last executing test programs: 6m25.250879952s ago: executing program 0 (id=1579): setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xfffa, 0x9, 0x8, 0xfd, 0xbc, 0x29}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = inotify_init1(0x0) r5 = inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x400) r6 = dup(r4) inotify_rm_watch(r6, r5) openat(r6, &(0x7f00000000c0)='./file0\x00', 0x305c00, 0x142) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) r8 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000400)={0xf0f000, 0x1}) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x3, {{}, 0xfffff788}}, {0x8, 0x22eb, 0x2}, {0x8, 0x6558, 0x2}}}}}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x28, 0x4, 0x5, 0xffbff038}, {0x6, 0x27, 0x2, 0x207}]}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x70bd2c, 0x25dfdbff, {0xa, 0x27, 0x12, 0xff}, [@IFA_ADDRESS={0x14, 0x1, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) r10 = socket(0x10, 0x2, 0x0) write(r10, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) 6m23.765296299s ago: executing program 0 (id=1582): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="34d8b3cbe2afae46", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000000000000c410000004c0014fffffff062726f6164636173742d6c696e6b00"/98], 0x68}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x9, &(0x7f0000000440)=@framed={{}, [@generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000006c0)={0x0, 0x0, '\x00', @raw_data=[0x2, 0x9, 0x6, 0x4, 0x400, 0x6, 0x8, 0x40000000, 0x2, 0x8, 0x6, 0x100, 0x5, 0x800, 0x8, 0x101, 0x7, 0x7f, 0x3, 0x2, 0x40, 0xa, 0x401, 0x80000000, 0x561, 0x1607, 0x6, 0x6, 0x10, 0xeca4, 0x7c4c, 0x1]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r4, 0x2000300, 0xe, 0x0, &(0x7f0000000100)="630500020000000adf3da7b33389", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000300)) r7 = syz_open_procfs(0x0, &(0x7f0000002500)='net/wireless\x00') read$FUSE(r7, &(0x7f00000046c0)={0x2020}, 0x2021) ioctl$SNDRV_PCM_IOCTL_REWIND(r7, 0x40084146, &(0x7f0000000040)=0x8) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f0000020000), 0x0}) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x71, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 6m23.540853985s ago: executing program 0 (id=1585): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) setns(0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)}, 0x68) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xe, 0x492f, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r3, &(0x7f00000005c0), &(0x7f0000000580)=""/24}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x1901, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20002000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) kcmp(0xffffffffffffffff, 0x0, 0x1, r4, r5) r7 = syz_open_procfs(0x0, 0x0) write$tcp_mem(r7, &(0x7f0000000140), 0x48) 6m21.924636237s ago: executing program 0 (id=1587): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', 0x0, 0x8410, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000700)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) read$FUSE(r1, &(0x7f0000002700)={0x2020}, 0x2020) clock_gettime(0x0, &(0x7f0000001bc0)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x40) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x2004000) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)=@chain) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xc2, 0x39, 0xe0, 0x8, 0x22b8, 0x2d96, 0x43, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xff, 0x2, 0x20, 0x84, "", [{{0x9, 0x4, 0x27, 0xc, 0x0, 0x31, 0xd6, 0x2, 0x8}}]}}]}}, 0x0) 6m20.572046693s ago: executing program 0 (id=1591): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x920, 0x12) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0}) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000000)=""/214, 0x100000, 0x1000, 0x9}, 0x20) syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') setresuid(0x0, 0xee00, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x1c, '\x00', r4, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd7000fedbdf25010000002400068008000700", @ANYRES32=r4, @ANYBLOB="060005004e200000060001000a00000008000300ac1414290803000400000005000500000000000500050008000000050005007f00000008000300000000000500050066000000dbe33f94de267aa6253b559835304d17fe2105e250a5c83fa412b3f4b26b27e4ea5dd9ba694c62bc714eb2d15dbd8acfbfa8cbc658d504e28ba224bb47d53ceb70f546d4728b28f29b8b41832d597700d93ce7d9d3919f347d4751e28c"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000) symlink(&(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) 6m15.605025841s ago: executing program 0 (id=1593): socket$igmp(0x2, 0x3, 0x2) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_emit_ethernet(0x377, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x341, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1811"}, {0x0, 0x1, "000000050000000026000400"}, {0x4, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x5, "ffffffffffff00000000000200000000000000000000000000008879e66485201a0015ca837400000000"}, {0x0, 0xe, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d9"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) socket$kcm(0x10, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000480)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}]}, &(0x7f0000000100)=0x10) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000340)="0000000000000002ff69000000000001000000c0000000060002", 0x1a, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) write$dsp(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x2) fchdir(r4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000940)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/80, 0x50, 0x1, &(0x7f0000000900)=""/19, 0x13}, &(0x7f0000000980)=0x40) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140018800800014000000002070002"], 0x4c}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) request_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000780)='/*:@\x00', 0xfffffffffffffff9) 5m58.554348716s ago: executing program 32 (id=1593): socket$igmp(0x2, 0x3, 0x2) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_emit_ethernet(0x377, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x341, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1811"}, {0x0, 0x1, "000000050000000026000400"}, {0x4, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x5, "ffffffffffff00000000000200000000000000000000000000008879e66485201a0015ca837400000000"}, {0x0, 0xe, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d9"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) socket$kcm(0x10, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000480)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}]}, &(0x7f0000000100)=0x10) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000340)="0000000000000002ff69000000000001000000c0000000060002", 0x1a, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) write$dsp(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x2) fchdir(r4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000940)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/80, 0x50, 0x1, &(0x7f0000000900)=""/19, 0x13}, &(0x7f0000000980)=0x40) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140018800800014000000002070002"], 0x4c}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) request_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000780)='/*:@\x00', 0xfffffffffffffff9) 58.817509582s ago: executing program 2 (id=2868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f787900"], 0xcc}}, 0x0) 58.39726961s ago: executing program 2 (id=2873): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x6, 0x371, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(0x0, r0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000001a40)=ANY=[@ANYBLOB], 0x6) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4000890) r2 = socket$kcm(0x10, 0x2, 0x0) mq_open(0x0, 0x800, 0x80, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x18, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000400)=ANY=[@ANYRES8=r1], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = syz_open_dev$video(&(0x7f0000000100), 0x1, 0x4c641) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000040)=0xfffffffe) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000080)) socket(0x848000000015, 0x805, 0x0) 57.859168804s ago: executing program 4 (id=2882): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x6, 0x371, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(0x0, r0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000001a40)=ANY=[@ANYBLOB], 0x6) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4000890) r3 = socket$kcm(0x10, 0x2, 0x0) mq_open(0x0, 0x800, 0x80, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r4, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x18, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000400)=ANY=[@ANYRES8=r1], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r6 = syz_open_dev$video(&(0x7f0000000100), 0x1, 0x4c641) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000040)=0xfffffffe) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000080)) socket(0x848000000015, 0x805, 0x0) 57.364066292s ago: executing program 5 (id=2887): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000080000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @alu={0x7, 0x1, 0x0, 0x0, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 57.326544622s ago: executing program 2 (id=2888): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="000000002c9b66c6bd45af6d3a7169deb871fdc83ed494dbc5989fe968f90a9cdcb5f55e344084ec09bf", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf25020202000900010073797a3200000000140002006970365f767469300000000000000000"], 0x34}, 0x1, 0x40030000000000, 0x0, 0x4000000}, 0x80) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)}], 0x1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x1000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0xc0045543, &(0x7f0000000080)=0xfdfdfffd) msgsnd(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02"], 0x107, 0x800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_sysfs/bus/pci/devices/0000:00:03.0/resource0\x00', 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8) r5 = syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) socketpair$nbd(0x1, 0x1, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x8003) tkill(r5, 0x10810038) pread64(r4, &(0x7f0000000480)=""/2, 0x2, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000002c0)=@filter={'filter\x00', 0xe, 0x4, 0x550, 0xffffffff, 0x160, 0x290, 0x0, 0xffffffff, 0xffffffff, 0x4b0, 0x4b0, 0x4b0, 0xffffffff, 0x4, &(0x7f00000001c0), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @empty}, [0xff, 0xffffff00, 0xff, 0xff], [0x0, 0xff, 0xffffffff, 0xff], 'veth1_to_bridge\x00', 'syz_tun\x00', {}, {0xff}, 0x11, 0x4, 0x2, 0x2}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x3b, 0x4, 0xb2, 0x7, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @mcast2, [0xffffff00, 0x0, 0xff], [0xffffffff, 0x0, 0xff000000, 0xff000000], [0xff000000, 0xffffff00, 0xff], 0x4}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast1, [0xffffffff, 0xff, 0xff000000, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff], 'ipvlan1\x00', 'sit0\x00', {0xff}, {0xff}, 0x0, 0x8, 0x1, 0x8}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d3], 0x0, 0xcb}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x1f8, 0x220, 0x0, {}, [@common=@frag={{0x30}, {[0x7f, 0x3], 0x3, 0x10, 0x3}}, @common=@unspec=@comment={{0x120}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) 57.194266276s ago: executing program 5 (id=2890): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000400)={0x4, &(0x7f0000000580)=[{0x13, '\x00', @data=0xffffffff, 0x87}, {0x1e, '\x00', @st={0x4, [{0x3}, {0x2, @svalue=0xffff}, {0x0, @svalue=0x4}, {0x1, @uvalue=0x40000000007}]}, 0x6}, {0x2f, '\x00', @data=0x7, 0xa}, {0x40, '\x00', @st={0x4, [{0x1, @svalue=0x100000000003}, {0x2, @uvalue=0x952}, {0x2, @svalue=0x1}, {0x1, @uvalue=0x8}]}, 0x2}]}) 57.007020633s ago: executing program 5 (id=2892): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="581300004100070127bd7000fefdffff047c000008004280040008000c000180060006"], 0x1358}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) 56.786677218s ago: executing program 4 (id=2895): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)={0x2c, 0x26, 0x109, 0x870bd22, 0xfffffffa, {0x2}, [@nested={0x8, 0x3d, 0x0, 0x1, [@nested={0x4, 0x125}]}, @typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}, @typed={0x8, 0x3e, 0x0, 0x0, @ipv4=@multicast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x600c800) 56.766761048s ago: executing program 3 (id=2896): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x8800) 56.72629668s ago: executing program 5 (id=2897): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0xffffffffffffffe3, &(0x7f0000000380)="eb00000000000010000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 56.637354016s ago: executing program 1 (id=2898): r0 = syz_open_dev$evdev(&(0x7f0000000140), 0xfbe, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000380)=""/115) 56.599224438s ago: executing program 3 (id=2899): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={0x0, 0x101f, 0x800}, 0x20) 56.535090277s ago: executing program 4 (id=2900): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020e0080150000000200000000000000030005000000000002004e24ac1e00010000000000000000030006003c200000020000fc34000000000000000000000001001800000000000800120000000a00fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400", @ANYRES64=r0], 0xa8}}, 0x2) 56.444864626s ago: executing program 5 (id=2901): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101001, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 56.403691175s ago: executing program 1 (id=2902): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000004100010028bd7000fedbdf250100000004004880200001801c0010800400108014000f00fc000000000000000000000000000000140002"], 0x4c}, 0x1, 0x0, 0x0, 0xd46ae33d42132da9}, 0x200080c4) 56.38759728s ago: executing program 3 (id=2903): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x3c, 0x0, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9200}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x4, 0x2, 0x1, 0x0, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x94}, 0x54004) 56.32654814s ago: executing program 4 (id=2904): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x80400) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000003c0)={0x0, 0x0}) 56.282781054s ago: executing program 5 (id=2905): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x6, 0x371, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(0x0, r0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000001a40)=ANY=[@ANYBLOB], 0x6) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4000890) r3 = socket$kcm(0x10, 0x2, 0x0) mq_open(0x0, 0x800, 0x80, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r4, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x18, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000400)=ANY=[@ANYRES8=r1], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r6 = syz_open_dev$video(&(0x7f0000000100), 0x1, 0x4c641) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000040)=0xfffffffe) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000080)) socket(0x848000000015, 0x805, 0x0) 56.194100576s ago: executing program 3 (id=2906): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x5, 0x0, &(0x7f0000000180)) 56.181318427s ago: executing program 2 (id=2907): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYBLOB="20810e56"], 0x120}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 56.164212401s ago: executing program 1 (id=2908): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8c0100002d00070100000000ffdbdf25017c00000800018004000600700102806a01028061"], 0x18c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 56.025734949s ago: executing program 4 (id=2909): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x29, 0xe, 0x0, &(0x7f0000000540)="dd2000000000000000006f71bb2f", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 55.954891773s ago: executing program 3 (id=2910): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000600)={0x16, 0x98, 0xfa00, {0x0, 0x1, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x6385, 0x1ff, {"ff47df09000000008000000000005681"}, 0x6, 0x9, 0xc00002}}}, 0xa0) 55.861242268s ago: executing program 1 (id=2911): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 55.85068462s ago: executing program 2 (id=2912): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000080)={0x0, 0xfda7, &(0x7f0000000340)={&(0x7f0000000140)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6bcd41fd8"}}, 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x410) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x0, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0x4, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) r7 = syz_open_dev$sndpcmp(0x0, 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r7, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r7, 0x40084149, &(0x7f0000000080)=0xfd8) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 55.728211964s ago: executing program 4 (id=2913): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1b96, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0xb0, 0x4, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x3, 0x18, {0x9, 0x21, 0x800, 0x2, 0x1, {0x22, 0xfab}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0x9, 0xa5}}}}}]}}]}}, &(0x7f0000000c00)={0x0, 0x0, 0x19, &(0x7f0000000800)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x40, "fc13e699b673d5d5eb3b9205ca13667e"}]}, 0x2, [{0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="0f82d57b8cedb21a768fe81d06020399bb3bf3e93b3023c7e05b190b54952240a530fa2d0f781dd999033e452609021f773b953a5a53f5b8c19c50b5b26af2b1cafc45ebfbb8d3885b40a64bda2ecd4e6b4de7ba97f3bf6fc6ef362e"]}, {0x0, 0x0}]}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r5, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x217}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x4004880}, 