last executing test programs: 10.85993942s ago: executing program 3 (id=485): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$I2C_RETRIES(r4, 0x701, 0xa68) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 10.66829888s ago: executing program 3 (id=488): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x5, 0x2, 0x4}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x18, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001bc6500850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 10.541229624s ago: executing program 3 (id=489): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x80) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x2c}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4840}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0xd0, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0xa0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x46b}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x66c}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'netpci0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x10, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff7}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x70, 0x18, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x10, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2005}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x1dc}}, 0x24000004) syz_emit_ethernet(0x196, &(0x7f0000000740)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x160, 0x3a, 0xff, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8, {0x2, 0x6, "daabf1", 0x9, 0x2c, 0xff, @mcast1, @local, [@routing={0x2b, 0xe, 0x1, 0x6, 0x0, [@private0, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @routing={0x3d, 0x8, 0x2, 0x31, 0x0, [@mcast2, @mcast2, @dev={0xfe, 0x80, '\x00', 0x35}, @private1={0xfc, 0x1, '\x00', 0x1}]}, @fragment={0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x66}, @fragment={0x1d, 0x0, 0x7, 0x0, 0x0, 0x8, 0x67}], "aa9aaac9cd7bf1394cfd376cae5b3a2fa5902a82a080e3fd265db0a89e6415b2465b1a1bb9d652ac372f2e5e2d9b8a7c73130a64cd6df33e828952a96721e3c7837cfc02bf93a7c25f34f3dcbc4eae59e285291ddf2b6140d43f4fe6f4c84c50"}}}}}}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4840) r7 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r7, 0x0, 0x0, 0x0, 0x1000) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x100001, 0x0) ioctl$TCXONC(r8, 0x540a, 0x3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0) 9.003550645s ago: executing program 3 (id=496): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x3}, 0x1c) listen(r1, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x7) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000001a00)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r6, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r4, 0x3b8b, &(0x7f0000000040)={0x10, 0x1, r7}) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000380)={0x20, 0x15, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r8, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x0, 0x6, 0x4, "74a93919"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r8, 0x0, 0x0) syz_usb_control_io$uac3(r8, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000100)={0x20, 0x10, 0x5, 'QU<:\a'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r4, 0x3b8b, &(0x7f0000000080)={0x10, 0x1, r7}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r1, 0x3b8c, &(0x7f0000000140)={0x30, r7, 0x0, 0x0, 0x7f, 0x9, 0x3ff, &(0x7f00000000c0)=""/103}) syz_emit_ethernet(0x5e, &(0x7f0000000040)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x28, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @local, {[], {{0x4e24, 0x4e28, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x2, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d4c466fb19f71e96642faa2300"}]}}}}}}}}, 0x0) bind$can_j1939(r0, &(0x7f0000000300)={0x1d, 0x0, 0x2, {}, 0xc295a7c9ee09b05e}, 0x18) 8.322292548s ago: executing program 4 (id=498): socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r1, 0x1) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x1, 0x0, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x132, 0x10}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x8801}, 0x800) 7.35545255s ago: executing program 4 (id=504): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000008000000000aec8000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000f00b703000000008e008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000008500000050000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$cdc_ncm(0x2, 0x76, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0x3) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x47f6, 0x0, 0x2, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 6.901770148s ago: executing program 2 (id=505): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000013000100000300000000000007000000", @ANYRES32=r2, @ANYBLOB="000700000000040014001a80100004800c000580080001"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) 6.773383095s ago: executing program 2 (id=507): r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x50) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40820, 0x20}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8a}, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, 0x0, 0x0) write$sndseq(r4, &(0x7f00000005c0)=[{0x2, 0x7, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}, {0x0, 0x5, 0xff, 0x0, @tick=0x4, {0x1, 0x2}, {0x9, 0x81}, @connect={{0x62, 0x83}, {0x1, 0x40}}}], 0x38) 5.700967619s ago: executing program 4 (id=508): r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CAP_X86_DISABLE_EXITS(r5, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0xe}) ioperm(0x2, 0x7ff, 0x8) ioperm(0x9, 0x6, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x6, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x1, 0x4, 0xd, 0x20000004}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0x5}, {0x10001, 0x4, 0x9, 0x0, 0x0, 0x1d, 0x0, 0x10, 0x2, 0x0, 0x0, 0x0, 0x20000000000000}]}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0x3, 0x7fffffffffffffff, 0xb, 0x4, 0x2000000000000003, 0x2], 0xeeee0000, 0x4284}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.69711537s ago: executing program 3 (id=509): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x2}) openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x101940, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0xfffffffffffffffb, 0x0) ioctl$X86_IOC_RDMSR_REGS(r1, 0xc02063a0, &(0x7f0000000740)=[0x2020, 0x0, 0xf2cc, 0x9743, 0x5, 0x1, 0x9, 0x317b]) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000780), 0x8400, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000800), 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ftruncate(r3, 0x7ffffffe) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket$inet(0x2, 0x1, 0x100) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9a}, {&(0x7f00000002c0)=""/23, 0x17}], 0x2, 0x2, 0x0) 3.976584362s ago: executing program 1 (id=510): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x5, 0x2, 0x4}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x18, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001bc6500850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 3.896687945s ago: executing program 4 (id=511): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket(0x21, 0xa, 0x100000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r2, r2, r2) bind$netrom(r0, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$evdev(0x0, 0x625b3224, 0x121501) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xbf) socket$igmp6(0xa, 0x3, 0x2) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') syz_open_dev$sg(&(0x7f0000000080), 0x1000000000000000, 0x1a3c82) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="02c920120004004000fa413bc7760bab3749b511acf88a32fc1e9ffba958c7b9a43855afde22b7ad54ca8fe9ce31d3100000000000"], 0x17) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/61}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x448e0}, 0x0) 3.50547413s ago: executing program 1 (id=512): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500000004000000080000000c0000000000", @ANYRES32, @ANYRESOCT=r0, @ANYRES32=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x803, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet(0x2b, 0xa, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="c8bbd06495b08f75c728a4ee98ac975f6673702446e54e3d1b9f1888ced918"], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000000b050000000000000000400000000100"/36], 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x4000000) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, 0x0, &(0x7f0000000000)=""/10, 0x2}, 0x20) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) accept4(r0, 0x0, 0x0, 0x80000) add_key$fscrypt_provisioning(&(0x7f0000000040), 0x0, &(0x7f0000000200)=ANY=[], 0xff41, 0xfffffffffffffffb) 3.48371292s ago: executing program 2 (id=513): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e22, @local}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0xc, 0x0}}, {0x2, 0x4e24, @loopback}, 0x6c, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000340)='pimreg1\x00', 0x3, 0x3a54, 0x6}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000028c0)=[{{&(0x7f0000001400)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000001800)=[{0x0}, {&(0x7f0000001700)="567dde672061bf3404515d0852fd1d1f17ccfa51f23ae8fc7318bb8f550b9e0b2e3af9f50d1c0ccbe76adc32baeee13e8f009c6fe2eb40759f8385a1938e95ffbc67cc59819f5509b4b76204741df20894b1a81a77247a1eb6707d10a31168", 0x5f}], 0x2}}], 0x1, 0x40) close(0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f00000015c0)={0x6, 'wg1\x00', {0x392}, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'vlan0\x00'}) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x28040680) timerfd_create(0x0, 0x0) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = openat$khugepaged_scan(0xffffff9c, &(0x7f00000002c0), 0x1, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) write$khugepaged_scan(r5, &(0x7f0000000040), 0x8) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000200)) r7 = socket$alg(0x26, 0x5, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x8094}, 0xc0) sendmsg$nl_generic(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001e00010a020000f0886a26cd78f467382fea6e0005bc3233b2f4ffffff09400000"], 0x14}}, 0x0) bind$alg(r7, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) 3.367265666s ago: executing program 4 (id=514): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144a8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f00000000c0), 0x2c8, 0xf00) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000ebd08343cf3d34900006800d8220107f30100ff07"], 0x18}, 0x1, 0x0, 0x0, 0x20008840}, 0xc0) socket$inet_udp(0x2, 0x2, 0x0) pipe2$9p(0x0, 0x0) pipe2(&(0x7f00000002c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)=ANY=[]) setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000100000000000000040006000000000008", @ANYRES32=0x0, @ANYBLOB], 0x2c, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_names\x00') syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f3", @ANYRESHEX=0x0, @ANYRES64=r4], 0x0) 2.499772946s ago: executing program 2 (id=515): getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000300), &(0x7f0000000340)=0x8) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) read(r0, &(0x7f0000000040)=""/138, 0x8a) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fanotify_init(0x200, 0x0) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(0xffffffffffffffff, 0xc0386447, &(0x7f0000000400)={{0x8, 0x6, &(0x7f00000003c0)=[{0x9, 0x0, 0x8}, {0x40, 0x0, 0xb}, {0x0, 0x0, 0x3}, {0x7, 0x0, 0xfffff8a0}, {0x6, 0x0, 0xffff0000}, {0x3, 0x0, 0x6}]}, 0xab, 0x7, 0x7, 0x1, 0x0, 0x1, 0x2, 0x8100000000}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$media(0x0, 0x0, 0x200) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x12, r4, 0x0, r3}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r5, @ANYRES16=r6, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r7, @ANYRESHEX], 0x74}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 2.428522905s ago: executing program 1 (id=516): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x11a}, 0x20) 2.075340814s ago: executing program 0 (id=517): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xea, 0x440, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)=0xe, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000380)={0x80000000f1, 0x2, 0x3, 0x6}) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) 1.772341607s ago: executing program 2 (id=518): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff8500000004000000954759ed1fe2d1d95eb67b64bd614bf89df82316ea5cd4db3193a45b61961c7685e022d70760041e62896c735e971e35eaf1e5a331ae04ce6a1407c4acf7d493d0a39b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x671ec167a4b32125}, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000008c0)={0x1e0, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_NODE={0x168, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xef, 0x3, "f9153ef8b8c5cc66f2e5f40f9816aa0740709cf5fbf2efbf27e4d6694c7634c61bcbfb6b589927593e25b4b25cd8c629302747ba00323a0a0e06952852a5c6867fed1a9c45eb9ec145271453f7e80d59307de1c1e1b1c2f1b15410210a1fe691c9367d57b830ab61e27164e895b70b442413286b94dcbe7b150dd70c6217662e00a1faefc9bc10c76c46d1d33ddccdbe57229d4842cbb5de9f7e9c4a60a95e80c60f5c517b5157b2838bedb5adf407b481137110c55635e4e06c18ad505180686dff132513799d701bacf8c4d0c798b109eea1ccb0594bfe552181a2ef36ea308f4190b9d74ed848ad42f1"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ID={0xf, 0x3, "441b8ac4da52c8b4851036"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x19e}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "7f1f2a41ab64eb14dffc0a0c558d59c1f77a1d5ef6b07fe828aa484c"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x80}, 0xc17ffc1cbd9621de) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)={@fallback, 0xffffffffffffffff, 0x7}, 0x20) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) clock_gettime(0x3, &(0x7f0000000180)) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={r0}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad000000", 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) 1.220614386s ago: executing program 1 (id=519): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000001040)=""/252) r1 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bd3, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000280)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r5, 0x0, &(0x7f0000000000)="bda8", 0x2, 0x100, 0x1}) io_uring_enter(r1, 0x46f3, 0x0, 0x0, 0x0, 0x0) write(r4, &(0x7f0000000200)='~', 0x1) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000004c80)={0x0, 0xf3}, &(0x7f0000004d40)=0x8) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) 1.035907184s ago: executing program 0 (id=520): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) 987.230664ms ago: executing program 0 (id=521): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000100000027bf00000005"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fchown(r1, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) setfsuid(0xee00) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x0, &(0x7f0000000540)) syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000002d40)={0x2020}, 0xffffffffffffffb5) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x827, 0x70bd29, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xffe0, 0x10}, {0x0, 0xfff1}, {0xfff1, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000811}, 0x4041810) setsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0xb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) fanotify_init(0xf00, 0x1) 987.041359ms ago: executing program 1 (id=522): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x5, 0x2, 0x4}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x18, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001bc6500850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 872.093554ms ago: executing program 1 (id=523): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000380)={'8255\x00', [0xffffffff, 0x401, 0xe2, 0x1, 0x88d7, 0x80008001, 0x1008, 0x800001, 0x1002, 0xffffffff, 0x200, 0x7, 0x10000007, 0xfffffffd, 0x5, 0x1005, 0x8, 0x1000003, 0x1, 0x9, 0x10c, 0x2, 0x0, 0xa, 0x3, 0x1, 0xb0c2, 0xe, 0x101, 0x9, 0x4000004]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x0) splice(r3, 0x0, r2, 0x0, 0x7f, 0xe) write(r1, 0x0, 0x0) mmap(&(0x7f00003e6000/0x3000)=nil, 0x3000, 0x3, 0x110, r2, 0xde06d000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lseek(r5, 