bluetooth: hci1: command tx timeout [ 73.742609][ T5815] Bluetooth: hci2: command tx timeout [ 73.742659][ T51] Bluetooth: hci3: command tx timeout [ 73.775310][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.801543][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.892002][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.958478][ T5807] veth0_vlan: entered promiscuous mode [ 74.020119][ T5811] veth0_vlan: entered promiscuous mode [ 74.052005][ T5807] veth1_vlan: entered promiscuous mode [ 74.093088][ T5811] veth1_vlan: entered promiscuous mode [ 74.106585][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.208193][ T5807] veth0_macvtap: entered promiscuous mode [ 74.217212][ T5811] veth0_macvtap: entered promiscuous mode [ 74.236390][ T5807] veth1_macvtap: entered promiscuous mode [ 74.259185][ T5811] veth1_macvtap: entered promiscuous mode [ 74.277684][ T5816] veth0_vlan: entered promiscuous mode [ 74.296815][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.311866][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.333257][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.352520][ T5816] veth1_vlan: entered promiscuous mode [ 74.359887][ T3490] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.370852][ T3490] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.386499][ T3490] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.397071][ T3490] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.416641][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.447996][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.487816][ T5812] veth0_vlan: entered promiscuous mode [ 74.513277][ T5816] veth0_macvtap: entered promiscuous mode [ 74.522664][ T3490] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.547037][ T3490] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.556031][ T3490] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.566082][ T5816] veth1_macvtap: entered promiscuous mode [ 74.590495][ T3490] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.602300][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.618753][ T5812] veth1_vlan: entered promiscuous mode [ 74.619079][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.641155][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.655145][ T5819] veth0_vlan: entered promiscuous mode [ 74.675381][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.697041][ T5819] veth1_vlan: entered promiscuous mode [ 74.736280][ T3466] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.745890][ T3466] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.755853][ T3466] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.769200][ T5812] veth0_macvtap: entered promiscuous mode [ 74.788578][ T3490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.794111][ T3466] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.796508][ T3490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.824925][ T3490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.834797][ T30] audit: type=1400 audit(1763038322.854:87): avc: denied { mounton } for pid=5807 comm="syz-executor" path="/root/syzkaller.Q0NMAv/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 74.840854][ T5819] veth0_macvtap: entered promiscuous mode [ 74.866018][ T3490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.876300][ T30] audit: type=1400 audit(1763038322.894:88): avc: denied { mount } for pid=5807 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 74.901109][ T30] audit: type=1400 audit(1763038322.894:89): avc: denied { mounton } for pid=5807 comm="syz-executor" path="/root/syzkaller.Q0NMAv/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 74.921896][ T5812] veth1_macvtap: entered promiscuous mode [ 74.934700][ T30] audit: type=1400 audit(1763038322.914:90): avc: denied { mount } for pid=5807 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 74.958094][ T30] audit: type=1400 audit(1763038322.914:91): avc: denied { mounton } for pid=5807 comm="syz-executor" path="/root/syzkaller.Q0NMAv/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 74.994866][ T30] audit: type=1400 audit(1763038322.914:92): avc: denied { mounton } for pid=5807 comm="syz-executor" path="/root/syzkaller.Q0NMAv/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 75.028318][ T30] audit: type=1400 audit(1763038322.934:93): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 75.036897][ T5807] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.053962][ T5819] veth1_macvtap: entered promiscuous mode [ 75.071451][ T30] audit: type=1400 audit(1763038322.964:94): avc: denied { mounton } for pid=5807 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 75.116677][ T30] audit: type=1400 audit(1763038322.964:95): avc: denied { mount } for pid=5807 comm="syz-executor" name="/" dev="gadgetfs" ino=7473 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 75.193604][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.218880][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.234480][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.247115][ T1053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.260056][ T1053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.281670][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.312142][ T1053] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.324775][ T3466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.335335][ T3466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.352257][ T5930] ubi31: attaching mtd0 [ 75.357605][ T5930] ubi31: scanning is finished [ 75.362673][ T5930] ubi31: empty MTD device detected [ 75.363235][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.376397][ T1053] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.385871][ T1053] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.405863][ T1053] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.424708][ T1053] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.434191][ T1053] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.467467][ T1053] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.511313][ T5930] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 75.518874][ T5930] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 75.526206][ T5930] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 75.533251][ T5930] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 75.540741][ T5930] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 75.547564][ T5930] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 75.555656][ T5930] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3694467986 [ 75.565736][ T5930] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 75.567857][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.576855][ T5931] ubi31: background thread "ubi_bgt31d" started, PID 5931 [ 75.601897][ T3490] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.632852][ T3466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.700334][ T3466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.731739][ T51] Bluetooth: hci0: command tx timeout [ 75.810662][ T51] Bluetooth: hci3: command tx timeout [ 75.812688][ T5817] Bluetooth: hci1: command tx timeout [ 75.816106][ T5823] Bluetooth: hci2: command tx timeout [ 75.821828][ T5817] Bluetooth: hci4: command tx timeout [ 75.832580][ T5940] syz.0.6 uses obsolete (PF_INET,SOCK_PACKET) [ 75.912449][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.944734][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.139915][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.160112][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.165097][ T5946] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7'. [ 76.191528][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.207856][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.391279][ T3466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.399123][ T3466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.308245][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 77.317407][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.353751][ T5973] trusted_key: syz.3.13 sent an empty control message without MSG_MORE. [ 77.410583][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 77.475629][ T5973] warning: `syz.3.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 77.615357][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 77.624861][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.820212][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 77.876834][ T5817] Bluetooth: hci0: command tx timeout [ 77.891293][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.229818][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.493490][ T5817] Bluetooth: hci3: command tx timeout [ 78.493514][ T51] Bluetooth: hci2: command tx timeout [ 78.498909][ T5817] Bluetooth: hci1: command tx timeout [ 78.504330][ T5823] Bluetooth: hci4: command tx timeout [ 78.625448][ T30] kauditd_printk_skb: 94 callbacks suppressed [ 78.625463][ T30] audit: type=1400 audit(1763038326.654:190): avc: denied { create } for pid=5972 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.141518][ T30] audit: type=1400 audit(1763038326.734:191): avc: denied { map } for pid=5981 comm="syz.1.16" path="socket:[8540]" dev="sockfs" ino=8540 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 79.189342][ T30] audit: type=1400 audit(1763038326.734:192): avc: denied { accept } for pid=5981 comm="syz.1.16" path="socket:[8540]" dev="sockfs" ino=8540 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 79.297839][ T30] audit: type=1400 audit(1763038326.914:193): avc: denied { write } for pid=5968 comm="syz.2.3" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.414140][ T30] audit: type=1400 audit(1763038327.214:194): avc: denied { create } for pid=5972 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 79.450457][ T30] audit: type=1400 audit(1763038327.214:195): avc: denied { bind } for pid=5972 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 79.580386][ T30] audit: type=1400 audit(1763038327.214:196): avc: denied { accept } for pid=5972 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 79.696620][ T30] audit: type=1400 audit(1763038327.394:197): avc: denied { ioctl } for pid=5980 comm="syz.3.15" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 79.728541][ T30] audit: type=1400 audit(1763038327.554:198): avc: denied { create } for pid=5993 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 79.749271][ T30] audit: type=1400 audit(1763038327.574:199): avc: denied { read write } for pid=5980 comm="syz.3.15" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 79.840685][ T5896] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.140489][ T5896] usb 5-1: device descriptor read/64, error -71 [ 80.540249][ T5896] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.780975][ T5896] usb 5-1: device descriptor read/64, error -71 [ 80.909559][ T5896] usb usb5-port1: attempt power cycle [ 81.350224][ T5896] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 81.416409][ T24] cfg80211: failed to load regulatory.db [ 81.422749][ T6019] netlink: 'syz.0.24': attribute type 12 has an invalid length. [ 81.499043][ T5896] usb 5-1: device descriptor read/8, error -71 [ 81.765520][ T5896] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 81.920910][ T5896] usb 5-1: device descriptor read/8, error -71 [ 82.260273][ T5896] usb usb5-port1: unable to enumerate USB device [ 82.438935][ T6021] Zero length message leads to an empty skb [ 82.890222][ T5896] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 83.029792][ T6032] ubi: mtd0 is already attached to ubi31 [ 83.062783][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 83.175355][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 83.200748][ T6034] ubi: mtd0 is already attached to ubi31 [ 83.226318][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10017, setting to 1024 [ 83.226744][ T5938] delete_channel: no stack [ 83.680217][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 83.680234][ T30] audit: type=1400 audit(1763038331.684:220): avc: denied { write } for pid=6038 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.154310][ T30] audit: type=1400 audit(1763038331.684:221): avc: denied { nlmsg_read } for pid=6038 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.435942][ T30] audit: type=1400 audit(1763038331.694:222): avc: denied { name_bind } for pid=6038 comm="syz.2.31" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 84.455308][ T5896] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 84.466708][ T30] audit: type=1400 audit(1763038331.694:223): avc: denied { node_bind } for pid=6038 comm="syz.2.31" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 84.559790][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.591002][ T30] audit: type=1400 audit(1763038331.694:224): avc: denied { connect } for pid=6038 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.638004][ T5896] usb 5-1: config 0 descriptor?? [ 84.660547][ T6053] netlink: zone id is out of range [ 84.677302][ T6025] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 84.696716][ T6053] netlink: set zone limit has 8 unknown bytes [ 84.701316][ T30] audit: type=1400 audit(1763038331.694:225): avc: denied { name_connect } for pid=6038 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 84.731743][ T6054] ptrace attach of "./syz-executor exec"[5816] was attempted by "./syz-executor exec"[6054] [ 84.774308][ T30] audit: type=1400 audit(1763038331.694:226): avc: denied { write } for pid=6038 comm="syz.2.31" lport=42966 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.798031][ T30] audit: type=1400 audit(1763038332.214:227): avc: denied { map } for pid=6028 comm="syz.1.28" path="socket:[8807]" dev="sockfs" ino=8807 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 84.827716][ T30] audit: type=1400 audit(1763038332.214:228): avc: denied { read write } for pid=6028 comm="syz.1.28" path="socket:[8807]" dev="sockfs" ino=8807 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 84.868671][ T30] audit: type=1400 audit(1763038332.894:229): avc: denied { write } for pid=6055 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 85.216242][ T6060] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.756932][ T6067] netlink: 'syz.0.37': attribute type 1 has an invalid length. [ 85.798093][ T6067] macvlan2: entered promiscuous mode [ 85.804561][ T6067] macvlan2: entered allmulticast mode [ 86.026362][ T6073] process 'syz.0.39' launched '/dev/fd/5' with NULL argv: empty string added [ 86.554250][ T5896] usbhid 5-1:0.0: can't add hid device: -71 [ 86.569149][ T5896] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 86.606156][ T5896] usb 5-1: USB disconnect, device number 6 [ 86.810377][ T5889] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.000195][ T5889] usb 2-1: Using ep0 maxpacket: 16 [ 87.007609][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.023542][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.034205][ T5889] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 87.048493][ T5889] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0a75, bcdDevice= 0.00 [ 87.068173][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.088839][ T5889] usb 2-1: config 0 descriptor?? [ 87.098975][ T5882] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 87.294121][ T5882] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.432071][ T5882] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 87.538709][ T6080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.590187][ T5882] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 87.608721][ T6080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.620099][ T5882] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 87.646852][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.926066][ T6087] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 88.113044][ T5882] hub 3-1:1.0: bad descriptor, ignoring hub [ 88.119985][ T5889] hid-corsair-void 0003:1B1C:0A75.0001: unknown main item tag 0x0 [ 88.149360][ T5882] hub 3-1:1.0: probe with driver hub failed with error -5 [ 88.157404][ T5889] hid-corsair-void 0003:1B1C:0A75.0001: unknown main item tag 0x0 [ 88.179391][ T5882] cdc_wdm 3-1:1.0: skipping garbage [ 88.186425][ T5889] hid-corsair-void 0003:1B1C:0A75.0001: unknown main item tag 0x0 [ 88.198908][ T5882] cdc_wdm 3-1:1.0: skipping garbage [ 88.207094][ T5889] hid-corsair-void 0003:1B1C:0A75.0001: unknown main item tag 0x0 [ 88.218179][ T5882] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 88.230473][ T5889] hid-corsair-void 0003:1B1C:0A75.0001: unknown main item tag 0x0 [ 88.303807][ T5882] cdc_wdm 3-1:1.0: Unknown control protocol [ 88.315263][ T5889] hid-corsair-void 0003:1B1C:0A75.0001: unknown main item tag 0x0 [ 88.329165][ T5889] hid-corsair-void 0003:1B1C:0A75.0001: unknown main item tag 0x0 [ 88.351709][ T5889] hid-corsair-void 0003:1B1C:0A75.0001: unknown main item tag 0x0 [ 88.377570][ T5889] hid-corsair-void 0003:1B1C:0A75.0001: unknown main item tag 0x0 [ 88.392013][ T5889] hid-corsair-void 0003:1B1C:0A75.0001: unknown main item tag 0x0 [ 88.416355][ T6106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.46'. [ 88.457908][ T5889] hid-corsair-void 0003:1B1C:0A75.0001: hidraw0: USB HID v0.00 Device [HID 1b1c:0a75] on usb-dummy_hcd.1-1/input0 [ 88.499894][ T5889] usb 2-1: USB disconnect, device number 2 [ 88.631446][ T6106] [U]  [ 89.527975][ T1205] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 89.858517][ T6107] fido_id[6107]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 90.095447][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 90.095464][ T30] audit: type=1400 audit(1763038338.074:245): avc: denied { write } for pid=6112 comm="syz.4.48" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 90.159899][ T30] audit: type=1400 audit(1763038338.084:246): avc: denied { map } for pid=6112 comm="syz.4.48" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 90.183873][ T30] audit: type=1400 audit(1763038338.084:247): avc: denied { execute } for pid=6112 comm="syz.4.48" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 90.208257][ T30] audit: type=1400 audit(1763038338.164:248): avc: denied { write } for pid=6112 comm="syz.4.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.213533][ T1205] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 90.378690][ T1205] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.480240][ T30] audit: type=1400 audit(1763038338.424:249): avc: denied { sys_module } for pid=6112 comm="syz.4.48" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 90.543138][ T1205] usb 2-1: config 0 descriptor?? [ 90.662549][ T6129] mmap: syz.3.51 (6129) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.750227][ T30] audit: type=1400 audit(1763038338.674:250): avc: denied { execute } for pid=6125 comm="syz.3.51" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=9410 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 90.867448][ T30] audit: type=1400 audit(1763038338.714:251): avc: denied { read write } for pid=6125 comm="syz.3.51" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 90.988983][ T30] audit: type=1400 audit(1763038338.714:252): avc: denied { open } for pid=6125 comm="syz.3.51" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 91.040623][ T5896] usb 3-1: USB disconnect, device number 2 [ 91.135594][ T6134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.148200][ T6134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.298024][ T1205] usb 2-1: USB disconnect, device number 3 [ 91.640208][ T30] audit: type=1400 audit(1763038339.384:253): avc: denied { bind } for pid=6138 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.858256][ T30] audit: type=1400 audit(1763038341.884:254): avc: denied { create } for pid=6160 comm="syz.1.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 94.548423][ T6174] 9pnet: Could not find request transport: rrt=0x0000000000004e23 [ 95.387455][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 95.387472][ T30] audit: type=1400 audit(1763038343.404:261): avc: denied { bind } for pid=6183 comm="syz.0.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 95.555778][ T30] audit: type=1400 audit(1763038343.474:262): avc: denied { ioctl } for pid=6183 comm="syz.0.63" path="socket:[9567]" dev="sockfs" ino=9567 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 95.579998][ C0] vkms_vblank_simulate: vblank timer overrun [ 95.591849][ T6188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.63'. [ 95.762584][ T6192] ubi31: detaching mtd0 [ 96.310342][ T30] audit: type=1400 audit(1763038343.584:263): avc: denied { bind } for pid=6183 comm="syz.0.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 96.342250][ T6192] ubi31: mtd0 is detached [ 96.390615][ T30] audit: type=1400 audit(1763038344.404:264): avc: denied { setopt } for pid=6185 comm="syz.2.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 96.614386][ T6198] binder_alloc: binder_alloc_mmap_handler: 6194 200000ffd000-200001000000 already mapped failed -16 [ 96.625604][ T6199] binder: BINDER_SET_CONTEXT_MGR already set [ 96.632830][ T30] audit: type=1400 audit(1763038344.644:265): avc: denied { read } for pid=6194 comm="syz.1.65" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 96.679620][ T30] audit: type=1400 audit(1763038344.644:266): avc: denied { open } for pid=6194 comm="syz.1.65" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 96.721475][ T6199] binder: 6194:6199 ioctl 4018620d 200000004a80 returned -16 [ 96.735279][ T6198] binder_alloc: 6194: binder_alloc_buf, no vma [ 97.053285][ T30] audit: type=1400 audit(1763038344.644:267): avc: denied { ioctl } for pid=6194 comm="syz.1.65" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 97.078318][ C0] vkms_vblank_simulate: vblank timer overrun [ 97.208560][ T30] audit: type=1400 audit(1763038344.644:268): avc: denied { set_context_mgr } for pid=6194 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 97.370365][ T30] audit: type=1400 audit(1763038344.644:269): avc: denied { map } for pid=6194 comm="syz.1.65" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 97.393845][ C0] vkms_vblank_simulate: vblank timer overrun [ 97.928334][ T6218] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 98.159050][ T30] audit: type=1400 audit(1763038344.764:270): avc: denied { call } for pid=6194 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 99.710999][ T6243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.76'. [ 99.719869][ T6243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.76'. [ 99.728718][ T6243] netlink: 50 bytes leftover after parsing attributes in process `syz.2.76'. [ 99.849584][ T6245] netlink: 'syz.2.76': attribute type 16 has an invalid length. [ 99.857384][ T6245] netlink: 'syz.2.76': attribute type 3 has an invalid length. [ 99.865059][ T6245] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.76'. [ 100.303880][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 100.604195][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 100.604210][ T30] audit: type=1400 audit(1763038348.624:307): avc: denied { write } for pid=6239 comm="syz.3.77" name="video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 100.742053][ T30] audit: type=1400 audit(1763038348.624:308): avc: denied { read write } for pid=6239 comm="syz.3.77" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 100.821702][ T30] audit: type=1400 audit(1763038348.624:309): avc: denied { open } for pid=6239 comm="syz.3.77" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 100.844991][ C0] vkms_vblank_simulate: vblank timer overrun [ 100.927323][ T30] audit: type=1400 audit(1763038348.624:310): avc: denied { write } for pid=6239 comm="syz.3.77" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 100.992199][ T6259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.80'. [ 101.050921][ T6253] [U]  [ 101.196769][ T5882] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.197742][ T6259] [U]  [ 101.220420][ T30] audit: type=1400 audit(1763038348.634:311): avc: denied { map } for pid=6239 comm="syz.3.77" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 101.244293][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.384672][ T30] audit: type=1400 audit(1763038348.634:312): avc: denied { execute } for pid=6239 comm="syz.3.77" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 101.408828][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.480228][ T5882] usb 3-1: Using ep0 maxpacket: 8 [ 101.524499][ T5882] usb 3-1: config 1 interface 0 altsetting 202 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 101.538376][ T30] audit: type=1400 audit(1763038348.644:313): avc: denied { create } for pid=6239 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.577797][ T5882] usb 3-1: config 1 interface 0 has no altsetting 0 [ 101.800411][ T5823] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 101.830473][ T30] audit: type=1400 audit(1763038348.644:314): avc: denied { ioctl } for pid=6239 comm="syz.3.77" path="socket:[9708]" dev="sockfs" ino=9708 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.857865][ T30] audit: type=1400 audit(1763038348.644:315): avc: denied { create } for pid=6239 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.463919][ T5882] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 102.473853][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.497799][ T5882] usb 3-1: Product: é›äœã´Šå¨ªè¡©ïžµë°‡î¼å•¡ë€¥ê…½ãƒœç°‚掗䔓薂蔗팆蒚뙑扂맻8漛켷뫟æ§é¿‰åš‰è‡¡ç¤’⛬渜뜪믽窉鹂ș쿙뱽뿼㉮ኬﭸ출S力éˆçºŸæ¬‹ë“娦왌ä¢ì­»ê–´á¼¢îµ„邪ç³ì¥¶è†›ì‚á¹î†®è½î€µá‰â´§Ö²á„‹ã²“ [ 102.538967][ T30] audit: type=1400 audit(1763038348.644:316): avc: denied { write } for pid=6239 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.671469][ T5882] usb 3-1: Manufacturer: 7ä¤ë‘ºá­‘ຣ签写䱮由燣✠ [ 102.737154][ T5882] usb 3-1: SerialNumber: syz [ 103.721838][ T6254] Invalid ELF header type: 2 != 1 [ 103.788264][ T5882] usbhid 3-1:1.0: can't add hid device: -71 [ 103.794369][ T5882] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 103.891948][ T5882] usb 3-1: USB disconnect, device number 3 [ 103.998822][ T6288] ubi31: attaching mtd0 [ 104.010955][ T6288] ubi31: scanning is finished [ 104.151609][ T1205] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 104.256102][ T6299] [U]  [ 104.274267][ T6288] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 104.281915][ T6288] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 104.290702][ T6288] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 104.299727][ T6288] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 104.308440][ T6288] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 104.316439][ T6288] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 104.325340][ T6288] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3694467986 [ 104.337365][ T6288] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 104.366101][ T6301] ubi31: background thread "ubi_bgt31d" started, PID 6301 [ 104.391824][ T1205] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.403372][ T1205] usb 2-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.416967][ T1205] usb 2-1: config 0 interface 0 has no altsetting 0 [ 104.437638][ T1205] usb 2-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 104.498736][ T1205] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.547902][ T1205] usb 2-1: config 0 descriptor?? [ 105.413507][ T1205] a4tech 0003:09DA:000A.0002: item fetching failed at offset 0/3 [ 105.432886][ T1205] a4tech 0003:09DA:000A.0002: parse failed [ 105.440491][ T1205] a4tech 0003:09DA:000A.0002: probe with driver a4tech failed with error -22 [ 105.646877][ T6314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.95'. [ 105.657656][ T6314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.95'. [ 105.667413][ T6314] netlink: 50 bytes leftover after parsing attributes in process `syz.3.95'. [ 105.728262][ T6314] netlink: 'syz.3.95': attribute type 16 has an invalid length. [ 105.735997][ T6314] netlink: 'syz.3.95': attribute type 3 has an invalid length. [ 105.743636][ T6314] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.95'. [ 106.221934][ T6290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.270385][ T6290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.332244][ T5876] usb 2-1: USB disconnect, device number 4 [ 107.095016][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 107.095034][ T30] audit: type=1400 audit(1763038354.734:352): avc: denied { setopt } for pid=6318 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 107.528380][ T6297] delete_channel: no stack [ 107.856137][ T30] audit: type=1400 audit(1763038355.884:353): avc: denied { create } for pid=6324 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 107.864511][ T6328] netlink: 12 bytes leftover after parsing attributes in process `syz.4.97'. [ 107.959472][ T30] audit: type=1400 audit(1763038355.884:354): avc: denied { setopt } for pid=6324 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 108.001491][ T30] audit: type=1400 audit(1763038355.974:355): avc: denied { create } for pid=6324 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 108.096358][ T30] audit: type=1400 audit(1763038355.984:356): avc: denied { create } for pid=6324 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 108.627462][ T6331] netlink: 'syz.3.98': attribute type 6 has an invalid length. [ 108.654097][ T30] audit: type=1400 audit(1763038356.554:357): avc: denied { read write } for pid=6338 comm="syz.1.101" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 108.681561][ T30] audit: type=1400 audit(1763038356.564:358): avc: denied { open } for pid=6338 comm="syz.1.101" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 108.831375][ T30] audit: type=1400 audit(1763038356.854:359): avc: denied { read write } for pid=6338 comm="syz.1.101" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 109.321759][ T30] audit: type=1400 audit(1763038356.854:360): avc: denied { open } for pid=6338 comm="syz.1.101" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 109.450293][ T5876] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 109.891162][ T6358] netlink: 'syz.4.102': attribute type 6 has an invalid length. [ 110.045533][ T5876] usb 4-1: config 6 has an invalid interface number: 131 but max is 3 [ 110.066455][ T5876] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 110.105633][ T5876] usb 4-1: config 6 has 1 interface, different from the descriptor's value: 4 [ 110.122928][ T5876] usb 4-1: config 6 has no interface number 0 [ 110.131585][ T5876] usb 4-1: config 6 interface 131 altsetting 0 endpoint 0x5 has invalid maxpacket 10706, setting to 64 [ 110.142811][ T5876] usb 4-1: config 6 interface 131 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.225322][ T30] audit: type=1400 audit(1763038358.234:361): avc: denied { read write } for pid=6350 comm="syz.1.104" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 110.248918][ T6359] input: syz1 as /devices/virtual/input/input5 [ 110.283745][ T5876] usb 4-1: New USB device found, idVendor=1b3d, idProduct=930e, bcdDevice=78.8e [ 110.294174][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.322962][ T5876] usb 4-1: Product: syz [ 110.343083][ T24] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 110.380199][ T5876] usb 4-1: Manufacturer: syz [ 110.423666][ T6366] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.431768][ T6366] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.472514][ T5876] usb 4-1: SerialNumber: syz [ 110.774077][ T24] usb 5-1: config 6 has an invalid interface number: 131 but max is 3 [ 110.790203][ T24] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 110.816966][ T24] usb 5-1: config 6 has 1 interface, different from the descriptor's value: 4 [ 110.826802][ T5876] ftdi_sio 4-1:6.131: FTDI USB Serial Device converter detected [ 110.845662][ T5876] ftdi_sio ttyUSB0: unknown device type: 0x788e [ 110.898302][ T6366] bridge_slave_1: left allmulticast mode [ 110.904734][ T24] usb 5-1: config 6 has no interface number 0 [ 110.906005][ T6366] bridge_slave_1: left promiscuous mode [ 110.915078][ T24] usb 5-1: config 6 interface 131 altsetting 0 endpoint 0x5 has invalid maxpacket 10706, setting to 64 [ 110.927773][ T5876] usb 4-1: USB disconnect, device number 2 [ 110.942328][ T5876] ftdi_sio 4-1:6.131: device disconnected [ 110.948162][ T24] usb 5-1: config 6 interface 131 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.952990][ T6366] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.966015][ T24] usb 5-1: New USB device found, idVendor=1b3d, idProduct=930e, bcdDevice=78.8e [ 110.977499][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.987696][ T24] usb 5-1: Product: syz [ 110.993528][ T24] usb 5-1: Manufacturer: syz [ 111.006253][ T24] usb 5-1: SerialNumber: syz [ 111.363672][ T24] ftdi_sio 5-1:6.131: FTDI USB Serial Device converter detected [ 111.385803][ T24] ftdi_sio ttyUSB0: unknown device type: 0x788e [ 111.418285][ T24] usb 5-1: USB disconnect, device number 7 [ 112.026832][ T24] ftdi_sio 5-1:6.131: device disconnected [ 112.146368][ T6366] bridge_slave_0: left allmulticast mode [ 112.170502][ T6366] bridge_slave_0: left promiscuous mode [ 112.177111][ T6366] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.436989][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 112.437006][ T30] audit: type=1400 audit(1763038360.424:368): avc: denied { create } for pid=6375 comm="syz.2.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 112.733471][ T30] audit: type=1400 audit(1763038360.714:369): avc: denied { ioctl } for pid=6375 comm="syz.2.108" path="socket:[9886]" dev="sockfs" ino=9886 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 112.883426][ T6383] xt_CT: You must specify a L4 protocol and not use inversions on it [ 113.220348][ T5896] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 113.514534][ T30] audit: type=1400 audit(1763038360.904:370): avc: denied { write } for pid=6374 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 113.541713][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 113.610651][ T6371] [U]  [ 113.630809][ T30] audit: type=1400 audit(1763038361.294:371): avc: denied { getopt } for pid=6375 comm="syz.2.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 113.657798][ T5896] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 113.669743][ T30] audit: type=1400 audit(1763038361.304:372): avc: denied { append } for pid=6375 comm="syz.2.108" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 113.709526][ T30] audit: type=1400 audit(1763038361.304:373): avc: denied { ioctl } for pid=6375 comm="syz.2.108" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64c6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 113.717429][ T6388] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 113.742518][ T5896] usb 4-1: config 0 interface 0 has no altsetting 0 [ 113.767060][ T5896] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 113.914517][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.244716][ T6388] syz.4.112 (6388): drop_caches: 2 [ 116.264373][ T6388] syz.4.112 (6388): drop_caches: 2 [ 116.481313][ T30] audit: type=1400 audit(1763038362.044:374): avc: denied { read } for pid=6385 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 116.660080][ T30] audit: type=1400 audit(1763038364.414:375): avc: denied { read } for pid=6386 comm="syz.4.112" name="sg0" dev="devtmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 116.719554][ T30] audit: type=1400 audit(1763038364.414:376): avc: denied { open } for pid=6386 comm="syz.4.112" path="/dev/sg0" dev="devtmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 116.992007][ T30] audit: type=1400 audit(1763038364.414:377): avc: denied { ioctl } for pid=6386 comm="syz.4.112" path="/dev/sg0" dev="devtmpfs" ino=768 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 117.065872][ T5896] usb 4-1: config 0 descriptor?? [ 117.613647][ T5896] usbhid 4-1:0.0: can't add hid device: -71 [ 117.668027][ T5896] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 117.890647][ T5896] usb 4-1: USB disconnect, device number 3 [ 118.458673][ T30] audit: type=1400 audit(1763038366.484:378): avc: denied { write } for pid=6404 comm="syz.4.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 118.580354][ T30] audit: type=1400 audit(1763038366.594:379): avc: denied { read write } for pid=6404 comm="syz.4.115" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 118.634412][ T6412] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 118.786452][ T6413] syz.3.117 (6413): drop_caches: 2 [ 118.816207][ T6413] syz.3.117 (6413): drop_caches: 2 [ 119.531203][ T30] audit: type=1400 audit(1763038366.604:380): avc: denied { open } for pid=6404 comm="syz.4.115" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 119.554198][ T30] audit: type=1400 audit(1763038366.644:381): avc: denied { map } for pid=6404 comm="syz.4.115" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10002 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 119.590326][ T30] audit: type=1400 audit(1763038366.644:382): avc: denied { read write } for pid=6404 comm="syz.4.115" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10002 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 119.736462][ T30] audit: type=1400 audit(1763038366.644:383): avc: denied { create } for pid=6404 comm="syz.4.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 119.818998][ T30] audit: type=1400 audit(1763038366.664:384): avc: denied { setopt } for pid=6409 comm="syz.1.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 119.971586][ T30] audit: type=1400 audit(1763038367.664:385): avc: denied { create } for pid=6408 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 120.121415][ T30] audit: type=1400 audit(1763038367.674:386): avc: denied { setopt } for pid=6408 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 120.141478][ T30] audit: type=1400 audit(1763038368.054:387): avc: denied { create } for pid=6424 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 120.350260][ T5896] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 120.690297][ T5896] usb 2-1: Using ep0 maxpacket: 8 [ 120.716626][ T5896] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 120.798728][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.850584][ T5896] usb 2-1: Product: syz [ 120.888201][ T5896] usb 2-1: Manufacturer: syz [ 120.999987][ T5896] usb 2-1: SerialNumber: syz [ 121.056460][ T5896] usb 2-1: config 0 descriptor?? [ 121.226633][ T5896] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 121.807426][ T5896] dvb-usb: bulk message failed: -22 (2/0) [ 121.816734][ T5896] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 121.837979][ T5896] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 121.857413][ T5896] usb 2-1: media controller created [ 122.054889][ T6436] cgroup: noprefix used incorrectly [ 122.373267][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 122.383366][ T1205] hid_parser_main: 905 callbacks suppressed [ 122.383381][ T1205] hid-generic 0007:FFFFFFF8:0FFF.0003: unknown main item tag 0x0 [ 122.437347][ T1205] hid-generic 0007:FFFFFFF8:0FFF.0003: unknown main item tag 0x1 [ 122.499283][ T1205] hid-generic 0007:FFFFFFF8:0FFF.0003: unknown main item tag 0x0 [ 122.874042][ T5896] dvb-usb: bulk message failed: -22 (1/0) [ 122.891732][ T1205] hid-generic 0007:FFFFFFF8:0FFF.0003: unknown main item tag 0x0 [ 122.899499][ T1205] hid-generic 0007:FFFFFFF8:0FFF.0003: unknown main item tag 0x0 [ 122.911824][ T1205] hid-generic 0007:FFFFFFF8:0FFF.0003: unknown main item tag 0x0 [ 122.924707][ T1205] hid-generic 0007:FFFFFFF8:0FFF.0003: unknown main item tag 0x0 [ 122.924739][ T5896] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 122.937582][ T1205] hid-generic 0007:FFFFFFF8:0FFF.0003: unknown main item tag 0x1 [ 122.974750][ T1205] hid-generic 0007:FFFFFFF8:0FFF.0003: unknown main item tag 0x0 [ 123.020312][ T1205] hid-generic 0007:FFFFFFF8:0FFF.0003: unknown main item tag 0x0 [ 123.116939][ T1205] hid-generic 0007:FFFFFFF8:0FFF.0003: unbalanced collection at end of report description [ 123.137255][ T1205] hid-generic 0007:FFFFFFF8:0FFF.0003: probe with driver hid-generic failed with error -22 [ 123.140688][ T5896] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 123.188343][ T5896] dvb-usb: schedule remote query interval to 50 msecs. [ 123.196372][ T5896] dvb-usb: bulk message failed: -22 (2/0) [ 123.304916][ T5925] dvb-usb: bulk message failed: -22 (1/0) [ 123.311547][ T5925] dvb-usb: error while querying for an remote control event. [ 123.319801][ T5896] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 123.326400][ T5896] usb 2-1: USB disconnect, device number 5 [ 123.758486][ T5896] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 123.959682][ T6456] [U]  [ 124.537128][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 124.537138][ T30] audit: type=1400 audit(1763038372.564:395): avc: denied { read } for pid=6471 comm="syz.2.134" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 124.753695][ T6474] sp0: Synchronizing with TNC [ 124.997590][ T30] audit: type=1400 audit(1763038372.604:396): avc: denied { open } for pid=6471 comm="syz.2.134" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 125.090950][ T6476] sp0: Found TNC [ 125.106262][ T30] audit: type=1400 audit(1763038372.604:397): avc: denied { ioctl } for pid=6471 comm="syz.2.134" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 125.186741][ T30] audit: type=1400 audit(1763038372.604:398): avc: denied { set_context_mgr } for pid=6471 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 125.209016][ T30] audit: type=1400 audit(1763038372.814:399): avc: denied { read } for pid=5479 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 125.289607][ T30] audit: type=1400 audit(1763038373.024:400): avc: denied { search } for pid=5479 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.432584][ T6483] netlink: 'syz.3.135': attribute type 6 has an invalid length. [ 125.498132][ T30] audit: type=1400 audit(1763038373.024:401): avc: denied { search } for pid=5479 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.874041][ T30] audit: type=1400 audit(1763038373.024:402): avc: denied { search } for pid=5479 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.895603][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.932628][ T30] audit: type=1400 audit(1763038373.024:403): avc: denied { read } for pid=5479 comm="dhcpcd" name="n100" dev="tmpfs" ino=2494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 125.995882][ T30] audit: type=1400 audit(1763038373.024:404): avc: denied { open } for pid=5479 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 127.943418][ T6476] [U] è``è [ 129.072511][ T6520] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 129.101452][ T6522] xt_hashlimit: max too large, truncated to 1048576 [ 129.117234][ T6522] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 130.542339][ T6546] ubi: mtd0 is already attached to ubi31 [ 130.557993][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 130.558003][ T30] audit: type=1400 audit(1763038378.094:409): avc: denied { write } for pid=6533 comm="syz.3.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 130.584816][ T30] audit: type=1400 audit(1763038378.094:410): avc: denied { nlmsg_read } for pid=6533 comm="syz.3.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 130.605515][ T30] audit: type=1400 audit(1763038378.124:411): avc: denied { connect } for pid=6533 comm="syz.3.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 130.775805][ T30] audit: type=1400 audit(1763038378.124:412): avc: denied { name_connect } for pid=6533 comm="syz.3.146" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 130.963887][ T30] audit: type=1400 audit(1763038378.234:413): avc: denied { write } for pid=6533 comm="syz.3.146" lport=42961 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 131.476951][ T30] audit: type=1400 audit(1763038378.544:414): avc: denied { setopt } for pid=6533 comm="syz.3.146" lport=42961 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 131.608388][ T6560] syz_tun: entered allmulticast mode [ 131.618128][ T6559] binder: BINDER_SET_CONTEXT_MGR already set [ 131.624238][ T6559] binder: 6551:6559 ioctl 4018620d 200000000040 returned -16 [ 131.642513][ T6558] syz_tun: left allmulticast mode [ 131.654811][ T30] audit: type=1400 audit(1763038379.644:415): avc: denied { write } for pid=6551 comm="syz.0.150" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 131.920259][ T30] audit: type=1400 audit(1763038379.644:416): avc: denied { map } for pid=6551 comm="syz.0.150" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 131.945787][ T30] audit: type=1400 audit(1763038379.684:417): avc: denied { mount } for pid=6551 comm="syz.0.150" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 132.597505][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.606742][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.298017][ T30] audit: type=1400 audit(1763038381.324:418): avc: denied { read write } for pid=6574 comm="syz.2.158" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 133.588840][ T6590] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 133.672878][ T6591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.161'. [ 133.694271][ T6591] openvswitch: netlink: Missing key (keys=40, expected=80) [ 134.472171][ T6595] bond1: option arp_interval: invalid value (18446744073709551615) [ 134.489158][ T6595] bond1: option arp_interval: allowed values 0 - 2147483647 [ 134.630904][ T6595] bond1 (unregistering): Released all slaves [ 137.540278][ T6630] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 137.681303][ T6634] syz.1.170 (6634): drop_caches: 2 [ 137.705583][ T6634] syz.1.170 (6634): drop_caches: 2 [ 139.239127][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 139.239142][ T30] audit: type=1400 audit(1763038387.264:424): avc: denied { create } for pid=6640 comm="syz.3.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 139.569662][ T30] audit: type=1400 audit(1763038387.404:425): avc: denied { write } for pid=6640 comm="syz.3.172" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 139.626866][ T30] audit: type=1400 audit(1763038387.594:426): avc: denied { write } for pid=6640 comm="syz.3.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 140.348709][ T30] audit: type=1400 audit(1763038388.374:427): avc: denied { create } for pid=6660 comm="syz.1.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 140.971396][ T30] audit: type=1400 audit(1763038389.004:428): avc: denied { create } for pid=6666 comm="syz.0.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 141.060216][ T1205] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 141.114371][ T30] audit: type=1400 audit(1763038389.024:429): avc: denied { ioctl } for pid=6666 comm="syz.0.178" path="socket:[12374]" dev="sockfs" ino=12374 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 141.220338][ T30] audit: type=1400 audit(1763038389.024:430): avc: denied { write } for pid=6666 comm="syz.0.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 141.561712][ T1205] usb 5-1: device descriptor read/64, error -71 [ 142.030341][ T1205] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 142.172281][ T1205] usb 5-1: device descriptor read/64, error -71 [ 142.292646][ T1205] usb usb5-port1: attempt power cycle [ 142.612966][ T6686] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 142.866860][ T1205] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 142.910949][ T6694] [U]  [ 142.915588][ T1205] usb 5-1: device descriptor read/8, error -71 [ 143.190247][ T1205] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 143.210745][ T1205] usb 5-1: device descriptor read/8, error -71 [ 143.334230][ T1205] usb usb5-port1: unable to enumerate USB device [ 143.465031][ T6690] bond1: option arp_interval: invalid value (18446744073709551615) [ 143.477733][ T6690] bond1: option arp_interval: allowed values 0 - 2147483647 [ 143.557165][ T6690] bond1 (unregistering): Released all slaves [ 145.146927][ T30] audit: type=1400 audit(1763038393.144:431): avc: denied { bind } for pid=6722 comm="syz.2.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 145.185516][ T6725] ======================================================= [ 145.185516][ T6725] WARNING: The mand mount option has been deprecated and [ 145.185516][ T6725] and is ignored by this kernel. Remove the mand [ 145.185516][ T6725] option from the mount to silence this warning. [ 145.185516][ T6725] ======================================================= [ 145.260094][ T30] audit: type=1400 audit(1763038393.214:432): avc: denied { mounton } for pid=6721 comm="syz.4.190" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 145.385052][ T30] audit: type=1400 audit(1763038393.414:433): avc: denied { mount } for pid=6721 comm="syz.4.190" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 145.407884][ T6726] Bluetooth: MGMT ver 1.23 [ 145.565857][ T30] audit: type=1400 audit(1763038393.594:434): avc: denied { bind } for pid=6733 comm="syz.3.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 145.593833][ T30] audit: type=1400 audit(1763038393.614:435): avc: denied { write } for pid=6733 comm="syz.3.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 145.645490][ T6730] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 146.366989][ T6741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.195'. [ 147.580156][ T6757] netlink: 40 bytes leftover after parsing attributes in process `syz.4.199'. [ 147.659046][ T6757] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6757 comm=syz.4.199 [ 147.779375][ T6757] netlink: 'syz.4.199': attribute type 1 has an invalid length. [ 147.787143][ T6757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.199'. [ 150.388380][ T30] audit: type=1400 audit(1763038398.414:436): avc: denied { execute } for pid=6771 comm="syz.1.204" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=12569 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 150.433760][ T30] audit: type=1400 audit(1763038398.464:437): avc: denied { write } for pid=6786 comm="syz.4.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 150.484915][ T30] audit: type=1400 audit(1763038398.504:438): avc: denied { read write } for pid=5812 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 151.370333][ T30] audit: type=1400 audit(1763038398.504:439): avc: denied { open } for pid=5812 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 151.558910][ T30] audit: type=1400 audit(1763038398.504:440): avc: denied { ioctl } for pid=5812 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 152.033908][ T6805] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 152.080384][ T30] audit: type=1400 audit(1763038398.834:441): avc: denied { read write } for pid=6775 comm="syz.0.206" name="video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 152.100690][ T6805] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 152.280714][ T30] audit: type=1400 audit(1763038398.834:442): avc: denied { open } for pid=6775 comm="syz.0.206" path="/dev/video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 152.446272][ T30] audit: type=1400 audit(1763038398.834:443): avc: denied { read write } for pid=6775 comm="syz.0.206" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 152.985221][ T30] audit: type=1400 audit(1763038398.834:444): avc: denied { open } for pid=6775 comm="syz.0.206" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 153.013346][ T30] audit: type=1400 audit(1763038398.834:445): avc: denied { write } for pid=6775 comm="syz.0.206" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 153.629896][ T6817] netlink: 232 bytes leftover after parsing attributes in process `syz.3.215'. [ 153.646165][ T6817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.215'. [ 154.845094][ T6852] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 154.954087][ T6855] syz.4.225 (6855): drop_caches: 2 [ 154.961006][ T6855] syz.4.225 (6855): drop_caches: 2 [ 155.783604][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 155.783620][ T30] audit: type=1400 audit(1763038403.814:510): avc: denied { append } for pid=6859 comm="syz.2.226" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 155.813134][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.968816][ T30] audit: type=1400 audit(1763038403.814:511): avc: denied { allowed } for pid=6859 comm="syz.2.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 156.018912][ T30] audit: type=1400 audit(1763038403.814:512): avc: denied { create } for pid=6859 comm="syz.2.226" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 156.239090][ T6874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.228'. [ 156.248059][ T6874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.228'. [ 156.256958][ T6874] netlink: 50 bytes leftover after parsing attributes in process `syz.2.228'. [ 156.286957][ T6874] netlink: 'syz.2.228': attribute type 16 has an invalid length. [ 156.294859][ T6874] netlink: 'syz.2.228': attribute type 3 has an invalid length. [ 156.302556][ T6874] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.228'. [ 156.778533][ T30] audit: type=1400 audit(1763038403.814:513): avc: denied { map } for pid=6859 comm="syz.2.226" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11848 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 157.463990][ T30] audit: type=1400 audit(1763038403.814:514): avc: denied { read write } for pid=6859 comm="syz.2.226" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11848 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 157.501787][ T30] audit: type=1400 audit(1763038403.854:515): avc: denied { map_create } for pid=6845 comm="syz.1.