0x40) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40002, 0x16c) write(r9, &(0x7f0000000000)='3', 0x4e) ioctl$KVM_RUN(r8, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1bf) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0) write(r10, &(0x7f0000000300)='offline', 0x7) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r11, 0x0, 0x0) 55.592451785s ago: executing program 3 (id=2914): mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000740)='127.0.0.1:/\x00', &(0x7f0000000700)='./mnt\x00', &(0x7f0000000780), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,vers=4.1,noresvport']) 55.056709594s ago: executing program 1 (id=2915): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, &(0x7f0000000080)="003f752bba21ee9c102dcc20199be8f21909ad8349aa00f16c1e8b96a0315d85850ed67ae89745c47717ffc4e04da79d4630906b63077ae676e22fdcc8af206cbefece7d233a54dea1407fdea1c53a28203a97cff54fca6f75ebe4f269350f3e2a", 0x0}, 0x50) 54.389836585s ago: executing program 2 (id=2916): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="021800000a0000000000000000000000030005000010000002000404e0000001000000000000000005000600008000000a"], 0x50}}, 0x0) 53.690624522s ago: executing program 1 (id=2917): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004054}, 0x4000840) 0s ago: executing program 33 (id=2905): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x6, 0x371, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(0x0, r0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000001a40)=ANY=[@ANYBLOB], 0x6) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4000890) r3 = socket$kcm(0x10, 0x2, 0x0) mq_open(0x0, 0x800, 0x80, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r4, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x18, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000400)=ANY=[@ANYRES8=r1], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r6 = syz_open_dev$video(&(0x7f0000000100), 0x1, 0x4c641) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000040)=0xfffffffe) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000080)) socket(0x848000000015, 0x805, 0x0) kernel console output (not intermixed with test programs): rsing attributes in process `syz.2.1740'. [ 1011.368220][T13931] netlink: 34959 bytes leftover after parsing attributes in process `syz.2.1740'. [ 1012.286732][ T30] audit: type=1400 audit(1790472637.521:2894): avc: denied { mount } for pid=13939 comm="syz.3.1743" name="/" dev="rpc_pipefs" ino=50640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1012.417728][ T30] audit: type=1400 audit(1790472637.964:2895): avc: denied { checkpoint_restore } for pid=13950 comm="syz.3.1744" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1012.608634][ T5694] usbhid 5-1:1.0: can't add hid device: -71 [ 1012.608738][ T5694] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1012.649595][ T5694] usb 5-1: USB disconnect, device number 83 [ 1012.743670][ T30] audit: type=1400 audit(1790472638.268:2896): avc: denied { write } for pid=13953 comm="syz.4.1747" name="sg0" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1012.769664][ T30] audit: type=1400 audit(1790472638.296:2897): avc: denied { ioctl } for pid=13953 comm="syz.4.1747" path="/dev/sg0" dev="devtmpfs" ino=945 ioctlcmd=0x227d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1012.769840][ T30] audit: type=1400 audit(1790472638.296:2898): avc: denied { append } for pid=13952 comm="syz.2.1745" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1012.816682][ T30] audit: type=1400 audit(1790472638.314:2899): avc: denied { write } for pid=13952 comm="syz.2.1745" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1013.012223][ T30] audit: type=1400 audit(1790472638.517:2900): avc: denied { bind } for pid=13960 comm="syz.1.1746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1014.358834][ T30] audit: type=1400 audit(1790472639.754:2901): avc: denied { bind } for pid=13964 comm="syz.5.1749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1014.500442][ T30] audit: type=1400 audit(1790472639.883:2902): avc: denied { read } for pid=13964 comm="syz.5.1749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1014.544148][ T30] audit: type=1400 audit(1790472639.901:2903): avc: denied { append } for pid=13964 comm="syz.5.1749" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1014.760824][T13970] comedi comedi1: reset error (fatal) [ 1014.988723][T13047] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1015.270398][ T5721] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1015.559835][T13047] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1015.559931][T13047] usb 6-1: New USB device found, idVendor=134c, idProduct=0003, bcdDevice=e5.c0 [ 1015.573971][T13047] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1015.574033][T13047] usb 6-1: can't read configurations, error -71 [ 1015.615722][ T30] audit: type=1400 audit(1790472640.916:2904): avc: denied { watch } for pid=13967 comm="syz.1.1750" path="/374" dev="tmpfs" ino=2173 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1015.774346][ T5721] usb 3-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 1015.942678][ T5721] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1015.942713][ T5721] usb 3-1: can't read configurations, error -71 [ 1018.025650][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1018.025689][ T30] audit: type=1400 audit(1790472643.131:2906): avc: denied { name_connect } for pid=13990 comm="syz.3.1753" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1018.205427][T13994] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1753'. [ 1018.216735][ T30] audit: type=1400 audit(1790472643.260:2907): avc: denied { listen } for pid=13990 comm="syz.3.1753" lport=45057 faddr=10.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1018.216927][ T30] audit: type=1400 audit(1790472643.269:2908): avc: denied { accept } for pid=13990 comm="syz.3.1753" lport=45057 faddr=10.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1018.518167][T13994] bond0 (unregistering): Released all slaves [ 1018.698163][ T30] audit: type=1400 audit(1790472643.768:2909): avc: denied { execute } for pid=13997 comm="syz.5.1755" name="file1" dev="tmpfs" ino=78 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1018.698779][ T30] audit: type=1400 audit(1790472643.768:2910): avc: denied { execute_no_trans } for pid=13997 comm="syz.5.1755" path="/11/file1" dev="tmpfs" ino=78 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1018.773338][T13999] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1755'. [ 1019.667263][T14008] tipc: Bearer : already 2 bearers with priority 10 [ 1019.667321][T14008] tipc: Bearer : trying with adjusted priority [ 1019.667882][T14008] tipc: Enabled bearer , priority 9 [ 1020.917002][ T5694] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1021.082141][ T5694] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1021.087855][ T5694] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1021.087901][ T5694] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1021.088025][ T5694] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.164540][ T5694] usb 5-1: config 0 descriptor?? [ 1022.461749][ T5694] usbhid 5-1:0.0: can't add hid device: -32 [ 1022.461844][ T5694] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 1022.505307][ T5694] usb 5-1: USB disconnect, device number 84 [ 1022.676951][T14022] ip6gretap0: left allmulticast mode [ 1022.723196][T14022] ip6gretap0: left promiscuous mode [ 1022.796339][T14022] bridge0: port 3(ip6gretap0) entered disabled state [ 1022.962861][T14022] bridge_slave_0: left allmulticast mode [ 1022.962925][T14022] bridge_slave_0: left promiscuous mode [ 1022.963409][T14022] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.109286][ T30] audit: type=1400 audit(1790472647.837:2911): avc: denied { write } for pid=14021 comm="syz.2.1761" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1023.113224][ T30] audit: type=1400 audit(1790472647.837:2912): avc: denied { open } for pid=14021 comm="syz.2.1761" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1023.959173][T14022] bridge_slave_1: left allmulticast mode [ 1023.959351][T14022] bridge_slave_1: left promiscuous mode [ 1023.962475][T14022] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.247251][T14031] random: crng reseeded on system resumption [ 1024.320230][T14022] team0: Port device team_slave_0 removed [ 1024.345799][ T30] audit: type=1400 audit(1790472648.981:2913): avc: denied { mount } for pid=14033 comm="syz.1.1763" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1024.380786][T14022] team0: Port device team_slave_1 removed [ 1024.392970][T14022] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1024.411883][T14001] tipc: Resetting bearer [ 1024.475470][T14001] tipc: Disabling bearer [ 1024.520526][T14028] team0: Port device xfrm0 added [ 1024.525668][T14030] tipc: Enabling of bearer rejected, failed to enable media [ 1025.046740][ T30] audit: type=1400 audit(1790472649.627:2914): avc: denied { read } for pid=14046 comm="syz.5.1765" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1025.047182][ T30] audit: type=1400 audit(1790472649.627:2915): avc: denied { open } for pid=14046 comm="syz.5.1765" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1025.279452][T14052] JFS: discard option not supported on device [ 1025.368877][T14052] Mount JFS Failure: -5 [ 1025.368942][T14052] jfs_mount failed w/return code = -5 [ 1025.512099][ T30] audit: type=1400 audit(1790472649.839:2916): avc: denied { mounton } for pid=14046 comm="syz.5.1765" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1025.512197][ T30] audit: type=1400 audit(1790472650.014:2917): avc: denied { ioctl } for pid=14046 comm="syz.5.1765" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1026.056692][ T5694] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1026.219435][ T5694] usb 6-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 1026.225394][ T5694] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1026.225429][ T5694] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1026.225466][ T5694] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.662799][T14060] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1030.068904][ T5694] usbhid 6-1:1.0: can't add hid device: -71 [ 1030.068998][ T5694] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 1030.071329][ T5694] usb 6-1: USB disconnect, device number 5 [ 1030.354883][ T30] audit: type=1400 audit(1790472654.517:2918): avc: denied { create } for pid=14079 comm="syz.1.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1031.426051][T14065] bridge0: port 1(netdevsim0) entered blocking state [ 1031.426193][T14065] bridge0: port 1(netdevsim0) entered disabled state [ 1031.426341][T14065] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1031.527754][T14065] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1031.534633][T14065] bridge0: port 1(netdevsim0) entered blocking state [ 1031.534775][T14065] bridge0: port 1(netdevsim0) entered forwarding state [ 1032.215047][ T5842] IPVS: starting estimator thread 0... [ 1032.439012][T14089] IPVS: using max 35 ests per chain, 84000 per kthread [ 1034.555548][ T30] audit: type=1400 audit(1790472658.402:2919): avc: denied { watch } for pid=14091 comm="syz.4.1774" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1035.053045][T14104] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1035.065683][ T30] audit: type=1400 audit(1790472658.845:2920): avc: denied { read write } for pid=14091 comm="syz.4.1774" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1035.167788][ T30] audit: type=1400 audit(1790472658.881:2921): avc: denied { open } for pid=14091 comm="syz.4.1774" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1035.362152][ T30] audit: type=1400 audit(1790472659.140:2922): avc: denied { read write } for pid=14091 comm="syz.4.1774" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1035.407363][ T30] audit: type=1400 audit(1790472659.177:2923): avc: denied { open } for pid=14091 comm="syz.4.1774" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1035.555456][ T30] audit: type=1400 audit(1790472659.297:2924): avc: denied { ioctl } for pid=14091 comm="syz.4.1774" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1036.756307][T14097] ALSA: mixer_oss: invalid OSS volume '0xffffffffffffffff0x0000000000' [ 1036.976423][ T30] audit: type=1400 audit(1790472660.625:2925): avc: denied { ioctl } for pid=14111 comm="syz.1.1778" path="socket:[51370]" dev="sockfs" ino=51370 ioctlcmd=0x5607 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1037.426354][T14128] JFS: discard option not supported on device [ 1037.429299][T14128] Mount JFS Failure: -5 [ 1037.429365][T14128] jfs_mount failed w/return code = -5 [ 1037.904228][ T8046] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1038.064673][ T8046] usb 5-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 1038.066607][ T8046] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1038.066668][ T8046] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1038.066735][ T8046] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.284092][T14144] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 1039.587996][ T30] audit: type=1400 audit(1790472663.034:2926): avc: denied { create } for pid=14151 comm="syz.3.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1039.653493][ T30] audit: type=1400 audit(1790472663.098:2927): avc: denied { allowed } for pid=14151 comm="syz.3.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1039.653588][ T30] audit: type=1400 audit(1790472663.098:2928): avc: denied { create } for pid=14151 comm="syz.3.1789" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1039.653633][ T30] audit: type=1400 audit(1790472663.098:2929): avc: denied { map } for pid=14151 comm="syz.3.1789" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=51110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1039.653688][ T30] audit: type=1400 audit(1790472663.098:2930): avc: denied { read write } for pid=14151 comm="syz.3.1789" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=51110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1039.760387][ T30] audit: type=1400 audit(1790472663.144:2931): avc: denied { create } for pid=14139 comm="syz.2.1771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1039.760438][ T30] audit: type=1400 audit(1790472663.144:2932): avc: denied { ioctl } for pid=14139 comm="syz.2.1771" path="socket:[51415]" dev="sockfs" ino=51415 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1039.760483][ T30] audit: type=1400 audit(1790472663.144:2933): avc: denied { connect } for pid=14139 comm="syz.2.1771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1039.760523][ T30] audit: type=1400 audit(1790472663.172:2934): avc: denied { write } for pid=14139 comm="syz.2.1771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1040.197263][ T5608] Bluetooth: hci4: unexpected event for opcode 0x1001 [ 1040.373677][T14161] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1791'. [ 1040.391262][T14161] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1791'. [ 1040.742245][ T8046] usbhid 5-1:1.0: can't add hid device: -71 [ 1040.742412][ T8046] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1040.777146][ T8046] usb 5-1: USB disconnect, device number 85 [ 1041.225187][T14167] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1042.461457][T14182] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 1042.471744][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1042.471761][ T30] audit: type=1400 audit(1790472665.700:2949): avc: denied { create } for pid=14175 comm="syz.1.1799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1042.482478][T14184] jffs2: notice: (14184) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 1042.486371][ T30] audit: type=1400 audit(1790472665.719:2950): avc: denied { mount } for pid=14179 comm="syz.3.1800" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1043.323348][ T30] audit: type=1400 audit(1790472666.235:2951): avc: denied { create } for pid=14170 comm="syz.5.1795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1043.323448][ T30] audit: type=1400 audit(1790472666.263:2952): avc: denied { write } for pid=14170 comm="syz.5.1795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1043.323518][ T30] audit: type=1400 audit(1790472666.291:2953): avc: denied { sys_module } for pid=14170 comm="syz.5.1795" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1043.323591][ T30] audit: type=1400 audit(1790472666.300:2954): avc: denied { module_load } for pid=14170 comm="syz.5.1795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1043.323661][ T30] audit: type=1400 audit(1790472666.337:2955): avc: denied { create } for pid=14170 comm="syz.5.1795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1043.323733][ T30] audit: type=1400 audit(1790472666.355:2956): avc: denied { write } for pid=14170 comm="syz.5.1795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1043.323797][ T30] audit: type=1400 audit(1790472666.355:2957): avc: denied { connect } for pid=14170 comm="syz.5.1795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1043.323852][ T30] audit: type=1400 audit(1790472666.365:2958): avc: denied { name_connect } for pid=14170 comm="syz.5.1795" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1043.846011][T14198] xt_hashlimit: max too large, truncated to 1048576 [ 1044.012143][T14177] xt_hashlimit: max too large, truncated to 1048576 [ 1047.974793][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 1047.974812][ T30] audit: type=1400 audit(1790472670.775:2977): avc: denied { mount } for pid=14220 comm="syz.2.1808" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1049.500242][ T30] audit: type=1400 audit(1790472672.168:2978): avc: denied { mount } for pid=14227 comm="syz.5.1809" name="/" dev="rpc_pipefs" ino=51531 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1049.500702][ T30] audit: type=1400 audit(1790472672.168:2979): avc: denied { create } for pid=14227 comm="syz.5.