last executing test programs: 2m24.805571331s ago: executing program 2 (id=1702): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="2300000008000000020000000300000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, r3, 0x25, 0x2}, 0x3a) syz_emit_ethernet(0x36, &(0x7f0000000580)=ANY=[], 0x0) 2m24.723203053s ago: executing program 2 (id=1706): syz_mount_image$erofs(&(0x7f0000001240), &(0x7f0000000200)='./file0\x00', 0x2800080, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0], 0xfc, 0x21b, &(0x7f0000000480)="$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") openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) 2m24.669572533s ago: executing program 2 (id=1709): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) accept$inet6(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 2m24.595159696s ago: executing program 2 (id=1713): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6708100000003aff00034000000000000000ffffac1414aaff020000000000000000000000000001"], 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}) fstatfs(r0, &(0x7f0000000140)=""/156) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc80, &(0x7f0000000600)=ANY=[], 0x1, 0x284, &(0x7f0000001000)="$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") preadv2(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x7) 2m24.484551698s ago: executing program 2 (id=1715): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007903000000000000630000c2000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x28) 2m23.303643469s ago: executing program 2 (id=1730): sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x180c850, &(0x7f0000001100)=ANY=[@ANYBLOB='rodir,nonumtail=0,nonumtail=0,shortname=lower,rodir,iocharset=maciceland,shortname=win95,check=strict,codepage=863,rodir,utf8=0,iocharset=iso8859-3,\x00l'], 0x1, 0x379, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$netlink(0x10, 0x3, 0x9) close(r0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=0x0, @ANYRES64], 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat(r1, &(0x7f00000001c0)='./file2\x00', 0x42142, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x19, 0x70bd29, 0x255fdbfa, {0x0, 0x0, 0x0, 0x0, 0x51187, 0x39e63}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e1c}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0xcc93f1266b77d0bf}, 0x8040) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='temp_file\x00', 0x42, 0x1ff) write(r5, &(0x7f0000000080)='/dev/mapper/control', 0x13) lseek(r5, 0x0, 0x0) read(r5, &(0x7f0000000100), 0x14) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a00), 0x82000, 0x0) read$FUSE(r7, 0x0, 0x0) ioctl(r6, 0xc138fd00, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, 0x49011, 0x49841}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x40}}, 0x0) sendto$packet(r3, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r8, 0x1, 0x4, 0x6, @local}, 0x14) 2m8.101324369s ago: executing program 32 (id=1730): sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x180c850, &(0x7f0000001100)=ANY=[@ANYBLOB='rodir,nonumtail=0,nonumtail=0,shortname=lower,rodir,iocharset=maciceland,shortname=win95,check=strict,codepage=863,rodir,utf8=0,iocharset=iso8859-3,\x00l'], 0x1, 0x379, &(0x7f0000000600)="$eJzs3U1oHOUbAPBnO/kstMnhD+UvCKM3QUs/8KCnlJJCMReVoepBXGyqko1CFhfTQ7fxIh4FjwqCF/GgBw89i6CINw9erSBV8aC9FVp8ZXdnd2e7mzRF+xH8/Q7Lk2feZ973nZ1kJ7PZNy8txdrZ6Th39eqVmJurxdTSyaW4VovFyKLvYoybmZADAPaGaynFn6lnlyW1OzwkAOAO677+v3Kgknn7653aJ6/+ALDnlb//z+/UZm4sc/327hgAAPeVsfv/D49snhl9q3+q8lcBAMBe9ezzLzx1YiXimTyfi1h/p1W0inhyuP3EuXgtGrEaR2IhbkT0LhQ6D7Xu46nTK8tH8jxvxy+LUUTER60iYr3dKnpXCieybv1sHI2FWCzry6uNlFJ26ouV5aN5V0RcbHf7j/Vaq5iO/WX/P+6P1TgWefxvrD7i9MrysbzcQbHer29HbJX3LQbvbSzE9y/HG9GIs/NnIqX+Zc3K8oWjeX4yrYzUt4rZODs4CuN3QAAAAAAAAAAAAAAAAAAAAAAA4J84XK6dk/cX9itaRaTh+j2HBw3yxdH1cXrNy/WBtnrrA6XZFCn98dZjxbtZjKwPdPP6PK1iKvbdu2kDAAAAAAAAAAAAAAAAAADAfaW5ORP1RmN1o7l5fq0atDeam/siopN5/dvPvpqP8Ta3CKbKPiqb8jJ1fq2esn7jlHXbRCxGpTyLiOnuCM+v1T+9NBhxtYvZwSwmDmN2+02NxoGHfv5gmHkw6+/5r2GbLCZPMLtpGNVg/WBvSIPM9HDK2x6x42Vw7BZH9XJKabv9XHhxvCpqEVO3/8TtHKRO8M2VV/9/vHno8W7my9TzyKMLZy6///Fva/VGp+eOxiczG80baa1efj35ZNs+yCrnT608hrXqmTC1U/nWaKae/fD7cw+8993uek/VzJsT2mS96Xy+0dysld8p3U0zvaCTu6lqvnE6GzsTpuPffHY6wcST7dCHS/VLF376dbf7qfyQsFAHAAAAAAAAAAAAAAAAAADcFZXPipfKD/tO71T1xNNlMHdnRwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAd8fw//9Xgq2xzG6C6+0Y3zS7utGMOHivpwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH/c3wEAAP//3MRpbg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$netlink(0x10, 0x3, 0x9) close(r0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=0x0, @ANYRES64], 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat(r1, &(0x7f00000001c0)='./file2\x00', 0x42142, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x19, 0x70bd29, 0x255fdbfa, {0x0, 0x0, 0x0, 0x0, 0x51187, 0x39e63}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e1c}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0xcc93f1266b77d0bf}, 0x8040) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='temp_file\x00', 0x42, 0x1ff) write(r5, &(0x7f0000000080)='/dev/mapper/control', 0x13) lseek(r5, 0x0, 0x0) read(r5, &(0x7f0000000100), 0x14) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a00), 0x82000, 0x0) read$FUSE(r7, 0x0, 0x0) ioctl(r6, 0xc138fd00, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, 0x49011, 0x49841}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x40}}, 0x0) sendto$packet(r3, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r8, 0x1, 0x4, 0x6, @local}, 0x14) 33.416753751s ago: executing program 3 (id=3033): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') ioctl$PPPIOCSFLAGS1(r0, 0xc0686611, &(0x7f0000000080)=0x68) 33.416650511s ago: executing program 3 (id=3034): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10119, 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) lsetxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x1) 32.553788884s ago: executing program 3 (id=3039): syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000680)={0x2, 0x0, 0x0, 0x0}) 32.472766526s ago: executing program 3 (id=3040): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005b40)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x5, 0x5505, &(0x7f0000000340)="$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") setxattr$security_ima(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) lsetxattr(0x0, 0x0, 0x0, 0x0, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x1000, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) syz_mount_image$vfat(&(0x7f00000058c0), &(0x7f0000005e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x105409, 