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 157.624937][ T30] audit: type=1400 audit(1763038403.854:516): avc: denied { read } for pid=6845 comm="syz.1.222" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 157.647790][ T30] audit: type=1400 audit(1763038404.344:517): avc: denied { map_read map_write } for pid=6869 comm="syz.2.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 157.840285][ T30] audit: type=1400 audit(1763038404.724:518): avc: denied { read write } for pid=6845 comm="syz.1.222" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 157.863834][ T30] audit: type=1400 audit(1763038404.724:519): avc: denied { open } for pid=6845 comm="syz.1.222" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 160.530818][ T6914] [U]  [ 160.648027][ T6922] netlink: 'syz.4.239': attribute type 6 has an invalid length. [ 161.033730][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 161.033771][ T30] audit: type=1400 audit(1763038409.054:529): avc: denied { setopt } for pid=6919 comm="syz.3.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 161.560289][ T30] audit: type=1400 audit(1763038409.574:530): avc: denied { create } for pid=6928 comm="syz.3.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 161.699299][ T30] audit: type=1400 audit(1763038409.724:531): avc: denied { execute } for pid=6925 comm="syz.4.242" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=13036 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 161.731284][ T6934] netlink: 10 bytes leftover after parsing attributes in process `syz.1.244'. [ 161.883573][ T30] audit: type=1400 audit(1763038409.904:532): avc: denied { mounton } for pid=6935 comm="syz.1.245" path="/48" dev="tmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 161.946827][ T6936] syzkaller0: entered promiscuous mode [ 162.039008][ T6936] syzkaller0: entered allmulticast mode [ 162.077373][ T30] audit: type=1400 audit(1763038410.104:533): avc: denied { write } for pid=6935 comm="syz.1.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 162.122106][ T6936] netlink: 24 bytes leftover after parsing attributes in process `syz.1.245'. [ 162.287934][ T30] audit: type=1400 audit(1763038410.314:534): avc: denied { create } for pid=6939 comm="syz.2.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 162.582798][ T6949] dlm: non-version read from control device 8224 [ 162.708100][ T6950] vxcan1: entered promiscuous mode [ 162.760989][ T30] audit: type=1400 audit(1763038410.314:535): avc: denied { read } for pid=6939 comm="syz.2.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 162.874698][ T30] audit: type=1326 audit(1763038410.474:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6939 comm="syz.2.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207158f6c9 code=0x7ffc0000 [ 162.898894][ T30] audit: type=1326 audit(1763038410.474:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6939 comm="syz.2.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207158f6c9 code=0x7ffc0000 [ 162.923829][ T30] audit: type=1326 audit(1763038410.474:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6939 comm="syz.2.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f207158f6c9 code=0x7ffc0000 [ 162.947194][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 163.550450][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 163.557089][ T24] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 163.575732][ T24] usb 2-1: config 0 has no interface number 0 [ 164.067165][ T24] usb 2-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=d9.19 [ 164.121599][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.162435][ T24] usb 2-1: Product: syz [ 164.169624][ T24] usb 2-1: Manufacturer: syz [ 164.187536][ T24] usb 2-1: SerialNumber: syz [ 164.218077][ T24] usb 2-1: config 0 descriptor?? [ 164.232474][ T24] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 164.767031][ T24] gspca_sn9c2028: read1 error -110 [ 164.910283][ T24] gspca_sn9c2028: read1 error -32 [ 164.924763][ T24] gspca_sn9c2028: read1 error -32 [ 164.929884][ T24] sn9c2028 2-1:0.119: probe with driver sn9c2028 failed with error -32 [ 165.484437][ T6974] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 165.791520][ T6975] syz.0.256 (6975): drop_caches: 2 [ 165.809701][ T6975] syz.0.256 (6975): drop_caches: 2 [ 166.840252][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 166.840269][ T30] audit: type=1400 audit(1763038414.864:564): avc: denied { prog_run } for pid=6982 comm="syz.3.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 168.174867][ T5882] usb 2-1: USB disconnect, device number 6 [ 168.445532][ T6998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.262'. [ 168.591465][ T7004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.261'. [ 168.814751][ T7001] netlink: 'syz.4.263': attribute type 12 has an invalid length. [ 168.874571][ T7004] [U]  [ 168.996349][ T7005] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 169.027783][ T30] audit: type=1400 audit(1763038417.054:565): avc: denied { create } for pid=7007 comm="syz.4.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 169.456926][ T6164] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 169.510309][ T6164] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 169.527823][ T6164] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 169.572517][ T6164] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 169.670315][ T30] audit: type=1400 audit(1763038417.674:566): avc: denied { connect } for pid=7007 comm="syz.4.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 171.225342][ T30] audit: type=1400 audit(1763038419.254:567): avc: denied { create } for pid=7031 comm="syz.3.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 171.273353][ T7034] random: crng reseeded on system resumption [ 171.405388][ T30] audit: type=1400 audit(1763038419.304:568): avc: denied { read write } for pid=7031 comm="syz.3.268" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 171.593632][ T30] audit: type=1400 audit(1763038419.304:569): avc: denied { ioctl open } for pid=7031 comm="syz.3.268" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 171.617902][ T30] audit: type=1400 audit(1763038419.524:570): avc: denied { setattr } for pid=7031 comm="syz.3.268" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 171.644117][ T7033] fuse: Bad value for 'fd' [ 171.751077][ T30] audit: type=1400 audit(1763038419.524:571): avc: denied { getattr } for pid=7031 comm="syz.3.268" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=13186 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 171.860701][ T30] audit: type=1400 audit(1763038419.524:572): avc: denied { ioctl } for pid=7031 comm="syz.3.268" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=13186 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 171.955429][ T30] audit: type=1400 audit(1763038419.984:573): avc: denied { mounton } for pid=7040 comm="syz.3.271" path="/64/file0" dev="tmpfs" ino=348 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 172.020498][ T30] audit: type=1400 audit(1763038419.984:574): avc: denied { mount } for pid=7040 comm="syz.3.271" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 172.029543][ T7044] delete_channel: no stack [ 172.090229][ T30] audit: type=1400 audit(1763038420.054:575): avc: denied { create } for pid=7040 comm="syz.3.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 172.170432][ T30] audit: type=1400 audit(1763038420.124:576): avc: denied { write } for pid=7040 comm="syz.3.271" path="socket:[13213]" dev="sockfs" ino=13213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 172.338117][ T30] audit: type=1400 audit(1763038420.364:577): avc: denied { read write } for pid=5819 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 172.882679][ T30] audit: type=1400 audit(1763038420.364:578): avc: denied { read } for pid=7045 comm="syz.1.273" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 173.090874][ T30] audit: type=1400 audit(1763038420.364:579): avc: denied { open } for pid=7045 comm="syz.1.273" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 173.471238][ T30] audit: type=1400 audit(1763038420.444:580): avc: denied { create } for pid=7049 comm="syz.0.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 173.513217][ T30] audit: type=1400 audit(1763038420.444:581): avc: denied { write } for pid=7049 comm="syz.0.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 174.406758][ T7077] netlink: 'syz.3.279': attribute type 6 has an invalid length. [ 175.090855][ T5882] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 175.102009][ T1205] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 175.530514][ T5882] usb 4-1: Using ep0 maxpacket: 32 [ 175.538150][ T5882] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 175.546741][ T5882] usb 4-1: config 0 has no interface number 0 [ 175.553269][ T1205] usb 5-1: descriptor type invalid, skip [ 175.558956][ T5882] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 175.633162][ T5882] usb 4-1: config 0 interface 1 has no altsetting 0 [ 175.633720][ T1205] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 1023 [ 175.661692][ T1205] usb 5-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.753492][ T7099] cgroup: noprefix used incorrectly [ 175.927066][ T5882] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 175.965492][ T5889] hid_parser_main: 61 callbacks suppressed [ 175.965513][ T5889] hid-generic 0007:FFFFFFF8:0FFF.0004: unknown main item tag 0x0 [ 175.988853][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.052222][ T5889] hid-generic 0007:FFFFFFF8:0FFF.0004: unknown main item tag 0x0 [ 176.060001][ T5889] hid-generic 0007:FFFFFFF8:0FFF.0004: unknown main item tag 0x0 [ 176.067811][ T5882] usb 4-1: Product: syz [ 176.072115][ T1205] usb 5-1: config 1 interface 0 has no altsetting 0 [ 176.079821][ T5882] usb 4-1: Manufacturer: syz [ 176.098895][ T5882] usb 4-1: SerialNumber: syz [ 176.109748][ T1205] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 176.223284][ T5889] hid-generic 0007:FFFFFFF8:0FFF.0004: unknown main item tag 0x0 [ 176.232303][ T1205] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.242283][ T5882] usb 4-1: config 0 descriptor?? [ 176.247440][ T5889] hid-generic 0007:FFFFFFF8:0FFF.0004: unknown main item tag 0x0 [ 176.255675][ T1205] usb 5-1: Product: syz [ 176.260727][ T1205] usb 5-1: Manufacturer: syz [ 176.266599][ T1205] usb 5-1: SerialNumber: syz [ 176.271846][ T5889] hid-generic 0007:FFFFFFF8:0FFF.0004: unknown main item tag 0x0 [ 176.279615][ T5889] hid-generic 0007:FFFFFFF8:0FFF.0004: unknown main item tag 0x0 [ 177.287562][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 177.287599][ T30] audit: type=1400 audit(1763038425.304:642): avc: denied { create } for pid=7084 comm="syz.3.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 177.288912][ T5889] hid-generic 0007:FFFFFFF8:0FFF.0004: unknown main item tag 0x0 [ 177.322124][ T5889] hid-generic 0007:FFFFFFF8:0FFF.0004: unknown main item tag 0x0 [ 177.329847][ T5889] hid-generic 0007:FFFFFFF8:0FFF.0004: unknown main item tag 0x0 [ 177.341362][ T7087] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 178.106180][ T30] audit: type=1400 audit(1763038425.314:643): avc: denied { connect } for pid=7084 comm="syz.3.284" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 178.112888][ T5882] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 178.155038][ T5889] hid-generic 0007:FFFFFFF8:0FFF.0004: hidraw0: HID v0.07 Device [syz1] on syz0 [ 178.190040][ T30] audit: type=1400 audit(1763038425.314:644): avc: denied { write } for pid=7084 comm="syz.3.284" laddr=::1 lport=2 faddr=::1 fport=20005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 178.230597][ T1205] usb 5-1: USB disconnect, device number 12 [ 178.245191][ T5882] cx231xx 4-1:0.1: Failed to read PCB config [ 178.255287][ T5882] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 178.284513][ T5882] usb 4-1: USB disconnect, device number 4 [ 179.318169][ T7117] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 179.460278][ T30] audit: type=1400 audit(1763038427.464:645): avc: denied { write } for pid=7114 comm="syz.0.292" name="video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 179.753475][ T7122] fido_id[7122]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 179.754268][ T7129] xt_cgroup: path and classid specified [ 179.820270][ T30] audit: type=1400 audit(1763038427.464:646): avc: denied { read write } for pid=7114 comm="syz.0.292" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 180.011596][ T30] audit: type=1400 audit(1763038427.464:647): avc: denied { open } for pid=7114 comm="syz.0.292" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 180.503676][ T7136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.299'. [ 180.513163][ T30] audit: type=1400 audit(1763038427.524:648): avc: denied { create } for pid=7114 comm="syz.0.