0x7, 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 673.949197ms ago: executing program 0 (id=524): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket(0x21, 0xa, 0x100000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r2, r2, r2) bind$netrom(r0, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$evdev(0x0, 0x625b3224, 0x121501) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xbf) socket$igmp6(0xa, 0x3, 0x2) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') syz_open_dev$sg(&(0x7f0000000080), 0x1000000000000000, 0x1a3c82) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="02c920120004004000fa413bc7760bab3749b511acf88a32fc1e9ffba958c7b9a43855afde22b7ad54ca8fe9ce31d3100000000000"], 0x17) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/61}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x448e0}, 0x0) 414.368062ms ago: executing program 3 (id=525): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) (async) r0 = socket$pppoe(0x18, 0x1, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, 0x0}, 0xf}, {{&(0x7f0000000500)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, 0x0}, 0xc1100}], 0x2, 0x2, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) (async) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) mincore(&(0x7f0000dbf000/0x1000)=nil, 0x1000, &(0x7f0000000140)=""/227) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='scalable', 0x8) sendto$inet(r1, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a80)=ANY=[@ANYBLOB="380000004800010d2856ac4615dbdf250a", @ANYBLOB="f9ffffff"], 0x38}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) (async, rerun: 64) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x48, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfffffffc}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x48}, 0x1, 0x0, 0x0, 0x100008c5}, 0x20000810) (async, rerun: 32) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000, 0x1}) (rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="0818000000bb8971ad6019d01d6c4382adb17a2c68d22bb2cac9e547d62750610dfe1b70c0036d34faa2368055b8ad6a3bafb338bb5eb6f0492b1ba0fb4f0546d3bd232fecff9ae1192ccc2df61ab6d004b112f2484dd3f73f285f", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000000280), 0x103400) ioctl$FICLONE(r8, 0x40049409, r1) (async, rerun: 64) r9 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) (rerun: 64) ioctl$NS_GET_USERNS(r9, 0xb701, 0x0) 329.085245ms ago: executing program 0 (id=526): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00082f00fe80fe43c8a0000000000000000000bb00000000000000000000ffff00000000242065580000000000000021000086dd080088be4305400f"], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_deladdr={0x38, 0x15, 0x6, 0x70bd25, 0x25dfdbfb, {0xa, 0x10, 0x10, 0x0, r2}, [@IFA_FLAGS={0x8, 0x8, 0x492}, @IFA_TARGET_NETNSID={0x8}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x20044014) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc) 219.66437ms ago: executing program 2 (id=527): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f0000000040)) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r6) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r7, &(0x7f0000005e40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r7, &(0x7f0000005340)={0x78, 0x0, r8, {0x2000000007, 0x400, 0x0, {0x6, 0xfffe000000000000, 0xfffffffffffffffb, 0xff, 0x694, 0x3, 0x7f, 0x9, 0x800, 0x2000, 0x2, r9, r10, 0xb, 0x8, 0x1000000}}}, 0x78) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000008c0)={0x330, 0xfffffffffffffff5, 0x0, [{{0x5, 0x1, 0x5, 0xfffffffffffffff7, 0x7, 0x570d, {0x3, 0x8, 0x8, 0x4, 0x0, 0xe31d, 0x3, 0x8, 0x3943, 0x0, 0x6, 0x0, 0x0, 0x3, 0x1ff}}, {0x0, 0xff, 0x0, 0xfffff3eb}}, {{0x1, 0x0, 0xffffffffffffffff, 0x1, 0xfffffff7, 0xa, {0x0, 0x2, 0x8, 0x56, 0x25, 0x3, 0x1, 0xc1, 0x0, 0x1000, 0x3, 0x0, 0x0, 0x800, 0xd}}, {0x3, 0x6, 0x6, 0x8, ':${+}*'}}, {{0x6, 0x1, 0x9, 0xfffffffffffeffff, 0xfffffffc, 0x78e, {0x1, 0x1, 0x5, 0x8, 0xffffffffffff67f5, 0x0, 0xe99c, 0x9, 0xce7, 0xc000, 0x7, 0x0, 0x0, 0x0, 0x5}}, {0x5, 0x401, 0x3, 0x6, ',!@'}}, {{0x4, 0x1, 0x7, 0x1, 0x4, 0x7e, {0x3, 0x800, 0xffffffffffffffff, 0x0, 0xb, 0x4, 0xffff, 0x5, 0xae9, 0xa000, 0x3, r6, r10, 0x80000000, 0x3dd}}, {0x4, 0x5, 0xb, 0x81, ']^,*%(]\x9b})('}}, {{0x1, 0x3, 0xb58a, 0x7ff, 0x1ff, 0x9, {0x0, 0x9, 0x4, 0x7f, 0x7, 0x6, 0x7, 0x7f, 0x7f, 0xa000, 0x2, 0xee01, 0xffffffffffffffff, 0xd, 0x5}}, {0x0, 0x10001, 0x4, 0x3, '-#\')'}}]}, 0x330) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000000314230c0fbd7000fbdbdf250900020073797a31000000000800410e83175c0014003300766972745f77696669300000000000000900020005007a3200000000080041007278650014003300020063616e310000000000000000000034e66052189ac288dde963fc92743249031b5483cf8b8a771d9e5992ed44f4608f1a955880021001cea2b2540a2f8151aebc00b19b52a5e057d6122d84515c101dfcffb1fd2ef0427d1b342d08cd3c84"], 0x60}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) writev(r2, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000480)="c7e15b2bc70647e69c36be04fe2df8d561734dd3f9f720bb4a9da02c15f40aab2709a36c3773cf2721272ee04d8d84cf54b4fbf4637ad607f341c42203ab30b83664bdbbf0b931ccdcbb41127ac4acc875f312c853bce4130f701bffe4bef222315eea99ebeeceb38df5361cd73fc615e14f6179710cb137be7941478d2c801e61f33e7c89b73af695ecda2bf4c4c4b40151b518a51397f747b14dec18c5bf26b8aba4e536bb08c9b9f1361295099f715bf23dac89be34f40be2", 0xba}, {&(0x7f0000000540)="2f163a2f68addf39d73cc629e0fb9a7bb592b2a853673124f4fb9293dc1ab64f2cb73364faece42f0d368c62618774edf6d55f26a139be5a426a93e82bb49a2790db66b2fa74661dfeec722721", 0x4d}, {&(0x7f00000005c0)="23efe404e968624b13539b7fa5bc86bb70339cd3918296718a19920f02ac6e6f4ed102e05106b2eec934746f2ed8fe422705449b3ff263712daa75a76a3e513caf72f36a1e9f781d923fc07b6694f09b4bf4df1a96bf9ca48d619b76c6903ecf549a3ebe7e16dd935960577479bba38b1c1e29bac866c7a3693bb55ca92441a457ebf61fbf6c1c483dd2ceed", 0x8c}], 0x4) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20040054) sendmsg$NFULNL_MSG_CONFIG(r1, 0x0, 0xc000) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, 0x0) 162.939464ms ago: executing program 4 (id=528): getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000300), &(0x7f0000000340)=0x8) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) read(r0, &(0x7f0000000040)=""/138, 0x8a) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fanotify_init(0x200, 0x0) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(0xffffffffffffffff, 0xc0386447, &(0x7f0000000400)={{0x8, 0x6, &(0x7f00000003c0)=[{0x9, 0x0, 0x8}, {0x40, 0x0, 0xb}, {0x0, 0x0, 0x3}, {0x7, 0x0, 0xfffff8a0}, {0x6, 0x0, 0xffff0000}, {0x3, 0x0, 0x6}]}, 0xab, 0x7, 0x7, 0x1, 0x0, 0x1, 0x2, 0x8100000000}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$media(0x0, 0x0, 0x200) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x12, r4, 0x0, r3}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r5, @ANYRES16=r6, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r7, @ANYRESHEX], 0x74}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 0s ago: executing program 0 (id=529): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) kernel console output (not intermixed with test programs): r:sysadm_t tclass=icmp_socket permissive=1 [ 115.955684][ T792] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 116.089606][ T30] audit: type=1400 audit(1772566075.348:284): avc: denied { connect } for pid=6522 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 116.125658][ T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.142555][ T30] audit: type=1400 audit(1772566075.348:285): avc: denied { write } for pid=6522 comm="syz.0.161" path="socket:[10072]" dev="sockfs" ino=10072 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 116.144325][ T792] usb 4-1: Product: syz [ 116.166514][ T30] audit: type=1400 audit(1772566075.348:286): avc: denied { read } for pid=6522 comm="syz.0.161" laddr=172.20.20.170 lport=9430 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 116.206644][ T30] audit: type=1400 audit(1772566075.478:287): avc: denied { create } for pid=6522 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 116.252842][ T792] usb 4-1: Manufacturer: syz [ 116.260199][ T792] usb 4-1: SerialNumber: syz [ 116.318729][ T792] usb 4-1: config 0 descriptor?? [ 116.332456][ T30] audit: type=1400 audit(1772566075.578:288): avc: denied { setopt } for pid=6522 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 117.501037][ T30] audit: type=1400 audit(1772566077.098:289): avc: denied { listen } for pid=6536 comm="syz.2.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 117.645960][ T6544] 9pnet_virtio: no channels available for device syz [ 117.697373][ T792] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 117.905070][ T792] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 118.084532][ T792] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 118.180222][ T792] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 118.269844][ T792] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 118.384481][ T792] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 118.613188][ T792] usb 4-1: USB disconnect, device number 7 [ 119.909921][ T30] audit: type=1400 audit(1772566079.498:290): avc: denied { shutdown } for pid=6555 comm="syz.3.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 120.374219][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 120.374237][ T30] audit: type=1400 audit(1772566079.978:292): avc: denied { read } for pid=6562 comm="syz.1.172" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 120.408154][ T30] audit: type=1400 audit(1772566079.978:293): avc: denied { open } for pid=6562 comm="syz.1.172" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 120.494158][ T30] audit: type=1400 audit(1772566080.008:294): avc: denied { ioctl } for pid=6562 comm="syz.1.172" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 120.520069][ T30] audit: type=1400 audit(1772566080.008:295): avc: denied { read write } for pid=6562 comm="syz.1.172" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 120.545930][ T30] audit: type=1400 audit(1772566080.008:296): avc: denied { open } for pid=6562 comm="syz.1.172" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 120.671258][ T5934] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 120.821267][ T5934] usb 1-1: Using ep0 maxpacket: 32 [ 121.431572][ T30] audit: type=1400 audit(1772566080.008:297): avc: denied { ioctl } for pid=6562 comm="syz.1.172" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 121.456771][ T30] audit: type=1326 audit(1772566080.878:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6583 comm="syz.2.179" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3db4d9c799 code=0x0 [ 121.551273][ T30] audit: type=1400 audit(1772566081.138:299): avc: denied { watch watch_reads } for pid=6588 comm="syz.4.180" path="/37/file0" dev="tmpfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 121.593985][ T5934] usb 1-1: unable to read config index 0 descriptor/all [ 121.600984][ T5934] usb 1-1: can't read configurations, error -71 [ 121.693145][ T6590] No source specified [ 121.718078][ T6590] binder: 6583:6590 ioctl c0306201 0 returned -14 [ 122.840066][ T6610] netlink: 'syz.0.186': attribute type 1 has an invalid length. [ 123.463589][ T6616] input: syz1 as /devices/virtual/input/input6 [ 123.856932][ T6616] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 123.911412][ T6616] block device autoloading is deprecated and will be removed. [ 124.578295][ T6616] syzkaller0: entered promiscuous mode [ 124.745394][ T6616] syzkaller0: entered allmulticast mode [ 124.796313][ T30] audit: type=1400 audit(1772566084.398:300): avc: denied { write } for pid=6614 comm="syz.0.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 125.178724][ T6629] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=6629 comm=syz.4.192 [ 126.836093][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.196'. [ 127.275214][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.281609][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.621250][ T792] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 127.834886][ T6657] hpfs: Bad magic ... probably not HPFS [ 128.181261][ T792] usb 2-1: Using ep0 maxpacket: 8 [ 128.188297][ T792] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 128.197556][ T792] usb 2-1: config 0 has no interface number 0 [ 128.206711][ T792] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 128.217935][ T792] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 128.230341][ T792] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 128.267779][ T792] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 128.308937][ T792] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.342557][ T792] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 128.362326][ T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.370615][ T792] usb 2-1: Product: syz [ 128.375231][ T792] usb 2-1: Manufacturer: syz [ 128.383034][ T792] usb 2-1: SerialNumber: syz [ 128.391675][ T792] usb 2-1: config 0 descriptor?? [ 128.414066][ T30] audit: type=1400 audit(1772566088.018:301): avc: denied { setopt } for pid=6662 comm="syz.4.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 128.481535][ T30] audit: type=1400 audit(1772566088.088:302): avc: denied { listen } for pid=6662 comm="syz.4.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 128.506586][ T30] audit: type=1400 audit(1772566088.098:303): avc: denied { accept } for pid=6662 comm="syz.4.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 128.608028][ T6649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.626639][ T6649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.646956][ T792] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 128.852684][ T30] audit: type=1400 audit(1772566088.458:304): avc: denied { write } for pid=6648 comm="syz.1.187" name="iowarrior0" dev="devtmpfs" ino=2847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 128.884865][ T792] usb 2-1: USB disconnect, device number 7 [ 129.329592][ T30] audit: type=1400 audit(1772566088.928:305): avc: denied { append } for pid=6668 comm="syz.0.203" name="cec0" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 129.335208][ T6669] overlayfs: missing 'lowerdir' [ 129.375284][ T30] audit: type=1400 audit(1772566088.938:306): avc: denied { mount } for pid=6668 comm="syz.0.203" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 129.857702][ T6677] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=6677 comm=syz.1.205 [ 130.661285][ T792] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 130.681656][ T30] audit: type=1400 audit(1772566090.268:307): avc: denied { write } for pid=6682 comm="syz.3.209" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 130.739006][ T30] audit: type=1400 audit(1772566090.338:308): avc: denied { create } for pid=6684 comm="syz.4.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 130.856533][ T51] Bluetooth: Frame is too long (len 18, expected len 8) [ 130.871380][ T30] audit: type=1400 audit(1772566090.448:309): avc: denied { setopt } for pid=6684 comm="syz.4.210" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 131.048800][ T792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.068180][ T792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.108620][ T792] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 131.231269][ T792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.279596][ T792] usb 1-1: config 0 descriptor?? [ 131.440389][ T30] audit: type=1400 audit(1772566091.038:310): avc: denied { bind } for pid=6690 comm="syz.2.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 131.519653][ T6691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.532317][ T6691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.701274][ T792] usbhid 1-1:0.0: can't add hid device: -71 [ 131.718436][ T792] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 131.787793][ T792] usb 1-1: USB disconnect, device number 7 [ 132.353864][ T6699] syz.1.207 uses obsolete (PF_INET,SOCK_PACKET) [ 133.308563][ T6761] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=6761 comm=syz.3.218 [ 134.146993][ T6764] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 134.146993][ T6764] program syz.0.217 not setting count and/or reply_len properly [ 134.834646][ T6768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.891742][ T6768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.231951][ T6777] capability: warning: `syz.4.222' uses deprecated v2 capabilities in a way that may be insecure [ 135.251009][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 135.251024][ T30] audit: type=1400 audit(1772566094.848:316): avc: denied { create } for pid=6774 comm="syz.4.