0x0, 0x1, 0x0, &(0x7f0000005ac0)) mkdir(&(0x7f0000005a00)='./file0\x00', 0x169) 31.879527761s ago: executing program 3 (id=3044): syz_open_dev$hidraw(&(0x7f0000000080), 0x6, 0x40000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x101880a, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$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") dup2(r1, r0) 31.221017808s ago: executing program 3 (id=3046): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000140)=@ethtool_perm_addr={0x4b}}) 31.062838352s ago: executing program 33 (id=3046): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000140)=@ethtool_perm_addr={0x4b}}) 6.857750483s ago: executing program 0 (id=3236): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/2, 0x1000000, 0x800, 0x7, 0x1}, 0x20) 6.656361209s ago: executing program 0 (id=3243): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_getaffinity(r0, 0x8, &(0x7f0000000280)) 4.858689675s ago: executing program 0 (id=3254): r0 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x10000, 0x1, 0x135}, &(0x7f00000001c0), &(0x7f00000003c0), &(0x7f0000000000)) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x20, 0x27, 0x2, 0x0, 0x0, r0}, &(0x7f00000002c0), &(0x7f0000000000), 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x8100}, 0x14) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000400)=0x11) ioctl$TCSETS(r2, 0x5402, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000340)={0x2b}, 0x8) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) readahead(0xffffffffffffffff, 0x8, 0x1) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 3.841854091s ago: executing program 0 (id=3260): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32, @ANYBLOB="01000000020000001c0012000c"], 0x3c}}, 0x0) 3.835701031s ago: executing program 0 (id=3261): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x7e, &(0x7f0000000940)=ANY=[], 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x59000, &(0x7f00000008c0)={[{@quota}, {@max_dir_size_kb}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@grpquota}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000440)="$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") prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c0000001800010300000000feffffff0a8000fdff03000602000000fd37c3598592ed611b072c4d398232c0bfea323928569316d9af9c52b123d257d2db12d31e52ff8b9262"], 0x1c}}, 0x0) r4 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000b40)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x178, 0x0, 0x0, 0x178, 0x2d0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0xb0, 0xe0, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0x4, 0x6, 0x7, 0x0, 0x1, 0x5], 0x5, 0x3}}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="1400000013022100fdffffff0000000007000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) ioctl$RTC_AIE_ON(r5, 0x7001) 3.411962732s ago: executing program 6 (id=3262): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2c, 0x0, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x40030000000000, 0x0, 0x20040841}, 0x8000) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x30200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000880}, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket(0x10, 0x80002, 0x4) socketpair$unix(0x1, 0x3, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) 3.366346053s ago: executing program 6 (id=3263): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80) r0 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r1, 0x4) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, 0x0, 0x0, 0xf, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x44014) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:07.0/driver/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000180)='0000:00:07.0', 0xc) 2.968636193s ago: executing program 6 (id=3265): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_getaffinity(r0, 0x8, &(0x7f0000000280)) 2.953795784s ago: executing program 0 (id=3266): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x458, 0x138, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x7, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xd, 0xf, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x10, 0xb, 0xfb}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000001c0)={0x0, 0x22, 0x28, {0x28, 0x7, "f70ba381030000000000000000cb4fdca0560f920d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.946343794s ago: executing program 1 (id=3267): mkdirat(0xffffffffffffff9c, 0x0, 0xc0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) inotify_init1(0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x5000180) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) connect$unix(0xffffffffffffffff, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) setreuid(0xee01, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, 0x0, 0x9c3fa077fa966179, 0x1f, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./bus\x00') r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="2801000010000700000000000000000000000000000000000000004000000000e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000003000000000000000100000000000000020000000000000009000000000000000000001000000000010000000000000000000000000000000000000000000000000000000000000002000000000000000700000000000000000000000000000000000400ffffffffe80a000000000000043500000a0002fe340000000000000014000e00fe8000000000000000000000000000bb240009008f6b0000000000000200000000000000b40000000000000005"], 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x890) socket$nl_xfrm(0x10, 0x3, 0x6) 2.844199797s ago: executing program 1 (id=3269): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, 0x0, &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc\x00', 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f0000000b00)='0x01', 0x4) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001c00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000002100)='usbip-vudc.0\x00', 0xc) 2.818716187s ago: executing program 1 (id=3270): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0', 0xb) 2.614894253s ago: executing program 1 (id=3273): r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f00000000c0)={0x1, 0x0, [{0x80000001, 0x7, 0x8, 0x9, 0x7, 0x4}]}) r3 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffe, 0x400, 0x3, 0x0, 0x4002004c4, 0x1004, 0x8080000000000000, 0x9, 0x0, 0x4, 0xffffffffffffffff, 0x7ff, 0xb3, 0x8d], 0x80a0000, 0x2010d3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x75, 