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 180.583719][ T30] audit: type=1400 audit(1763038427.524:649): avc: denied { write } for pid=7114 comm="syz.0.292" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 180.687852][ T30] audit: type=1400 audit(1763038427.524:650): avc: denied { ioctl } for pid=7114 comm="syz.0.292" path="socket:[13305]" dev="sockfs" ino=13305 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 180.727575][ T30] audit: type=1400 audit(1763038427.524:651): avc: denied { create } for pid=7114 comm="syz.0.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 181.938430][ T7150] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 181.983843][ T7152] random: crng reseeded on system resumption [ 182.160836][ T7153] syz.0.302 (7153): drop_caches: 2 [ 182.188268][ T7153] syz.0.302 (7153): drop_caches: 2 [ 183.153211][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 183.153224][ T30] audit: type=1400 audit(1763038431.134:687): avc: denied { sys_module } for pid=7147 comm="syz.0.302" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 183.308654][ T30] audit: type=1400 audit(1763038431.214:688): avc: denied { create } for pid=7157 comm="syz.4.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 183.650339][ T30] audit: type=1400 audit(1763038431.324:689): avc: denied { ioctl } for pid=7151 comm="syz.2.303" path="socket:[14373]" dev="sockfs" ino=14373 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 183.859174][ T30] audit: type=1400 audit(1763038431.414:690): avc: denied { map_create } for pid=7159 comm="syz.1.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 183.954275][ T30] audit: type=1400 audit(1763038431.414:691): avc: denied { write } for pid=7159 comm="syz.1.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 184.389902][ T30] audit: type=1400 audit(1763038431.414:692): avc: denied { read } for pid=7159 comm="syz.1.304" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 185.038807][ T30] audit: type=1400 audit(1763038431.414:693): avc: denied { open } for pid=7159 comm="syz.1.304" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 185.061759][ T30] audit: type=1400 audit(1763038431.474:694): avc: denied { ioctl } for pid=7159 comm="syz.1.304" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 185.118579][ T30] audit: type=1400 audit(1763038431.494:695): avc: denied { read write } for pid=7159 comm="syz.1.304" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 185.164743][ T30] audit: type=1400 audit(1763038431.494:696): avc: denied { open } for pid=7159 comm="syz.1.304" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 186.636599][ T7198] random: crng reseeded on system resumption [ 188.384885][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 188.384902][ T30] audit: type=1400 audit(1763038436.104:733): avc: denied { ioctl } for pid=7203 comm="syz.2.314" path="socket:[13541]" dev="sockfs" ino=13541 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 188.535793][ T7215] netlink: 'syz.2.314': attribute type 1 has an invalid length. [ 188.968791][ T30] audit: type=1400 audit(1763038436.494:734): avc: denied { bind } for pid=7210 comm="syz.1.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 188.988135][ T30] audit: type=1400 audit(1763038436.504:735): avc: denied { node_bind } for pid=7210 comm="syz.1.316" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 189.009152][ T30] audit: type=1400 audit(1763038436.504:736): avc: denied { connect } for pid=7210 comm="syz.1.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 189.064886][ T30] audit: type=1400 audit(1763038436.504:737): avc: denied { write } for pid=7210 comm="syz.1.316" laddr=::1 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 189.141714][ T30] audit: type=1400 audit(1763038437.124:738): avc: denied { read write } for pid=7218 comm="syz.4.317" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 189.262983][ T30] audit: type=1400 audit(1763038437.124:739): avc: denied { open } for pid=7218 comm="syz.4.317" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 189.359343][ T30] audit: type=1400 audit(1763038437.364:740): avc: denied { create } for pid=7228 comm="syz.0.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 189.676667][ T30] audit: type=1400 audit(1763038437.374:741): avc: denied { connect } for pid=7228 comm="syz.0.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 189.946929][ T30] audit: type=1400 audit(1763038437.384:742): avc: denied { create } for pid=7228 comm="syz.0.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 191.833615][ T7251] random: crng reseeded on system resumption [ 193.814621][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 193.814639][ T30] audit: type=1400 audit(1763038441.844:749): avc: denied { create } for pid=7268 comm="syz.3.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 193.984491][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.995486][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.464491][ T7271] ubi31: detaching mtd0 [ 194.492211][ T30] audit: type=1400 audit(1763038442.494:750): avc: denied { append } for pid=7268 comm="syz.3.330" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 194.590903][ T7275] xt_CT: You must specify a L4 protocol and not use inversions on it [ 194.981820][ T30] audit: type=1400 audit(1763038442.604:751): avc: denied { map_read map_write } for pid=7272 comm="syz.1.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 195.340287][ T30] audit: type=1400 audit(1763038443.084:752): avc: denied { setopt } for pid=7268 comm="syz.3.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 195.377470][ T7271] ubi31: mtd0 is detached [ 195.557350][ T5925] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 195.669705][ T7285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.332'. [ 195.678666][ T7285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.332'. [ 195.688930][ T7285] netlink: 50 bytes leftover after parsing attributes in process `syz.2.332'. [ 195.743014][ T7285] netlink: 'syz.2.332': attribute type 16 has an invalid length. [ 195.750820][ T7285] netlink: 'syz.2.332': attribute type 3 has an invalid length. [ 195.758450][ T7285] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.332'. [ 196.130919][ T5824] Bluetooth: hci1: command 0x0406 tx timeout [ 196.136996][ T5824] Bluetooth: hci2: command 0x0406 tx timeout [ 196.137250][ T5825] Bluetooth: hci4: command 0x0405 tx timeout [ 196.143044][ T5809] Bluetooth: hci0: command 0x0406 tx timeout [ 196.149043][ T5825] Bluetooth: hci3: command 0x0406 tx timeout [ 196.352790][ T5925] usb 2-1: Using ep0 maxpacket: 32 [ 196.370701][ T5925] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 196.390250][ T5925] usb 2-1: config 0 interface 0 has no altsetting 0 [ 196.401235][ T5925] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 196.444096][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.474661][ T5925] usb 2-1: config 0 descriptor?? [ 196.560488][ T7291] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 197.959203][ T30] audit: type=1400 audit(1763038445.974:753): avc: denied { create } for pid=7298 comm="syz.3.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 198.139052][ T30] audit: type=1400 audit(1763038445.984:754): avc: denied { setopt } for pid=7298 comm="syz.3.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 198.306685][ T30] audit: type=1400 audit(1763038446.334:755): avc: denied { create } for pid=7296 comm="syz.2.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 198.626773][ T5925] usbhid 2-1:0.0: can't add hid device: -71 [ 198.632845][ T5925] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 198.643359][ T30] audit: type=1400 audit(1763038446.354:756): avc: denied { ioctl } for pid=7296 comm="syz.2.338" path="socket:[14693]" dev="sockfs" ino=14693 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 198.673227][ T7305] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 198.679542][ T5925] usb 2-1: USB disconnect, device number 7 [ 198.694634][ T30] audit: type=1400 audit(1763038446.354:757): avc: denied { write } for pid=7296 comm="syz.2.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 198.816229][ T30] audit: type=1400 audit(1763038446.404:758): avc: denied { setopt } for pid=7302 comm="syz.4.339" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 199.592789][ T30] audit: type=1400 audit(1763038447.524:759): avc: denied { name_bind } for pid=7302 comm="syz.4.339" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 199.620358][ T30] audit: type=1400 audit(1763038447.524:760): avc: denied { node_bind } for pid=7302 comm="syz.4.339" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 199.695800][ T7305] bond1: option arp_interval: invalid value (18446744073709551615) [ 199.704010][ T7305] bond1: option arp_interval: allowed values 0 - 2147483647 [ 199.715372][ T7312] fuse: Bad value for 'fd' [ 199.722551][ T30] audit: type=1400 audit(1763038447.744:761): avc: denied { mounton } for pid=7298 comm="syz.3.337" path="/73/file0" dev="tmpfs" ino=397 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 200.151083][ T7305] bond1 (unregistering): Released all slaves [ 200.410776][ T7321] netlink: 'syz.0.342': attribute type 10 has an invalid length. [ 200.420043][ T7321] team0: Device ipvlan1 failed to register rx_handler [ 200.440639][ T7321] netlink: 6068 bytes leftover after parsing attributes in process `syz.0.342'. [ 201.224032][ T30] audit: type=1400 audit(1763038449.254:762): avc: denied { ioctl } for pid=7326 comm="syz.1.345" path="socket:[14734]" dev="sockfs" ino=14734 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 204.157372][ T30] audit: type=1400 audit(1763038452.134:763): avc: denied { map } for pid=7349 comm="syz.0.348" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 204.516622][ T7365] tipc: Started in network mode [ 204.522043][ T7365] tipc: Node identity 0a31bd6bd6ba, cluster identity 4711 [ 204.534431][ T7365] tipc: Enabled bearer , priority 0 [ 205.019671][ T7352] tipc: Disabling bearer [ 205.039518][ T30] audit: type=1400 audit(1763038452.134:764): avc: denied { execute } for pid=7349 comm="syz.0.348" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 205.478615][ T30] audit: type=1400 audit(1763038452.344:765): avc: denied { create } for pid=7352 comm="syz.3.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 206.970571][ T30] audit: type=1400 audit(1763038454.894:766): avc: denied { write } for pid=7372 comm="syz.4.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 206.995116][ T5867] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 207.175290][ T30] audit: type=1400 audit(1763038454.894:767): avc: denied { nlmsg_read } for pid=7372 comm="syz.4.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 207.196692][ T30] audit: type=1400 audit(1763038454.894:768): avc: denied { name_connect } for pid=7372 comm="syz.4.355" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 207.251930][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 207.268145][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10017, setting to 1024 [ 207.969892][ T5867] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 208.045696][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.082822][ T5867] usb 4-1: config 0 descriptor?? [ 208.103031][ T7370] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 209.904369][ T30] audit: type=1400 audit(1763038457.934:769): avc: denied { read } for pid=7382 comm="syz.1.357" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 210.001588][ T7416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.364'. [ 210.010903][ T7416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.364'. [ 210.020944][ T7416] netlink: 50 bytes leftover after parsing attributes in process `syz.0.364'. [ 210.099217][ T7382] delete_channel: no stack [ 210.214533][ T7416] netlink: 'syz.0.364': attribute type 16 has an invalid length. [ 210.222375][ T7416] netlink: 'syz.0.364': attribute type 3 has an invalid length. [ 210.230820][ T7416] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.364'. [ 210.694448][ T30] audit: type=1400 audit(1763038457.934:770): avc: denied { open } for pid=7382 comm="syz.1.357" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 210.770424][ T5867] usbhid 4-1:0.0: can't add hid device: -71 [ 210.776390][ T5867] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 210.789467][ T30] audit: type=1400 audit(1763038457.934:771): avc: denied { ioctl } for pid=7382 comm="syz.1.357" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x4501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 210.832719][ T5867] usb 4-1: USB disconnect, device number 5 [ 210.910335][ T30] audit: type=1400 audit(1763038458.024:772): avc: denied { create } for pid=7382 comm="syz.1.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 211.428711][ T7430] netlink: 164 bytes leftover after parsing attributes in process `syz.3.367'. [ 211.535808][ T30] audit: type=1400 audit(1763038459.474:773): avc: denied { mount } for pid=7423 comm="syz.3.367" name="/" dev="configfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 211.558306][ C1] vkms_vblank_simulate: vblank timer overrun [ 212.080517][ T30] audit: type=1400 audit(1763038459.474:774): avc: denied { nlmsg_write } for pid=7423 comm="syz.3.