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 135.277648][ T6774] delete_channel: no stack [ 135.444173][ T30] audit: type=1400 audit(1772566095.048:317): avc: denied { append } for pid=6781 comm="syz.3.224" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 135.666712][ T30] audit: type=1400 audit(1772566095.078:318): avc: denied { mount } for pid=6781 comm="syz.3.224" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 135.890205][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803489d800: rx timeout, send abort [ 136.276359][ T30] audit: type=1400 audit(1772566095.858:319): avc: denied { read } for pid=5158 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 136.308594][ T30] audit: type=1400 audit(1772566095.858:320): avc: denied { search } for pid=5158 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.391185][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034b87800: rx timeout, send abort [ 136.399530][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803489d800: abort rx timeout. Force session deactivation [ 136.899460][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034b87800: abort rx timeout. Force session deactivation [ 137.111027][ T30] audit: type=1400 audit(1772566095.858:321): avc: denied { search } for pid=5158 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.270925][ T30] audit: type=1400 audit(1772566095.858:322): avc: denied { add_name } for pid=5158 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.434404][ T6831] gfs2: error -5 reading superblock [ 137.469583][ T30] audit: type=1400 audit(1772566095.858:323): avc: denied { create } for pid=5158 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 137.786285][ T30] audit: type=1400 audit(1772566095.868:324): avc: denied { append open } for pid=5158 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 137.854815][ T30] audit: type=1400 audit(1772566095.868:325): avc: denied { getattr } for pid=5158 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 138.249261][ T6840] vxfs: unable to read disk superblock at 1 [ 138.848384][ T6840] vxfs: unable to read disk superblock at 8 [ 138.891004][ T6840] vxfs: can't find superblock. [ 139.512557][ T5875] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 139.742425][ T5875] usb 1-1: Using ep0 maxpacket: 16 [ 139.792492][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14129, setting to 64 [ 139.926017][ T5875] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 140.121307][ T51] Bluetooth: Frame is too long (len 18, expected len 8) [ 140.267780][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.322010][ T5875] usb 1-1: Product: syz [ 140.326206][ T5875] usb 1-1: Manufacturer: syz [ 140.330811][ T5875] usb 1-1: SerialNumber: syz [ 140.579378][ T5875] usb 1-1: config 0 descriptor?? [ 141.055448][ T6903] hpfs: Bad magic ... probably not HPFS [ 141.084758][ T5875] usb 1-1: can't set config #0, error -71 [ 141.199290][ T5875] usb 1-1: USB disconnect, device number 8 [ 141.305527][ T6907] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 141.312238][ T6907] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 141.342806][ T6907] vhci_hcd vhci_hcd.0: Device attached [ 141.358606][ T6913] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(7) [ 141.365142][ T6913] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 141.387420][ T6913] vhci_hcd vhci_hcd.0: Device attached [ 141.396173][ T6907] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(6) [ 141.402722][ T6907] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 141.412089][ T6907] vhci_hcd vhci_hcd.0: Device attached [ 141.423464][ T6907] ALSA: mixer_oss: invalid OSS volume 'evlink' [ 141.478971][ T6920] pim6reg: entered allmulticast mode [ 141.965979][ T6921] pim6reg: left allmulticast mode [ 142.502618][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 142.502635][ T30] audit: type=1400 audit(1772566101.368:335): avc: denied { create } for pid=6918 comm="syz.2.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 142.545776][ T30] audit: type=1400 audit(1772566101.408:336): avc: denied { bind } for pid=6918 comm="syz.2.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 142.565367][ T30] audit: type=1400 audit(1772566101.428:337): avc: denied { connect } for pid=6918 comm="syz.2.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 142.581240][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 142.585671][ T30] audit: type=1400 audit(1772566101.448:338): avc: denied { write } for pid=6918 comm="syz.2.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 142.613521][ T5875] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 142.741248][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 142.755123][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 142.781759][ T24] usb 1-1: config 0 has no interface number 0 [ 142.795583][ T24] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 142.811206][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.831716][ T24] usb 1-1: Product: syz [ 142.835895][ T24] usb 1-1: Manufacturer: syz [ 142.840499][ T24] usb 1-1: SerialNumber: syz [ 142.872751][ T24] usb 1-1: config 0 descriptor?? [ 142.884067][ T24] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 142.901220][ T24] usb 1-1: selecting invalid altsetting 1 [ 142.907014][ T24] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 142.920257][ T24] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 142.940994][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 142.950604][ T24] usb 1-1: media controller created [ 142.973061][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 143.671314][ T5819] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 143.882249][ T5819] usb 5-1: Using ep0 maxpacket: 32 [ 143.926900][ T5819] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 144.010479][ T5819] usb 5-1: config 0 has no interface number 0 [ 144.051452][ T24] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 144.074604][ T5819] usb 5-1: config 0 interface 184 has no altsetting 0 [ 144.182317][ T5819] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 144.313887][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.403948][ T24] zl10353_read_register: readreg error (reg=127, ret==-110) [ 144.484440][ T5819] usb 5-1: Product: syz [ 144.488628][ T5819] usb 5-1: Manufacturer: syz [ 144.493567][ T5819] usb 5-1: SerialNumber: syz [ 144.581085][ T5819] usb 5-1: config 0 descriptor?? [ 144.600188][ T5819] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 144.732195][ T5819] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 144.908744][ T792] usb 5-1: USB disconnect, device number 4 [ 145.852918][ T30] audit: type=1400 audit(1772566105.438:339): avc: denied { append } for pid=6952 comm="syz.1.251" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 145.891659][ T6914] vhci_hcd: connection closed [ 145.893453][ T6916] vhci_hcd: connection closed [ 145.899705][ T12] vhci_hcd vhci_hcd.0: stop threads [ 145.909662][ T6911] vhci_hcd: connection reset by peer [ 145.946362][ T12] vhci_hcd vhci_hcd.0: release socket [ 145.985545][ T24] usb 1-1: USB disconnect, device number 9 [ 145.985770][ T30] audit: type=1400 audit(1772566105.438:340): avc: denied { ioctl } for pid=6952 comm="syz.1.251" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 146.022024][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 146.513877][ T12] vhci_hcd vhci_hcd.0: stop threads [ 146.566508][ T12] vhci_hcd vhci_hcd.0: release socket [ 146.738749][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 146.762967][ T30] audit: type=1400 audit(1772566105.598:341): avc: denied { ioctl } for pid=6952 comm="syz.1.251" path="socket:[11894]" dev="sockfs" ino=11894 ioctlcmd=0x744d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 146.846743][ T12] vhci_hcd vhci_hcd.0: stop threads [ 146.868797][ T12] vhci_hcd vhci_hcd.0: release socket [ 146.918917][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 146.941287][ T24] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 147.375562][ T24] usb 1-1: device descriptor read/64, error -71 [ 147.642887][ T24] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 147.743202][ T5875] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 147.755246][ T6981] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 147.803707][ T24] usb 1-1: device descriptor read/64, error -71 [ 147.941771][ T24] usb usb1-port1: attempt power cycle [ 147.951275][ T5878] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 148.129406][ T5878] usb 2-1: unable to get BOS descriptor or descriptor too short [ 148.321355][ T24] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 148.366650][ T5878] usb 2-1: config 129 has an invalid interface number: 135 but max is 0 [ 148.388880][ T5878] usb 2-1: config 129 has an invalid interface number: 5 but max is 0 [ 148.403566][ T24] usb 1-1: device descriptor read/8, error -71 [ 148.411672][ T5878] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 148.436766][ T5878] usb 2-1: config 129 has no interface number 0 [ 148.452763][ T5878] usb 2-1: config 129 has no interface number 1 [ 148.487373][ T5878] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 148.506968][ T5878] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 148.661625][ T24] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 148.712588][ T24] usb 1-1: device descriptor read/8, error -71 [ 148.736730][ T30] audit: type=1400 audit(1772566108.338:342): avc: denied { write } for pid=6993 comm="syz.4.262" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 149.296715][ T5878] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 149.309952][ T5878] usb 2-1: config 129 interface 135 has no altsetting 0 [ 149.316955][ T5878] usb 2-1: config 129 interface 5 has no altsetting 0 [ 149.327077][ T5878] usb 2-1: string descriptor 0 read error: -22 [ 149.333503][ T5878] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 149.342667][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.375966][ T5878] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 149.377293][ T24] usb usb1-port1: unable to enumerate USB device [ 149.385391][ T5878] usb 2-1: MIDIStreaming interface descriptor not found [ 149.409405][ T30] audit: type=1400 audit(1772566108.338:343): avc: denied { open } for pid=6993 comm="syz.4.262" path="/60/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 149.477370][ T30] audit: type=1400 audit(1772566109.078:344): avc: denied { create } for pid=7002 comm="syz.4.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 150.081869][ T7009] gfs2: error -5 reading superblock [ 150.257050][ T30] audit: type=1400 audit(1772566109.488:345): avc: denied { setopt } for pid=7002 comm="syz.4.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 150.985745][ T6978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.108958][ T6978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.218743][ T7048] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 151.227844][ T30] audit: type=1400 audit(1772566110.798:346): avc: denied { create } for pid=7046 comm="syz.3.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 151.379686][ T29] usb 2-1: USB disconnect, device number 8 [ 151.465138][ T30] audit: type=1400 audit(1772566110.818:347): avc: denied { write } for pid=7046 comm="syz.3.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 151.749086][ T7056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.270'. [ 151.763770][ T30] audit: type=1400 audit(1772566111.098:348): avc: denied { accept } for pid=7050 comm="syz.2.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 151.894769][ T7059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.924063][ T7059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.058153][ T7060] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 152.058153][ T7060] program syz.2.271 not setting count and/or reply_len properly [ 152.181243][ T29] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 152.344049][ T29] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 152.357789][ T29] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 152.540415][ T29] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 153.191629][ T29] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 153.203021][ T29] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 153.334548][ T29] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 153.345633][ T30] audit: type=1400 audit(1772566112.938:349): avc: denied { getopt } for pid=7072 comm="syz.1.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 153.366150][ T29] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 153.376480][ T29] usb 4-1: Product: syz [ 153.411398][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.274'. [ 153.451938][ T29] usb 4-1: Manufacturer: syz [ 153.492383][ T29] cdc_wdm 4-1:1.0: skipping garbage [ 153.509208][ T29] cdc_wdm 4-1:1.0: skipping garbage [ 153.593328][ T29] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 153.607597][ T29] cdc_wdm 4-1:1.0: Unknown control protocol [ 153.910178][ T29] usb 4-1: USB disconnect, device number 8 [ 154.444899][ T7082] tipc: Started in network mode [ 154.450239][ T7082] tipc: Node identity aaaaaaaaaa38, cluster identity 4711 [ 154.512454][ T7082] tipc: Enabled bearer , priority 0 [ 154.621599][ T29] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 154.682546][ T7090] gfs2: error -5 reading superblock [ 154.804530][ T29] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 155.030546][ T29] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.140788][ T29] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 155.195153][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.205337][ T7096] SELinux: failed to load policy [ 155.241022][ T29] usb 4-1: can't set config #16, error -71 [ 155.462026][ T29] usb 4-1: USB disconnect, device number 9 [ 155.777830][ T5875] tipc: Node number set to 9611946 [ 155.842455][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.284'. [ 156.071466][ T5928] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 156.668256][ T5928] usb 1-1: unable to get BOS descriptor or descriptor too short [ 156.767357][ T5928] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 156.776193][ T5928] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 156.784667][ T5928] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 156.796054][ T5928] usb 1-1: config 129 has no interface number 0 [ 156.802543][ T5928] usb 1-1: config 129 has no interface number 1 [ 156.809490][ T5928] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 156.823068][ T5928] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 156.834150][ T5928] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 156.939009][ T7121] hpfs: Bad magic ... probably not HPFS [ 157.327692][ T5928] usb 1-1: config 129 interface 135 has no altsetting 0 [ 157.353576][ T5928] usb 1-1: config 129 interface 5 has no altsetting 0 [ 157.370524][ T5928] usb 1-1: string descriptor 0 read error: -22 [ 157.380286][ T5928] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 157.392848][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.434027][ T5928] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 157.447603][ T5928] usb 1-1: MIDIStreaming interface descriptor not found [ 157.598164][ T30] audit: type=1400 audit(1772566117.188:350): avc: denied { write } for pid=7126 comm="syz.4.289" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 157.635296][ T7101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.021592][ T7101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.451940][ T5819] usb 1-1: USB disconnect, device number 14 [ 158.827006][ T30] audit: type=1400 audit(1772566118.428:351): avc: denied { connect } for pid=7143 comm="syz.1.292" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 158.900288][ T7150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.919666][ T7150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.141256][ T793] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 159.190185][ T5819] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 159.270464][ T30] audit: type=1400 audit(1772566118.858:352): avc: denied { ioctl } for pid=7146 comm="syz.3.293" path="socket:[12226]" dev="sockfs" ino=12226 ioctlcmd=0x52d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 159.392673][ T30] audit: type=1400 audit(1772566118.998:353): avc: denied { watch } for pid=7162 comm="syz.0.297" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 159.442475][ T5819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.458425][ T5819] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.474649][ T5819] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 159.491083][ T5819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.502868][ T5819] usb 2-1: config 0 descriptor?? [ 159.516549][ T7166] pim6reg: entered allmulticast mode [ 160.912473][ T30] audit: type=1400 audit(1772566120.518:354): avc: denied { read } for pid=7173 comm="syz.3.