0x7f, 0x2, 0x3ff, 0x9, 0x7fffffff, 0x5, 0x0, 0x4, 0xefffffffffffffff, 0x2000000000000000, 0x5, 0x8c], 0xeeee8000, 0x284a93}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.191727173s ago: executing program 1 (id=3274): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') fsmount(r0, 0x0, 0x81) 2.132922715s ago: executing program 1 (id=3275): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 2.093284696s ago: executing program 6 (id=3276): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80) r0 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r1, 0x4) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, 0x0, 0x0, 0xf, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x44014) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:07.0/driver/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000180)='0000:00:07.0', 0xc) 2.075595156s ago: executing program 6 (id=3277): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) sendto$packet(r0, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000140), 0x14) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='60', 0x2) write(r2, 0x0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00', 0x1000) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x2, 0x4d, 0x3, '\x00', 0x1}) 2.020922228s ago: executing program 6 (id=3278): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000018105e04da1000000004000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="002222000000960100060100b31c0800002a00c08538a2"], 0x0}, 0x0) 1.834960372s ago: executing program 4 (id=3281): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) r1 = socket(0x1e, 0x4, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x0) 1.802913273s ago: executing program 5 (id=3282): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x7d, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r1, &(0x7f0000002600)=""/4113, 0x1011) 1.802464503s ago: executing program 5 (id=3283): r0 = fsopen(&(0x7f0000000040)='debugfs\x00', 0x1) r1 = fcntl$dupfd(r0, 0x406, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) 1.711994205s ago: executing program 5 (id=3284): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x14, 0x32, 0x300, 0x70bd25, 0x25dfdbff}, 0x14}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0x10, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x12}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.711846225s ago: executing program 5 (id=3285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000005700)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r6 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) prctl$PR_SCHED_CORE(0x23, 0x7, 0x0, 0x1, 0x0) fcntl$dupfd(r6, 0x0, 0xffffffffffffffff) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='omfs\x00', 0x208000, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x4005800) 1.598710779s ago: executing program 4 (id=3286): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_getaffinity(r0, 0x8, &(0x7f0000000280)) 890.027697ms ago: executing program 5 (id=3287): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup/../file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f08100000009837a0324d7df546bcb8e8c94efe76ce", 0x17) r4 = syz_open_procfs(0x0, &(0x7f00000190c0)='mountinfo\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') getdents64(r5, &(0x7f0000000500)=""/166, 0xa6) getdents(r5, 0x0, 0x0) pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x6) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) socket$inet(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) 600.835084ms ago: executing program 4 (id=3288): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80) r0 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r1, 0x4) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, 0x0, 0x0, 0xf, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x44014) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:07.0/driver/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000180)='0000:00:07.0', 0xc) 402.530509ms ago: executing program 4 (id=3289): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) sendto$packet(r0, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000140), 0x14) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='60', 0x2) write(r2, 0x0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00', 0x1000) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x2, 0x4d, 0x3, '\x00', 0x1}) 387.09792ms ago: executing program 4 (id=3290): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)='@+]\x00', 0x0, 0x0) 273.496122ms ago: executing program 4 (id=3291): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x1000000, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f000048a000/0x1000)=nil, 0x1000, 0x2, 0x12, r0, 0x0) 0s ago: executing program 5 (id=3292): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)={0x1c, r4, 0x1, 0x0, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x44) kernel console output (not intermixed with test programs): ] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 347.875553][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 347.883356][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 349.160728][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 349.168591][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 350.829888][ T4271] fuse: Bad value for 'user_id' [ 351.004808][ T4282] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 351.459328][ T4286] fuse: Unknown parameter 'grou00000000000000000000' [ 354.404621][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 354.412513][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 354.810841][ T4317] fuse: Bad value for 'fd' [ 355.781395][ T28] audit: type=1400 audit(1785762150.503:216): avc: denied { remount } for pid=4333 comm="syz.2.1264" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 355.877562][ T4340] fuse: Unknown parameter 'grou00000000000000000000' [ 356.168892][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 356.176582][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 356.806374][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 356.814261][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 359.714495][ T4386] fuse: Unknown parameter 'grou00000000000000000000' [ 359.939268][ T4402] overlayfs: failed to clone upperpath [ 361.536175][ T4419] overlayfs: failed to clone upperpath [ 363.136615][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 363.144024][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 363.809529][ T4444] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 