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 212.120839][ T30] audit: type=1400 audit(1763038459.984:775): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 213.471547][ T30] audit: type=1400 audit(1763038460.914:776): avc: denied { firmware_load } for pid=7436 comm="syz.3.369" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 213.963101][ T5937] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 214.130703][ T5937] usb 4-1: Using ep0 maxpacket: 32 [ 214.169863][ T5937] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.171107][ T7451] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 214.187012][ T5937] usb 4-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 214.201687][ T5937] usb 4-1: config 0 interface 0 has no altsetting 0 [ 214.208301][ T5937] usb 4-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 214.223565][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.246535][ T5937] usb 4-1: config 0 descriptor?? [ 214.257190][ T5937] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 214.363131][ T5867] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 214.670483][ T30] audit: type=1400 audit(1763038462.654:777): avc: denied { create } for pid=7450 comm="syz.2.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 214.740374][ T30] audit: type=1400 audit(1763038462.664:778): avc: denied { connect } for pid=7450 comm="syz.2.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 214.763359][ T30] audit: type=1400 audit(1763038462.674:779): avc: denied { bind } for pid=7450 comm="syz.2.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 214.828609][ T5867] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 214.859060][ T5867] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.869669][ T5867] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 214.878905][ T5867] usb 2-1: config 1 has no interface number 1 [ 214.885330][ T5867] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 215.003592][ T5867] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 215.020259][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.170944][ T5867] usb 2-1: Product: syz [ 215.193295][ T5867] usb 2-1: Manufacturer: syz [ 215.199051][ T5867] usb 2-1: SerialNumber: syz [ 215.642950][ T7458] netlink: 'syz.2.376': attribute type 1 has an invalid length. [ 215.698763][ T5867] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 215.708043][ T5867] usb 2-1: MIDIStreaming interface descriptor not found [ 215.767152][ T5867] usb 2-1: USB disconnect, device number 8 [ 216.215436][ T7441] syz.3.369 (7441) used greatest stack depth: 19192 bytes left [ 216.253948][ T6393] udevd[6393]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.276606][ T5889] usb 4-1: USB disconnect, device number 6 [ 216.449534][ T30] audit: type=1400 audit(1763038464.474:780): avc: denied { map } for pid=7475 comm="syz.4.383" path="socket:[15170]" dev="sockfs" ino=15170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 216.487466][ T30] audit: type=1400 audit(1763038464.474:781): avc: denied { accept } for pid=7475 comm="syz.4.383" path="socket:[15170]" dev="sockfs" ino=15170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 216.708819][ T7482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.381'. [ 216.717919][ T7482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.381'. [ 216.726823][ T7482] netlink: 50 bytes leftover after parsing attributes in process `syz.3.381'. [ 216.802256][ T7482] netlink: 'syz.3.381': attribute type 16 has an invalid length. [ 216.810054][ T7482] netlink: 'syz.3.381': attribute type 3 has an invalid length. [ 216.817799][ T7482] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.381'. [ 218.047227][ T7497] ubi31: attaching mtd0 [ 218.238103][ T7497] ubi31: scanning is finished [ 218.450293][ T5889] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 218.667620][ T7497] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 218.688554][ T7497] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 218.696620][ T7497] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 218.704976][ T7497] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 218.788706][ T7497] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 218.795974][ T5889] usb 3-1: Using ep0 maxpacket: 8 [ 218.808647][ T7497] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 218.832105][ T7497] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3694467986 [ 218.865879][ T5889] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 218.874948][ T7497] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 218.885049][ T5889] usb 3-1: config 179 has no interface number 0 [ 218.896002][ T7503] ubi31: background thread "ubi_bgt31d" started, PID 7503 [ 218.920211][ T5889] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 218.950325][ T5889] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 219.510357][ T5889] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 219.537622][ T5889] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 219.569415][ T5889] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 219.618681][ T7509] netlink: 24 bytes leftover after parsing attributes in process `syz.1.389'. [ 219.634062][ T5889] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 219.652056][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.675080][ T7501] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 219.713488][ T30] audit: type=1400 audit(1763038467.734:782): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 219.814166][ T7511] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7511 comm=syz.1.389 [ 219.922470][ T7501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.932413][ T7501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.629332][ T7520] No control pipe specified [ 221.262227][ T30] audit: type=1400 audit(1763038469.294:783): avc: denied { ioctl } for pid=7521 comm="syz.1.393" path="socket:[14015]" dev="sockfs" ino=14015 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 221.771278][ T7534] random: crng reseeded on system resumption [ 221.809392][ T30] audit: type=1400 audit(1763038469.834:784): avc: denied { setattr } for pid=7533 comm="syz.1.395" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 221.973355][ T30] audit: type=1400 audit(1763038469.864:785): avc: denied { getattr } for pid=7533 comm="syz.1.395" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=15282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 222.046454][ T30] audit: type=1400 audit(1763038469.874:786): avc: denied { ioctl } for pid=7533 comm="syz.1.395" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=15282 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 222.112267][ T30] audit: type=1400 audit(1763038470.114:787): avc: denied { create } for pid=7535 comm="syz.4.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 223.096255][ T7543] netlink: 'syz.4.396': attribute type 6 has an invalid length. [ 223.189678][ T5896] usb 3-1: USB disconnect, device number 4 [ 223.189698][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 223.204123][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 223.213004][ C0] ================================================================== [ 223.221073][ C0] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x26f/0x2b0 [ 223.228898][ C0] Read of size 4 at addr ffff88802b05105c by task syz.4.396/7543 [ 223.236618][ C0] [ 223.238962][ C0] CPU: 0 UID: 0 PID: 7543 Comm: syz.4.396 Not tainted syzkaller #0 PREEMPT(full) [ 223.239000][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 223.239016][ C0] Call Trace: [ 223.239025][ C0] [ 223.239034][ C0] dump_stack_lvl+0x116/0x1f0 [ 223.239080][ C0] print_report+0xcd/0x630 [ 223.239109][ C0] ? __virt_addr_valid+0x81/0x610 [ 223.239145][ C0] ? __phys_addr+0xe8/0x180 [ 223.239180][ C0] ? do_raw_spin_lock+0x26f/0x2b0 [ 223.239207][ C0] kasan_report+0xe0/0x110 [ 223.239234][ C0] ? do_raw_spin_lock+0x26f/0x2b0 [ 223.239268][ C0] do_raw_spin_lock+0x26f/0x2b0 [ 223.239296][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 223.239325][ C0] ? kcov_remote_stop+0x1b0/0x5f0 [ 223.239360][ C0] _raw_spin_lock_irqsave+0x42/0x60 [ 223.239397][ C0] ? __wake_up+0x1c/0x60 [ 223.239430][ C0] __wake_up+0x1c/0x60 [ 223.239464][ C0] usb_anchor_resume_wakeups+0xc2/0xe0 [ 223.239494][ C0] __usb_hcd_giveback_urb+0x3d5/0x610 [ 223.239532][ C0] usb_hcd_giveback_urb+0x39b/0x450 [ 223.239571][ C0] dummy_timer+0x1809/0x3a00 [ 223.239602][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 223.239632][ C0] ? debug_object_deactivate+0x1ec/0x3a0 [ 223.239674][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 223.239712][ C0] ? debug_object_deactivate+0x1ec/0x3a0 [ 223.239751][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 223.239790][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 223.239814][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 223.239841][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 223.239881][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 223.239906][ C0] __hrtimer_run_queues+0x202/0xad0 [ 223.239944][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 223.239973][ C0] ? read_tsc+0x9/0x20 [ 223.240004][ C0] hrtimer_run_softirq+0x17d/0x350 [ 223.240033][ C0] handle_softirqs+0x219/0x8e0 [ 223.240065][ C0] ? rcu_is_watching+0x12/0xc0 [ 223.240098][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 223.240133][ C0] __irq_exit_rcu+0x109/0x170 [ 223.240157][ C0] irq_exit_rcu+0x9/0x30 [ 223.240187][ C0] sysvec_call_function_single+0xa4/0xc0 [ 223.240228][ C0] [ 223.240236][ C0] [ 223.240245][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 223.240281][ C0] RIP: 0010:__schedule+0x1198/0x5de0 [ 223.240319][ C0] Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 80 43 00 00 49 89 5e 10 48 8b bd 10 ff ff ff 48 89 de e8 20 08 ca f5 48 89 c7 e8 28 9b 28 f6 <8b> bd 08 ff ff ff e8 7d 58 28 f6 48 8b b5 90 fe ff ff 48 b8 00 00 [ 223.240344][ C0] RSP: 0018:ffffc9000c627480 EFLAGS: 00000206 [ 223.240364][ C0] RAX: 0000000000001c6f RBX: ffff88802b102480 RCX: ffffffff81c4e99f [ 223.240382][ C0] RDX: 0000000000000000 RSI: ffffffff8da2b882 RDI: ffffffff8bf07040 [ 223.240399][ C0] RBP: ffffc9000c627638 R08: 0000000000000001 R09: 0000000000000001 [ 223.240415][ C0] R10: ffffffff90820dd7 R11: 0000000000000001 R12: 0000000000000000 [ 223.240432][ C0] R13: 0000000000000000 R14: ffff8880b843a380 R15: ffff88802b102480 [ 223.240454][ C0] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 223.240493][ C0] ? find_held_lock+0x2b/0x80 [ 223.240535][ C0] ? __pfx___schedule+0x10/0x10 [ 223.240570][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 223.240598][ C0] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 223.240637][ C0] preempt_schedule_irq+0x51/0x90 [ 223.240677][ C0] irqentry_exit+0x36/0x90 [ 223.240700][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 223.240728][ C0] RIP: 0010:__unwind_start+0x4bf/0x7f0 [ 223.240758][ C0] Code: 0f 85 fc 01 00 00 49 8b 56 10 48 39 c3 72 b3 48 39 d3 73 ae 48 8d 4b 08 48 39 ca 72 a5 48 39 c8 73 a0 48 8b 04 24 48 c1 e8 03 <80> 3c 28 00 0f 85 f4 01 00 00 49 3b 5e 38 73 88 e9 03 fe ff ff 48 [ 223.240783][ C0] RSP: 0018:ffffc9000c627710 EFLAGS: 00000a06 [ 223.240802][ C0] RAX: 1ffff920018c4ef3 RBX: ffffc9000c6277f0 RCX: ffffc9000c6277f8 [ 223.240819][ C0] RDX: ffffc9000c628000 RSI: ffffffff8da05e9c RDI: ffff88802b102904 [ 223.240837][ C0] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 223.240853][ C0] R10: 0000000000000000 R11: 0000000000006c19 R12: fffff520018c4eee [ 223.240869][ C0] R13: fffff520018c4eed R14: ffffc9000c627760 R15: ffffc9000c627768 [ 223.240897][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 223.240936][ C0] arch_stack_walk+0x73/0x100 [ 223.240967][ C0] ? arch_stack_walk+0x73/0x100 [ 223.240997][ C0] stack_trace_save+0x8e/0xc0 [ 223.241031][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 223.241071][ C0] kasan_save_stack+0x33/0x60 [ 223.241134][ C0] kasan_save_track+0x14/0x30 [ 223.241160][ C0] __kasan_kmalloc+0xaa/0xb0 [ 223.241185][ C0] kobject_uevent_env+0x265/0x1870 [ 223.241217][ C0] ? __pfx_dev_uevent_name+0x10/0x10 [ 223.241262][ C0] gadget_bind_driver+0x78b/0xc40 [ 223.241298][ C0] ? dummy_udc_async_callbacks+0x1/0x80 [ 223.241339][ C0] ? __pfx_gadget_bind_driver+0x10/0x10 [ 223.241368][ C0] really_probe+0x241/0xa90 [ 223.241394][ C0] __driver_probe_device+0x1de/0x440 [ 223.241419][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 223.241458][ C0] driver_probe_device+0x4c/0x1b0 [ 223.241485][ C0] __driver_attach+0x283/0x580 [ 223.241512][ C0] ? __pfx___driver_attach+0x10/0x10 [ 223.241537][ C0] bus_for_each_dev+0x13e/0x1d0 [ 223.241571][ C0] ? __pfx_bus_for_each_dev+0x10/0x10 [ 223.241606][ C0] ? bus_add_driver+0x299/0x690 [ 223.241646][ C0] bus_add_driver+0x2e9/0x690 [ 223.241684][ C0] driver_register+0x15c/0x4b0 [ 223.241713][ C0] usb_gadget_register_driver_owner+0x132/0x330 [ 223.241742][ C0] raw_ioctl+0x17d0/0x2c30 [ 223.241772][ C0] ? __pfx_raw_ioctl+0x10/0x10 [ 223.241797][ C0] ? selinux_file_ioctl+0x180/0x270 [ 223.241826][ C0] ? selinux_file_ioctl+0xb4/0x270 [ 223.241855][ C0] ? __pfx_raw_ioctl+0x10/0x10 [ 223.241881][ C0] __x64_sys_ioctl+0x18e/0x210 [ 223.241918][ C0] do_syscall_64+0xcd/0xfa0 [ 223.241942][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.241967][ C0] RIP: 0033:0x7f308d78f2cb [ 223.241987][ C0] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 223.242011][ C0] RSP: 002b:00007f308b9d2f10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 223.242035][ C0] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f308d78f2cb [ 223.242053][ C0] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 223.242069][ C0] RBP: 00007f308b9d3fe0 R08: 0000000000000000 R09: 00342e6364755f79 [ 223.242085][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.242101][ C0] R13: 00007f308b9d2fb0 R14: 0000200000000a00 R15: 00007f308db10320 [ 223.242146][ C0] [ 223.242155][ C0] [ 223.884645][ C0] Allocated by task 5889: [ 223.888949][ C0] kasan_save_stack+0x33/0x60 [ 223.893615][ C0] kasan_save_track+0x14/0x30 [ 223.898281][ C0] __kasan_kmalloc+0xaa/0xb0 [ 223.902868][ C0] xpad_probe+0x286/0x1ff0 [ 223.907277][ C0] usb_probe_interface+0x303/0xa40 [ 223.912387][ C0] really_probe+0x241/0xa90 [ 223.916874][ C0] __driver_probe_device+0x1de/0x440 [ 223.922147][ C0] driver_probe_device+0x4c/0x1b0 [ 223.927157][ C0] __device_attach_driver+0x1df/0x310 [ 223.932513][ C0] bus_for_each_drv+0x159/0x1e0 [ 223.937353][ C0] __device_attach+0x1e4/0x4b0 [ 223.942098][ C0] bus_probe_device+0x17f/0x1c0 [ 223.946938][ C0] device_add+0x1148/0x1aa0 [ 223.951429][ C0] usb_set_configuration+0x1187/0x1e20 [ 223.956877][ C0] usb_generic_driver_probe+0xb1/0x110 [ 223.962320][ C0] usb_probe_device+0xef/0x3e0 [ 223.967074][ C0] really_probe+0x241/0xa90 [ 223.971566][ C0] __driver_probe_device+0x1de/0x440 [ 223.976848][ C0] driver_probe_device+0x4c/0x1b0 [ 223.981861][ C0] __device_attach_driver+0x1df/0x310 [ 223.987225][ C0] bus_for_each_drv+0x159/0x1e0 [ 223.992079][ C0] __device_attach+0x1e4/0x4b0 [ 223.996844][ C0] bus_probe_device+0x17f/0x1c0 [ 224.001694][ C0] device_add+0x1148/0x1aa0 [ 224.006191][ C0] usb_new_device+0xd07/0x1a60 [ 224.010950][ C0] hub_event+0x2f34/0x4fe0 [ 224.015357][ C0] process_one_work+0x9cf/0x1b70 [ 224.020283][ C0] worker_thread+0x6c8/0xf10 [ 224.024857][ C0] kthread+0x3c5/0x780 [ 224.028905][ C0] ret_from_fork+0x675/0x7d0 [ 224.033475][ C0] ret_from_fork_asm+0x1a/0x30 [ 224.038233][ C0] [ 224.040538][ C0] Freed by task 5896: [ 224.044493][ C0] kasan_save_stack+0x33/0x60 [ 224.049155][ C0] kasan_save_track+0x14/0x30 [ 224.053817][ C0] __kasan_save_free_info+0x3b/0x60 [ 224.059007][ C0] __kasan_slab_free+0x5f/0x80 [ 224.063755][ C0] kfree+0x2b8/0x6d0 [ 224.067638][ C0] xpad_disconnect+0x1cf/0x580 [ 224.072384][ C0] usb_unbind_interface+0x1dd/0x9e0 [ 224.077572][ C0] device_remove+0x125/0x170 [ 224.082142][ C0] device_release_driver_internal+0x44b/0x620 [ 224.088194][ C0] bus_remove_device+0x22f/0x420 [ 224.093125][ C0] device_del+0x396/0x9f0 [ 224.097442][ C0] usb_disable_device+0x355/0x7d0 [ 224.102452][ C0] usb_disconnect+0x2e1/0x9c0 [ 224.107115][ C0] hub_event+0x1c81/0x4fe0 [ 224.111516][ C0] process_one_work+0x9cf/0x1b70 [ 224.116438][ C0] worker_thread+0x6c8/0xf10 [ 224.121012][ C0] kthread+0x3c5/0x780 [ 224.125061][ C0] ret_from_fork+0x675/0x7d0 [ 224.129630][ C0] ret_from_fork_asm+0x1a/0x30 [ 224.134384][ C0] [ 224.136686][ C0] The buggy address belongs to the object at ffff88802b051000 [ 224.136686][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 224.150718][ C0] The buggy address is located 92 bytes inside of [ 224.150718][ C0] freed 1024-byte region [ffff88802b051000, ffff88802b051400) [ 224.164495][ C0] [ 224.166795][ C0] The buggy address belongs to the physical page: [ 224.173193][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b050 [ 224.181935][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 224.190414][ C0] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 224.198283][ C0] page_type: f5(slab) [ 224.202246][ C0] raw: 00fff00000000040 ffff88813ffa6dc0 ffffea0001d84c00 0000000000000003 [ 224.210809][ C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 224.219373][ C0] head: 00fff00000000040 ffff88813ffa6dc0 ffffea0001d84c00 0000000000000003 [ 224.228024][ C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 224.236674][ C0] head: 00fff00000000003 ffffea0000ac1401 00000000ffffffff 00000000ffffffff [ 224.245323][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 224.253965][ C0] page dumped because: kasan: bad access detected [ 224.260364][ C0] page_owner tracks the page as allocated [ 224.266057][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 79, tgid 79 (kworker/u8:4), ts 179401555569, free_ts 178130390729 [ 224.285147][ C0] post_alloc_hook+0x1c0/0x230 [ 224.289906][ C0] get_page_from_freelist+0x10a3/0x3a30 [ 224.295443][ C0] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 224.301329][ C0] alloc_pages_mpol+0x1fb/0x550 [ 224.306164][ C0] new_slab+0x24a/0x360 [ 224.310307][ C0] ___slab_alloc+0xd79/0x1a50 [ 224.314972][ C0] __slab_alloc.constprop.0+0x63/0x110 [ 224.320420][ C0] __kmalloc_noprof+0x501/0x880 [ 224.325260][ C0] ieee802_11_parse_elems_full+0x1db/0x3780 [ 224.331145][ C0] ieee80211_inform_bss+0x10b/0x1140 [ 224.336419][ C0] cfg80211_inform_single_bss_data+0x8ea/0x1df0 [ 224.342662][ C0] cfg80211_inform_bss_data+0x22b/0x3be0 [ 224.348316][ C0] cfg80211_inform_bss_frame_data+0x26f/0x750 [ 224.354397][ C0] ieee80211_bss_info_update+0x310/0xab0 [ 224.360036][ C0] ieee80211_ibss_rx_queued_mgmt+0x191b/0x2fe0 [ 224.366183][ C0] ieee80211_iface_work+0xe2e/0x1360 [ 224.371466][ C0] page last free pid 5173 tgid 5173 stack trace: [ 224.377767][ C0] __free_frozen_pages+0x7df/0x1160 [ 224.382955][ C0] __put_partials+0x130/0x170 [ 224.387629][ C0] qlist_free_all+0x4d/0x120 [ 224.392202][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 224.397641][ C0] __kasan_slab_alloc+0x69/0x90 [ 224.402475][ C0] kmem_cache_alloc_node_noprof+0x28a/0x770 [ 224.408359][ C0] __alloc_skb+0x2b2/0x380 [ 224.412760][ C0] alloc_skb_with_frags+0xe0/0x860 [ 224.417862][ C0] sock_alloc_send_pskb+0x7f9/0x980 [ 224.423066][ C0] unix_dgram_sendmsg+0x3e9/0x17f0 [ 224.428166][ C0] __sys_sendto+0x4a3/0x520 [ 224.432658][ C0] __x64_sys_sendto+0xe0/0x1c0 [ 224.437405][ C0] do_syscall_64+0xcd/0xfa0 [ 224.441889][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.447766][ C0] [ 224.450068][ C0] Memory state around the buggy address: [ 224.455671][ C0] ffff88802b050f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 224.463715][ C0] ffff88802b050f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 224.471757][ C0] >ffff88802b051000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 224.479793][ C0] ^ [ 224.486701][ C0] ffff88802b051080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 224.494740][ C0] ffff88802b051100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 224.502775][ C0] ================================================================== [ 224.510813][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 224.517985][ C0] CPU: 0 UID: 0 PID: 7543 Comm: syz.4.396 Not tainted syzkaller #0 PREEMPT(full) [ 224.527164][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 224.537202][ C0] Call Trace: [ 224.540463][ C0] [ 224.543292][ C0] dump_stack_lvl+0x3d/0x1f0 [ 224.547878][ C0] vpanic+0x640/0x6f0 [ 224.551853][ C0] panic+0xca/0xd0 [ 224.555568][ C0] ? __pfx_panic+0x10/0x10 [ 224.559980][ C0] ? end_report+0x4c/0x170 [ 224.564390][ C0] ? rcu_is_watching+0x12/0xc0 [ 224.569150][ C0] ? lock_release+0x201/0x2f0 [ 224.573813][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 224.578908][ C0] check_panic_on_warn+0xab/0xb0 [ 224.583827][ C0] end_report+0x107/0x170 [ 224.588142][ C0] kasan_report+0xee/0x110 [ 224.592548][ C0] ? do_raw_spin_lock+0x26f/0x2b0 [ 224.597560][ C0] do_raw_spin_lock+0x26f/0x2b0 [ 224.602404][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 224.607760][ C0] ? kcov_remote_stop+0x1b0/0x5f0 [ 224.612778][ C0] _raw_spin_lock_irqsave+0x42/0x60 [ 224.617970][ C0] ? __wake_up+0x1c/0x60 [ 224.622208][ C0] __wake_up+0x1c/0x60 [ 224.626272][ C0] usb_anchor_resume_wakeups+0xc2/0xe0 [ 224.631716][ C0] __usb_hcd_giveback_urb+0x3d5/0x610 [ 224.637086][ C0] usb_hcd_giveback_urb+0x39b/0x450 [ 224.642278][ C0] dummy_timer+0x1809/0x3a00 [ 224.646855][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 224.651898][ C0] ? debug_object_deactivate+0x1ec/0x3a0 [ 224.657528][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 224.663338][ C0] ? debug_object_deactivate+0x1ec/0x3a0 [ 224.668969][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 224.674943][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 224.679867][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 224.684793][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 224.690601][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 224.695521][ C0] __hrtimer_run_queues+0x202/0xad0 [ 224.700718][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 224.706432][ C0] ? read_tsc+0x9/0x20 [ 224.710499][ C0] hrtimer_run_softirq+0x17d/0x350 [ 224.715611][ C0] handle_softirqs+0x219/0x8e0 [ 224.720370][ C0] ? rcu_is_watching+0x12/0xc0 [ 224.725128][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 224.730407][ C0] __irq_exit_rcu+0x109/0x170 [ 224.735072][ C0] irq_exit_rcu+0x9/0x30 [ 224.739302][ C0] sysvec_call_function_single+0xa4/0xc0 [ 224.744930][ C0] [ 224.747840][ C0] [ 224.750751][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 224.756718][ C0] RIP: 0010:__schedule+0x1198/0x5de0 [ 224.762009][ C0] Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 80 43 00 00 49 89 5e 10 48 8b bd 10 ff ff ff 48 89 de e8 20 08 ca f5 48 89 c7 e8 28 9b 28 f6 <8b> bd 08 ff ff ff e8 7d 58 28 f6 48 8b b5 90 fe ff ff 48 b8 00 00 [ 224.781613][ C0] RSP: 0018:ffffc9000c627480 EFLAGS: 00000206 [ 224.787667][ C0] RAX: 0000000000001c6f RBX: ffff88802b102480 RCX: ffffffff81c4e99f [ 224.795632][ C0] RDX: 0000000000000000 RSI: ffffffff8da2b882 RDI: ffffffff8bf07040 [ 224.803610][ C0] RBP: ffffc9000c627638 R08: 0000000000000001 R09: 0000000000000001 [ 224.811572][ C0] R10: ffffffff90820dd7 R11: 0000000000000001 R12: 0000000000000000 [ 224.819532][ C0] R13: 0000000000000000 R14: ffff8880b843a380 R15: ffff88802b102480 [ 224.827492][ C0] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 224.833497][ C0] ? find_held_lock+0x2b/0x80 [ 224.838173][ C0] ? __pfx___schedule+0x10/0x10 [ 224.843015][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 224.848198][ C0] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 224.854170][ C0] preempt_schedule_irq+0x51/0x90 [ 224.859190][ C0] irqentry_exit+0x36/0x90 [ 224.863587][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 224.869560][ C0] RIP: 0010:__unwind_start+0x4bf/0x7f0 [ 224.875011][ C0] Code: 0f 85 fc 01 00 00 49 8b 56 10 48 39 c3 72 b3 48 39 d3 73 ae 48 8d 4b 08 48 39 ca 72 a5 48 39 c8 73 a0 48 8b 04 24 48 c1 e8 03 <80> 3c 28 00 0f 85 f4 01 00 00 49 3b 5e 38 73 88 e9 03 fe ff ff 48 [ 224.894606][ C0] RSP: 0018:ffffc9000c627710 EFLAGS: 00000a06 [ 224.900659][ C0] RAX: 1ffff920018c4ef3 RBX: ffffc9000c6277f0 RCX: ffffc9000c6277f8 [ 224.908611][ C0] RDX: ffffc9000c628000 RSI: ffffffff8da05e9c RDI: ffff88802b102904 [ 224.916570][ C0] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 224.924523][ C0] R10: 0000000000000000 R11: 0000000000006c19 R12: fffff520018c4eee [ 224.932475][ C0] R13: fffff520018c4eed R14: ffffc9000c627760 R15: ffffc9000c627768 [ 224.940440][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 224.946591][ C0] arch_stack_walk+0x73/0x100 [ 224.951257][ C0] ? arch_stack_walk+0x73/0x100 [ 224.956094][ C0] stack_trace_save+0x8e/0xc0 [ 224.960763][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 224.966128][ C0] kasan_save_stack+0x33/0x60 [ 224.970816][ C0] kasan_save_track+0x14/0x30 [ 224.975479][ C0] __kasan_kmalloc+0xaa/0xb0 [ 224.980054][ C0] kobject_uevent_env+0x265/0x1870 [ 224.985156][ C0] ? __pfx_dev_uevent_name+0x10/0x10 [ 224.990440][ C0] gadget_bind_driver+0x78b/0xc40 [ 224.995452][ C0] ? dummy_udc_async_callbacks+0x1/0x80 [ 225.000993][ C0] ? __pfx_gadget_bind_driver+0x10/0x10 [ 225.006524][ C0] really_probe+0x241/0xa90 [ 225.011013][ C0] __driver_probe_device+0x1de/0x440 [ 225.016284][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 225.022086][ C0] driver_probe_device+0x4c/0x1b0 [ 225.027094][ C0] __driver_attach+0x283/0x580 [ 225.031846][ C0] ? __pfx___driver_attach+0x10/0x10 [ 225.037114][ C0] bus_for_each_dev+0x13e/0x1d0 [ 225.041962][ C0] ? __pfx_bus_for_each_dev+0x10/0x10 [ 225.047336][ C0] ? bus_add_driver+0x299/0x690 [ 225.052183][ C0] bus_add_driver+0x2e9/0x690 [ 225.056856][ C0] driver_register+0x15c/0x4b0 [ 225.061609][ C0] usb_gadget_register_driver_owner+0x132/0x330 [ 225.067841][ C0] raw_ioctl+0x17d0/0x2c30 [ 225.072252][ C0] ? __pfx_raw_ioctl+0x10/0x10 [ 225.077018][ C0] ? selinux_file_ioctl+0x180/0x270 [ 225.082205][ C0] ? selinux_file_ioctl+0xb4/0x270 [ 225.087305][ C0] ? __pfx_raw_ioctl+0x10/0x10 [ 225.092055][ C0] __x64_sys_ioctl+0x18e/0x210 [ 225.096816][ C0] do_syscall_64+0xcd/0xfa0 [ 225.101307][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.107184][ C0] RIP: 0033:0x7f308d78f2cb [ 225.111590][ C0] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 225.131196][ C0] RSP: 002b:00007f308b9d2f10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.139600][ C0] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f308d78f2cb [ 225.147552][ C0] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 225.155501][ C0] RBP: 00007f308b9d3fe0 R08: 0000000000000000 R09: 00342e6364755f79 [ 225.163461][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.171410][ C0] R13: 00007f308b9d2fb0 R14: 0000200000000a00 R15: 00007f308db10320 [ 225.179389][ C0] [ 225.182632][ C0] Kernel Offset: disabled [ 225.186987][ C0] Rebooting in 86400 seconds..