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 160.960020][ T7174] netlink: 'syz.3.301': attribute type 1 has an invalid length. [ 161.006009][ T30] audit: type=1326 audit(1772566120.608:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7171 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db4d9c799 code=0x7ffc0000 [ 161.031926][ T7182] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 161.031926][ T7182] program syz.1.295 not setting count and/or reply_len properly [ 161.102008][ T7174] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.114965][ T7183] macvlan2: entered promiscuous mode [ 161.120294][ T7183] macvlan2: entered allmulticast mode [ 161.130828][ T7183] bond1: entered allmulticast mode [ 161.136073][ T7183] bond1: entered promiscuous mode [ 161.143480][ T7183] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 161.157558][ T30] audit: type=1326 audit(1772566120.608:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7171 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db4d9c799 code=0x7ffc0000 [ 161.162708][ T7183] team0: Port device macvlan2 added [ 161.297919][ T7184] bond1: (slave ip6gretap1): making interface the new active one [ 161.307209][ T30] audit: type=1326 audit(1772566120.658:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7171 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3db4d9c799 code=0x7ffc0000 [ 161.307250][ T7184] ip6gretap1: entered promiscuous mode [ 161.345610][ T7184] ip6gretap1: entered allmulticast mode [ 161.362094][ T7184] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 161.409203][ T30] audit: type=1326 audit(1772566120.658:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7171 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db4d9c799 code=0x7ffc0000 [ 161.501602][ T30] audit: type=1326 audit(1772566120.658:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7171 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db4d9c799 code=0x7ffc0000 [ 162.421515][ T7199] binder: 7198:7199 ioctl 701 a68 returned -22 [ 162.552229][ T7199] netlink: 'syz.4.306': attribute type 1 has an invalid length. [ 162.574182][ T5819] usbhid 2-1:0.0: can't add hid device: -71 [ 163.041579][ T5819] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 163.058653][ T7199] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.068823][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 163.068838][ T30] audit: type=1400 audit(1772566122.668:398): avc: denied { ioctl } for pid=7198 comm="syz.4.306" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 163.132663][ T5819] usb 2-1: USB disconnect, device number 9 [ 163.206475][ T30] audit: type=1400 audit(1772566122.668:399): avc: denied { call } for pid=7198 comm="syz.4.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 163.215375][ T7206] bond1: (slave geneve2): making interface the new active one [ 163.245957][ T7206] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 163.269467][ T30] audit: type=1400 audit(1772566122.808:400): avc: denied { create } for pid=7210 comm="syz.3.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 163.374978][ T30] audit: type=1400 audit(1772566122.808:401): avc: denied { read } for pid=7208 comm="syz.1.309" dev="nsfs" ino=4026533172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 163.700749][ T7221] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 163.734047][ T30] audit: type=1400 audit(1772566122.808:402): avc: denied { open } for pid=7208 comm="syz.1.309" path="net:[4026533172]" dev="nsfs" ino=4026533172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 164.132206][ T7226] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=7226 comm=syz.3.313 [ 164.902690][ T30] audit: type=1400 audit(1772566122.808:403): avc: denied { create } for pid=7208 comm="syz.1.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 164.922630][ T30] audit: type=1400 audit(1772566122.828:404): avc: denied { setopt } for pid=7210 comm="syz.3.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 164.942534][ T51] Bluetooth: Frame is too long (len 18, expected len 8) [ 164.951441][ T30] audit: type=1400 audit(1772566122.848:405): avc: denied { read write } for pid=5804 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.976691][ T30] audit: type=1400 audit(1772566122.848:406): avc: denied { open } for pid=5804 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 165.001991][ T30] audit: type=1400 audit(1772566122.848:407): avc: denied { ioctl } for pid=5804 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 166.301925][ T7243] capability: warning: `syz.1.317' uses 32-bit capabilities (legacy support in use) [ 166.783296][ T51] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 166.792458][ T51] Bluetooth: hci0: Injecting HCI hardware error event [ 166.800996][ T51] Bluetooth: hci0: hardware error 0x00 [ 166.926804][ T7242] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 166.936420][ T7242] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 166.946513][ T7242] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 167.180202][ T7253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.318'. [ 167.363067][ T29] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 167.556557][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.635523][ T29] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.755512][ T29] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 167.961007][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.064738][ T29] usb 2-1: config 0 descriptor?? [ 168.378115][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 168.378133][ T30] audit: type=1400 audit(1772566127.978:471): avc: denied { mount } for pid=7261 comm="syz.4.322" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 168.406694][ T30] audit: type=1400 audit(1772566127.988:472): avc: denied { perfmon } for pid=7261 comm="syz.4.322" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 168.432609][ T30] audit: type=1400 audit(1772566128.038:473): avc: denied { prog_run } for pid=7261 comm="syz.4.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 168.609683][ T7270] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 168.609683][ T7270] program syz.1.319 not setting count and/or reply_len properly [ 168.623806][ T30] audit: type=1400 audit(1772566128.208:474): avc: denied { read write } for pid=7247 comm="syz.1.319" name="sg0" dev="devtmpfs" ino=783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 168.904009][ T30] audit: type=1400 audit(1772566128.208:475): avc: denied { open } for pid=7247 comm="syz.1.319" path="/dev/sg0" dev="devtmpfs" ino=783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 169.097635][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 169.216959][ T30] audit: type=1400 audit(1772566128.228:476): avc: denied { ioctl } for pid=7266 comm="syz.0.323" path="socket:[13585]" dev="sockfs" ino=13585 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 169.380118][ T30] audit: type=1400 audit(1772566128.958:477): avc: denied { map_read map_write } for pid=7275 comm="syz.4.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 169.401116][ T30] audit: type=1400 audit(1772566128.968:478): avc: denied { read write } for pid=7277 comm="syz.0.325" name="video3" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 169.428389][ T30] audit: type=1400 audit(1772566128.968:479): avc: denied { open } for pid=7277 comm="syz.0.325" path="/dev/video3" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 169.455282][ T30] audit: type=1400 audit(1772566128.978:480): avc: denied { ioctl } for pid=7277 comm="syz.0.325" path="/dev/video3" dev="devtmpfs" ino=936 ioctlcmd=0x561e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 169.492381][ T7280] sp0: Synchronizing with TNC [ 169.502827][ T7280] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 169.647382][ T7285] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 169.912418][ T7289] nfs: Unknown parameter 'ac' [ 170.831253][ T5875] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 171.151210][ T5875] usb 5-1: Using ep0 maxpacket: 32 [ 171.171550][ T5875] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 171.182165][ T5875] usb 5-1: config 0 has no interface number 0 [ 171.189646][ T5875] usb 5-1: config 0 interface 184 has no altsetting 0 [ 171.228433][ T5875] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 171.428371][ T7295] nfs: Unknown parameter 'ac' [ 172.141577][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.149607][ T5875] usb 5-1: Product: syz [ 172.153823][ T5875] usb 5-1: Manufacturer: syz [ 172.158407][ T5875] usb 5-1: SerialNumber: syz [ 172.165188][ T5875] usb 5-1: config 0 descriptor?? [ 172.387811][ T29] usbhid 2-1:0.0: can't add hid device: -71 [ 172.411133][ T29] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 172.457206][ T29] usb 2-1: USB disconnect, device number 10 [ 172.796418][ T7300] hpfs: Bad magic ... probably not HPFS [ 173.508595][ T5875] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 173.792766][ T5875] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 173.972462][ T5875] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 174.024236][ T5875] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 174.060764][ T5875] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 174.093654][ T5875] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 174.128818][ T5875] usb 5-1: USB disconnect, device number 6 [ 174.663412][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 174.663427][ T30] audit: type=1400 audit(1772566134.268:497): avc: denied { write } for pid=7313 comm="syz.2.333" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 174.729296][ T30] audit: type=1400 audit(1772566134.328:498): avc: denied { read write } for pid=7353 comm="syz.4.339" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 174.782247][ T30] audit: type=1400 audit(1772566134.328:499): avc: denied { open } for pid=7353 comm="syz.4.339" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 174.807586][ T30] audit: type=1400 audit(1772566134.368:500): avc: denied { mount } for pid=7353 comm="syz.4.339" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 174.858838][ T30] audit: type=1400 audit(1772566134.388:501): avc: denied { unmount } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 176.041670][ T7368] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 176.261247][ T5875] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 176.334817][ T30] audit: type=1400 audit(1772566135.638:502): avc: denied { create } for pid=7367 comm="syz.2.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 176.580923][ T30] audit: type=1400 audit(1772566135.638:503): avc: denied { read write } for pid=7367 comm="syz.2.342" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 176.768477][ T7382] loop3: detected capacity change from 0 to 1 [ 176.827249][ T30] audit: type=1400 audit(1772566135.638:504): avc: denied { open } for pid=7367 comm="syz.2.342" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 178.349324][ T7382] Buffer I/O error on dev loop3, logical block 0, async page read [ 178.360709][ T7382] Buffer I/O error on dev loop3, logical block 0, async page read [ 179.645046][ T7382] Buffer I/O error on dev loop3, logical block 0, async page read [ 179.712867][ T5875] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 179.720437][ T5875] usb 4-1: can't read configurations, error -71 [ 179.746322][ T30] audit: type=1400 audit(1772566135.658:505): avc: denied { write } for pid=7367 comm="syz.2.342" name="kcm" dev="proc" ino=4026532931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 179.768835][ T7382] Buffer I/O error on dev loop3, logical block 0, async page read [ 179.831135][ T7382] Buffer I/O error on dev loop3, logical block 0, async page read [ 179.839069][ T7382] ldm_validate_partition_table(): Disk read failed. [ 181.037864][ T7382] Buffer I/O error on dev loop3, logical block 0, async page read [ 181.044066][ T30] audit: type=1400 audit(1772566135.828:506): avc: denied { bind } for pid=7351 comm="syz.0.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 181.134825][ T7382] Buffer I/O error on dev loop3, logical block 0, async page read [ 181.144278][ T7382] Buffer I/O error on dev loop3, logical block 0, async page read [ 181.153664][ T7382] Buffer I/O error on dev loop3, logical block 0, async page read [ 181.161720][ T30] audit: type=1400 audit(1772566135.918:507): avc: denied { write } for pid=7351 comm="syz.0.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 181.184249][ T5815] Bluetooth: hci1: command 0x0406 tx timeout [ 181.190270][ T5815] Bluetooth: hci3: command 0x0406 tx timeout [ 181.196587][ T5812] Bluetooth: hci2: command 0x0406 tx timeout [ 181.202718][ T7382] Dev loop3: unable to read RDB block 0 [ 181.208328][ T7382] Buffer I/O error on dev loop3, logical block 0, async page read [ 181.217954][ T30] audit: type=1400 audit(1772566136.138:508): avc: denied { read } for pid=7377 comm="syz.2.345" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 181.242639][ T7382] loop3: unable to read partition table [ 181.270144][ T7382] loop3: partition table beyond EOD, truncated [ 181.295193][ T7382] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 181.347841][ T7403] sp0: Synchronizing with TNC [ 181.365448][ T7405] lo speed is unknown, defaulting to 1000 [ 181.371767][ T7405] lo speed is unknown, defaulting to 1000 [ 181.385808][ T7405] lo speed is unknown, defaulting to 1000 [ 181.411562][ T7405] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 181.458534][ T7405] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 181.608945][ T7405] lo speed is unknown, defaulting to 1000 [ 181.624387][ T7405] lo speed is unknown, defaulting to 1000 [ 181.639577][ T7405] lo speed is unknown, defaulting to 1000 [ 181.646709][ T7405] lo speed is unknown, defaulting to 1000 [ 181.651070][ T30] audit: type=1400 audit(1772566136.138:509): avc: denied { open } for pid=7377 comm="syz.2.345" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 181.653758][ T7405] lo speed is unknown, defaulting to 1000 [ 181.704507][ T7403] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 181.819435][ T30] audit: type=1400 audit(1772566136.158:510): avc: denied { ioctl } for pid=7377 comm="syz.2.345" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 181.872144][ T30] audit: type=1400 audit(1772566138.498:511): avc: denied { connect } for pid=7377 comm="syz.2.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 181.903912][ T30] audit: type=1400 audit(1772566138.698:512): avc: denied { create } for pid=7377 comm="syz.2.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 182.090319][ T5878] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 182.099978][ T30] audit: type=1400 audit(1772566138.738:513): avc: denied { connect } for pid=7377 comm="syz.2.