364.474149][ T4465] fuse: Unknown parameter 'group_i00000000000000000000' [ 364.701164][ T4482] fuse: Unknown parameter 'user00000000000000000000' [ 366.266145][ T4503] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 367.513543][ T4505] overlayfs: failed to clone upperpath [ 368.397012][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 368.404396][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 368.659558][ T4520] fuse: Unknown parameter 'group_i00000000000000000000' [ 370.579518][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 370.587294][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 370.906924][ T4562] fuse: Unknown parameter 'group_i00000000000000000000' [ 371.893951][ T4592] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 375.041293][ T4643] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 375.134591][ T4650] overlayfs: failed to clone upperpath [ 375.413340][ T4654] overlayfs: failed to clone upperpath [ 377.581506][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 377.589225][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 378.833873][ T4705] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 379.397741][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 379.405511][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 382.477460][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 382.485279][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 383.046848][ T4815] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 383.966450][ T4826] fuse: Bad value for 'fd' [ 386.447223][ T4863] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 386.457552][ T4869] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 386.466372][ T4869] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 387.829417][ T4896] fuse: Bad value for 'fd' [ 389.038692][ T4912] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 389.380336][ T4928] fuse: Bad value for 'fd' [ 390.973146][ T4944] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 390.980893][ T4944] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 391.759272][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 391.766736][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 391.985405][ T4962] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 393.536912][ T4985] fuse: Bad value for 'fd' [ 393.628387][ T4987] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 394.141030][ T4992] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 394.735778][ T5003] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 395.487172][ T5026] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 399.113123][ T5039] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 400.316332][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 400.324143][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 401.274340][ T5093] overlayfs: failed to clone upperpath [ 405.459021][ T5147] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 405.468286][ T5147] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 406.634599][ T5155] 9pnet_fd: Insufficient options for proto=fd [ 409.024950][ T5198] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 409.261999][ T5207] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 409.685063][ T5218] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 409.963058][ T5227] x_tables: duplicate underflow at hook 2 [ 410.043780][ T5234] fuse: Bad value for 'fd' [ 412.811787][ T5244] device vlan2 entered promiscuous mode [ 412.821335][ T5244] device bridge0 entered promiscuous mode [ 413.046528][ T5251] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 414.036349][ T5266] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1589'. [ 414.952008][ T5286] capability: warning: `syz.1.1596' uses 32-bit capabilities (legacy support in use) [ 414.995908][ T28] audit: type=1400 audit(1785762209.713:217): avc: denied { create } for pid=5287 comm="syz.0.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 415.017478][ T5288] fuse: Bad value for 'group_id' [ 415.049787][ T28] audit: type=1400 audit(1785762209.753:218): avc: denied { setopt } for pid=5287 comm="syz.0.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 415.528085][ T28] audit: type=1326 audit(1785762210.243:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5309 comm="syz.3.1606" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237919e019 code=0x7ffc0000 [ 415.571079][ T5310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1606'. [ 415.587601][ T28] audit: type=1326 audit(1785762210.283:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5309 comm="syz.3.1606" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f237919e019 code=0x7ffc0000 [ 415.638901][ T28] audit: type=1326 audit(1785762210.283:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5309 comm="syz.3.1606" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237919e019 code=0x7ffc0000 [ 415.683561][ T28] audit: type=1326 audit(1785762210.283:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5309 comm="syz.3.1606" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f237919e019 code=0x7ffc0000 [ 415.744625][ T28] audit: type=1326 audit(1785762210.283:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5309 comm="syz.3.1606" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237919e019 code=0x7ffc0000 [ 415.773586][ T28] audit: type=1326 audit(1785762210.283:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5309 comm="syz.3.1606" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f237919e019 code=0x7ffc0000 [ 415.813244][ T28] audit: type=1326 audit(1785762210.283:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5309 comm="syz.3.1606" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237919e019 code=0x7ffc0000 [ 415.929027][ T28] audit: type=1326 audit(1785762210.283:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5309 comm="syz.3.1606" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f237919e019 code=0x7ffc0000 [ 415.957677][ T5324] fuse: Bad value for 'group_id' [ 416.540997][ T5355] fuse: Bad value for 'group_id' [ 416.794400][ T5368] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 417.170488][ T5350] SELinux: security_context_str_to_sid (staff_) failed with errno=-22 [ 418.464626][ T5417] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1647'. [ 418.510160][ T5417] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 418.704508][ T5440] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 419.141482][ T5449] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1656'. [ 