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1049.501026][ T30] audit: type=1400 audit(1790472672.168:2980): avc: denied { create } for pid=14227 comm="syz.5.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1049.501376][ T30] audit: type=1400 audit(1790472672.168:2981): avc: denied { bind } for pid=14227 comm="syz.5.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1049.504966][ T30] audit: type=1400 audit(1790472672.187:2982): avc: denied { listen } for pid=14227 comm="syz.5.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1049.505566][ T30] audit: type=1400 audit(1790472672.187:2983): avc: denied { write } for pid=14227 comm="syz.5.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1049.808783][ T30] audit: type=1400 audit(1790472672.464:2984): avc: denied { unmount } for pid=13200 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1049.875340][ T30] audit: type=1400 audit(1790472672.528:2985): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1049.897973][T14235] netlink: 328 bytes leftover after parsing attributes in process `syz.1.1810'. [ 1049.898001][T14235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1810'. [ 1051.101432][ T30] audit: type=1400 audit(1790472673.663:2986): avc: denied { mount } for pid=14234 comm="syz.3.1811" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1051.598059][T14248] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1052.522073][T14258] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 1054.305244][T14275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1820'. [ 1054.650583][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1054.650608][ T30] audit: type=1400 audit(1790472676.191:2991): avc: denied { mount } for pid=14267 comm="syz.4.1819" name="/" dev="configfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1054.650654][ T30] audit: type=1400 audit(1790472676.191:2992): avc: denied { search } for pid=14267 comm="syz.4.1819" name="/" dev="configfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1054.650689][ T30] audit: type=1400 audit(1790472676.191:2993): avc: denied { search } for pid=14267 comm="syz.4.1819" name="usb_gadget" dev="configfs" ino=668 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1054.650722][ T30] audit: type=1400 audit(1790472676.191:2994): avc: denied { search } for pid=14267 comm="syz.4.1819" name="/" dev="configfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1054.650757][ T30] audit: type=1400 audit(1790472676.191:2995): avc: denied { search } for pid=14267 comm="syz.4.1819" name="usb_gadget" dev="configfs" ino=668 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1054.650791][ T30] audit: type=1400 audit(1790472676.200:2996): avc: denied { search } for pid=14267 comm="syz.4.1819" name="g1" dev="configfs" ino=15920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1054.650826][ T30] audit: type=1400 audit(1790472676.200:2997): avc: denied { search } for pid=14267 comm="syz.4.1819" name="functions" dev="configfs" ino=15921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1054.650864][ T30] audit: type=1400 audit(1790472676.200:2998): avc: denied { write search } for pid=14267 comm="syz.4.1819" name="functions" dev="configfs" ino=15921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1054.650897][ T30] audit: type=1400 audit(1790472676.200:2999): avc: denied { add_name } for pid=14267 comm="syz.4.1819" name="acm.usb0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1054.650930][ T30] audit: type=1400 audit(1790472676.200:3000): avc: denied { create } for pid=14267 comm="syz.4.1819" name="acm.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 1056.638209][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1056.638317][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.683398][T14286] mac80211_hwsim hwsim8 »»»»»»: renamed from wlan0 (while UP) [ 1057.417561][T14286] openvswitch: netlink: Missing key (keys=c0, expected=2000) [ 1057.692766][T14299] FAULT_INJECTION: forcing a failure. [ 1057.692766][T14299] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1057.692808][T14299] CPU: 0 UID: 0 PID: 14299 Comm: syz.5.1825 Tainted: G L syzkaller #0 PREEMPT(full) [ 1057.692843][T14299] Tainted: [L]=SOFTLOCKUP [ 1057.692851][T14299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1057.692865][T14299] Call Trace: [ 1057.692871][T14299] [ 1057.692880][T14299] dump_stack_lvl+0x100/0x190 [ 1057.692921][T14299] should_fail_ex.cold+0x5/0xa [ 1057.692954][T14299] get_futex_key+0x1d0/0x14f0 [ 1057.692992][T14299] ? __pfx_get_futex_key+0x10/0x10 [ 1057.693020][T14299] ? do_syscall_64+0x123/0x790 [ 1057.693054][T14299] futex_wake+0xf4/0x5e0 [ 1057.693079][T14299] ? __pfx_futex_wake+0x10/0x10 [ 1057.693115][T14299] do_futex+0x2b2/0x440 [ 1057.693147][T14299] ? __pfx_do_futex+0x10/0x10 [ 1057.693176][T14299] ? lockdep_hardirqs_on+0x7d/0x110 [ 1057.693212][T14299] ? __do_sys_request_key+0x2b0/0x3c0 [ 1057.693247][T14299] ? __do_sys_request_key+0x35c/0x3c0 [ 1057.693285][T14299] __x64_sys_futex+0x34f/0x4d0 [ 1057.693319][T14299] ? __do_sys_request_key+0x203/0x3c0 [ 1057.693353][T14299] ? __pfx___x64_sys_futex+0x10/0x10 [ 1057.693398][T14299] do_syscall_64+0x123/0x790 [ 1057.693423][T14299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.693446][T14299] RIP: 0033:0x7fd69c59e159 [ 1057.693465][T14299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1057.693485][T14299] RSP: 002b:00007fd69d4230e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1057.693508][T14299] RAX: ffffffffffffffda RBX: 00007fd69c826098 RCX: 00007fd69c59e159 [ 1057.693523][T14299] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd69c82609c [ 1057.693537][T14299] RBP: 00007fd69c826090 R08: 0000000000000001 R09: 0000000000000000 [ 1057.693552][T14299] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1057.693566][T14299] R13: 00007fd69c826128 R14: 00007ffefdfd2350 R15: 00007ffefdfd2438 [ 1057.693607][T14299] [ 1058.232061][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1058.468690][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1058.468752][ T9] usb 6-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 1058.490451][ T9] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1058.490486][ T9] usb 6-1: can't read configurations, error -71 [ 1058.583243][T14313] bond0: (slave bridge0): Releasing backup interface [ 1058.586168][T14313] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.586367][T14313] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.656385][T14313] bridge_slave_0: left allmulticast mode [ 1058.656439][T14313] bridge_slave_0: left promiscuous mode [ 1058.656733][T14313] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.706234][T14313] bridge_slave_1: left allmulticast mode [ 1058.706275][T14313] bridge_slave_1: left promiscuous mode [ 1058.715008][T14313] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.886001][T14313] bond0: (slave 30): Releasing backup interface [ 1058.906779][ T5701] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1058.908249][T14313] bond0: (slave bond_slave_1): Releasing backup interface [ 1058.956360][T14313] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1058.991775][T14325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1829'. [ 1059.080699][ T5701] usb 3-1: Using ep0 maxpacket: 8 [ 1059.082007][ T5701] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1059.085038][ T5701] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1059.085080][ T5701] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1059.085122][ T5701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.138936][ T5701] usb 3-1: config 0 descriptor?? [ 1059.153441][ T5701] qmi_wwan 3-1:0.0: probe with driver qmi_wwan failed with error -22 [ 1059.400017][ T5701] usb 3-1: USB disconnect, device number 103 [ 1060.973066][ T9] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1061.153407][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1061.164366][ T9] usb 3-1: New USB device found, idVendor=1b96, idProduct=0001, bcdDevice= 0.40 [ 1061.197854][ T9] usb 3-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1061.197911][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1061.281662][ T9] usb 3-1: language id specifier not provided by device, defaulting to English [ 1061.327681][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.327747][ T9] usb 3-1: Product: syz [ 1061.327784][ T9] usb 3-1: Manufacturer: æ€ë¢½à°–蕳Ẋâ²ì—Œáºä†¥â·ƒã·½é°£å¨´êµíƒ¦îœ†ä¼‹ä˜çŒ¤é©¶éŠã¥’﨑竈é‰æ·íŠ™á¦¶æ‚šë¥á»æ¢²ìžã¥†ï…¾î·ä¤³à¡¹à´—둃账å’⌥醇ⶊ궶໣鑑艗⃜解 [ 1061.327891][ T9] usb 3-1: SerialNumber: syz [ 1061.845847][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 1061.845907][ T30] audit: type=1400 audit(1790472683.564:3029): avc: denied { write } for pid=14336 comm="syz.2.1834" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1062.435981][T14349] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 1062.439825][T14349] flags: 0x17ff00000002000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 1062.439962][T14349] raw: 017ff00000002000 ffffea0004200008 ffffea0004200008 0000000000000000 [ 1062.440315][T14349] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 1062.440352][T14349] page dumped because: unmovable page [ 1062.440420][T14349] page_owner info is not present (never set?) [ 1062.486337][ T30] audit: type=1400 audit(1790472684.154:3030): avc: denied { read } for pid=4951 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1062.486419][ T30] audit: type=1400 audit(1790472684.163:3031): avc: denied { search } for pid=4951 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1062.486488][ T30] audit: type=1400 audit(1790472684.163:3032): avc: denied { append } for pid=4951 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1062.486557][ T30] audit: type=1400 audit(1790472684.163:3033): avc: denied { open } for pid=4951 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1062.486627][ T30] audit: type=1400 audit(1790472684.163:3034): avc: denied { getattr } for pid=4951 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1063.444826][T14354] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1835'. [ 1065.284767][ T9] usbhid 3-1:1.0: can't add hid device: -71 [ 1065.284861][ T9] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1065.298919][ T9] usb 3-1: USB disconnect, device number 104 [ 1065.334354][ T5608] Bluetooth: hci1: unexpected event for opcode 0x0c24 [ 1065.613474][T14368] FAULT_INJECTION: forcing a failure. [ 1065.613474][T14368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1065.613530][T14368] CPU: 0 UID: 0 PID: 14368 Comm: syz.4.1839 Tainted: G L syzkaller #0 PREEMPT(full) [ 1065.613569][T14368] Tainted: [L]=SOFTLOCKUP [ 1065.613578][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1065.613592][T14368] Call Trace: [ 1065.613600][T14368] [ 1065.613610][T14368] dump_stack_lvl+0x100/0x190 [ 1065.613650][T14368] should_fail_ex.cold+0x5/0xa [ 1065.613684][T14368] strncpy_from_user+0x3b/0x2d0 [ 1065.613716][T14368] __do_sys_request_key+0xac/0x3c0 [ 1065.613755][T14368] ? __pfx___do_sys_request_key+0x10/0x10 [ 1065.613804][T14368] do_syscall_64+0x123/0x790 [ 1065.613830][T14368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.613853][T14368] RIP: 0033:0x7f8bbff9e159 [ 1065.613871][T14368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1065.613893][T14368] RSP: 002b:00007f8bbe1f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 1065.613916][T14368] RAX: ffffffffffffffda RBX: 00007f8bc0226090 RCX: 00007f8bbff9e159 [ 1065.613931][T14368] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 1065.613946][T14368] RBP: 00007f8bc003506b R08: 0000000000000000 R09: 0000000000000000 [ 1065.613960][T14368] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 1065.613975][T14368] R13: 00007f8bc0226128 R14: 00007f8bc0226090 R15: 00007ffd2361a9e8 [ 1065.614006][T14368] [ 1065.801504][ T30] audit: type=1400 audit(1790472687.227:3035): avc: denied { setopt } for pid=14370 comm="syz.1.1841" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1065.808291][T14372] netlink: 'syz.1.1841': attribute type 10 has an invalid length. [ 1065.808310][T14372] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1841'. [ 1065.868975][ T30] audit: type=1400 audit(1790472687.291:3036): avc: denied { mounton } for pid=14370 comm="syz.1.1841" path="/394/file0" dev="tmpfs" ino=2292 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1065.991300][ T9] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1066.237797][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1066.237844][ T9] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 1066.238690][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1066.238723][ T9] usb 5-1: can't read configurations, error -71 [ 1066.341169][T14374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1841'. [ 1066.341421][T14375] netlink: 34959 bytes leftover after parsing attributes in process `syz.1.1841'. [ 1066.458714][ T30] audit: type=1400 audit(1790472687.836:3037): avc: denied { setopt } for pid=14376 comm="syz.3.1842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1066.461152][ T30] audit: type=1400 audit(1790472687.836:3038): avc: denied { write } for pid=14376 comm="syz.3.1842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1067.328159][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1067.328177][ T30] audit: type=1400 audit(1790472688.638:3041): avc: denied { mounton } for pid=14376 comm="syz.3.1842" path="/405/dev" dev="tmpfs" ino=2368 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1067.431981][ T30] audit: type=1400 audit(1790472688.731:3042): avc: denied { mount } for pid=14376 comm="syz.3.1842" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1067.466145][ T30] audit: type=1400 audit(1790472688.768:3043): avc: denied { execmem } for pid=14381 comm="syz.5.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1067.749288][ T30] audit: type=1400 audit(1790472689.017:3044): avc: denied { create } for pid=14381 comm="syz.5.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1067.749401][ T30] audit: type=1400 audit(1790472689.017:3045): avc: denied { ioctl } for pid=14381 comm="syz.5.1844" path="socket:[52755]" dev="sockfs" ino=52755 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1067.749519][ T30] audit: type=1400 audit(1790472689.017:3046): avc: denied { connect } for pid=14381 comm="syz.5.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1067.749651][ T30] audit: type=1400 audit(1790472689.017:3047): avc: denied { write } for pid=14381 comm="syz.5.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1068.682954][ T30] audit: type=1400 audit(1790472689.884:3048): avc: denied { unmount } for pid=7736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1069.520010][ T30] audit: type=1400 audit(1790472689.967:3049): avc: denied { create } for pid=14389 comm="syz.1.1845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1069.520062][ T30] audit: type=1400 audit(1790472689.967:3050): avc: denied { create } for pid=14389 comm="syz.1.1845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1069.752591][T14404] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1847'. [ 1069.849169][ T9778] Bluetooth: hci5: command 0x0406 tx timeout [ 1070.684832][T14412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1848'. [ 1070.688541][T14412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1848'. [ 1070.688944][T14412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1848'. [ 1070.724405][T14412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1848'. [ 1070.724664][T14412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1848'. [ 1071.064141][T14412] syz.1.1848: vmalloc error: size 34359742464, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1071.064237][T14412] CPU: 0 UID: 0 PID: 14412 Comm: syz.1.1848 Tainted: G L syzkaller #0 PREEMPT(full) [ 1071.064269][T14412] Tainted: [L]=SOFTLOCKUP [ 1071.064278][T14412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1071.064292][T14412] Call Trace: [ 1071.064299][T14412] [ 1071.064309][T14412] dump_stack_lvl+0x100/0x190 [ 1071.064348][T14412] warn_alloc.cold+0x9e/0xb2 [ 1071.064375][T14412] ? __pfx_warn_alloc+0x10/0x10 [ 1071.064396][T14412] ? __kasan_kmalloc+0xaa/0xb0 [ 1071.064426][T14412] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1071.064462][T14412] ? xskq_create+0x52/0x290 [ 1071.064492][T14412] ? do_sock_setsockopt+0xf3/0x1d0 [ 1071.064529][T14412] ? do_syscall_64+0x123/0x790 [ 1071.064550][T14412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.064589][T14412] ? xsk_setsockopt+0x56f/0xab0 [ 1071.064625][T14412] __vmalloc_node_range_noprof+0x123b/0x1420 [ 1071.064673][T14412] ? xsk_setsockopt+0x56f/0xab0 [ 1071.064711][T14412] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1071.064744][T14412] ? kasan_save_track+0x14/0x30 [ 1071.064771][T14412] ? __kasan_kmalloc+0xaa/0xb0 [ 1071.064798][T14412] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1071.064835][T14412] ? xskq_create+0x52/0x290 [ 1071.064866][T14412] ? xsk_setsockopt+0x56f/0xab0 [ 1071.064896][T14412] xskq_create+0x18f/0x290 [ 1071.064927][T14412] ? xsk_setsockopt+0x56f/0xab0 [ 1071.064960][T14412] xsk_setsockopt+0x56f/0xab0 [ 1071.064992][T14412] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1071.065023][T14412] ? find_held_lock+0x2b/0x80 [ 1071.065055][T14412] ? __fget_files+0x215/0x3d0 [ 1071.065090][T14412] ? selinux_socket_setsockopt+0x6a/0x80 [ 1071.065116][T14412] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1071.065148][T14412] do_sock_setsockopt+0xf3/0x1d0 [ 1071.065186][T14412] __sys_setsockopt+0x195/0x220 [ 1071.065221][T14412] __x64_sys_setsockopt+0xbd/0x160 [ 1071.065249][T14412] ? do_syscall_64+0xae/0x790 [ 1071.065270][T14412] ? lockdep_hardirqs_on+0x7d/0x110 [ 1071.065306][T14412] do_syscall_64+0x123/0x790 [ 1071.065331][T14412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.065355][T14412] RIP: 0033:0x7f538e99e159 [ 1071.065374][T14412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1071.065396][T14412] RSP: 002b:00007f538f919028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1071.065418][T14412] RAX: ffffffffffffffda RBX: 00007f538ec26090 RCX: 00007f538e99e159 [ 1071.065434][T14412] RDX: 0000000000000003 RSI: 000000000000011b RDI: 000000000000000f [ 1071.065449][T14412] RBP: 00007f538ea3506b R08: 0000000000000004 R09: 0000000000000000 [ 1071.065464][T14412] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1071.065479][T14412] R13: 00007f538ec26128 R14: 00007f538ec26090 R15: 00007fffd46acf58 [ 1071.065514][T14412] [ 1071.065532][T14412] Mem-Info: [ 1071.065543][T14412] active_anon:19041 inactive_anon:1895 isolated_anon:0 [ 1071.065543][T14412] active_file:4231 inactive_file:58456 isolated_file:0 [ 1071.065543][T14412] unevictable:1024 dirty:291 writeback:0 [ 1071.065543][T14412] slab_reclaimable:13081 slab_unreclaimable:106523 [ 1071.065543][T14412] mapped:34086 shmem:14213 pagetables:1608 [ 1071.065543][T14412] sec_pagetables:0 bounce:0 [ 1071.065543][T14412] kernel_misc_reclaimable:0 [ 1071.065543][T14412] free:1267085 free_pcp:6961 free_cma:0 [ 1071.068385][T14412] Node 0 active_anon:76128kB inactive_anon:7580kB active_file:16924kB inactive_file:233360kB unevictable:2048kB isolated(anon):0kB isolated(file):0kB mapped:136144kB dirty:1164kB writeback:0kB shmem:54768kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12944kB pagetables:6284kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1071.068451][T14412] Node 1 active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:464kB unevictable:2048kB isolated(anon):0kB isolated(file):0kB mapped:200kB dirty:0kB writeback:0kB shmem:2084kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1071.068507][T14412] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 1071.068568][T14412] lowmem_reserve[]: 0 2471 2471 2471 2471 [ 1071.068607][T14412] Node 0 DMA32 free:1130320kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:76128kB inactive_anon:7580kB active_file:16924kB inactive_file:233360kB unevictable:2048kB writepending:1164kB zspages:1344kB present:3129332kB managed:2530400kB mlocked:0kB bounce:0kB free_pcp:27776kB local_pcp:9100kB free_cma:0kB [ 1071.068682][T14412] lowmem_reserve[]: 0 0 0 0 0 [ 1071.068717][T14412] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:68kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1071.068773][T14412] lowmem_reserve[]: 0 0 0 0 0 [ 1071.068810][T14412] Node 1 Normal free:3922692kB boost:0kB min:55908kB low:69884kB high:83860kB reserved_highatomic:0kB free_highatomic:0kB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:464kB unevictable:2048kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1071.068872][T14412] lowmem_reserve[]: 0 0 0 0 0 [ 1071.068906][T14412] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 1071.069078][T14412] Node 0 DMA32: 6682*4kB (UM) 2684*8kB (UM) 2048*16kB (UME) 1598*32kB (UME) 1020*64kB (UME) 455*128kB (UME) 149*256kB (UME) 66*512kB (UME) 16*1024kB (UME) 10*2048kB (UM) 187*4096kB (UM) = 1130376kB [ 1071.069252][T14412] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1071.069375][T14412] Node 1 Normal: 1*4kB (U) 4*8kB (UM) 8*16kB (UM) 9*32kB (UM) 7*64kB (UM) 3*128kB (UM) 0*256kB 1*512kB (U) 1*1024kB (U) 2*2048kB (M) 956*4096kB (UM) = 3922692kB [ 1071.069542][T14412] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1071.069560][T14412] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1071.069581][T14412] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1071.069599][T14412] Node 1 hugepages_total=6 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1071.069623][T14412] 76890 total pagecache pages [ 1071.069632][T14412] 3 pages in swap cache [ 1071.069640][T14412] Free swap = 118992kB [ 1071.069648][T14412] Total swap = 124996kB [ 1071.069657][T14412] 2097051 pages RAM [ 1071.069665][T14412] 0 pages HighMem/MovableOnly [ 1071.069673][T14412] 432818 pages reserved [ 1071.069681][T14412] 0 pages cma reserved [ 1071.741322][ T5694] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1071.899232][ T5694] usb 5-1: device descriptor read/64, error -71 [ 1072.134061][T14428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1851'. [ 1072.157676][ T5694] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1072.300417][ T5694] usb 5-1: device descriptor read/64, error -71 [ 1072.320970][T14433] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1852'. [ 1072.418343][ T5694] usb usb5-port1: attempt power cycle [ 1072.469677][T14435] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14435 comm=syz.1.1852 [ 1072.786445][ T5694] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1072.819419][ T5694] usb 5-1: device descriptor read/8, error -71 [ 1072.939915][T13404] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1074.231049][ T5608] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1074.249499][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 1074.249517][ T30] audit: type=1400 audit(1790472694.165:3099): avc: denied { module_request } for pid=14441 comm="syz.3.1856" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1074.282229][ T30] audit: type=1400 audit(1790472695.033:3100): avc: denied { sys_module } for pid=14441 comm="syz.3.1856" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1074.474872][ T5694] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1074.706016][T13404] usb 6-1: Using ep0 maxpacket: 16 [ 1074.712969][T13404] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1074.713016][T13404] usb 6-1: New USB device found, idVendor=0541, idProduct=4249, bcdDevice= 0.40 [ 1074.763814][T13404] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.763842][T13404] usb 6-1: Product: syz [ 1074.763858][T13404] usb 6-1: Manufacturer: syz [ 1074.763897][T13404] usb 6-1: SerialNumber: syz [ 1074.915200][ T5694] usb 5-1: device descriptor read/8, error -71 [ 1075.044170][ T5694] usb usb5-port1: unable to enumerate USB device [ 1075.064585][T13404] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1075.088757][ T30] audit: type=1400 audit(1790472695.799:3101): avc: denied { checkpoint_restore } for pid=14451 comm="syz.1.1858" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1075.171534][ T30] audit: type=1400 audit(1790472695.872:3102): avc: denied { read } for pid=14453 comm="syz.4.1860" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1075.171629][ T30] audit: type=1400 audit(1790472695.872:3103): avc: denied { open } for pid=14453 comm="syz.4.1860" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1075.282311][ T30] audit: type=1400 audit(1790472695.974:3104): avc: denied { mount } for pid=14453 comm="syz.4.1860" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1075.449018][T13404] usb 6-1: USB disconnect, device number 8 [ 1075.467750][T14455] FAULT_INJECTION: forcing a failure. [ 1075.467750][T14455] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1075.467790][T14455] CPU: 0 UID: 0 PID: 14455 Comm: syz.4.1860 Tainted: G L syzkaller #0 PREEMPT(full) [ 1075.467824][T14455] Tainted: [L]=SOFTLOCKUP [ 1075.467833][T14455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1075.467847][T14455] Call Trace: [ 1075.467854][T14455] [ 1075.467864][T14455] dump_stack_lvl+0x100/0x190 [ 1075.467906][T14455] should_fail_ex.cold+0x5/0xa [ 1075.467940][T14455] get_futex_key+0x1d0/0x14f0 [ 1075.467974][T14455] ? __pfx_get_futex_key+0x10/0x10 [ 1075.468003][T14455] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1075.468028][T14455] ? is_bpf_text_address+0x94/0x1a0 [ 1075.468065][T14455] futex_wait_setup+0x91/0x540 [ 1075.468097][T14455] __futex_wait+0x19f/0x300 [ 1075.468123][T14455] ? __pfx___futex_wait+0x10/0x10 [ 1075.468145][T14455] ? futex_hash+0x311/0x400 [ 1075.468176][T14455] ? __pfx_futex_wake_mark+0x10/0x10 [ 1075.468219][T14455] ? __pfx_futex_hash+0x10/0x10 [ 1075.468257][T14455] futex_wait+0xe6/0x370 [ 1075.468285][T14455] ? __pfx_futex_wait+0x10/0x10 [ 1075.468326][T14455] do_futex+0x265/0x440 [ 1075.468361][T14455] ? __pfx_do_futex+0x10/0x10 [ 1075.468390][T14455] ? lockdep_hardirqs_on+0x7d/0x110 [ 1075.468428][T14455] ? __do_sys_request_key+0x2b0/0x3c0 [ 1075.468462][T14455] ? __do_sys_request_key+0x35c/0x3c0 [ 1075.468500][T14455] __x64_sys_futex+0x34f/0x4d0 [ 1075.468533][T14455] ? __do_sys_request_key+0x203/0x3c0 [ 1075.468567][T14455] ? __pfx___x64_sys_futex+0x10/0x10 [ 1075.468611][T14455] do_syscall_64+0x123/0x790 [ 1075.468636][T14455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.468659][T14455] RIP: 0033:0x7f8bbff9e159 [ 1075.468678][T14455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1075.468699][T14455] RSP: 002b:00007f8bbe1f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1075.468721][T14455] RAX: ffffffffffffffda RBX: 00007f8bc0226098 RCX: 00007f8bbff9e159 [ 1075.468736][T14455] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8bc0226098 [ 1075.468751][T14455] RBP: 00007f8bc0226090 R08: 0000000000000000 R09: 0000000000000000 [ 1075.468765][T14455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1075.468778][T14455] R13: 00007f8bc0226128 R14: 00007ffd2361a900 R15: 00007ffd2361a9e8 [ 1075.468811][T14455] [ 1075.520000][ T30] audit: type=1400 audit(1790472696.186:3105): avc: denied { mount } for pid=14451 comm="syz.1.1858" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1075.947729][T14466] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1861'. [ 1076.643043][ T30] audit: type=1400 audit(1790472696.509:3106): avc: denied { unmount } for pid=14459 comm="syz.2.1861" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1076.878075][T14470] udevd[14470]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1076.918926][ T30] audit: type=1400 audit(1790472697.478:3107): avc: denied { read write } for pid=14471 comm="syz.5.1862" name="video5" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1076.918980][ T30] audit: type=1400 audit(1790472697.478:3108): avc: denied { open } for pid=14471 comm="syz.5.1862" path="/dev/video5" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1076.931207][T14413] udevd[14413]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1076.953529][T14424] udevd[14424]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1080.026261][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1080.166966][ T9] usb 6-1: device descriptor read/64, error -71 [ 1080.504566][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1080.645275][ T9] usb 6-1: device descriptor read/64, error -71 [ 1080.763231][ T9] usb usb6-port1: attempt power cycle [ 1080.945873][T14507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1857'. [ 1081.142128][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1081.175389][ T9] usb 6-1: device descriptor read/8, error -71 [ 1081.434850][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1081.458430][ T9] usb 6-1: device descriptor read/8, error -71 [ 1081.588066][ T9] usb usb6-port1: unable to enumerate USB device [ 1082.478414][T14526] netlink: 'syz.3.1872': attribute type 5 has an invalid length. [ 1082.478513][T14526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1872'. [ 1082.481049][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1082.481115][ T30] audit: type=1400 audit(1790472702.571:3112): avc: denied { name_bind } for pid=14517 comm="syz.3.1872" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1082.481537][ T30] audit: type=1400 audit(1790472702.571:3113): avc: denied { node_bind } for pid=14517 comm="syz.3.1872" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1082.840504][ T30] audit: type=1800 audit(1790472702.950:3114): pid=14487 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1867" name="cpuset.effective_cpus" dev="sda1" ino=2047 res=0 errno=0 [ 1083.021914][ T30] audit: type=1400 audit(1790472703.116:3115): avc: denied { sqpoll } for pid=14523 comm="syz.1.1874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1083.033535][ T30] audit: type=1400 audit(1790472703.116:3116): avc: denied { map } for pid=14523 comm="syz.1.1874" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=52018 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1083.078680][ T30] audit: type=1400 audit(1790472703.171:3117): avc: denied { read write } for pid=14523 comm="syz.1.1874" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=52018 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1083.112757][ T30] audit: type=1400 audit(1790472703.199:3118): avc: denied { listen } for pid=14525 comm="syz.4.1875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1083.114010][ T30] audit: type=1400 audit(1790472703.199:3119): avc: denied { accept } for pid=14525 comm="syz.4.1875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1083.172435][ T30] audit: type=1400 audit(1790472703.254:3120): avc: denied { mount } for pid=14523 comm="syz.1.1874" name="/" dev="gadgetfs" ino=8072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1083.240365][ T30] audit: type=1400 audit(1790472703.319:3121): avc: denied { remount } for pid=14525 comm="syz.4.1875" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1085.891128][ T8046] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1086.294882][ T8046] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1086.311226][ T8046] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.311319][ T8046] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1086.311364][ T8046] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1086.352408][ T8046] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1086.352452][ T8046] usb 6-1: Product: syz [ 1086.352484][ T8046] usb 6-1: Manufacturer: syz [ 1086.396480][ T8046] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected [ 1086.411971][ T8046] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1086.414695][ T8046] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 1086.599802][ T9778] Bluetooth: hci4: unexpected event for opcode 0x2040 [ 1086.626276][ T9] usb 6-1: USB disconnect, device number 13 [ 1086.632681][ T9] garmin_gps 6-1:1.0: device disconnected [ 1086.647963][ T5701] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1086.810998][ T5701] usb 5-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=18.33 [ 1086.812135][ T5701] usb 5-1: config 255 has an invalid interface number: 34 but max is 0 [ 1086.812162][ T5701] usb 5-1: config 255 has no interface number 0 [ 1086.812190][ T5701] usb 5-1: config 255 interface 34 has no altsetting 0 [ 1086.814404][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.814428][ T5701] usb 5-1: Product: syz [ 1086.814446][ T5701] usb 5-1: Manufacturer: syz [ 1086.814462][ T5701] usb 5-1: SerialNumber: syz [ 1086.975644][T14579] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 1087.084847][ T5701] ipw 5-1:255.34: IPWireless converter converter detected [ 1087.129871][ T5701] usb 5-1: USB disconnect, device number 92 [ 1087.131397][ T5701] ipw 5-1:255.34: device disconnected [ 1088.566257][ T5721] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1088.956171][ T5721] usb 6-1: Using ep0 maxpacket: 8 [ 1088.959166][ T5721] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice=10.40 [ 1088.960659][ T5721] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.960713][ T5721] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1088.963804][ T5721] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.963845][ T5721] usb 6-1: Product: syz [ 1088.963875][ T5721] usb 6-1: Manufacturer: syz [ 1088.963891][ T5721] usb 6-1: SerialNumber: syz [ 1089.294070][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1089.294126][ T30] audit: type=1400 audit(1790472708.910:3128): avc: denied { search } for pid=14590 comm="syz.5.1894" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1089.294206][ T30] audit: type=1400 audit(1790472708.910:3129): avc: denied { search } for pid=14590 comm="syz.5.1894" name="per_cpu" dev="tracefs" ino=3698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1089.294351][ T30] audit: type=1400 audit(1790472708.910:3130): avc: denied { search } for pid=14590 comm="syz.5.1894" name="cpu0" dev="tracefs" ino=3699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1089.294652][ T30] audit: type=1400 audit(1790472708.910:3131): avc: denied { read } for pid=14590 comm="syz.5.1894" name="trace_pipe_raw" dev="tracefs" ino=3702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1089.294909][ T30] audit: type=1400 audit(1790472708.910:3132): avc: denied { open } for pid=14590 comm="syz.5.1894" path="/37/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=3702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1089.299322][ T30] audit: type=1400 audit(1790472708.910:3133): avc: denied { map } for pid=14590 comm="syz.5.1894" path="/37/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=3702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1089.568515][ T5721] usb 6-1: USB disconnect, device number 14 [ 1089.606295][T14557] udevd[14557]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1089.923822][ T30] audit: type=1400 audit(1790472709.492:3134): avc: denied { read } for pid=14620 comm="syz.2.1903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1090.034237][ T30] audit: type=1400 audit(1790472709.584:3135): avc: denied { unmount } for pid=13200 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1090.079023][ T30] audit: type=1400 audit(1790472709.630:3136): avc: denied { bind } for pid=14619 comm="syz.3.1902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1090.120542][ T30] audit: type=1400 audit(1790472709.667:3137): avc: denied { create } for pid=14619 comm="syz.3.1902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1090.419271][ T5701] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 1090.490666][T14631] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1905'. [ 1090.713004][ T5701] usb 6-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1090.714945][ T5701] usb 6-1: config 8 has an invalid interface number: 177 but max is 0 [ 1090.714974][ T5701] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.714994][ T5701] usb 6-1: config 8 has no interface number 0 [ 1090.715032][ T5701] usb 6-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1090.715061][ T5701] usb 6-1: config 8 interface 177 has no altsetting 0 [ 1090.715093][ T5701] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.738029][ T5701] ir_toy 6-1:8.177: required endpoints not found [ 1091.296482][ T8046] usb 6-1: USB disconnect, device number 15 [ 1092.350782][T14659] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1911'. [ 1092.350986][T14659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1092.408171][T14659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1093.671036][ T9778] Bluetooth: hci2: unexpected event for opcode 0x0809 [ 1094.661084][T14693] netlink: 'syz.1.1922': attribute type 1 has an invalid length. [ 1094.716659][ T9778] Bluetooth: hci5: unexpected event for opcode 0x0c1c [ 1094.794462][ T30] audit: type=1400 audit(1790472713.976:3138): avc: denied { write } for pid=14698 comm="syz.1.1924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1094.992477][T14707] netlink: 'syz.4.1927': attribute type 10 has an invalid length. [ 1094.992498][T14707] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1927'. [ 1095.055793][ T30] audit: type=1400 audit(1790472714.216:3139): avc: denied { mounton } for pid=14706 comm="syz.4.1927" path="/254/file0" dev="tmpfs" ino=1512 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1095.120045][T14712] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1095.121545][ T30] audit: type=1400 audit(1790472714.280:3140): avc: denied { write } for pid=14706 comm="syz.4.1927" name="001" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1095.127143][ T30] audit: type=1400 audit(1790472714.290:3141): avc: denied { map } for pid=14706 comm="syz.4.1927" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1095.189830][T14712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1927'. [ 1095.191320][T14711] netlink: 34959 bytes leftover after parsing attributes in process `syz.4.1927'. [ 1095.333114][ T30] audit: type=1400 audit(1790472714.474:3142): avc: denied { write } for pid=14713 comm="syz.5.1930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1096.572639][ T30] audit: type=1400 audit(1790472715.618:3143): avc: denied { read write } for pid=14728 comm="syz.4.1935" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1096.573280][ T30] audit: type=1400 audit(1790472715.618:3144): avc: denied { open } for pid=14728 comm="syz.4.1935" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1096.635852][ T30] audit: type=1400 audit(1790472715.674:3145): avc: denied { bind } for pid=14730 comm="syz.3.1936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1096.636095][ T30] audit: type=1400 audit(1790472715.674:3146): avc: denied { name_bind } for pid=14730 comm="syz.3.1936" src=4660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1096.636301][ T30] audit: type=1400 audit(1790472715.674:3147): avc: denied { node_bind } for pid=14730 comm="syz.3.1936" saddr=224.0.0.1 src=4660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1097.771219][T14745] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1940'. [ 1098.126623][T14748] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1941'. [ 1098.354798][T14751] netlink: 'syz.4.1943': attribute type 61 has an invalid length. [ 1101.796463][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1101.796495][ T30] audit: type=1400 audit(1790472720.435:3150): avc: denied { write } for pid=14780 comm="syz.1.1955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1101.803736][T14782] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1101.804760][T14782] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1102.016260][T14798] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1961'. [ 1102.167450][ T5701] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1102.170322][T14804] netlink: 'syz.5.1964': attribute type 1 has an invalid length. [ 1102.170344][T14804] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1964'. [ 1102.312436][T14808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1966'. [ 1102.329927][ T5701] usb 5-1: Using ep0 maxpacket: 16 [ 1102.330741][ T5701] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1102.331942][ T5701] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1102.331987][ T5701] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 1102.332016][ T5701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 1102.332045][ T5701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1102.332070][ T5701] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1102.334480][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.334507][ T5701] usb 5-1: Product: syz [ 1102.334525][ T5701] usb 5-1: Manufacturer: syz [ 1102.334542][ T5701] usb 5-1: SerialNumber: syz [ 1102.403982][ T5701] usb 5-1: config 0 descriptor?? [ 1102.439965][ T30] audit: type=1400 audit(1790472720.915:3151): avc: denied { write } for pid=14807 comm="syz.3.1966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1102.440024][ T30] audit: type=1400 audit(1790472720.915:3152): avc: denied { nlmsg_write } for pid=14807 comm="syz.3.1966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1102.519914][ T5701] xbox_remote_probe: endpoint_in message size==0? [ 1102.999025][ T5701] usb 5-1: USB disconnect, device number 93 [ 1103.907038][T14828] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1968'. [ 1104.488479][T14791] udevd[14791]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1104.512208][T14791] udevd[14791]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1106.057574][ T30] audit: type=1400 audit(1790472724.365:3153): avc: denied { setopt } for pid=14871 comm="syz.1.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1106.133047][ T30] audit: type=1400 audit(1790472724.439:3154): avc: denied { create } for pid=14874 comm="syz.3.1985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1106.166102][ T30] audit: type=1400 audit(1790472724.467:3155): avc: denied { mount } for pid=14874 comm="syz.3.1985" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1106.181224][ T30] audit: type=1400 audit(1790472724.485:3156): avc: denied { create } for pid=14877 comm="syz.4.1984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1106.192628][ T30] audit: type=1400 audit(1790472724.495:3157): avc: denied { write } for pid=14877 comm="syz.4.1984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1106.192865][T14878] ieee802154 phy0 wpan0: encryption failed: -126 [ 1107.482549][T14903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1996'. [ 1107.728094][ T50] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1107.961503][ T30] audit: type=1400 audit(1790472726.128:3158): avc: denied { write } for pid=14909 comm="syz.1.1997" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1107.969532][T14911] X.509: signatureAlgorithm (12) differs from tbsCertificate.signature (13) [ 1108.001969][ T50] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 0.00 [ 1108.003459][ T50] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.003535][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.048414][ T50] cxacru 5-1:1.0: usbatm_usb_probe: bind failed: -19! [ 1108.360766][ T30] audit: type=1400 audit(1790472726.368:3159): avc: denied { write } for pid=14919 comm="syz.1.2002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1108.701388][ T30] audit: type=1400 audit(1790472726.811:3160): avc: denied { read } for pid=14896 comm="syz.4.1995" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1108.753184][ T30] audit: type=1400 audit(1790472726.820:3161): avc: denied { open } for pid=14896 comm="syz.4.1995" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1109.158527][ T30] audit: type=1400 audit(1790472727.226:3162): avc: denied { map } for pid=14896 comm="syz.4.1995" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1109.158585][ T30] audit: type=1400 audit(1790472727.235:3163): avc: denied { execute } for pid=14896 comm="syz.4.1995" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1109.518657][ T30] audit: type=1400 audit(1790472727.567:3164): avc: denied { getopt } for pid=14938 comm="syz.5.2003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1109.530868][T14939] netlink: 'syz.5.2003': attribute type 39 has an invalid length. [ 1109.992273][ T5694] usb 5-1: USB disconnect, device number 94 [ 1110.096709][T14955] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2008'. [ 1111.473363][ T30] audit: type=1400 audit(1790472729.366:3165): avc: denied { setopt } for pid=14965 comm="syz.3.2012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1111.705998][ T30] audit: type=1400 audit(1790472729.588:3166): avc: denied { create } for pid=14973 comm="syz.1.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1111.716195][ T30] audit: type=1400 audit(1790472729.597:3167): avc: denied { getopt } for pid=14973 comm="syz.1.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1111.812798][T14977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2016'. [ 1111.973892][T14981] netlink: 15 bytes leftover after parsing attributes in process `syz.1.2018'. [ 1113.505488][T14999] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2022'. [ 1113.839085][T15004] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2020'. [ 1114.325339][T15011] FAULT_INJECTION: forcing a failure. [ 1114.325339][T15011] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1114.325424][T15011] CPU: 0 UID: 0 PID: 15011 Comm: syz.4.2023 Tainted: G L syzkaller #0 PREEMPT(full) [ 1114.325458][T15011] Tainted: [L]=SOFTLOCKUP [ 1114.325466][T15011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1114.325479][T15011] Call Trace: [ 1114.325486][T15011] [ 1114.325496][T15011] dump_stack_lvl+0x100/0x190 [ 1114.325537][T15011] should_fail_ex.cold+0x5/0xa [ 1114.325572][T15011] get_futex_key+0x1d0/0x14f0 [ 1114.325605][T15011] ? __pfx_get_futex_key+0x10/0x10 [ 1114.325635][T15011] ? rcu_is_watching+0x13/0xc0 [ 1114.325665][T15011] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 1114.325700][T15011] ? lockdep_hardirqs_on+0x7d/0x110 [ 1114.325746][T15011] futex_wake+0xf4/0x5e0 [ 1114.325765][T15011] ? trace_sched_exit_tp+0x120/0x160 [ 1114.325797][T15011] ? __pfx_futex_wake+0x10/0x10 [ 1114.325820][T15011] ? irqentry_exit+0x24d/0xa10 [ 1114.325849][T15011] do_futex+0x2b2/0x440 [ 1114.325881][T15011] ? __pfx_do_futex+0x10/0x10 [ 1114.325908][T15011] ? preempt_schedule_irq+0x79/0x90 [ 1114.325943][T15011] ? irqentry_exit+0x24d/0xa10 [ 1114.325965][T15011] __x64_sys_futex+0x34f/0x4d0 [ 1114.325997][T15011] ? __pfx___x64_sys_futex+0x10/0x10 [ 1114.326037][T15011] do_syscall_64+0x123/0x790 [ 1114.326061][T15011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.326084][T15011] RIP: 0033:0x7f8bbff9e159 [ 1114.326102][T15011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1114.326123][T15011] RSP: 002b:00007f8bbe1f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1114.326146][T15011] RAX: ffffffffffffffda RBX: 00007f8bc0226098 RCX: 00007f8bbff9e159 [ 1114.326162][T15011] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8bc022609c [ 1114.326175][T15011] RBP: 00007f8bc0226090 R08: 0000000000000001 R09: 0000000000000000 [ 1114.326187][T15011] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1114.326203][T15011] R13: 00007f8bc0226128 R14: 00007ffd2361a900 R15: 00007ffd2361a9e8 [ 1114.326234][T15011] [ 1115.343383][T15031] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2031'. [ 1116.563737][T15042] vers=1.0 (cifs) not permitted when mounting with smb3 [ 1116.563737][T15042] [ 1116.564027][T15042] CIFS: VFS: vers=1.0 (cifs) not permitted when mounting with smb3 [ 1116.564147][ T30] audit: type=1400 audit(1790472734.063:3168): avc: denied { append } for pid=15043 comm="syz.4.2035" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1116.570523][ T30] audit: type=1400 audit(1790472734.063:3169): avc: denied { ioctl } for pid=15043 comm="syz.4.2035" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x6407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1117.869208][T15083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1118.178487][ T30] audit: type=1400 audit(1790472735.539:3170): avc: denied { append } for pid=15086 comm="syz.4.2052" name="video1" dev="devtmpfs" ino=925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1119.116627][ T30] audit: type=1400 audit(1790472736.416:3171): avc: denied { write } for pid=15094 comm="syz.5.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1119.867478][ T30] audit: type=1400 audit(1790472737.117:3172): avc: denied { create } for pid=15098 comm="syz.3.2057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1119.903429][ T30] audit: type=1400 audit(1790472737.145:3173): avc: denied { getopt } for pid=15098 comm="syz.3.2057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1120.836187][ T30] audit: type=1400 audit(1790472738.003:3174): avc: denied { create } for pid=15107 comm="syz.3.2061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1120.843623][ T30] audit: type=1400 audit(1790472738.021:3175): avc: denied { connect } for pid=15107 comm="syz.3.2061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1123.063308][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1123.063383][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1123.460498][ T30] audit: type=1400 audit(1790472740.430:3176): avc: denied { getopt } for pid=15157 comm="syz.3.2075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1124.828906][T15179] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2083'. [ 1124.828935][T15179] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1127.083506][ T5701] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1127.354463][ T5701] usb 5-1: Using ep0 maxpacket: 8 [ 1127.355001][ T5701] usb 5-1: New USB device found, idVendor=22b8, idProduct=2d96, bcdDevice= 0.43 [ 1127.355937][ T5701] usb 5-1: config 255 has an invalid interface number: 39 but max is 0 [ 1127.357043][ T5701] usb 5-1: config 255 has no interface number 0 [ 1127.357074][ T5701] usb 5-1: config 255 interface 39 has no altsetting 0 [ 1127.359566][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.359591][ T5701] usb 5-1: Product: syz [ 1127.359608][ T5701] usb 5-1: Manufacturer: syz [ 1127.359623][ T5701] usb 5-1: SerialNumber: syz [ 1127.947822][ T5701] usb 5-1: USB disconnect, device number 95 [ 1129.410468][T15236] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2101'. [ 1129.569043][T15241] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 1129.923559][T15250] netlink: Conntrack attr has 8 unknown bytes [ 1129.923634][T15250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1130.454210][ T5694] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1130.616842][ T5694] usb 5-1: Using ep0 maxpacket: 16 [ 1130.617627][ T5694] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1130.620694][ T5694] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.620720][ T5694] usb 5-1: Product: syz [ 1130.620737][ T5694] usb 5-1: Manufacturer: syz [ 1130.620753][ T5694] usb 5-1: SerialNumber: syz [ 1130.626815][ T5694] usb 5-1: config 0 descriptor?? [ 1130.652219][T15258] netlink: 'syz.1.2112': attribute type 23 has an invalid length. [ 1130.652571][T15258] netlink: 'syz.1.2112': attribute type 11 has an invalid length. [ 1130.704944][ T5694] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1131.763883][ T5694] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110 [ 1131.819752][ T5694] usb 5-1: USB disconnect, device number 96 [ 1132.257185][T15281] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 1135.032511][T15307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2124'. [ 1136.452286][T15264] infiniband syz0: set active [ 1136.453136][T15264] infiniband syz0: added bond_slave_1 [ 1137.946035][T15264] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1137.980261][T15264] infiniband syz0: Couldn't open port 1 [ 1137.980529][T15264] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1137.980563][T15264] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1137.980607][T15264] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1139.091960][T15264] RDS/IB: syz0: added [ 1139.092893][T15264] smc: adding ib device syz0 with port count 1 [ 1139.093131][T15264] smc: ib device syz0 port 1 has no pnetid [ 1142.063633][ T30] audit: type=1400 audit(1790472757.601:3177): avc: denied { getopt } for pid=15347 comm="syz.3.2132" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1142.309881][T15352] CIFS mount error: No usable UNC path provided in device string! [ 1142.309881][T15352] [ 1142.310176][T15352] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1142.859346][ T30] audit: type=1400 audit(1790472758.330:3178): avc: denied { read } for pid=15358 comm="syz.4.2139" name="sg0" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1142.859699][ T30] audit: type=1400 audit(1790472758.330:3179): avc: denied { open } for pid=15358 comm="syz.4.2139" path="/dev/sg0" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1142.862492][ T30] audit: type=1400 audit(1790472758.330:3180): avc: denied { ioctl } for pid=15358 comm="syz.4.2139" path="/dev/sg0" dev="devtmpfs" ino=945 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1143.589243][ T30] audit: type=1400 audit(1790472758.994:3181): avc: denied { write } for pid=15378 comm="syz.4.2148" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1143.589653][ T30] audit: type=1400 audit(1790472759.004:3182): avc: denied { open } for pid=15378 comm="syz.4.2148" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1143.591101][ T30] audit: type=1400 audit(1790472759.004:3183): avc: denied { ioctl } for pid=15378 comm="syz.4.2148" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1143.849867][ T30] audit: type=1400 audit(1790472759.243:3184): avc: denied { read } for pid=15378 comm="syz.4.2148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1144.249153][ T30] audit: type=1400 audit(1790472759.603:3185): avc: denied { write } for pid=15378 comm="syz.4.2148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1145.479447][ T30] audit: type=1400 audit(1790472760.747:3186): avc: denied { setopt } for pid=15409 comm="syz.4.2157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1145.559344][T15412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2159'. [ 1146.597905][T15440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2167'. [ 1148.369462][ T5721] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1148.532441][ T5721] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 0.00 [ 1148.535279][ T5721] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1148.535355][ T5721] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1148.535408][ T5721] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1148.535477][ T5721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.615547][ T5721] cxacru 5-1:1.0: cxacru_bind: interface has incorrect endpoints [ 1148.615755][ T5721] cxacru 5-1:1.0: usbatm_usb_probe: bind failed: -19! [ 1148.774444][ T30] audit: type=1400 audit(1790472763.783:3187): avc: denied { create } for pid=15467 comm="syz.5.2179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1148.781988][ T30] audit: type=1400 audit(1790472763.802:3188): avc: denied { bind } for pid=15467 comm="syz.5.2179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1149.131370][T15479] netdevsim0 speed is unknown, defaulting to 1000 [ 1149.131450][T15479] netdevsim0 speed is unknown, defaulting to 1000 [ 1149.145306][T15479] netdevsim0 speed is unknown, defaulting to 1000 [ 1149.218115][T15479] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1149.218703][T15479] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1149.218773][T15479] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1149.223684][ T9] usb 5-1: USB disconnect, device number 97 [ 1149.305783][T15479] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1149.381445][T15479] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1149.445256][T15479] netdevsim0 speed is unknown, defaulting to 1000 [ 1149.449866][T15479] netdevsim0 speed is unknown, defaulting to 1000 [ 1149.470008][T15479] netdevsim0 speed is unknown, defaulting to 1000 [ 1149.472711][T15479] netdevsim0 speed is unknown, defaulting to 1000 [ 1149.486680][T15479] netdevsim0 speed is unknown, defaulting to 1000 [ 1149.883910][T15506] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1150.349014][T15513] FAULT_INJECTION: forcing a failure. [ 1150.349014][T15513] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1150.349238][T15513] CPU: 0 UID: 0 PID: 15513 Comm: syz.4.2196 Tainted: G L syzkaller #0 PREEMPT(full) [ 1150.349272][T15513] Tainted: [L]=SOFTLOCKUP [ 1150.349280][T15513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1150.349294][T15513] Call Trace: [ 1150.349301][T15513] [ 1150.349309][T15513] dump_stack_lvl+0x100/0x190 [ 1150.349349][T15513] should_fail_ex.cold+0x5/0xa [ 1150.349385][T15513] get_futex_key+0x1d0/0x14f0 [ 1150.349419][T15513] ? __pfx_get_futex_key+0x10/0x10 [ 1150.349451][T15513] ? find_held_lock+0x2b/0x80 [ 1150.349490][T15513] futex_wait_setup+0x91/0x540 [ 1150.349522][T15513] __futex_wait+0x19f/0x300 [ 1150.349548][T15513] ? __pfx___futex_wait+0x10/0x10 [ 1150.349569][T15513] ? futex_hash+0x311/0x400 [ 1150.349601][T15513] ? __pfx_futex_wake_mark+0x10/0x10 [ 1150.349643][T15513] ? __pfx_futex_hash+0x10/0x10 [ 1150.349669][T15513] ? __pfx___schedule+0x10/0x10 [ 1150.349711][T15513] futex_wait+0xe6/0x370 [ 1150.349733][T15513] ? __pfx_futex_wait+0x10/0x10 [ 1150.349774][T15513] do_futex+0x265/0x440 [ 1150.349806][T15513] ? __pfx_do_futex+0x10/0x10 [ 1150.349836][T15513] ? lockdep_hardirqs_on+0x7d/0x110 [ 1150.349872][T15513] ? __do_sys_request_key+0x2b0/0x3c0 [ 1150.349906][T15513] ? __do_sys_request_key+0x35c/0x3c0 [ 1150.349954][T15513] __x64_sys_futex+0x34f/0x4d0 [ 1150.349988][T15513] ? __do_sys_request_key+0x203/0x3c0 [ 1150.350025][T15513] ? __pfx___x64_sys_futex+0x10/0x10 [ 1150.350069][T15513] do_syscall_64+0x123/0x790 [ 1150.350094][T15513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.350118][T15513] RIP: 0033:0x7f8bbff9e159 [ 1150.350138][T15513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1150.350160][T15513] RSP: 002b:00007f8bbe1f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1150.350182][T15513] RAX: ffffffffffffffda RBX: 00007f8bc0226098 RCX: 00007f8bbff9e159 [ 1150.350199][T15513] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8bc0226098 [ 1150.350214][T15513] RBP: 00007f8bc0226090 R08: 0000000000000000 R09: 0000000000000000 [ 1150.350229][T15513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1150.350243][T15513] R13: 00007f8bc0226128 R14: 00007ffd2361a900 R15: 00007ffd2361a9e8 [ 1150.350275][T15513] [ 1150.601313][ T9] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1151.101365][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1151.101412][ T9] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 1151.106640][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1151.106700][ T9] usb 5-1: can't read configurations, error -71 [ 1151.154749][T15525] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2201'. [ 1151.178562][T15525] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2201'. [ 1152.034674][T15544] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2206'. [ 1153.904735][T15564] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2214'. [ 1154.063560][T15569] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 1154.342143][T15548] netdevsim0 speed is unknown, defaulting to 1000 [ 1154.438027][T13047] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1154.656446][T13047] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1154.658503][T13047] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1154.658604][T13047] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1154.658652][T13047] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1154.716249][T13047] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.716293][T13047] usb 5-1: Product: syz [ 1154.716323][T13047] usb 5-1: Manufacturer: syz [ 1154.716353][T13047] usb 5-1: SerialNumber: syz [ 1154.962438][T15584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2222'. [ 1155.000681][T13047] usb 5-1: Unknown endpoint type found, address 0x81 [ 1155.000724][T13047] usb 5-1: Not enough endpoints found in device, aborting! [ 1155.182737][ T30] audit: type=1400 audit(1790472769.698:3189): avc: denied { nlmsg_read } for pid=15589 comm="syz.3.2225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1155.210245][T15590] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2225'. [ 1155.217294][ T9] usb 5-1: USB disconnect, device number 100 [ 1156.355503][T15613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2235'. [ 1158.355882][ T30] audit: type=1400 audit(1790472772.623:3190): avc: denied { setopt } for pid=15651 comm="syz.4.2250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1158.874797][T15659] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2252'. [ 1158.991095][T15662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2253'. [ 1159.069225][T15628] netdevsim0 speed is unknown, defaulting to 1000 [ 1160.209778][ T30] audit: type=1400 audit(1790472774.339:3191): avc: denied { getopt } for pid=15700 comm="syz.5.2266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1160.527470][T15708] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2268'. [ 1160.831885][ T30] audit: type=1400 audit(1790472774.911:3192): avc: denied { getopt } for pid=15711 comm="syz.3.2270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1161.901915][T15739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2278'. [ 1163.741978][ T30] audit: type=1400 audit(1790472777.596:3193): avc: denied { getopt } for pid=15765 comm="syz.2.2289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1164.038221][ T30] audit: type=1400 audit(1790472777.864:3194): avc: denied { setopt } for pid=15772 comm="syz.2.2290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1165.409660][T15793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2300'. [ 1166.184427][T15795] netdevsim0 speed is unknown, defaulting to 1000 [ 1166.541581][ T30] audit: type=1400 audit(1790472780.180:3195): avc: denied { create } for pid=15823 comm="syz.4.2314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1166.564328][ T30] audit: type=1400 audit(1790472780.189:3196): avc: denied { write } for pid=15823 comm="syz.4.2314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1166.941370][ T30] audit: type=1400 audit(1790472780.549:3197): avc: denied { read } for pid=15836 comm="syz.4.2320" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1166.966460][ T30] audit: type=1400 audit(1790472780.558:3198): avc: denied { open } for pid=15836 comm="syz.4.2320" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1167.012412][ T30] audit: type=1400 audit(1790472780.613:3199): avc: denied { ioctl } for pid=15836 comm="syz.4.2320" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1167.641239][T15850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2321'. [ 1168.940079][T15859] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2328'. [ 1169.148735][ T30] audit: type=1400 audit(1790472782.588:3200): avc: denied { setopt } for pid=15863 comm="syz.5.2331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1169.502080][T15875] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1169.662196][T15881] tmpfs: Bad value for 'mpol' [ 1170.694585][ T30] audit: type=1400 audit(1790472784.009:3201): avc: denied { ioctl } for pid=15916 comm="syz.4.2354" path="socket:[57984]" dev="sockfs" ino=57984 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1171.749622][ T30] audit: type=1400 audit(1790472784.978:3202): avc: denied { read write } for pid=15925 comm="syz.4.2357" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1171.749767][ T30] audit: type=1400 audit(1790472784.978:3203): avc: denied { open } for pid=15925 comm="syz.4.2357" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1171.831902][T15942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2357'. [ 1173.317452][T15949] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2363'. [ 1173.558502][ T30] audit: type=1400 audit(1790472786.657:3204): avc: denied { accept } for pid=15957 comm="syz.4.2369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1175.119155][T15973] openvswitch: netlink: VXLAN extension 61 out of range max 1 [ 1176.557793][T16012] netlink: 440 bytes leftover after parsing attributes in process `syz.5.2386'. [ 1176.876379][ T30] audit: type=1400 audit(1790472789.720:3205): avc: denied { getopt } for pid=16022 comm="syz.4.2392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1177.171749][ T30] audit: type=1400 audit(1790472789.988:3206): avc: denied { create } for pid=16032 comm="syz.1.2396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1177.196706][ T30] audit: type=1400 audit(1790472790.006:3207): avc: denied { setopt } for pid=16032 comm="syz.1.2396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1177.450264][T16037] FAULT_INJECTION: forcing a failure. [ 1177.450264][T16037] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1177.450303][T16037] CPU: 0 UID: 0 PID: 16037 Comm: syz.4.2397 Tainted: G L syzkaller #0 PREEMPT(full) [ 1177.450338][T16037] Tainted: [L]=SOFTLOCKUP [ 1177.450347][T16037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1177.450362][T16037] Call Trace: [ 1177.450370][T16037] [ 1177.450379][T16037] dump_stack_lvl+0x100/0x190 [ 1177.450418][T16037] should_fail_ex.cold+0x5/0xa [ 1177.450453][T16037] get_futex_key+0x1d0/0x14f0 [ 1177.450487][T16037] ? __pfx_get_futex_key+0x10/0x10 [ 1177.450514][T16037] ? do_syscall_64+0x123/0x790 [ 1177.450550][T16037] futex_wake+0xf4/0x5e0 [ 1177.450576][T16037] ? __pfx_futex_wake+0x10/0x10 [ 1177.450614][T16037] do_futex+0x2b2/0x440 [ 1177.450648][T16037] ? __pfx_do_futex+0x10/0x10 [ 1177.450677][T16037] ? lockdep_hardirqs_on+0x7d/0x110 [ 1177.450716][T16037] ? __do_sys_request_key+0x2b0/0x3c0 [ 1177.450751][T16037] ? __do_sys_request_key+0x35c/0x3c0 [ 1177.450789][T16037] __x64_sys_futex+0x34f/0x4d0 [ 1177.450822][T16037] ? __do_sys_request_key+0x203/0x3c0 [ 1177.450857][T16037] ? __pfx___x64_sys_futex+0x10/0x10 [ 1177.450901][T16037] do_syscall_64+0x123/0x790 [ 1177.450926][T16037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.450950][T16037] RIP: 0033:0x7f8bbff9e159 [ 1177.450968][T16037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1177.450990][T16037] RSP: 002b:00007f8bbe1d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1177.451012][T16037] RAX: ffffffffffffffda RBX: 00007f8bc0226188 RCX: 00007f8bbff9e159 [ 1177.451034][T16037] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8bc022618c [ 1177.451050][T16037] RBP: 00007f8bc0226180 R08: 0000000000000001 R09: 0000000000000000 [ 1177.451064][T16037] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1177.451079][T16037] R13: 00007f8bc0226218 R14: 00007ffd2361a900 R15: 00007ffd2361a9e8 [ 1177.451112][T16037] [ 1178.240527][ T5721] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1178.442996][ T5721] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1178.443038][ T5721] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 1178.451873][ T5721] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1178.451937][ T5721] usb 5-1: can't read configurations, error -71 [ 1178.953209][ T30] audit: type=1400 audit(1790472791.639:3208): avc: denied { setopt } for pid=16071 comm="syz.5.2413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1179.240942][T16083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2415'. [ 1180.253661][T16122] netlink: 'syz.2.2436': attribute type 29 has an invalid length. [ 1180.383689][T16128] netlink: 4612 bytes leftover after parsing attributes in process `syz.2.2440'. [ 1180.579390][T16134] lo speed is unknown, defaulting to 1000 [ 1180.579474][T16134] lo speed is unknown, defaulting to 1000 [ 1180.580850][T16134] lo speed is unknown, defaulting to 1000 [ 1180.587710][T16134] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1180.587770][T16134] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1180.587841][T16134] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1180.742370][T16134] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1180.931384][T16134] lo speed is unknown, defaulting to 1000 [ 1180.947632][T16134] lo speed is unknown, defaulting to 1000 [ 1180.982158][T16134] lo speed is unknown, defaulting to 1000 [ 1180.986564][T16134] lo speed is unknown, defaulting to 1000 [ 1181.005307][T16134] lo speed is unknown, defaulting to 1000 [ 1181.255582][T16144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2444'. [ 1181.823120][T16147] netlink: 'syz.3.2446': attribute type 1 has an invalid length. [ 1181.949365][T16150] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1182.417784][ T30] audit: type=1400 audit(1790472794.823:3209): avc: denied { setopt } for pid=16159 comm="syz.3.2451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1183.807582][ T30] audit: type=1400 audit(1790472796.105:3210): avc: denied { setopt } for pid=16168 comm="syz.2.2455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1184.705495][T16189] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 1184.902681][T16195] xt_nfacct: accounting object `' does not exist [ 1185.334202][T16202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2466'. [ 1186.304018][T16212] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2470'. [ 1188.011288][T16245] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2486'. [ 1188.699163][T16262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2489'. [ 1189.587217][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1189.587271][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1189.698587][T16272] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2495'. [ 1189.920414][T16281] CIFS mount error: No usable UNC path provided in device string! [ 1189.920414][T16281] [ 1189.920436][T16281] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1190.768092][T16273] netdevsim0 speed is unknown, defaulting to 1000 [ 1190.834276][T16273] lo speed is unknown, defaulting to 1000 [ 1191.120305][T16305] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2506'. [ 1191.943555][ T30] audit: type=1400 audit(1790472803.616:3211): avc: denied { connect } for pid=16311 comm="syz.4.2509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1193.088547][T16340] netlink: get zone limit has 4 unknown bytes [ 1193.284307][ T30] audit: type=1400 audit(1790472804.853:3212): avc: denied { ioctl } for pid=16344 comm="syz.2.2523" path="socket:[59476]" dev="sockfs" ino=59476 ioctlcmd=0x89b1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1193.549187][T16353] netlink: 'syz.3.2525': attribute type 1 has an invalid length. [ 1194.176217][T16372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2529'. [ 1195.149478][T16384] netlink: 'syz.1.2536': attribute type 1 has an invalid length. [ 1195.441685][ T30] audit: type=1400 audit(1790472806.846:3213): avc: denied { write } for pid=16392 comm="syz.5.2540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1195.597358][T16397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2541'. [ 1195.597404][T16397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2541'. [ 1196.238433][T16389] smc: removing ib device syz0 [ 1196.710090][T16389] smbdirect: ib_dev[syz0] removed [ 1196.879363][T16415] netlink: 388 bytes leftover after parsing attributes in process `syz.5.2549'. [ 1198.622094][T16448] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2558'. [ 1199.748713][T16457] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2565'. [ 1199.955331][T16465] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2568'. [ 1199.955429][T16465] openvswitch: netlink: IPv4 frag type 48 is out of range max 2 [ 1200.490750][T13047] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1200.650699][T13047] usb 5-1: Using ep0 maxpacket: 8 [ 1200.772160][ T30] audit: type=1400 audit(1790472811.764:3214): avc: denied { read write } for pid=16473 comm="syz.4.2571" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1200.778869][ T30] audit: type=1400 audit(1790472811.764:3215): avc: denied { open } for pid=16473 comm="syz.4.2571" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1200.857287][ T30] audit: type=1400 audit(1790472811.837:3216): avc: denied { ioctl } for pid=16473 comm="syz.4.2571" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1203.051294][T16493] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 