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 182.382074][ T5814] Bluetooth: Frame is too long (len 18, expected len 8) [ 182.390374][ T30] audit: type=1400 audit(1772566140.128:514): avc: denied { block_suspend } for pid=7393 comm="syz.4.351" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 182.481371][ T5878] usb 1-1: Using ep0 maxpacket: 32 [ 182.569393][ T5878] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 182.861767][ T5875] usb usb4-port1: Cannot enable. Maybe the USB cable is bad? [ 182.876968][ T5875] usb usb4-port1: attempt power cycle [ 182.892141][ T5878] usb 1-1: config 0 has no interface number 0 [ 182.917262][ T5878] usb 1-1: config 0 interface 184 has no altsetting 0 [ 183.042042][ T5878] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 183.051359][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.060704][ T5878] usb 1-1: Product: syz [ 183.071486][ T5878] usb 1-1: Manufacturer: syz [ 183.076302][ T5878] usb 1-1: SerialNumber: syz [ 183.106103][ T5878] usb 1-1: config 0 descriptor?? [ 183.231378][ T5875] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 183.272047][ T5875] usb 4-1: Using ep0 maxpacket: 16 [ 183.311239][ T5875] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 183.331959][ T5875] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.372152][ T5875] usb 4-1: config 0 has no interface number 0 [ 183.427193][ T5875] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 183.467568][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.490113][ T5875] usb 4-1: Product: syz [ 183.495209][ T5875] usb 4-1: Manufacturer: syz [ 183.500061][ T5875] usb 4-1: SerialNumber: syz [ 183.538937][ T5875] usb 4-1: config 0 descriptor?? [ 183.645201][ T5875] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 183.716597][ T5875] uvcvideo 4-1:0.105: No valid video chain found. [ 183.909671][ T5934] usb 4-1: USB disconnect, device number 12 [ 184.135108][ T5878] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 184.222983][ T793] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 184.364340][ T5878] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 184.379844][ T5878] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 184.393967][ T5878] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 184.518279][ T793] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.533234][ T5878] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 184.542775][ T793] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.542822][ T793] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 184.542843][ T793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.579789][ T793] usb 5-1: config 0 descriptor?? [ 184.587346][ T5878] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 184.601821][ T5878] usb 1-1: USB disconnect, device number 15 [ 184.607383][ T7437] binder: 7436:7437 ioctl 701 a68 returned -22 [ 185.039349][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 185.039367][ T30] audit: type=1400 audit(1772566144.638:552): avc: denied { create } for pid=7444 comm="syz.1.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 185.115422][ T30] audit: type=1400 audit(1772566144.678:553): avc: denied { write } for pid=7444 comm="syz.1.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 185.233715][ T7432] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 185.233715][ T7432] program syz.4.358 not setting count and/or reply_len properly [ 185.251652][ T7447] random: crng reseeded on system resumption [ 185.338797][ T7454] gfs2: error -5 reading superblock [ 185.650854][ T30] audit: type=1400 audit(1772566144.678:554): avc: denied { nlmsg_write } for pid=7444 comm="syz.1.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 185.671425][ T30] audit: type=1400 audit(1772566144.678:555): avc: denied { create } for pid=7444 comm="syz.1.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 185.691816][ T30] audit: type=1400 audit(1772566144.848:556): avc: denied { write } for pid=7442 comm="syz.3.363" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 185.715976][ T5878] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 185.795336][ T7456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.362'. [ 185.988316][ T30] audit: type=1400 audit(1772566144.848:557): avc: denied { open } for pid=7442 comm="syz.3.363" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 186.035453][ T5878] usb 1-1: unable to get BOS descriptor or descriptor too short [ 186.052496][ T30] audit: type=1400 audit(1772566144.928:558): avc: denied { setopt } for pid=7444 comm="syz.1.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 186.075955][ T5878] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 186.084970][ T5878] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 186.101272][ T5878] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 186.111216][ T5878] usb 1-1: config 129 has no interface number 0 [ 186.121479][ T5878] usb 1-1: config 129 has no interface number 1 [ 186.160748][ T793] usbhid 5-1:0.0: can't add hid device: -71 [ 186.169857][ T793] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 186.254427][ T793] usb 5-1: USB disconnect, device number 7 [ 186.263939][ T5878] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 186.291884][ T5934] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 186.301417][ T5878] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 186.322476][ T5878] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 186.357152][ T5878] usb 1-1: config 129 interface 135 has no altsetting 0 [ 186.367261][ T5878] usb 1-1: config 129 interface 5 has no altsetting 0 [ 186.383883][ T5878] usb 1-1: string descriptor 0 read error: -22 [ 186.390145][ T5878] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 186.417989][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.452117][ T5878] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 186.453012][ T5934] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 186.459141][ T5878] usb 1-1: MIDIStreaming interface descriptor not found [ 186.471486][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.494452][ T5934] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 186.504213][ T5934] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 186.519443][ T5934] usb 2-1: Manufacturer: syz [ 186.544853][ T5934] usb 2-1: config 0 descriptor?? [ 186.806298][ T7466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 186.813920][ T7466] IPv6: NLM_F_CREATE should be set when creating new route [ 186.821368][ T7466] IPv6: NLM_F_CREATE should be set when creating new route [ 186.828641][ T7466] IPv6: NLM_F_CREATE should be set when creating new route [ 186.930840][ T5934] rc_core: IR keymap rc-hauppauge not found [ 186.938482][ T5934] Registered IR keymap rc-empty [ 186.942404][ T7461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.948176][ T5934] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 186.996840][ T5934] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8 [ 187.001410][ T5878] usb 1-1: USB disconnect, device number 16 [ 187.018313][ T7461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.027773][ T30] audit: type=1400 audit(1772566146.618:559): avc: denied { read } for pid=5161 comm="acpid" name="event4" dev="devtmpfs" ino=2940 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 187.127716][ T30] audit: type=1400 audit(1772566146.618:560): avc: denied { open } for pid=5161 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2940 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 187.211964][ T7461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.223819][ T30] audit: type=1400 audit(1772566146.618:561): avc: denied { ioctl } for pid=5161 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2940 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 187.356285][ T7461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.770802][ T7461] syz.1.367 (7461): drop_caches: 2 [ 188.776590][ T5878] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 188.782131][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.791071][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.883436][ T7493] sp0: Synchronizing with TNC [ 188.894177][ T7493] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 189.161271][ T5878] usb 5-1: Using ep0 maxpacket: 16 [ 189.167892][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.325543][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 189.378478][ T5878] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 189.410173][ T7497] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 189.438852][ T5878] usb 5-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 189.451237][ T5819] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 189.469180][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.512404][ T5878] usb 5-1: config 0 descriptor?? [ 189.531763][ T7497] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 189.570209][ T7497] overlayfs: failed to look up (tracing) for ino (-66) [ 189.621428][ T5819] usb 1-1: Using ep0 maxpacket: 32 [ 189.632736][ T5819] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 189.648148][ T5819] usb 1-1: config 0 has no interface number 0 [ 189.672276][ T5819] usb 1-1: config 0 interface 184 has no altsetting 0 [ 189.700682][ T5819] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 189.729061][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.739147][ T5819] usb 1-1: Product: syz [ 189.743925][ T5819] usb 1-1: Manufacturer: syz [ 189.748604][ T5819] usb 1-1: SerialNumber: syz [ 189.770338][ T5819] usb 1-1: config 0 descriptor?? [ 189.810325][ T5875] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 189.981296][ T5875] usb 4-1: Using ep0 maxpacket: 8 [ 190.014830][ T5875] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.045217][ T5875] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 190.060421][ T5875] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 190.075960][ T5875] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 190.085232][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.104243][ T5875] usb 4-1: config 0 descriptor?? [ 190.115630][ T5875] hso 4-1:0.0: Can't find BULK IN endpoint [ 190.140825][ T7505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.175444][ T7505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.245283][ T7507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.256912][ T7507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.430072][ T7497] netlink: 44 bytes leftover after parsing attributes in process `syz.3.376'. [ 190.475440][ T5875] usb 4-1: USB disconnect, device number 13 [ 190.810078][ T5819] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 190.935792][ T7511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.971622][ T7511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.989798][ T7513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.011272][ T5819] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 191.048952][ T5819] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 191.088517][ T7514] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 191.088517][ T7514] program syz.2.380 not setting count and/or reply_len properly [ 191.106586][ T5819] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 191.110202][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 191.110215][ T30] audit: type=1400 audit(1772566150.708:568): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 191.117625][ T5819] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 191.179660][ T7513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.226581][ T7513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.235488][ T5819] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 191.235618][ T30] audit: type=1400 audit(1772566150.778:569): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 191.249831][ T7513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.274850][ T30] audit: type=1400 audit(1772566150.828:570): avc: denied { read write } for pid=7512 comm="syz.1.381" name="event4" dev="devtmpfs" ino=2940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 191.299638][ T5819] usb 1-1: USB disconnect, device number 17 [ 191.446740][ T7513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.459674][ T30] audit: type=1400 audit(1772566150.828:571): avc: denied { open } for pid=7512 comm="syz.1.381" path="/dev/input/event4" dev="devtmpfs" ino=2940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 191.490931][ T7513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.553987][ T30] audit: type=1400 audit(1772566150.848:572): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 191.913296][ T7520] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 191.913296][ T7520] program syz.3.382 not setting count and/or reply_len properly [ 192.001319][ T5878] usbhid 5-1:0.0: can't add hid device: -71 [ 192.035903][ T5878] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 192.194041][ T5934] usb 2-1: USB disconnect, device number 11 [ 192.194111][ T5878] usb 5-1: USB disconnect, device number 8 [ 192.352282][ T30] audit: type=1400 audit(1772566151.948:573): avc: denied { connect } for pid=7523 comm="syz.0.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 192.985323][ T30] audit: type=1400 audit(1772566152.258:574): avc: denied { accept } for pid=7523 comm="syz.0.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 193.012311][ T30] audit: type=1400 audit(1772566152.268:575): avc: denied { ioctl } for pid=7523 comm="syz.0.385" path="socket:[14632]" dev="sockfs" ino=14632 ioctlcmd=0x8936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 193.663143][ T7533] hpfs: Bad magic ... probably not HPFS [ 194.326616][ T7513] syz.1.381 (7513): drop_caches: 2 [ 194.765452][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.390'. [ 195.331674][ T7550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.365881][ T7550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.916274][ T7554] sp0: Synchronizing with TNC [ 195.919417][ T30] audit: type=1326 audit(1772566155.518:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7556 comm="syz.4.394" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4143d9c799 code=0x0 [ 195.982403][ T7554] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 196.047667][ T7562] netlink: 'syz.2.397': attribute type 1 has an invalid length. [ 196.073099][ T7562] 8021q: adding VLAN 0 to HW filter on device bond1 [ 196.116451][ T7564] No source specified [ 196.136529][ T7564] binder: 7556:7564 ioctl c0306201 0 returned -14 [ 196.161240][ T30] audit: type=1400 audit(1772566155.738:577): avc: denied { create } for pid=7556 comm="syz.4.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 196.311309][ T7568] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 196.372303][ T792] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 196.573466][ T30] audit: type=1400 audit(1772566155.888:578): avc: denied { ioctl } for pid=7561 comm="syz.2.397" path="socket:[14128]" dev="sockfs" ino=14128 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 196.617970][ T7562] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 196.631405][ T792] usb 4-1: Using ep0 maxpacket: 32 [ 196.647521][ T792] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 196.681734][ T30] audit: type=1326 audit(1772566155.998:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7561 comm="syz.2.397" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3db4d9c799 code=0x0 [ 196.711470][ T792] usb 4-1: config 0 has no interface number 0 [ 196.758415][ T792] usb 4-1: config 0 interface 184 has no altsetting 0 [ 196.782092][ T792] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 196.791457][ T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.832007][ T792] usb 4-1: Product: syz [ 196.852694][ T792] usb 4-1: Manufacturer: syz [ 196.871223][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 196.871257][ T792] usb 4-1: SerialNumber: syz [ 196.901631][ T792] usb 4-1: config 0 descriptor?? [ 197.026603][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.038107][ T30] audit: type=1400 audit(1772566156.628:580): avc: denied { setopt } for pid=7573 comm="syz.1.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 197.062114][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 198.335550][ T24] usb 1-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 198.344728][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.366315][ T24] usb 1-1: config 0 descriptor?? [ 198.494441][ T792] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 198.830312][ T792] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 198.915835][ T792] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 198.959009][ T792] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 199.081237][ T792] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 199.483741][ T7588] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 199.483741][ T7588] program syz.0.398 not setting count and/or reply_len properly [ 199.531566][ T5819] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 199.553374][ T792] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 199.603082][ T792] usb 4-1: USB disconnect, device number 14 [ 199.732941][ T5819] usb 2-1: unable to get BOS descriptor or descriptor too short [ 199.829161][ T5819] usb 2-1: config 129 has an invalid interface number: 135 but max is 0 [ 199.885887][ T5819] usb 2-1: config 129 has an invalid interface number: 5 but max is 0 [ 199.895791][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 200.204646][ T7598] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 200.351173][ T5819] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 200.371488][ T5819] usb 2-1: config 129 has no interface number 0 [ 200.441173][ T5819] usb 2-1: config 129 has no interface number 1 [ 200.461235][ T5819] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 200.481182][ T5819] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 200.518867][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 200.521191][ T5819] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 200.596810][ T24] usb 1-1: USB disconnect, device number 18 [ 200.597178][ T5819] usb 2-1: config 129 interface 135 has no altsetting 0 [ 200.620570][ T5819] usb 2-1: config 129 interface 5 has no altsetting 0 [ 200.656984][ T5819] usb 2-1: string descriptor 0 read error: -22 [ 200.681902][ T5819] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 200.741634][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.887100][ T5819] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 200.951309][ T30] audit: type=1400 audit(1772566160.528:581): avc: denied { create } for pid=7606 comm="syz.2.