419.680041][ T5469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5469 comm=syz.0.1664 [ 419.699436][ T5402] 9pnet: p9_errstr2errno: server reported unknown error n$Ž[ [ 419.699436][ T5402] Q&|xùXev=0x000000000000000a,minixdf, [ 419.761404][ T5470] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 419.770359][ T5470] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 419.846944][ T5468] process '/newroot/297/file0' started with executable stack [ 421.083622][ T5512] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 423.072424][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 423.072451][ T28] audit: type=1400 audit(1785762217.793:272): avc: denied { getopt } for pid=5549 comm="syz.4.1693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 423.263562][ T5554] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 423.469235][ T28] audit: type=1400 audit(1785762218.183:273): avc: denied { write } for pid=5555 comm="syz.3.1695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 423.469381][ T5556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1695'. [ 423.489734][ T28] audit: type=1400 audit(1785762218.183:274): avc: denied { nlmsg_write } for pid=5555 comm="syz.3.1695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 423.663334][ T28] audit: type=1400 audit(1785762218.383:275): avc: denied { create } for pid=5566 comm="syz.2.1701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 423.701625][ T28] audit: type=1400 audit(1785762218.403:276): avc: denied { sys_admin } for pid=5566 comm="syz.2.1701" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 423.747269][ T28] audit: type=1400 audit(1785762218.413:277): avc: denied { associate } for pid=5568 comm="syz.2.1701" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 423.819418][ T28] audit: type=1400 audit(1785762218.533:278): avc: denied { mount } for pid=5576 comm="syz.1.1704" name="/" dev="configfs" ino=14797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 424.038417][ T28] audit: type=1400 audit(1785762218.753:279): avc: denied { create } for pid=5582 comm="syz.1.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 424.072159][ T28] audit: type=1400 audit(1785762218.783:280): avc: denied { setopt } for pid=5582 comm="syz.1.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 424.141006][ T28] audit: type=1400 audit(1785762218.863:281): avc: denied { ioctl } for pid=5582 comm="syz.1.1707" path="socket:[30762]" dev="sockfs" ino=30762 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 425.010044][ T5626] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 425.017400][ T5626] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 425.029460][ T5626] device vlan2 left promiscuous mode [ 425.034944][ T5626] device bridge0 left promiscuous mode [ 426.358851][ T5674] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 426.738056][ T5678] fuse: Bad value for 'fd' [ 428.691936][ T5763] netlink: 'syz.0.1777': attribute type 16 has an invalid length. [ 428.700053][ T5763] netlink: 'syz.0.1777': attribute type 17 has an invalid length. [ 428.707897][ T5763] netlink: 'syz.0.1777': attribute type 27 has an invalid length. [ 428.951403][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.958693][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.996821][ T5763] device bridge_slave_1 left promiscuous mode [ 429.006941][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.025109][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.256862][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 429.256877][ T28] audit: type=1400 audit(1785762223.973:286): avc: denied { getopt } for pid=5781 comm="syz.0.1786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 429.952878][ T5787] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 429.960342][ T5787] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 431.037454][ T5835] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 431.044931][ T5835] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 431.809024][ T5865] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 431.931294][ T5865] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 432.348941][ T5868] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1816'. [ 432.367411][ T5868] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1816'. [ 432.377037][ T5868] netlink: 'syz.0.1816': attribute type 5 has an invalid length. [ 432.385032][ T5868] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1816'. [ 433.598945][ T5889] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 433.606328][ T5889] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 435.187078][ T5923] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 435.805670][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 435.813067][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 435.898519][ T28] audit: type=1400 audit(1785762230.613:287): avc: denied { create } for pid=5931 comm="syz.1.1838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 436.421269][ T28] audit: type=1400 audit(1785762231.143:288): avc: denied { create } for pid=5941 comm="syz.1.1843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 436.444276][ T5943] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 437.448442][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 437.455828][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 437.601657][ T5973] netlink: 'syz.0.1855': attribute type 10 has an invalid length. [ 438.730478][ T6011] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 439.260291][ T6021] fuse: Bad value for 'group_id' [ 439.492373][ T6027] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 439.501205][ T6027] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 440.544470][ T28] audit: type=1400 audit(1785762235.263:289): avc: denied { read } for pid=6052 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 440.581468][ T28] audit: type=1400 audit(1785762235.283:290): avc: denied { open } for pid=6052 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 440.617646][ T28] audit: type=1400 audit(1785762235.283:291): avc: denied { mounton } for pid=6052 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 440.653903][ T6052] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.661099][ T6052] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.668743][ T6052] device bridge_slave_0 entered promiscuous mode [ 440.676327][ T6052] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.683576][ T6052] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.691375][ T6052] device bridge_slave_1 entered promiscuous mode [ 440.761101][ T6052] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.768327][ T6052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.775666][ T6052] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.782751][ T6052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.830172][ T657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 440.841170][ T657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 440.850600][ T657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 440.858937][ T657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 440.866946][ T6058] fuse: Bad value for 'group_id' [ 440.911291][ T657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 441.043713][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 441.124285][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 441.217647][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 441.386527][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 441.410479][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 441.435746][ T6052] device veth0_vlan entered promiscuous mode [ 441.465803][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 441.481632][ T6052] device veth1_macvtap entered promiscuous mode [ 441.517183][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 441.536731][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 441.629894][ T28] audit: type=1400 audit(1785762236.293:292): avc: denied { unmount } for pid=6052 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 441.757036][ T28] audit: type=1400 audit(1785762236.473:293): avc: denied { write } for pid=6065 comm="syz.5.1883" name="001" dev="devtmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 442.160513][ T6082] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 442.169290][ T6082] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 443.040027][ T6096] fuse: Bad value for 'group_id' [ 443.110125][ T486] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 443.300826][ T486] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.322978][ T486] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.348445][ T486] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 443.368895][ T486] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.401636][ T486] usb 6-1: config 0 descriptor?? [ 443.911878][ T6086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.067768][ T6086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.430374][ T6114] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1902'. [ 444.446655][ T28] audit: type=1400 audit(1785762239.163:294): avc: denied { ioctl } for pid=6113 comm="syz.3.1902" path="socket:[32465]" dev="sockfs" ino=32465 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 444.537300][ T6086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.550814][ T6086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.597369][ T6123] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 444.606387][ T6123] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 444.720609][ T6114] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.727898][ T6114] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.795429][ T6140] fuse: Bad value for 'group_id' [ 445.856204][ T486] usb 6-1: string descriptor 0 read error: -71 [ 445.863821][ T486] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #200: -71 [ 445.880125][ T486] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 445.888415][ T486] uclogic 0003:256C:006D.0001: failed probing pen v2 parameters: -71 [ 445.911606][ T486] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 445.919202][ T486] uclogic: probe of 0003:256C:006D.0001 failed with error -71 [ 446.013854][ T486] usb 6-1: USB disconnect, device number 2 [ 446.026495][ T6152] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 446.248413][ T6157] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 446.257234][ T6157] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 447.070760][ T6163] xt_hashlimit: size too large, truncated to 1048576 [ 448.130782][ T6178] fuse: Bad value for 'group_id' [ 448.373550][ T28] audit: type=1400 audit(1785762243.093:295): avc: denied { read } for pid=6158 comm="syz.0.1916" name="/" dev="configfs" ino=14797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 448.395792][ T28] audit: type=1400 audit(1785762243.093:296): avc: denied { open } for pid=6158 comm="syz.0.1916" path="/" dev="configfs" ino=14797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 448.469353][ T6193] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 448.478181][ T6193] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 448.909814][ T6207] fuse: Bad value for 'group_id' [ 449.688043][ T6215] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 449.696748][ T6214] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 450.984337][ T28] audit: type=1400 audit(1785762245.703:297): avc: denied { bind } for pid=6233 comm="syz.1.1945" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 451.019880][ T28] audit: type=1400 audit(1785762245.703:298): avc: denied { name_bind } for pid=6233 comm="syz.1.1945" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 451.060169][ T28] audit: type=1400 audit(1785762245.703:299): avc: denied { node_bind } for pid=6233 comm="syz.1.1945" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 451.143442][ T6236] overlayfs: failed to clone upperpath [ 451.532299][ T6247] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 452.397853][ T6219] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1939'. [ 452.416807][ T6219] tipc: Invalid UDP bearer configuration [ 452.416836][ T6219] tipc: Enabling of bearer rejected, failed to enable media [ 452.519742][ T6120] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 452.719738][ T6120] usb 6-1: Using ep0 maxpacket: 16 [ 452.726243][ T6120] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.737604][ T6120] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.748181][ T6120] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 452.761279][ T6120] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 452.770643][ T6120] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.783094][ T6120] usb 6-1: config 0 descriptor?? [ 452.990876][ T28] audit: type=1326 audit(1785762247.713:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6256 comm="syz.5.1954" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff456d9e019 code=0x7ffc0000 [ 453.033641][ T28] audit: type=1326 audit(1785762247.713:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6256 