1203.051533][T16493] flags: 0x17ff00000002000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 1203.051817][T16493] raw: 017ff00000002000 ffffea0004200008 ffffea0004200008 0000000000000000 [ 1203.052214][T16493] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 1203.052281][T16493] page dumped because: unmovable page [ 1203.052314][T16493] page_owner info is not present (never set?) [ 1203.115466][ T30] audit: type=1400 audit(1790472813.913:3217): avc: denied { read } for pid=4951 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1203.115567][ T30] audit: type=1400 audit(1790472813.913:3218): avc: denied { search } for pid=4951 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1203.115639][ T30] audit: type=1400 audit(1790472813.913:3219): avc: denied { append } for pid=4951 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1203.115717][ T30] audit: type=1400 audit(1790472813.913:3220): avc: denied { open } for pid=4951 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1203.115809][ T30] audit: type=1400 audit(1790472813.913:3221): avc: denied { getattr } for pid=4951 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1203.369359][T16502] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 1203.407676][T13047] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1203.407767][T13047] usb 5-1: New USB device found, idVendor=1b96, idProduct=0001, bcdDevice= 0.40 [ 1203.408841][T13047] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1203.408887][T13047] usb 5-1: can't read configurations, error -71 [ 1203.872018][T16524] netlink: 'syz.1.2592': attribute type 12 has an invalid length. [ 1204.032965][ T30] audit: type=1400 audit(1790472814.781:3222): avc: denied { unmount } for pid=7736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1207.217118][ T30] audit: type=1400 audit(1790472817.706:3223): avc: denied { read } for pid=16613 comm="syz.5.2629" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1207.355091][T16622] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 1207.462077][T16629] openvswitch: netlink: Tunnel attr 175 out of range max 16 [ 1207.731094][ T30] audit: type=1400 audit(1790472818.186:3224): avc: denied { bind } for pid=16639 comm="syz.5.2642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1207.946521][T16645] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2644'. [ 1208.494975][ T30] audit: type=1400 audit(1790472818.887:3225): avc: denied { bind } for pid=16667 comm="syz.4.2655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1208.694642][ T30] audit: type=1400 audit(1790472819.081:3226): avc: denied { write } for pid=16675 comm="syz.4.2659" name="sg0" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1208.738539][T16676] sg_write: data in/out 197376/4 bytes for SCSI command 0x7-- guessing data in; [ 1208.738539][T16676] program syz.4.2659 not setting count and/or reply_len properly [ 1209.307962][T16700] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2671'. [ 1210.152706][T16725] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 1211.138453][T16750] netlink: 'syz.1.2691': attribute type 1 has an invalid length. [ 1211.936234][ T30] audit: type=1400 audit(1790472822.070:3227): avc: denied { connect } for pid=16772 comm="syz.5.2700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1212.109506][T16777] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 1212.269509][T16781] netlink: 'syz.1.2704': attribute type 2 has an invalid length. [ 1213.261286][T16807] netlink: 'syz.2.2715': attribute type 12 has an invalid length. [ 1213.487939][ T30] audit: type=1400 audit(1790472823.500:3228): avc: denied { setopt } for pid=16814 comm="syz.4.2717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1214.037582][T16831] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 1214.132801][T13047] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1214.311762][T13047] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1214.326768][T13047] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1214.326821][T13047] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1214.355724][T13047] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.355784][T13047] usb 5-1: Product: syz [ 1214.355816][T13047] usb 5-1: Manufacturer: syz [ 1214.355833][T13047] usb 5-1: SerialNumber: syz [ 1214.389879][T13047] usb 5-1: config 0 descriptor?? [ 1214.430895][T13047] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1214.873864][T16852] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2733'. [ 1214.984295][T16855] openvswitch: netlink: IP tunnel attribute has 236 unknown bytes. [ 1215.008262][ T5694] usb 5-1: USB disconnect, device number 105 [ 1215.896287][T16887] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 1215.926504][ T30] audit: type=1400 audit(1790472825.742:3229): avc: denied { map } for pid=16886 comm="syz.1.2750" path="socket:[61033]" dev="sockfs" ino=61033 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1215.926667][ T30] audit: type=1400 audit(1790472825.742:3230): avc: denied { read } for pid=16886 comm="syz.1.2750" path="socket:[61033]" dev="sockfs" ino=61033 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1216.257215][T16894] hub 1-0:1.0: USB hub found [ 1216.264602][T16894] hub 1-0:1.0: 1 port detected [ 1220.027772][T16929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2759'. [ 1220.092443][ T30] audit: type=1400 audit(1790472829.590:3231): avc: denied { create } for pid=16930 comm="syz.4.2758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1220.124219][ T30] audit: type=1400 audit(1790472829.618:3232): avc: denied { ioctl } for pid=16930 comm="syz.4.2758" path="socket:[60179]" dev="sockfs" ino=60179 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1220.131483][T16933] overlayfs: cannot append lower layer [ 1220.399532][T16941] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2764'. [ 1220.530415][ T30] audit: type=1400 audit(1790472829.996:3233): avc: denied { write } for pid=16944 comm="syz.4.2766" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1220.530510][ T30] audit: type=1400 audit(1790472829.996:3234): avc: denied { open } for pid=16944 comm="syz.4.2766" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1221.379735][T16969] netlink: 'syz.4.2779': attribute type 11 has an invalid length. [ 1221.379760][T16969] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2779'. [ 1221.449975][T16972] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1221.808732][T16987] vers=2.0 not permitted when mounting with smb3 [ 1221.808732][T16987] [ 1221.809058][T16987] CIFS: VFS: vers=2.0 not permitted when mounting with smb3 [ 1221.966787][ T30] audit: type=1400 audit(1790472831.316:3235): avc: denied { ioctl } for pid=16994 comm="syz.2.2791" path="socket:[61206]" dev="sockfs" ino=61206 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1222.086002][T16996] FAULT_INJECTION: forcing a failure. [ 1222.086002][T16996] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1222.086066][T16996] CPU: 0 UID: 0 PID: 16996 Comm: syz.4.2788 Tainted: G L syzkaller #0 PREEMPT(full) [ 1222.086101][T16996] Tainted: [L]=SOFTLOCKUP [ 1222.086110][T16996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1222.086123][T16996] Call Trace: [ 1222.086132][T16996] [ 1222.086141][T16996] dump_stack_lvl+0x100/0x190 [ 1222.086181][T16996] should_fail_ex.cold+0x5/0xa [ 1222.086215][T16996] get_futex_key+0x1d0/0x14f0 [ 1222.086251][T16996] ? __pfx_get_futex_key+0x10/0x10 [ 1222.086282][T16996] ? preempt_schedule_irq+0x79/0x90 [ 1222.086338][T16996] futex_wake+0xf4/0x5e0 [ 1222.086359][T16996] ? futex_wait+0x11e/0x370 [ 1222.086386][T16996] ? __pfx_futex_wake+0x10/0x10 [ 1222.086410][T16996] ? lock_acquire+0x1d1/0x380 [ 1222.086437][T16996] ? find_held_lock+0x2b/0x80 [ 1222.086467][T16996] ? __fget_files+0x215/0x3d0 [ 1222.086495][T16996] ? __fget_files+0x215/0x3d0 [ 1222.086526][T16996] do_futex+0x2b2/0x440 [ 1222.086558][T16996] ? __pfx_do_futex+0x10/0x10 [ 1222.086592][T16996] ? fdget+0x18b/0x210 [ 1222.086623][T16996] __x64_sys_futex+0x34f/0x4d0 [ 1222.086658][T16996] ? __pfx___x64_sys_futex+0x10/0x10 [ 1222.086701][T16996] do_syscall_64+0x123/0x790 [ 1222.086725][T16996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.086747][T16996] RIP: 0033:0x7f8bbff9e159 [ 1222.086766][T16996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1222.086788][T16996] RSP: 002b:00007f8bbe1f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1222.086810][T16996] RAX: ffffffffffffffda RBX: 00007f8bc0226098 RCX: 00007f8bbff9e159 [ 1222.086824][T16996] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8bc022609c [ 1222.086838][T16996] RBP: 00007f8bc0226090 R08: 0000000000000001 R09: 0000000000000000 [ 1222.086853][T16996] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1222.086867][T16996] R13: 00007f8bc0226128 R14: 00007ffd2361a900 R15: 00007ffd2361a9e8 [ 1222.086896][T16996] [ 1222.579104][ T9] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1222.860154][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1222.860204][ T9] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 1222.865146][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1222.865180][ T9] usb 5-1: can't read configurations, error -71 [ 1223.042734][T17010] openvswitch: netlink: IP tunnel TTL not specified. [ 1224.554695][T17039] tmpfs: Bad value for 'mpol' [ 1224.655410][T17046] openvswitch: netlink: Key 15 has unexpected len 0 expected 4 [ 1224.846336][T17042] netdevsim0 speed is unknown, defaulting to 1000 [ 1224.858482][T17042] lo speed is unknown, defaulting to 1000 [ 1225.516389][T17062] FAULT_INJECTION: forcing a failure. [ 1225.516389][T17062] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1225.516491][T17062] CPU: 0 UID: 0 PID: 17062 Comm: syz.4.2815 Tainted: G L syzkaller #0 PREEMPT(full) [ 1225.516523][T17062] Tainted: [L]=SOFTLOCKUP [ 1225.516533][T17062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1225.516545][T17062] Call Trace: [ 1225.516553][T17062] [ 1225.516563][T17062] dump_stack_lvl+0x100/0x190 [ 1225.516602][T17062] should_fail_ex.cold+0x5/0xa [ 1225.516635][T17062] get_futex_key+0x1d0/0x14f0 [ 1225.516669][T17062] ? __pfx_get_futex_key+0x10/0x10 [ 1225.516700][T17062] ? __pfx___schedule+0x10/0x10 [ 1225.516744][T17062] ? __resched_curr+0x42e/0x500 [ 1225.516781][T17062] futex_wait_setup+0x91/0x540 [ 1225.516814][T17062] __futex_wait+0x19f/0x300 [ 1225.516839][T17062] ? __pfx___futex_wait+0x10/0x10 [ 1225.516860][T17062] ? futex_hash+0x311/0x400 [ 1225.516892][T17062] ? __pfx_futex_wake_mark+0x10/0x10 [ 1225.516933][T17062] ? __pfx_futex_hash+0x10/0x10 [ 1225.516972][T17062] futex_wait+0xe6/0x370 [ 1225.516996][T17062] ? __pfx_futex_wait+0x10/0x10 [ 1225.517026][T17062] ? find_held_lock+0x2b/0x80 [ 1225.517057][T17062] ? __fget_files+0x215/0x3d0 [ 1225.517095][T17062] ? __fget_files+0x215/0x3d0 [ 1225.517128][T17062] do_futex+0x265/0x440 [ 1225.517163][T17062] ? __pfx_do_futex+0x10/0x10 [ 1225.517198][T17062] ? fdget+0x18b/0x210 [ 1225.517231][T17062] __x64_sys_futex+0x34f/0x4d0 [ 1225.517267][T17062] ? __pfx___x64_sys_futex+0x10/0x10 [ 1225.517312][T17062] do_syscall_64+0x123/0x790 [ 1225.517341][T17062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.517366][T17062] RIP: 0033:0x7f8bbff9e159 [ 1225.517387][T17062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1225.517410][T17062] RSP: 002b:00007f8bbe1f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1225.517433][T17062] RAX: ffffffffffffffda RBX: 00007f8bc0226098 RCX: 00007f8bbff9e159 [ 1225.517449][T17062] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8bc0226098 [ 1225.517464][T17062] RBP: 00007f8bc0226090 R08: 0000000000000000 R09: 0000000000000000 [ 1225.517479][T17062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1225.517493][T17062] R13: 00007f8bc0226128 R14: 00007ffd2361a900 R15: 00007ffd2361a9e8 [ 1225.517526][T17062] [ 1226.476467][ T5701] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1226.603542][ T30] audit: type=1400 audit(1790472835.597:3236): avc: denied { bind } for pid=17083 comm="syz.3.2825" lport=155 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1226.603866][ T30] audit: type=1400 audit(1790472835.597:3237): avc: denied { name_bind } for pid=17083 comm="syz.3.2825" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1226.608092][ T30] audit: type=1400 audit(1790472835.597:3238): avc: denied { node_bind } for pid=17083 comm="syz.3.2825" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1226.735735][ T5701] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1226.735781][ T5701] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 1226.757718][ T5701] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1226.757755][ T5701] usb 5-1: can't read configurations, error -71 [ 1227.076839][T17101] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2832'. [ 1227.521949][ T30] audit: type=1400 audit(1790472836.446:3239): avc: denied { ioctl } for pid=17114 comm="syz.4.2838" path="socket:[61402]" dev="sockfs" ino=61402 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1228.358597][T17145] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2844'. [ 1229.642336][ T30] audit: type=1400 audit(1790472838.393:3240): avc: denied { create } for pid=17148 comm="syz.3.2850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1229.663078][ T30] audit: type=1400 audit(1790472838.420:3241): avc: denied { getopt } for pid=17148 comm="syz.3.2850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1230.117072][T17168] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2857'. [ 1230.148991][ T30] audit: type=1400 audit(1790472838.863:3242): avc: denied { write } for pid=17169 comm="syz.4.2859" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1230.174415][T17170] binder: 17169:17170 ioctl 40046210 0 returned -14 [ 1230.174475][ T30] audit: type=1400 audit(1790472838.900:3243): avc: denied { ioctl } for pid=17169 comm="syz.4.2859" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1230.670285][T17192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2868'. [ 1230.670339][T17192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2868'. [ 1231.231813][T17205] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2875'. [ 1231.275532][ T30] audit: type=1400 audit(1790472839.906:3244): avc: denied { append } for pid=17207 comm="syz.4.2876" name="comedi4" dev="devtmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1231.668570][T17220] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 1232.401715][T17243] openvswitch: netlink: IP tunnel dst address not specified [ 1232.533650][T17245] netlink: 4912 bytes leftover after parsing attributes in process `syz.5.2892'. [ 1232.752134][T17253] netlink: 'syz.4.2895': attribute type 61 has an invalid length. [ 1232.752173][T17253] netlink: 'syz.4.2895': attribute type 62 has an invalid length. [ 1233.115116][T17269] netlink: 'syz.3.2903': attribute type 2 has an invalid length. [ 1233.152319][T17270] openvswitch: netlink: IPv4 tun info is not correct [ 1233.375668][T17279] netlink: 'syz.1.2908': attribute type 2 has an invalid length. [ 1233.394027][T17281] xt_hashlimit: size too large, truncated to 1048576 [ 1233.394045][T17281] xt_hashlimit: max too large, truncated to 1048576 [ 1233.653873][ T30] audit: type=1400 audit(1790472842.111:3245): avc: denied { ioctl } for pid=17288 comm="syz.1.2911" path="socket:[62724]" dev="sockfs" ino=62724 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1234.997155][T13047] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1235.157686][T13047] usb 5-1: Using ep0 maxpacket: 8 [ 1235.160246][T13047] usb 5-1: New USB device found, idVendor=1b96, idProduct=0001, bcdDevice= 0.40 [ 1235.161809][T13047] usb 5-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1235.161857][T13047] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1235.212068][T13047] usb 5-1: language id specifier not provided by device, defaulting to English [ 1235.218919][T13047] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.218961][T13047] usb 5-1: Product: syz [ 1235.218993][T13047] usb 5-1: SerialNumber: syz [ 1265.936819][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1265.957902][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1269.368592][ C0] sched: DL replenish lagged too much [ 1323.828615][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1323.841744][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1389.469234][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1389.478373][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1403.391953][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1403.398940][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13200/1:b..l P4969/1:b..l P17147/1:b..l [ 1403.409317][ C0] rcu: (detected by 0, t=10502 jiffies, g=92933, q=568 ncpus=2) [ 1403.417033][ C0] task:syz.2.2834 state:R running task stack:22488 pid:17147 tgid:17147 ppid:5598 task_flags:0x40064c flags:0x00080001 [ 1403.430545][ C0] Call Trace: [ 1403.433818][ C0] [ 1403.436752][ C0] __schedule+0x1259/0x6920 [ 1403.441286][ C0] ? __mod_zone_page_state+0xdb/0x190 [ 1403.446678][ C0] ? __pfx___schedule+0x10/0x10 [ 1403.451547][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 1403.456927][ C0] preempt_schedule_common+0x3c/0xb0 [ 1403.462223][ C0] preempt_schedule_thunk+0x16/0x40 [ 1403.467440][ C0] _raw_spin_unlock_irqrestore+0x61/0x80 [ 1403.473087][ C0] folios_put_refs+0x4f2/0xaa0 [ 1403.477867][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 1403.483169][ C0] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 1403.489515][ C0] shmem_undo_range+0x5e5/0x1570 [ 1403.494479][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 1403.499894][ C0] ? lock_acquire+0x1d1/0x380 [ 1403.504602][ C0] ? is_bpf_text_address+0x25/0x1a0 [ 1403.509848][ C0] shmem_evict_inode+0x3b1/0xca0 [ 1403.514804][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1403.520278][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 1403.526351][ C0] ? lock_acquire+0x1d1/0x380 [ 1403.531033][ C0] ? find_held_lock+0x2b/0x80 [ 1403.535722][ C0] ? evict+0x37e/0xad0 [ 1403.539792][ C0] ? evict+0x37e/0xad0 [ 1403.543864][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1403.549337][ C0] evict+0x3c2/0xad0 [ 1403.553228][ C0] ? fsnotify_grab_connector+0x4b/0x290 [ 1403.558783][ C0] ? __pfx_evict+0x10/0x10 [ 1403.563196][ C0] ? lock_acquire+0x1d1/0x380 [ 1403.567890][ C0] ? iput.part.0+0x981/0x1050 [ 1403.572574][ C0] iput.part.0+0x989/0x1050 [ 1403.577086][ C0] iput+0x35/0x40 [ 1403.580720][ C0] dentry_unlink_inode+0x284/0x470 [ 1403.585850][ C0] dentry_kill+0x25d/0xc20 [ 1403.590283][ C0] dput.part.0+0xd7/0x240 [ 1403.594616][ C0] dput+0x1f/0x30 [ 1403.598253][ C0] __fput+0x519/0xb50 [ 1403.602256][ C0] task_work_run+0x150/0x240 [ 1403.606859][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1403.611992][ C0] do_exit+0x951/0x2ae0 [ 1403.616161][ C0] ? __pfx_do_exit+0x10/0x10 [ 1403.620761][ C0] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1403.626756][ C0] do_group_exit+0xd5/0x2a0 [ 1403.631278][ C0] get_signal+0x1ec7/0x21e0 [ 1403.635813][ C0] ? __pfx_get_signal+0x10/0x10 [ 1403.640681][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 1403.646247][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1403.652443][ C0] irqentry_exit+0x402/0xa10 [ 1403.657043][ C0] asm_exc_page_fault+0x26/0x30 [ 1403.661898][ C0] RIP: 0033:0x7fe295853bd7 [ 1403.666318][ C0] RSP: 002b:00007fe2967661a0 EFLAGS: 00010206 [ 1403.672385][ C0] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fe29599e159 [ 1403.680353][ C0] RDX: 00007fe2967661c0 RSI: 00007fe2967662f0 RDI: 000000000000000b [ 1403.688344][ C0] RBP: 00007fe295a3506b R08: 0000000000000000 R09: 0000000000000000 [ 1403.696328][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1403.704300][ C0] R13: 00007fe295c26038 R14: 00007fe295c25fa0 R15: 00007ffce986df78 [ 1403.712296][ C0] [ 1403.715345][ C0] task:udevd state:R running task stack:24248 pid:4969 tgid:4969 ppid:1 task_flags:0x400140 flags:0x00080000 [ 1403.728849][ C0] Call Trace: [ 1403.732123][ C0] [ 1403.735055][ C0] __schedule+0x1259/0x6920 [ 1403.739574][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 1403.744791][ C0] ? is_bpf_text_address+0x94/0x1a0 [ 1403.749997][ C0] ? kernel_text_address+0x8d/0x100 [ 1403.755213][ C0] ? __pfx___schedule+0x10/0x10 [ 1403.760079][ C0] ? mark_held_locks+0x40/0x70 [ 1403.764851][ C0] preempt_schedule_irq+0x4e/0x90 [ 1403.769888][ C0] irqentry_exit+0x205/0xa10 [ 1403.774483][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1403.780468][ C0] RIP: 0010:rcu_is_watching+0x6/0xc0 [ 1403.785762][ C0] Code: 90 0f 0b 90 5b c3 cc cc cc cc e8 55 bb 8f 00 eb cd 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 53 <65> 48 ff 05 4a 0e 9d 12 e8 4d 88 e2 09 48 c7 c3 e8 2d 8e 94 89 c5 [ 1403.805374][ C0] RSP: 0018:ffffc9000336f818 EFLAGS: 00000297 [ 1403.811444][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000002 [ 1403.819416][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8edec4e0 [ 1403.827389][ C0] RBP: ffffffff8edec4e0 R08: 0000000000000000 R09: 0000000000000000 [ 1403.835358][ C0] R10: 0000000000000200 R11: 00000000000173dd R12: 0000000000000002 [ 1403.843324][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1403.851318][ C0] lock_acquire+0x31e/0x380 [ 1403.855831][ C0] ? unwind_next_frame+0x3be/0x2090 [ 1403.861041][ C0] ? unwind_next_frame+0x3be/0x2090 [ 1403.866249][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1403.872413][ C0] unwind_next_frame+0xd1/0x2090 [ 1403.877360][ C0] ? unwind_next_frame+0xbd/0x2090 [ 1403.882477][ C0] ? do_getname+0x35/0x390 [ 1403.886907][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1403.893061][ C0] arch_stack_walk+0x94/0xf0 [ 1403.897668][ C0] ? do_getname+0x35/0x390 [ 1403.902100][ C0] stack_trace_save+0x8e/0xc0 [ 1403.906776][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1403.912148][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 1403.917089][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 1403.922029][ C0] save_stack+0x162/0x1e0 [ 1403.926364][ C0] ? __pfx_save_stack+0x10/0x10 [ 1403.931224][ C0] ? __free_frozen_pages+0x79f/0x10f0 [ 1403.936601][ C0] ? qlist_free_all+0x47/0xf0 [ 1403.941277][ C0] ? kasan_quarantine_reduce+0x1a0/0x1f0 [ 1403.946913][ C0] ? __kasan_slab_alloc+0x69/0x90 [ 1403.951944][ C0] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 1403.957579][ C0] ? do_getname+0x35/0x390 [ 1403.962015][ C0] ? page_ext_put+0x3e/0xd0 [ 1403.966530][ C0] __reset_page_owner+0x84/0x190 [ 1403.971480][ C0] __free_frozen_pages+0x79f/0x10f0 [ 1403.976691][ C0] ? __free_slab+0xd0/0x220 [ 1403.981209][ C0] qlist_free_all+0x47/0xf0 [ 1403.985714][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1403.991179][ C0] __kasan_slab_alloc+0x69/0x90 [ 1403.996037][ C0] kmem_cache_alloc_noprof+0x269/0x6a0 [ 1404.001499][ C0] ? do_getname+0x35/0x390 [ 1404.005931][ C0] do_getname+0x35/0x390 [ 1404.010189][ C0] vfs_fstatat+0xd0/0xe0 [ 1404.014444][ C0] __do_sys_newfstatat+0x9d/0x120 [ 1404.019480][ C0] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 1404.025122][ C0] ? ktime_get_ts64+0x306/0x420 [ 1404.030011][ C0] do_syscall_64+0x123/0x790 [ 1404.034606][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1404.040498][ C0] RIP: 0033:0x7f4c52b11b0a [ 1404.044910][ C0] RSP: 002b:00007ffd10710c98 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 1404.053319][ C0] RAX: ffffffffffffffda RBX: 00005582c1b70408 RCX: 00007f4c52b11b0a [ 1404.061292][ C0] RDX: 00007ffd10710ca0 RSI: 00005582c1b5eef3 RDI: 00000000ffffff9c [ 1404.069261][ C0] RBP: 00005582e7e10668 R08: 00063489548db180 R09: 0000000000000001 [ 1404.077236][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1404.085211][ C0] R13: 00007ffd10710ca0 R14: 0000000000000000 R15: 00063489548db180 [ 1404.093200][ C0] [ 1404.096213][ C0] task:syz-executor state:R running task stack:23688 pid:13200 tgid:13200 ppid:1 task_flags:0x40054c flags:0x00080002 [ 1404.109763][ C0] Call Trace: [ 1404.113033][ C0] [ 1404.115971][ C0] __schedule+0x1259/0x6920 [ 1404.120497][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 1404.125447][ C0] ? __pfx___schedule+0x10/0x10 [ 1404.130318][ C0] ? mark_held_locks+0x40/0x70 [ 1404.135086][ C0] preempt_schedule_irq+0x4e/0x90 [ 1404.140122][ C0] irqentry_exit+0x205/0xa10 [ 1404.144714][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1404.150697][ C0] RIP: 0010:lock_release+0x19e/0x310 [ 1404.155987][ C0] Code: ff 65 0f c1 05 db cd a5 12 83 f8 01 0f 85 27 01 00 00 9c 58 f6 c4 02 0f 85 12 01 00 00 41 f7 c6 00 02 00 00 0f 85 c8 00 00 00 <48> 8b 44 24 10 65 48 2b 05 dd 86 a5 12 0f 85 4d 01 00 00 48 83 c4 [ 1404.175593][ C0] RSP: 0018:ffffc9000312f430 EFLAGS: 00000206 [ 1404.181657][ C0] RAX: 0000000000000046 RBX: ffffffff8edec4e0 RCX: ffffc9000312f43c [ 1404.189625][ C0] RDX: 0000000000000000 RSI: ffffffff8e3680af RDI: ffffffff8c623980 [ 1404.197593][ C0] RBP: ffffffff81f53a68 R08: 00000000d63968bf R09: 0000000000000007 [ 1404.205561][ C0] R10: 0000000000000200 R11: 0000000000000001 R12: ffff888069e0cb00 [ 1404.213530][ C0] R13: ffffc9000312f598 R14: 0000000000000202 R15: 0000000000000002 [ 1404.221510][ C0] ? is_module_text_address+0x148/0x220 [ 1404.227086][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1404.233256][ C0] is_module_text_address+0x14d/0x220 [ 1404.238648][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1404.244809][ C0] kernel_text_address+0x81/0x100 [ 1404.249848][ C0] __kernel_text_address+0xd/0x30 [ 1404.254887][ C0] unwind_get_return_address+0x59/0xa0 [ 1404.260359][ C0] arch_stack_walk+0xa6/0xf0 [ 1404.264971][ C0] ? tear_down_vmas+0x2a5/0x610 [ 1404.269831][ C0] stack_trace_save+0x8e/0xc0 [ 1404.274510][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1404.279883][ C0] ? kmem_cache_free+0x40f/0x6c0 [ 1404.284823][ C0] ? mmput+0x67/0x80 [ 1404.288718][ C0] ? do_exit+0x8b1/0x2ae0 [ 1404.293050][ C0] ? do_group_exit+0xd5/0x2a0 [ 1404.297730][ C0] ? get_signal+0x1ec7/0x21e0 [ 1404.302409][ C0] ? arch_do_signal_or_restart+0x91/0x7e0 [ 1404.308139][ C0] ? exit_to_user_mode_loop+0x139/0x700 [ 1404.313694][ C0] ? do_syscall_64+0x661/0x790 [ 1404.318456][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1404.324526][ C0] kasan_save_stack+0x30/0x50 [ 1404.329295][ C0] ? kasan_save_stack+0x30/0x50 [ 1404.334155][ C0] ? kasan_record_aux_stack+0xa7/0xc0 [ 1404.339537][ C0] ? kmem_cache_free+0x424/0x6c0 [ 1404.344474][ C0] ? tear_down_vmas+0x2a5/0x610 [ 1404.349327][ C0] ? exit_mmap+0x469/0xa00 [ 1404.353762][ C0] ? __mmput+0x12a/0x410 [ 1404.358026][ C0] ? mmput+0x67/0x80 [ 1404.361919][ C0] ? do_exit+0x8b1/0x2ae0 [ 1404.366250][ C0] ? do_group_exit+0xd5/0x2a0 [ 1404.370934][ C0] ? get_signal+0x1ec7/0x21e0 [ 1404.375617][ C0] ? arch_do_signal_or_restart+0x91/0x7e0 [ 1404.381351][ C0] ? exit_to_user_mode_loop+0x139/0x700 [ 1404.386902][ C0] ? do_syscall_64+0x661/0x790 [ 1404.391667][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1404.397787][ C0] kasan_record_aux_stack+0xa7/0xc0 [ 1404.403002][ C0] kmem_cache_free+0x424/0x6c0 [ 1404.407773][ C0] tear_down_vmas+0x2a5/0x610 [ 1404.412463][ C0] exit_mmap+0x469/0xa00 [ 1404.416718][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1404.421485][ C0] ? rcu_is_watching+0x13/0xc0 [ 1404.426264][ C0] ? find_held_lock+0x2b/0x80 [ 1404.430952][ C0] ? uprobe_clear_state+0x5f/0x250 [ 1404.436080][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1404.441742][ C0] __mmput+0x12a/0x410 [ 1404.445817][ C0] mmput+0x67/0x80 [ 1404.449543][ C0] do_exit+0x8b1/0x2ae0 [ 1404.453718][ C0] ? __pfx_do_exit+0x10/0x10 [ 1404.458317][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1404.463349][ C0] ? find_held_lock+0x2b/0x80 [ 1404.468035][ C0] ? get_signal+0x7e0/0x21e0 [ 1404.472632][ C0] do_group_exit+0xd5/0x2a0 [ 1404.477155][ C0] get_signal+0x1ec7/0x21e0 [ 1404.481680][ C0] ? __pfx_get_signal+0x10/0x10 [ 1404.486543][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 1404.492101][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1404.498283][ C0] exit_to_user_mode_loop+0x139/0x700 [ 1404.503660][ C0] ? rcu_is_watching+0x13/0xc0 [ 1404.508442][ C0] do_syscall_64+0x661/0x790 [ 1404.513037][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1404.518941][ C0] RIP: 0033:0x7fd69c59c767 [ 1404.523353][ C0] RSP: 002b:00007ffefdfd15e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000005 [ 1404.531769][ C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007fd69c59c767 [ 1404.539735][ C0] RDX: 0000000000000000 RSI: 00007ffefdfd15f0 RDI: 0000000000000003 [ 1404.547701][ C0] RBP: 00007ffefdfd27dc R08: 0000000000000000 R09: 0000000000000000 [ 1404.555671][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffefdfd27f0 [ 1404.563643][ C0] R13: 00007fd69c6344bb R14: 000000000011a495 R15: 00007ffefdfd2830 [ 1404.571637][ C0] [ 1404.574680][ C0] rcu: rcu_preempt kthread starved for 7021 jiffies! g92933 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 1404.585634][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1404.595605][ C0] rcu: RCU grace-period kthread stack dump: [ 1404.601486][ C0] task:rcu_preempt state:R running task stack:26120 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1404.614994][ C0] Call Trace: [ 1404.618271][ C0] [ 1404.621202][ C0] __schedule+0x1259/0x6920 [ 1404.625715][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 1404.630679][ C0] ? __pfx___schedule+0x10/0x10 [ 1404.635539][ C0] ? find_held_lock+0x2b/0x80 [ 1404.640227][ C0] ? schedule+0x225/0x2c0 [ 1404.644572][ C0] schedule+0xdd/0x2c0 [ 1404.648654][ C0] schedule_timeout+0x127/0x280 [ 1404.653517][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1404.658900][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1404.664191][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1404.670011][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 1404.675477][ C0] rcu_gp_fqs_loop+0x1a9/0x8f0 [ 1404.680245][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1404.685537][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1404.690482][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1404.695688][ C0] rcu_gp_kthread+0x17a/0x220 [ 1404.700367][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1404.705567][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1404.711393][ C0] ? __kthread_parkme+0x18f/0x230 [ 1404.716427][ C0] ? kthread+0x13a/0x450 [ 1404.720675][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1404.725877][ C0] kthread+0x373/0x450 [ 1404.729953][ C0] ? __pfx_kthread+0x10/0x10 [ 1404.734558][ C0] ret_from_fork+0x730/0xd60 [ 1404.739154][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1404.744271][ C0] ? __switch_to+0x800/0x10f0 [ 1404.748958][ C0] ? __pfx_kthread+0x10/0x10 [ 1404.753564][ C0] ret_from_fork_asm+0x1a/0x30 [ 1404.758348][ C0] [ 1404.761362][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1404.767680][ C0] CPU: 0 UID: 0 PID: 3223 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT(full) [ 1404.778963][ C0] Tainted: [L]=SOFTLOCKUP [ 1404.783279][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1404.793346][ C0] Workqueue: bat_events batadv_dat_purge [ 1404.799001][ C0] RIP: 0010:skb_release_head_state+0x13f/0x400 [ 1404.805164][ C0] Code: 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 80 3c 02 00 0f 85 70 02 00 00 48 8b 6b 68 bf 07 00 00 00 48 89 ee e8 41 fe 73 f8 <48> 83 fd 07 76 51 e8 96 03 74 f8 48 83 e5 f8 be 04 00 00 00 41 bc [ 1404.824774][ C0] RSP: 0018:ffffc90000007600 EFLAGS: 00000246 [ 1404.830844][ C0] RAX: 0000000000000000 RBX: ffff88808798e8c0 RCX: ffffffff89982f0f [ 1404.838814][ C0] RDX: 0000000000000101 RSI: 0000000000000007 RDI: ffff888033e12580 [ 1404.846783][ C0] RBP: ffff888079cc8c03 R08: 0000000000000007 R09: 0000000000000007 [ 1404.854751][ C0] R10: ffff888079cc8c03 R11: 0000000000000001 R12: 0000000000000000 [ 1404.862724][ C0] R13: ffff88808798e928 R14: ffff88807a7d8000 R15: ffff88808798e8c0 [ 1404.870694][ C0] FS: 0000000000000000(0000) GS:ffff888123b51000(0000) knlGS:0000000000000000 [ 1404.879623][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1404.886212][ C0] CR2: 00007ffce986d940 CR3: 000000007d98d000 CR4: 00000000003526f0 [ 1404.894188][ C0] Call Trace: [ 1404.897463][ C0] [ 1404.900304][ C0] consume_skb+0x8a/0x110 [ 1404.904649][ C0] nft_synproxy_do_eval+0xa72/0xd30 [ 1404.909860][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1404.915591][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 1404.921766][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 1404.928094][ C0] ? __hrtimer_rearm_deferred+0x23c/0x7b0 [ 1404.933833][ C0] ? __pfx_nft_objref_eval+0x10/0x10 [ 1404.939133][ C0] nft_do_chain+0x2e5/0x19d0 [ 1404.943749][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1404.948783][ C0] ? ipt_do_table+0xd4f/0x1b00 [ 1404.953547][ C0] ? __local_bh_enable_ip+0xa5/0x120 [ 1404.958840][ C0] ? ipt_do_table+0xd7f/0x1b00 [ 1404.963631][ C0] ? __pfx_ipt_do_table+0x10/0x10 [ 1404.968667][ C0] nft_do_chain_ipv4+0x1d0/0x250 [ 1404.973615][ C0] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 1404.979090][ C0] ? iptable_mangle_hook+0x71/0x4b0 [ 1404.984288][ C0] ? nf_hook.constprop.0+0x98/0x750 [ 1404.989498][ C0] nf_hook_slow+0xbf/0x220 [ 1404.993921][ C0] nf_hook.constprop.0+0x2a6/0x750 [ 1404.999037][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1405.005023][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 1405.010661][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1405.015784][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1405.021772][ C0] ? ip_rcv_finish_core+0x7ec/0x2c30 [ 1405.027075][ C0] ip_local_deliver+0x163/0x1f0 [ 1405.031933][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 1405.037311][ C0] ip_rcv+0x33a/0x3c0 [ 1405.041301][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1405.045807][ C0] __netif_receive_skb_one_core+0x197/0x1e0 [ 1405.051705][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1405.058125][ C0] ? lock_acquire+0x1d1/0x380 [ 1405.062811][ C0] ? process_backlog+0x437/0x1600 [ 1405.067843][ C0] ? process_backlog+0x437/0x1600 [ 1405.072870][ C0] __netif_receive_skb+0x1f/0x120 [ 1405.077902][ C0] process_backlog+0x487/0x1600 [ 1405.082765][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 1405.088147][ C0] net_rx_action+0xa40/0xf20 [ 1405.092752][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1405.097869][ C0] ? mark_held_locks+0x40/0x70 [ 1405.102641][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 1405.107860][ C0] ? tmigr_handle_remote+0x132/0x380 [ 1405.113156][ C0] ? run_timer_base+0x121/0x190 [ 1405.118009][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 1405.123214][ C0] handle_softirqs+0x1e6/0x9d0 [ 1405.127985][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1405.133271][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1405.138555][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 1405.144215][ C0] ? __batadv_dat_purge.part.0+0x294/0x3c0 [ 1405.150042][ C0] ? __pfx_batadv_dat_to_purge+0x10/0x10 [ 1405.155685][ C0] do_softirq+0xaf/0xf0 [ 1405.159844][ C0] [ 1405.162766][ C0] [ 1405.165690][ C0] __local_bh_enable_ip+0xff/0x120 [ 1405.170806][ C0] __batadv_dat_purge.part.0+0x294/0x3c0 [ 1405.176446][ C0] ? process_one_work+0x906/0x1b10 [ 1405.181575][ C0] batadv_dat_purge+0x4b/0xa0 [ 1405.186265][ C0] process_one_work+0xac7/0x1b10 [ 1405.191227][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1405.196613][ C0] ? lock_acquire+0x1d1/0x380 [ 1405.201310][ C0] ? __pfx_batadv_dat_purge+0x10/0x10 [ 1405.206698][ C0] rescuer_thread+0x918/0x14e0 [ 1405.211486][ C0] ? rescuer_thread+0x256/0x14e0 [ 1405.216437][ C0] ? rescuer_thread+0x118/0x14e0 [ 1405.221386][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 1405.226599][ C0] ? __kthread_parkme+0x18f/0x230 [ 1405.231641][ C0] ? kthread+0x13a/0x450 [ 1405.235889][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 1405.241098][ C0] kthread+0x373/0x450 [ 1405.245177][ C0] ? __pfx_kthread+0x10/0x10 [ 1405.249770][ C0] ret_from_fork+0x730/0xd60 [ 1405.254364][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1405.259479][ C0] ? __switch_to+0x800/0x10f0 [ 1405.264166][ C0] ? __pfx_kthread+0x10/0x10 [ 1405.268766][ C0] ret_from_fork_asm+0x1a/0x30 [ 1405.273549][ C0]