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 201.145425][ T7611] hpfs: Bad magic ... probably not HPFS [ 201.187462][ T5819] usb 2-1: MIDIStreaming interface descriptor not found [ 202.173375][ T30] audit: type=1400 audit(1772566160.528:582): avc: denied { bind } for pid=7606 comm="syz.2.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 202.175668][ T5928] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 202.208609][ T7614] hpfs: Bad magic ... probably not HPFS [ 202.513590][ T5819] usb 2-1: USB disconnect, device number 12 [ 202.542413][ T5928] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 202.563327][ T5928] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 202.578314][ T5928] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 202.589949][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.598970][ T5928] usb 4-1: Product: syz [ 202.603391][ T5928] usb 4-1: Manufacturer: syz [ 202.608096][ T5928] usb 4-1: SerialNumber: syz [ 202.618401][ T5928] usb 4-1: config 0 descriptor?? [ 202.626883][ T7601] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 202.640871][ T7601] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 202.677262][ T30] audit: type=1400 audit(1772566162.268:583): avc: denied { bind } for pid=7619 comm="syz.1.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 202.721868][ T30] audit: type=1400 audit(1772566162.268:584): avc: denied { node_bind } for pid=7619 comm="syz.1.412" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 202.785093][ T30] audit: type=1400 audit(1772566162.278:585): avc: denied { read } for pid=7619 comm="syz.1.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 202.841267][ T30] audit: type=1326 audit(1772566162.418:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7623 comm="syz.1.414" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67ab19c799 code=0x0 [ 202.877754][ T7601] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 202.885624][ T7601] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 203.134776][ T7628] No source specified [ 203.223882][ T7631] gfs2: error -5 reading superblock [ 203.560429][ T7628] binder: 7623:7628 ioctl c0306201 0 returned -14 [ 203.571306][ T7601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.590065][ T7601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.803325][ T30] audit: type=1400 audit(1772566163.408:587): avc: denied { bind } for pid=7600 comm="syz.3.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 204.057262][ T30] audit: type=1400 audit(1772566163.648:588): avc: denied { setopt } for pid=7600 comm="syz.3.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 204.093696][ T7633] syzkaller1: entered promiscuous mode [ 204.109469][ T7633] syzkaller1: entered allmulticast mode [ 204.183830][ T7637] sp0: Synchronizing with TNC [ 204.227033][ T7637] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 204.300855][ T7640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.316334][ T7640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.531340][ T5934] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 204.723182][ T7646] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 204.723182][ T7646] program syz.2.419 not setting count and/or reply_len properly [ 204.761280][ T5934] usb 5-1: Using ep0 maxpacket: 32 [ 204.963678][ T30] audit: type=1400 audit(1772566164.428:589): avc: denied { shutdown } for pid=7647 comm="syz.0.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 205.142336][ T5934] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 205.164159][ T5934] usb 5-1: config 0 has no interface number 0 [ 205.192384][ T5934] usb 5-1: config 0 interface 184 has no altsetting 0 [ 205.201797][ T5934] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 205.216653][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.228581][ T5934] usb 5-1: Product: syz [ 205.234050][ T5934] usb 5-1: Manufacturer: syz [ 205.240634][ T5934] usb 5-1: SerialNumber: syz [ 205.283773][ T5934] usb 5-1: config 0 descriptor?? [ 205.332594][ T5928] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 205.374563][ T5928] dm9601 4-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet, 00:00:00:00:00:13 [ 205.422924][ T5928] usb 4-1: USB disconnect, device number 15 [ 205.518299][ T5928] dm9601 4-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet [ 205.658239][ T30] audit: type=1400 audit(1772566165.258:590): avc: denied { setopt } for pid=7653 comm="syz.0.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 207.263735][ T5934] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 207.285121][ T5934] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 207.301972][ T5934] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 207.318629][ T5934] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 207.331341][ T5934] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 207.421816][ T5934] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 207.478636][ T5934] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 207.520157][ T5819] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 207.528894][ T5934] usb 5-1: USB disconnect, device number 9 [ 207.682621][ T30] audit: type=1400 audit(1772566167.288:591): avc: denied { write } for pid=7664 comm="syz.3.427" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 207.754973][ T5819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.775875][ T30] audit: type=1400 audit(1772566167.378:592): avc: denied { ioctl } for pid=7664 comm="syz.3.427" path="socket:[14943]" dev="sockfs" ino=14943 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 207.800528][ T5819] usb 1-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 207.813010][ T5819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.823404][ T5819] usb 1-1: config 0 descriptor?? [ 207.891617][ T5934] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 207.891699][ T30] audit: type=1400 audit(1772566167.498:593): avc: denied { connect } for pid=7671 comm="syz.3.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 208.071347][ T5934] usb 5-1: Using ep0 maxpacket: 8 [ 208.227984][ T5934] usb 5-1: config 0 has an invalid interface number: 151 but max is 1 [ 208.251989][ T5819] dragonrise 0003:0079:0006.0002: unknown main item tag 0x0 [ 208.271615][ T30] audit: type=1400 audit(1772566167.528:594): avc: denied { write } for pid=7671 comm="syz.3.428" path="socket:[14956]" dev="sockfs" ino=14956 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 208.292544][ T5934] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.295245][ T5819] dragonrise 0003:0079:0006.0002: unknown main item tag 0x0 [ 208.321053][ T5819] dragonrise 0003:0079:0006.0002: unknown main item tag 0x0 [ 208.430738][ T5934] usb 5-1: config 0 has no interface number 1 [ 208.437118][ T5934] usb 5-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 208.459630][ T30] audit: type=1400 audit(1772566167.528:595): avc: denied { read } for pid=7671 comm="syz.3.428" laddr=172.20.20.170 lport=33489 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 208.900870][ T5819] dragonrise 0003:0079:0006.0002: unknown main item tag 0x0 [ 208.908373][ T5819] dragonrise 0003:0079:0006.0002: unknown main item tag 0x0 [ 208.915790][ T5819] dragonrise 0003:0079:0006.0002: unknown main item tag 0x0 [ 208.923195][ T5819] dragonrise 0003:0079:0006.0002: unknown main item tag 0x0 [ 208.930590][ T30] audit: type=1400 audit(1772566167.528:596): avc: denied { write } for pid=7671 comm="syz.3.428" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 208.953298][ T5934] usb 5-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 208.966985][ T5934] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 208.968615][ T5819] dragonrise 0003:0079:0006.0002: unknown main item tag 0x0 [ 208.979989][ T5934] usb 5-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 208.997306][ T5934] usb 5-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 209.023529][ T7682] 9p: Bad value for 'wfdno' [ 209.029230][ T30] audit: type=1400 audit(1772566167.918:597): avc: denied { create } for pid=7673 comm="syz.1.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 209.029868][ T5934] usb 5-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 209.050895][ T5819] dragonrise 0003:0079:0006.0002: unknown main item tag 0x0 [ 209.074912][ T5819] dragonrise 0003:0079:0006.0002: unknown main item tag 0x0 [ 209.082423][ T30] audit: type=1400 audit(1772566168.158:598): avc: denied { setopt } for pid=7673 comm="syz.1.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 209.101953][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.110226][ T5934] usb 5-1: Product: syz [ 209.114623][ T5934] usb 5-1: Manufacturer: syz [ 209.119306][ T5934] usb 5-1: SerialNumber: syz [ 209.126532][ T5934] usb 5-1: config 0 descriptor?? [ 209.132957][ T7663] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 209.143794][ T5934] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 209.154883][ T5934] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 209.180475][ T5819] dragonrise 0003:0079:0006.0002: invalid report_size 1684763247 [ 209.192397][ T5819] dragonrise 0003:0079:0006.0002: item 0 4 1 7 parsing failed [ 209.201010][ T5819] dragonrise 0003:0079:0006.0002: parse failed [ 209.254963][ T30] audit: type=1326 audit(1772566168.848:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7683 comm="syz.1.431" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67ab19c799 code=0x0 [ 209.288975][ T5819] dragonrise 0003:0079:0006.0002: probe with driver dragonrise failed with error -22 [ 209.401917][ T7691] No source specified [ 209.407550][ T5934] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 209.417629][ T30] audit: type=1400 audit(1772566168.958:600): avc: denied { accept } for pid=7687 comm="syz.3.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 209.419261][ T7691] binder: 7683:7691 ioctl c0306201 0 returned -14 [ 209.486176][ T5934] usb 1-1: USB disconnect, device number 19 [ 209.558558][ T7694] netlink: 'syz.2.434': attribute type 1 has an invalid length. [ 209.759849][ T5934] usb 5-1: USB disconnect, device number 10 [ 209.772389][ T7698] serio: Serial port ptm0 [ 209.798562][ T7696] bond2: (slave gretap1): making interface the new active one [ 209.808928][ T7696] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 210.110464][ T7702] sp0: Synchronizing with TNC [ 210.151882][ T7702] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 210.665837][ T5934] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 210.891834][ T5934] usb 5-1: Using ep0 maxpacket: 32 [ 210.914293][ T5934] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 210.923823][ T5934] usb 5-1: config 0 has no interface number 0 [ 210.929922][ T5934] usb 5-1: config 0 interface 184 has no altsetting 0 [ 210.971696][ T5934] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 211.016612][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.036559][ T5934] usb 5-1: Product: syz [ 211.041107][ T5934] usb 5-1: Manufacturer: syz [ 211.046285][ T5934] usb 5-1: SerialNumber: syz [ 211.066650][ T5934] usb 5-1: config 0 descriptor?? [ 211.151233][ T5875] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 211.682821][ T5875] usb 1-1: unable to get BOS descriptor or descriptor too short [ 211.692224][ T7726] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 211.692224][ T7726] program syz.3.441 not setting count and/or reply_len properly [ 211.701746][ T5875] usb 1-1: config 250 has an invalid interface number: 222 but max is 1 [ 211.747889][ T5875] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 211.760857][ T5875] usb 1-1: config 250 has no interface number 1 [ 212.299546][ T5875] usb 1-1: config 250 interface 222 altsetting 22 has an invalid descriptor for endpoint zero, skipping [ 212.315351][ T5875] usb 1-1: config 250 interface 222 altsetting 22 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 212.400506][ T5875] usb 1-1: config 250 interface 222 altsetting 22 endpoint 0x8 has invalid maxpacket 983, setting to 64 [ 212.433703][ T5875] usb 1-1: config 250 interface 222 altsetting 22 has an invalid descriptor for endpoint zero, skipping [ 212.445214][ T5875] usb 1-1: config 250 interface 222 altsetting 22 has a duplicate endpoint with address 0x6, skipping [ 212.475586][ T5875] usb 1-1: config 250 interface 222 has no altsetting 0 [ 212.505170][ T5875] usb 1-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 212.519900][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.541407][ T5875] usb 1-1: Product: syz [ 212.545588][ T5875] usb 1-1: Manufacturer: syz [ 212.551563][ T5819] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 212.563699][ T5875] usb 1-1: SerialNumber: syz [ 212.585460][ T7713] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 212.718548][ T5934] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 212.735283][ T5819] usb 2-1: Using ep0 maxpacket: 32 [ 212.747520][ T5819] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 212.757316][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 212.757330][ T30] audit: type=1326 audit(1772566172.358:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7737 comm="syz.2.447" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3db4d9c799 code=0x0 [ 212.786130][ T5819] usb 2-1: config 0 has no interface number 0 [ 212.792316][ T5819] usb 2-1: config 0 interface 184 has no altsetting 0 [ 212.801087][ T5819] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 212.810990][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.819505][ T5819] usb 2-1: Product: syz [ 212.824018][ T5819] usb 2-1: Manufacturer: syz [ 212.828865][ T5819] usb 2-1: SerialNumber: syz [ 212.840985][ T5819] usb 2-1: config 0 descriptor?? [ 212.852942][ T5819] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 212.877749][ T5819] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 213.044306][ T5934] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 213.180025][ T7740] No source specified [ 213.183105][ T5934] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 213.208882][ T7740] binder: 7737:7740 ioctl c0306201 0 returned -14 [ 213.235319][ T5875] usb 1-1: USB disconnect, device number 20 [ 213.238601][ T5934] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 213.272984][ T5819] usb 2-1: USB disconnect, device number 13 [ 213.317904][ T5934] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 213.360091][ T5934] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 213.388529][ T30] audit: type=1400 audit(1772566172.988:610): avc: denied { create } for pid=7741 comm="syz.3.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 213.391289][ T5934] usb 5-1: USB disconnect, device number 11 [ 213.451629][ T30] audit: type=1400 audit(1772566173.018:611): avc: denied { write } for pid=7741 comm="syz.3.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 213.862472][ T30] audit: type=1400 audit(1772566173.398:612): avc: denied { append } for pid=7745 comm="syz.3.450" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 214.084118][ T30] audit: type=1400 audit(1772566173.668:613): avc: denied { write } for pid=7749 comm="syz.4.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 214.414896][ T5878] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 214.613139][ T5878] usb 4-1: unable to get BOS descriptor or descriptor too short [ 214.692227][ T5878] usb 4-1: config 0 has too many interfaces: 240, using maximum allowed: 32 [ 214.742332][ T5878] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 240 [ 214.799090][ T5878] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 214.855316][ T5878] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x2 has invalid maxpacket 1023, setting to 8 [ 214.915533][ T5878] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.978263][ T5878] usb 4-1: config 0 interface 0 has no altsetting 0 [ 215.056660][ T5878] usb 4-1: string descriptor 0 read error: -22 [ 215.086694][ T5878] usb 4-1: New USB device found, idVendor=d980, idProduct=05e1, bcdDevice= 0.40 [ 215.124660][ T30] audit: type=1400 audit(1772566174.678:614): avc: denied { setattr } for pid=7764 comm="syz.4.456" name="udp6" dev="proc" ino=4026533041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 215.164645][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 215.236553][ T5878] usb 4-1: config 0 descriptor?? [ 215.255106][ T7752] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 215.298095][ T5878] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 215.498138][ T7752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.529970][ T7752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.236860][ T30] audit: type=1400 audit(1772566175.838:615): avc: denied { ioctl } for pid=7766 comm="syz.4.457" path="socket:[15567]" dev="sockfs" ino=15567 ioctlcmd=0x52d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 216.328855][ T29] usb 4-1: USB disconnect, device number 16 [ 216.661262][ T5928] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 216.841075][ T5928] usb 2-1: unable to get BOS descriptor or descriptor too short [ 216.943561][ T7786] FAULT_INJECTION: forcing a failure. [ 216.943561][ T7786] name failslab, interval 1, probability 0, space 0, times 1 [ 216.957386][ T7786] CPU: 1 UID: 0 PID: 7786 Comm: syz.2.463 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.957414][ T7786] Tainted: [L]=SOFTLOCKUP [ 216.957420][ T7786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 216.957430][ T7786] Call Trace: [ 216.957436][ T7786] [ 216.957443][ T7786] dump_stack_lvl+0x100/0x190 [ 216.957476][ T7786] should_fail_ex.cold+0x5/0xa [ 216.957498][ T7786] should_failslab+0xc2/0x120 [ 216.957526][ T7786] __kmalloc_cache_noprof+0x7a/0x6f0 [ 216.957546][ T7786] ? xfrm_policy_alloc+0x9f/0x420 [ 216.957572][ T7786] xfrm_policy_alloc+0x9f/0x420 [ 216.957593][ T7786] pfkey_spdadd+0x32e/0x15d0 [ 216.957624][ T7786] ? __pfx_pfkey_spdadd+0x10/0x10 [ 216.957653][ T7786] ? pfkey_process+0x3f0/0x810 [ 216.957668][ T7786] ? pfkey_process+0x5d9/0x810 [ 216.957684][ T7786] ? __pfx_pfkey_spdadd+0x10/0x10 [ 216.957710][ T7786] pfkey_process+0x5c3/0x810 [ 216.957730][ T7786] ? __pfx_pfkey_process+0x10/0x10 [ 216.957745][ T7786] ? pfkey_sendmsg+0x41a/0x840 [ 216.957776][ T7786] ? __pfx___alloc_skb+0x10/0x10 [ 216.957811][ T7786] pfkey_sendmsg+0x428/0x840 [ 216.957838][ T7786] ____sys_sendmsg+0xa54/0xc30 [ 216.957863][ T7786] ? __pfx_____sys_sendmsg+0x10/0x10 [ 216.957897][ T7786] ___sys_sendmsg+0x190/0x1e0 [ 216.957922][ T7786] ? __pfx____sys_sendmsg+0x10/0x10 [ 216.957944][ T7786] ? rcu_is_watching+0x12/0xc0 [ 216.957975][ T7786] ? find_held_lock+0x2b/0x80 [ 216.958014][ T7786] __sys_sendmmsg+0x205/0x430 [ 216.958035][ T7786] ? __pfx___sys_sendmmsg+0x10/0x10 [ 216.958051][ T7786] ? trace_sched_exit_tp+0x13a/0x180 [ 216.958084][ T7786] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 216.958115][ T7786] ? fput+0x79/0x100 [ 216.958136][ T7786] ? exit_to_user_mode_loop+0xdd/0x4a0 [ 216.958163][ T7786] ? rcu_is_watching+0x12/0xc0 [ 216.958185][ T7786] __x64_sys_sendmmsg+0x9c/0x100 [ 216.958203][ T7786] ? lockdep_hardirqs_on+0x78/0x100 [ 216.958221][ T7786] do_syscall_64+0x106/0xf80 [ 216.958241][ T7786] ? clear_bhb_loop+0x40/0x90 [ 216.958263][ T7786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.958280][ T7786] RIP: 0033:0x7f3db4d9c799 [ 216.958295][ T7786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.958312][ T7786] RSP: 002b:00007f3db5b8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 216.958330][ T7786] RAX: ffffffffffffffda RBX: 00007f3db5016180 RCX: 00007f3db4d9c799 [ 216.958341][ T7786] RDX: 00000000000002c8 RSI: 00002000000000c0 RDI: 0000000000000007 [ 216.958351][ T7786] RBP: 00007f3db5b8f090 R08: 0000000000000000 R09: 0000000000000000 [ 216.958361][ T7786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.958371][ T7786] R13: 00007f3db5016218 R14: 00007f3db5016180 R15: 00007ffee7496168 [ 216.958396][ T7786] [ 217.335351][ T7786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.345636][ T7786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.089404][ T5928] usb 2-1: config 129 has an invalid interface number: 135 but max is 0 [ 218.097937][ T5928] usb 2-1: config 129 has an invalid interface number: 5 but max is 0 [ 218.106136][ T5928] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 218.115288][ T5928] usb 2-1: config 129 has no interface number 0 [ 218.121571][ T5928] usb 2-1: config 129 has no interface number 1 [ 218.127855][ T5928] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 218.145931][ T5928] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 218.156886][ T5928] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 218.170138][ T5928] usb 2-1: config 129 interface 135 has no altsetting 0 [ 218.177141][ T5928] usb 2-1: config 129 interface 5 has no altsetting 0 [ 218.186589][ T5928] usb 2-1: string descriptor 0 read error: -22 [ 218.193467][ T5928] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 218.203333][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.227369][ T5928] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 218.234574][ T5928] usb 2-1: MIDIStreaming interface descriptor not found [ 218.470153][ T7771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.493503][ T7771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.642527][ T30] audit: type=1326 audit(1772566178.238:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3eb9c799 code=0x7ffc0000 [ 218.644091][ T7800] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 218.756590][ T29] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 218.876528][ T5875] usb 2-1: USB disconnect, device number 14 [ 218.881868][ T30] audit: type=1326 audit(1772566178.248:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3eb9c799 code=0x7ffc0000 [ 218.919502][ T30] audit: type=1326 audit(1772566178.288:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5e3eb9c799 code=0x7ffc0000 [ 218.942842][ T30] audit: type=1326 audit(1772566178.288:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3eb9c799 code=0x7ffc0000 [ 218.966157][ T30] audit: type=1326 audit(1772566178.288:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3eb9c799 code=0x7ffc0000 [ 219.012287][ T30] audit: type=1326 audit(1772566178.298:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f5e3eb9c799 code=0x7ffc0000 [ 219.044355][ T30] audit: type=1326 audit(1772566178.298:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3eb9c799 code=0x7ffc0000 [ 219.086791][ T30] audit: type=1326 audit(1772566178.298:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3eb9c799 code=0x7ffc0000 [ 219.123865][ T30] audit: type=1326 audit(1772566178.308:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5e3eb9c799 code=0x7ffc0000 [ 219.148581][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 219.159059][ T29] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 219.167440][ T29] usb 4-1: config 0 has no interface number 0 [ 219.173782][ T29] usb 4-1: config 0 interface 184 has no altsetting 0 [ 219.181485][ T30] audit: type=1326 audit(1772566178.318:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3eb9c799 code=0x7ffc0000 [ 219.230447][ T29] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 219.239707][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.248716][ T29] usb 4-1: Product: syz [ 219.253217][ T29] usb 4-1: Manufacturer: syz [ 219.264859][ T29] usb 4-1: SerialNumber: syz [ 219.504610][ T29] usb 4-1: config 0 descriptor?? [ 219.517587][ T29] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 219.532584][ T29] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 219.872945][ T7810] netlink: 'syz.1.469': attribute type 29 has an invalid length. [ 219.907295][ T5878] usb 4-1: USB disconnect, device number 17 [ 219.951894][ T7816] netlink: 'syz.1.469': attribute type 29 has an invalid length. [ 219.973750][ T7810] netlink: 500 bytes leftover after parsing attributes in process `syz.1.469'. [ 219.984916][ T7815] gfs2: error -5 reading superblock [ 220.089966][ T7818] lo speed is unknown, defaulting to 1000 [ 220.401109][ T7826] lo speed is unknown, defaulting to 1000 [ 220.521224][ T5878] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 220.721121][ T5878] usb 5-1: Using ep0 maxpacket: 16 [ 220.741208][ T5819] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 220.760227][ T5878] usb 5-1: config 0 has no interfaces? [ 220.858659][ T7832] loop6: detected capacity change from 0 to 7 [ 220.873316][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 220.882942][ C0] buffer_io_error: 18 callbacks suppressed [ 220.882956][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 220.900331][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 220.909942][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 220.941251][ T5819] usb 1-1: Using ep0 maxpacket: 16 [ 220.956379][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 220.965986][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 220.974418][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 220.983997][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 220.993450][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 221.003039][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 221.012667][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 221.022250][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 221.035413][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 221.045009][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 221.058596][ T5878] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 221.071291][ T5875] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 221.092026][ T5878] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 221.110472][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 221.120105][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 221.128061][ T7832] ldm_validate_partition_table(): Disk read failed. [ 221.146280][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 221.155904][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 221.170767][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 221.180377][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 221.211734][ T7832] Dev loop6: unable to read RDB block 0 [ 221.221273][ T7832] loop6: unable to read partition table [ 221.227594][ T7832] loop6: partition table beyond EOD, truncated [ 221.233917][ T7832] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 221.265604][ T5878] usb 5-1: Manufacturer: syz [ 221.294882][ T5819] usb 1-1: config 0 has no interfaces? [ 221.344247][ T5819] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 221.381267][ T5875] usb 2-1: Using ep0 maxpacket: 32 [ 221.417739][ T5878] usb 5-1: config 0 descriptor?? [ 221.433977][ T5819] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 221.452044][ T5875] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 221.514782][ T5875] usb 2-1: config 0 has no interface number 0 [ 221.529196][ T5819] usb 1-1: Manufacturer: syz [ 221.579405][ T5875] usb 2-1: config 0 interface 184 has no altsetting 0 [ 221.663993][ T5819] usb 1-1: config 0 descriptor?? [ 221.754239][ T5875] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 221.801676][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.876760][ T5875] usb 2-1: Product: syz [ 221.881026][ T5875] usb 2-1: Manufacturer: syz [ 221.979947][ T5875] usb 2-1: SerialNumber: syz [ 222.011767][ T7839] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.030001][ T5875] usb 2-1: config 0 descriptor?? [ 222.060916][ T5875] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 222.083420][ T5875] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 222.167206][ T7839] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.202487][ T29] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 222.282955][ T793] usb 2-1: USB disconnect, device number 15 [ 222.347352][ T7839] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.391187][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 222.402625][ T29] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 222.414273][ T29] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 222.426055][ T29] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 222.436744][ T29] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 222.454364][ T7839] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.473669][ T29] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.487516][ T29] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 222.503848][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.627244][ T6728] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.657884][ T7043] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.695715][ T7043] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.706081][ T7043] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.823628][ T7839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.834491][ T29] usb 4-1: usb_control_msg returned -32 [ 222.846375][ T29] usbtmc 4-1:16.0: can't read capabilities [ 222.860393][ T7839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.184429][ T29] usb 4-1: USB disconnect, device number 18 [ 223.200178][ T7839] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 223.221069][ T7842] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -19 [ 223.401098][ T5928] usb 5-1: USB disconnect, device number 12 [ 224.315059][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 224.315069][ T30] audit: type=1400 audit(1772566183.918:632): avc: denied { read } for pid=7865 comm="syz.1.483" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 224.557491][ T30] audit: type=1400 audit(1772566183.968:633): avc: denied { open } for pid=7865 comm="syz.1.483" path="/89/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 224.745898][ T7869] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 224.769693][ T5928] usb 1-1: USB disconnect, device number 21 [ 224.786870][ T7869] block device autoloading is deprecated and will be removed. [ 224.794958][ T7880] binder: BINDER_SET_CONTEXT_MGR already set [ 224.812773][ T7867] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 224.851222][ T7880] binder: 7878:7880 ioctl 4018620d 200000004a80 returned -16 [ 224.858496][ T7881] binder: 7878:7881 ioctl 701 a68 returned -22 [ 224.903615][ T7880] 9p: Bad value for 'rfdno' [ 224.910549][ T7867] block device autoloading is deprecated and will be removed. [ 224.956979][ T7884] FAULT_INJECTION: forcing a failure. [ 224.956979][ T7884] name failslab, interval 1, probability 0, space 0, times 0 [ 224.956979][ T30] audit: type=1400 audit(1772566184.558:634): avc: denied { write } for pid=7882 comm="syz.0.486" path="socket:[15956]" dev="sockfs" ino=15956 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 225.071773][ T7884] CPU: 0 UID: 0 PID: 7884 Comm: syz.0.486 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.071803][ T7884] Tainted: [L]=SOFTLOCKUP [ 225.071810][ T7884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 225.071820][ T7884] Call Trace: [ 225.071826][ T7884] [ 225.071833][ T7884] dump_stack_lvl+0x100/0x190 [ 225.071865][ T7884] should_fail_ex.cold+0x5/0xa [ 225.071889][ T7884] should_failslab+0xc2/0x120 [ 225.071918][ T7884] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 225.071944][ T7884] ? __alloc_skb+0x140/0x710 [ 225.071965][ T7884] __alloc_skb+0x140/0x710 [ 225.071980][ T7884] ? __alloc_skb+0x5b7/0x710 [ 225.071995][ T7884] ? __pfx___alloc_skb+0x10/0x10 [ 225.072029][ T7884] alloc_skb_with_frags+0xe0/0x810 [ 225.072053][ T7884] ? avc_has_perm_noaudit+0x145/0x3b0 [ 225.072081][ T7884] sock_alloc_send_pskb+0x801/0x980 [ 225.072115][ T7884] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 225.072145][ T7884] ? sock_has_perm+0x258/0x2f0 [ 225.072173][ T7884] ? __pfx_sock_has_perm+0x10/0x10 [ 225.072204][ T7884] hci_sock_sendmsg+0x1c7/0x2620 [ 225.072238][ T7884] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 225.072273][ T7884] sock_write_iter+0x566/0x610 [ 225.072296][ T7884] ? __pfx_sock_write_iter+0x10/0x10 [ 225.072327][ T7884] ? bpf_lsm_file_permission+0x9/0x10 [ 225.072351][ T7884] ? security_file_permission+0x76/0x210 [ 225.072373][ T7884] ? rw_verify_area+0xce/0x6d0 [ 225.072397][ T7884] vfs_write+0x6ac/0x1070 [ 225.072423][ T7884] ? __pfx_sock_write_iter+0x10/0x10 [ 225.072448][ T7884] ? __pfx_vfs_write+0x10/0x10 [ 225.072471][ T7884] ? find_held_lock+0x2b/0x80 [ 225.072509][ T7884] ksys_write+0x1f8/0x250 [ 225.072534][ T7884] ? __pfx_ksys_write+0x10/0x10 [ 225.072567][ T7884] do_syscall_64+0x106/0xf80 [ 225.072585][ T7884] ? clear_bhb_loop+0x40/0x90 [ 225.072606][ T7884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.072624][ T7884] RIP: 0033:0x7f5e3eb9c799 [ 225.072639][ T7884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.072656][ T7884] RSP: 002b:00007f5e3f9be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 225.072674][ T7884] RAX: ffffffffffffffda RBX: 00007f5e3ee15fa0 RCX: 00007f5e3eb9c799 [ 225.072685][ T7884] RDX: 000000000000000d RSI: 0000200000000000 RDI: 000000000000000d [ 225.072695][ T7884] RBP: 00007f5e3f9be090 R08: 0000000000000000 R09: 0000000000000000 [ 225.072711][ T7884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.072721][ T7884] R13: 00007f5e3ee16038 R14: 00007f5e3ee15fa0 R15: 00007ffe2185fc68 [ 225.072744][ T7884] [ 225.481635][ T7893] random: crng reseeded on system resumption [ 225.553600][ T7893] openvswitch: netlink: IP tunnel dst address not specified [ 226.694638][ T7912] gfs2: error -5 reading superblock [ 226.930445][ T7918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.948306][ T7918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.963423][ T7915] sp0: Synchronizing with TNC [ 227.042906][ T7915] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 227.301262][ T5918] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 227.501314][ T5918] usb 4-1: Using ep0 maxpacket: 32 [ 227.598213][ T5918] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 227.598279][ T5918] usb 4-1: config 0 has no interface number 0 [ 227.598428][ T5918] usb 4-1: config 0 interface 184 has no altsetting 0 [ 227.603342][ T5918] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 227.603395][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.603446][ T5918] usb 4-1: Product: syz [ 227.603487][ T5918] usb 4-1: Manufacturer: syz [ 227.603532][ T5918] usb 4-1: SerialNumber: syz [ 227.692931][ T5918] usb 4-1: config 0 descriptor?? [ 228.096079][ T30] audit: type=1400 audit(1772566187.698:635): avc: denied { bind } for pid=7933 comm="syz.2.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 228.135324][ T7935] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 228.150917][ T30] audit: type=1400 audit(1772566187.718:636): avc: denied { write } for pid=7933 comm="syz.2.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 228.532175][ T5875] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 228.556707][ T7932] mmap: syz.1.501 (7932) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 228.647481][ T7945] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 228.816018][ T30] audit: type=1400 audit(1772566188.418:637): avc: denied { bind } for pid=7943 comm="syz.4.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 228.851271][ T5875] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 228.865788][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.875952][ T5918] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 228.876619][ T5875] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 228.896603][ T5875] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 228.918102][ T5875] usb 1-1: Manufacturer: syz [ 228.938848][ T5875] usb 1-1: config 0 descriptor?? [ 229.031244][ T29] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 229.056493][ T7957] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 229.056493][ T7957] program syz.2.507 not setting count and/or reply_len properly [ 229.105102][ T5875] rc_core: IR keymap rc-hauppauge not found [ 229.111299][ T5875] Registered IR keymap rc-empty [ 229.114431][ T5918] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 229.117198][ T5875] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 229.137308][ T5918] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 229.152864][ T5875] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input9 [ 229.156363][ T7940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.193216][ T29] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 229.204060][ T5918] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 229.215470][ T7940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.223321][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.238566][ T29] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 229.252772][ T5918] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 229.267505][ T29] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 229.283396][ T5918] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 229.292137][ T29] usb 2-1: Manufacturer: syz [ 229.299936][ T29] usb 2-1: config 0 descriptor?? [ 229.307929][ T5918] usb 4-1: USB disconnect, device number 19 [ 229.391602][ T7940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.403862][ T7940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.411811][ T29] rc_core: IR keymap rc-hauppauge not found [ 229.417752][ T29] Registered IR keymap rc-empty [ 229.430264][ T29] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 229.547991][ T7951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.558735][ T29] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input10 [ 229.571745][ T7951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.608398][ T7951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.662623][ T7951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.923280][ T5875] usb 2-1: USB disconnect, device number 16 [ 229.934288][ T30] audit: type=1400 audit(1772566189.538:638): avc: denied { ioctl } for pid=7950 comm="syz.1.506" path="/dev/input/event4" dev="devtmpfs" ino=3044 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 231.226426][ T5918] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 231.751195][ T5918] usb 4-1: Using ep0 maxpacket: 32 [ 231.788853][ T5918] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 231.806143][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.875497][ T5918] usb 4-1: Product: syz [ 232.099146][ T5918] usb 4-1: Manufacturer: syz [ 232.111191][ T5918] usb 4-1: SerialNumber: syz [ 232.133858][ T5918] usb 4-1: config 0 descriptor?? [ 232.140372][ T5814] Bluetooth: Frame is too long (len 18, expected len 8) [ 232.183029][ T5918] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 232.215446][ T7940] syz.0.503 (7940): drop_caches: 2 [ 232.617416][ T7988] netlink: 16 bytes leftover after parsing attributes in process `syz.1.512'. [ 232.994599][ T5918] gspca_topro: reg_w err -110 [ 233.004299][ T30] audit: type=1400 audit(1772566192.248:639): avc: denied { write } for pid=7982 comm="syz.1.512" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 233.031179][ T5918] gspca_topro: Sensor soi763a [ 233.315732][ T7995] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 233.321193][ T5928] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 233.560748][ T30] audit: type=1400 audit(1772566193.158:640): avc: denied { bind } for pid=7999 comm="syz.0.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 233.585310][ T30] audit: type=1400 audit(1772566193.158:641): avc: denied { name_bind } for pid=7999 comm="syz.0.517" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 233.787629][ T30] audit: type=1400 audit(1772566193.158:642): avc: denied { node_bind } for pid=7999 comm="syz.0.517" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 233.809179][ T30] audit: type=1400 audit(1772566193.388:643): avc: denied { ioctl } for pid=7964 comm="syz.3.509" path="/dev/cpu/1/msr" dev="devtmpfs" ino=89 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 233.883706][ T5875] usb 1-1: USB disconnect, device number 22 [ 233.975610][ T5928] usb 5-1: Using ep0 maxpacket: 16 [ 233.986878][ T5928] usb 5-1: too many configurations: 48, using maximum allowed: 8 [ 234.370298][ T5928] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 234.386833][ T5928] usb 5-1: can't read configurations, error -61 [ 234.420507][ T8008] netlink: 'syz.2.518': attribute type 10 has an invalid length. [ 234.485141][ T8008] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 234.523085][ T5928] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 234.555327][ T30] audit: type=1400 audit(1772566194.158:644): avc: denied { read } for pid=8009 comm="syz.1.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 234.681691][ T5928] usb 5-1: Using ep0 maxpacket: 16 [ 234.697725][ T5928] usb 5-1: too many configurations: 48, using maximum allowed: 8 [ 234.718567][ T5928] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 234.735074][ T5928] usb 5-1: can't read configurations, error -61 [ 234.744963][ T8019] 9pnet_fd: p9_fd_create_unix (8019): problem connecting socket: ./file0: -13 [ 234.761579][ T5928] usb usb5-port1: attempt power cycle [ 234.782622][ T8021] comedi comedi2: 8255: I/O port conflict (0xffffffffffffffff,4) [ 234.909924][ T30] audit: type=1400 audit(1772566194.508:645): avc: denied { map } for pid=8020 comm="syz.1.523" path="socket:[16881]" dev="sockfs" ino=16881 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 235.205788][ T5819] usb 4-1: USB disconnect, device number 20 [ 235.221197][ T5928] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 235.256542][ T30] audit: type=1400 audit(1772566194.858:646): avc: denied { create } for pid=8032 comm="syz.3.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 235.277454][ T5928] usb 5-1: Using ep0 maxpacket: 16 [ 235.293926][ T8033] netlink: 28 bytes leftover after parsing attributes in process `syz.3.525'. [ 235.332342][ T5928] usb 5-1: device descriptor read/all, error -71 [ 235.371606][ T30] audit: type=1400 audit(1772566194.978:647): avc: denied { create } for pid=8036 comm="syz.2.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 235.458582][ T30] audit: type=1400 audit(1772566195.028:648): avc: denied { ioctl } for pid=8038 comm="syz.0.526" path="socket:[16921]" dev="sockfs" ino=16921 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 235.491516][ T30] audit: type=1400 audit(1772566195.068:649): avc: denied { read append } for pid=8032 comm="syz.3.525" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 235.554305][ T30] audit: type=1400 audit(1772566195.068:650): avc: denied { open } for pid=8032 comm="syz.3.525" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 235.710553][ T8043] CUSE: info not properly terminated [ 236.112777][ T30] audit: type=1400 audit(1772566195.068:651): avc: denied { ioctl } for pid=8032 comm="syz.3.525" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x9409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 236.139348][ T30] audit: type=1400 audit(1772566195.178:652): avc: denied { ioctl } for pid=8032 comm="syz.3.525" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 236.165361][ T8044] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 236.370582][ T30] audit: type=1326 audit(1772566195.318:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8036 comm="syz.2.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db4d9c799 code=0x7ffc0000 [ 236.397879][ T8035] ------------[ cut here ]------------ [ 236.405250][ T8035] kernel BUG at mm/hugetlb.c:1153! [ 236.413558][ T8035] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 236.419986][ T8035] CPU: 1 UID: 0 PID: 8035 Comm: syz.3.525 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.430746][ T8035] Tainted: [L]=SOFTLOCKUP [ 236.435060][ T8035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 236.445108][ T8035] RIP: 0010:resv_map_release+0x1e2/0x280 [ 236.450747][ T8035] Code: 14 9a ff 48 85 db 75 1c e8 ab 19 9a ff 48 8b 3c 24 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f e9 f4 84 fa ff e8 8f 19 9a ff 90 <0f> 0b 4c 89 f7 e8 94 97 06 00 e9 38 ff ff ff 48 89 ef e8 97 96 06 [ 236.470356][ T8035] RSP: 0018:ffffc90006b377d0 EFLAGS: 00010293 [ 236.476421][ T8035] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff826e994b [ 236.484383][ T8035] RDX: ffff88801cb924c0 RSI: ffffffff826e9971 RDI: ffff88801cb924c0 [ 236.492341][ T8035] RBP: ffff888026f36060 R08: 0000000000000007 R09: 0000000000000000 [ 236.500298][ T8035] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888026f36060 [ 236.508258][ T8035] R13: ffff888026f36060 R14: ffff888026f36060 R15: ffff8880777be308 [ 236.516232][ T8035] FS: 0000000000000000(0000) GS:ffff888124445000(0000) knlGS:0000000000000000 [ 236.525248][ T8035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 236.531834][ T8035] CR2: 0000200000032000 CR3: 000000005e070000 CR4: 00000000003526f0 [ 236.539806][ T8035] Call Trace: [ 236.543079][ T8035] [ 236.546004][ T8035] hugetlb_vm_op_close+0x5cd/0x730 [ 236.551118][ T8035] ? __pfx_hugetlb_vm_op_close+0x10/0x10 [ 236.556744][ T8035] remove_vma+0x88/0x160 [ 236.560983][ T8035] tear_down_vmas+0x2a5/0x600 [ 236.565657][ T8035] exit_mmap+0x469/0xa30 [ 236.569868][ T8035] ? __pfx_exit_mmap+0x10/0x10 [ 236.574614][ T8035] ? trace_contention_end+0x140/0x180 [ 236.579954][ T8035] ? uprobe_clear_state+0x5f/0x360 [ 236.585047][ T8035] ? uprobe_clear_state+0x5f/0x360 [ 236.590146][ T8035] ? arch_uprobe_clear_state+0x107/0x150 [ 236.595756][ T8035] __mmput+0x12a/0x410 [ 236.599819][ T8035] mmput+0x67/0x80 [ 236.603519][ T8035] do_exit+0x78a/0x2aa0 [ 236.607670][ T8035] ? __lock_acquire+0x4a5/0x2630 [ 236.612591][ T8035] ? __pfx_do_exit+0x10/0x10 [ 236.617171][ T8035] ? do_raw_spin_lock+0x128/0x260 [ 236.622171][ T8035] ? find_held_lock+0x2b/0x80 [ 236.626824][ T8035] ? get_signal+0x7e0/0x21e0 [ 236.631392][ T8035] do_group_exit+0xd5/0x2a0 [ 236.635872][ T8035] get_signal+0x1ec7/0x21e0 [ 236.640346][ T8035] ? rcu_is_watching+0x12/0xc0 [ 236.645088][ T8035] ? finish_task_switch.isra.0+0x205/0xb80 [ 236.650868][ T8035] ? __pfx_get_signal+0x10/0x10 [ 236.655689][ T8035] arch_do_signal_or_restart+0x91/0x7a0 [ 236.661209][ T8035] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 236.667334][ T8035] ? __pfx___x64_sys_futex+0x10/0x10 [ 236.672595][ T8035] ? selinux_file_ioctl+0xb4/0x290 [ 236.677688][ T8035] exit_to_user_mode_loop+0x86/0x4a0 [ 236.682949][ T8035] do_syscall_64+0x67c/0xf80 [ 236.687516][ T8035] ? clear_bhb_loop+0x40/0x90 [ 236.692176][ T8035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.698036][ T8035] RIP: 0033:0x7fad2d79c799 [ 236.702417][ T8035] Code: Unable to access opcode bytes at 0x7fad2d79c76f. [ 236.709403][ T8035] RSP: 002b:00007fad2e6ba0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 236.717795][ T8035] RAX: fffffffffffffe00 RBX: 00007fad2da16188 RCX: 00007fad2d79c799 [ 236.725738][ T8035] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fad2da16188 [ 236.733679][ T8035] RBP: 00007fad2da16180 R08: 0000000000000000 R09: 0000000000000000 [ 236.741620][ T8035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.749573][ T8035] R13: 00007fad2da16218 R14: 00007ffc1c6cec10 R15: 00007ffc1c6cecf8 [ 236.757519][ T8035] [ 236.760510][ T8035] Modules linked in: [ 236.764661][ T8035] ---[ end trace 0000000000000000 ]--- [ 236.770784][ T30] audit: type=1326 audit(1772566195.318:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8036 comm="syz.2.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f3db4d9c799 code=0x7ffc0000 [ 236.793967][ T30] audit: type=1400 audit(1772566195.318:655): avc: denied { write } for pid=8036 comm="syz.2.527" path="socket:[16919]" dev="sockfs" ino=16919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 237.412456][ T8035] RIP: 0010:resv_map_release+0x1e2/0x280 [ 237.430828][ T8035] Code: 14 9a ff 48 85 db 75 1c e8 ab 19 9a ff 48 8b 3c 24 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f e9 f4 84 fa ff e8 8f 19 9a ff 90 <0f> 0b 4c 89 f7 e8 94 97 06 00 e9 38 ff ff ff 48 89 ef e8 97 96 06 [ 237.505538][ T8035] RSP: 0018:ffffc90006b377d0 EFLAGS: 00010293 [ 237.531204][ T8035] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff826e994b [ 237.549791][ T8035] RDX: ffff88801cb924c0 RSI: ffffffff826e9971 RDI: ffff88801cb924c0 [ 237.566623][ T8035] RBP: ffff888026f36060 R08: 0000000000000007 R09: 0000000000000000 [ 237.589955][ T8035] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888026f36060 [ 237.599098][ T8035] R13: ffff888026f36060 R14: ffff888026f36060 R15: ffff8880777be308 [ 237.607515][ T8035] FS: 0000000000000000(0000) GS:ffff888124445000(0000) knlGS:0000000000000000 [ 237.617936][ T8035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 237.628971][ T8035] CR2: 00007f67ab3e82f8 CR3: 000000005e070000 CR4: 00000000003526f0 [ 237.653483][ T8035] Kernel panic - not syncing: Fatal exception [ 237.659804][ T8035] Kernel Offset: disabled [ 237.664101][ T8035] Rebooting in 86400 seconds..