comm="syz.5.1954" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff456d9e019 code=0x7ffc0000 [ 453.066929][ T28] audit: type=1326 audit(1785762247.713:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6256 comm="syz.5.1954" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7ff456d9e019 code=0x7ffc0000 [ 453.099031][ T28] audit: type=1326 audit(1785762247.713:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6256 comm="syz.5.1954" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff456d9e019 code=0x7ffc0000 [ 453.124317][ T28] audit: type=1326 audit(1785762247.713:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6256 comm="syz.5.1954" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff456d9e019 code=0x7ffc0000 [ 453.380637][ T28] kauditd_printk_skb: 220 callbacks suppressed [ 453.380663][ T28] audit: type=1326 audit(1785762248.093:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6256 comm="syz.5.1954" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff456d3f399 code=0x7ffc0000 [ 454.069214][ T28] audit: type=1326 audit(1785762248.133:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6256 comm="syz.5.1954" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff456d97d97 code=0x7ffc0000 [ 454.293933][ T6289] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 454.365363][ T28] audit: type=1326 audit(1785762248.133:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6256 comm="syz.5.1954" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff456d3f399 code=0x7ffc0000 [ 454.665110][ T28] audit: type=1326 audit(1785762248.143:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6256 comm="syz.5.1954" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff456d97d97 code=0x7ffc0000 [ 454.733500][ T28] audit: type=1326 audit(1785762248.143:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6256 comm="syz.5.1954" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff456d3f399 code=0x7ffc0000 [ 454.760584][ T28] audit: type=1326 audit(1785762248.143:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6256 comm="syz.5.1954" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff456d97d97 code=0x7ffc0000 [ 454.785485][ T28] audit: type=1326 audit(1785762248.153:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6256 comm="syz.5.1954" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff456d3f399 code=0x7ffc0000 [ 454.811318][ T28] audit: type=1326 audit(1785762248.153:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6256 comm="syz.5.1954" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff456d97d97 code=0x7ffc0000 [ 454.836276][ T28] audit: type=1326 audit(1785762248.153:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6256 comm="syz.5.1954" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff456d3f399 code=0x7ffc0000 [ 454.884166][ T28] audit: type=1326 audit(1785762248.163:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6256 comm="syz.5.1954" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff456d97d97 code=0x7ffc0000 [ 454.997609][ T6273] loop5: detected capacity change from 0 to 40427 [ 455.092435][ T6064] I/O error, dev loop5, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 455.313254][ T6120] usbhid 6-1:0.0: can't add hid device: -71 [ 455.319302][ T6120] usbhid: probe of 6-1:0.0 failed with error -71 [ 455.350644][ T6120] usb 6-1: USB disconnect, device number 3 [ 455.887666][ T6310] overlayfs: failed to clone upperpath [ 455.995318][ T6312] 9pnet_fd: Insufficient options for proto=fd [ 456.371207][ T6325] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 456.419208][ T6328] fuse: Bad value for 'group_id' [ 460.040776][ T6361] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 461.379780][ T6382] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 462.012724][ T6387] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 462.209711][ T6394] device syzkaller0 entered promiscuous mode [ 462.567000][ T6403] overlayfs: failed to clone upperpath [ 462.677104][ T6407] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 463.877673][ T28] kauditd_printk_skb: 576 callbacks suppressed [ 463.877690][ T28] audit: type=1326 audit(1785762258.593:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6421 comm="syz.5.2007" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff456d9e019 code=0x7ffc0000 [ 463.959772][ T28] audit: type=1326 audit(1785762258.593:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6421 comm="syz.5.2007" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff456d9e019 code=0x7ffc0000 [ 464.020604][ T28] audit: type=1326 audit(1785762258.633:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6421 comm="syz.5.2007" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff456d9e019 code=0x7ffc0000 [ 464.074046][ T28] audit: type=1326 audit(1785762258.633:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6421 comm="syz.5.2007" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff456d9e019 code=0x7ffc0000 [ 464.124167][ T28] audit: type=1326 audit(1785762258.633:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6421 comm="syz.5.2007" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff456d9e019 code=0x7ffc0000 [ 464.182336][ T28] audit: type=1326 audit(1785762258.633:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6421 comm="syz.5.2007" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff456d9e019 code=0x7ffc0000 [ 464.234086][ T28] audit: type=1326 audit(1785762258.633:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6421 comm="syz.5.2007" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff456d9e019 code=0x7ffc0000 [ 464.286017][ T28] audit: type=1326 audit(1785762258.633:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6421 comm="syz.5.2007" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff456d9e019 code=0x7ffc0000 [ 464.334468][ T28] audit: type=1326 audit(1785762258.633:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6421 comm="syz.5.2007" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff456d9e019 code=0x7ffc0000 [ 464.383844][ T28] audit: type=1326 audit(1785762258.633:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6421 comm="syz.5.2007" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff456d9e019 code=0x7ffc0000 [ 464.492399][ T6426] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2007'. [ 465.799213][ T6439] loop5: detected capacity change from 0 to 131072 [ 465.815894][ T6439] F2FS-fs (loop5): invalid crc value [ 465.840550][ T6439] F2FS-fs (loop5): Found nat_bits in checkpoint [ 465.946782][ T6439] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 466.074657][ T6439] fuse: Bad value for 'fd' [ 466.087832][ T6439] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2013'. [ 466.097245][ T6439] tipc: Invalid UDP bearer configuration [ 466.097269][ T6439] tipc: Enabling of bearer rejected, failed to enable media [ 467.295494][ T6498] overlayfs: failed to clone upperpath [ 467.447590][ T6475] loop5: detected capacity change from 0 to 131072 [ 467.458682][ T6475] F2FS-fs (loop5): invalid crc value [ 467.531381][ T6475] F2FS-fs (loop5): Found nat_bits in checkpoint [ 467.666587][ T6475] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 467.783391][ T6475] fuse: Bad value for 'fd' [ 468.019196][ T6514] mmap: syz.3.2040 (6514): VmData 29089792 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 468.507258][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 468.526362][ T6530] fuse: Bad value for 'group_id' [ 468.533743][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 469.906632][ T6546] device syzkaller0 entered promiscuous mode [ 470.610553][ T6564] overlayfs: failed to clone upperpath [ 472.753180][ T6599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=6599 comm=syz.5.2067 [ 472.775222][ T28] kauditd_printk_skb: 1154 callbacks suppressed [ 472.775240][ T28] audit: type=1400 audit(1785762267.493:2275): avc: denied { bind } for pid=6601 comm="syz.1.2068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 472.832181][ T28] audit: type=1400 audit(1785762267.543:2276): avc: denied { write } for pid=6604 comm="syz.1.2069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 473.015409][ T28] audit: type=1400 audit(1785762267.733:2277): avc: denied { ioctl } for pid=6643 comm="syz.3.2089" path="socket:[33111]" dev="sockfs" ino=33111 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 473.042917][ T6644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2089'. [ 473.058109][ T28] audit: type=1400 audit(1785762267.763:2278): avc: denied { bind } for pid=6643 comm="syz.3.2089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 473.367177][ T28] audit: type=1326 audit(1785762268.083:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.4.2098" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a89b9e019 code=0x7ffc0000 [ 473.392161][ T28] audit: type=1326 audit(1785762268.083:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.4.2098" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f2a89b9e019 code=0x7ffc0000 [ 473.417690][ T28] audit: type=1326 audit(1785762268.083:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.4.2098" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a89b9e019 code=0x7ffc0000 [ 473.442655][ T28] audit: type=1326 audit(1785762268.083:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.4.2098" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2a89b9e019 code=0x7ffc0000 [ 473.467528][ T28] audit: type=1326 audit(1785762268.083:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.4.2098" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a89b9e019 code=0x7ffc0000 [ 473.495443][ T28] audit: type=1326 audit(1785762268.083:2284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.4.2098" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2a89b9e019 code=0x7ffc0000 [ 473.691807][ T6692] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2111'. [ 474.000804][ T6729] device veth0_virt_wifi entered promiscuous mode [ 474.008294][ T6729] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 475.409813][ T5048] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 475.420598][ T6820] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2169'. [ 475.591259][ T5048] usb 6-1: config 6 has an invalid interface number: 156 but max is 0 [ 475.599560][ T5048] usb 6-1: config 6 has no interface number 0 [ 475.605777][ T5048] usb 6-1: config 6 interface 156 altsetting 3 has an invalid endpoint with address 0x80, skipping [ 475.616811][ T5048] usb 6-1: config 6 interface 156 has no altsetting 0 [ 475.626284][ T6825] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 475.626321][ T5048] usb 6-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=65.2c [ 475.643607][ T5048] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.651867][ T5048] usb 6-1: Product: syz [ 475.656266][ T5048] usb 6-1: Manufacturer: syz [ 475.661115][ T5048] usb 6-1: SerialNumber: syz [ 475.872089][ T6804] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2163'. [ 475.888073][ T5048] usb 6-1: USB disconnect, device number 4 [ 476.209459][ T6848] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 476.513526][ T6851] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 477.062731][ T6875] device syz_tun entered promiscuous mode [ 477.506748][ T6881] SELinux: security_context_str_to_sid (staff_) failed with errno=-22 [ 477.562027][ T6891] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2192'. [ 477.620826][ T6891] device team_slave_1 entered promiscuous mode [ 477.652706][ T6891] syz.1.2192 (6891) used greatest stack depth: 20224 bytes left [ 477.828162][ T6884] loop5: detected capacity change from 0 to 40427 [ 477.840813][ T6884] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 477.848927][ T6884] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 477.857857][ T6884] F2FS-fs (loop5): fault_type options not supported [ 477.876095][ T6884] F2FS-fs (loop5): invalid crc value [ 477.894632][ T6884] F2FS-fs (loop5): Found nat_bits in checkpoint [ 477.932139][ T6927] /dev/loop0: Can't open blockdev [ 477.938523][ T6884] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 477.945948][ T6884] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 477.984613][ T6884] syz.5.2190: attempt to access beyond end of device [ 477.984613][ T6884] loop5: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 478.000831][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 478.000847][ T28] audit: type=1400 audit(1785762272.723:2311): avc: denied { watch } for pid=6883 comm="syz.5.2190" path="/47/file4" dev="loop5" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 478.038007][ T28] audit: type=1400 audit(1785762272.753:2312): avc: denied { write } for pid=6883 comm="syz.5.2190" name="packet" dev="proc" ino=4026533020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 478.155856][ T6052] syz-executor: attempt to access beyond end of device [ 478.155856][ T6052] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 478.251344][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2218'. [ 478.331196][ T6957] overlayfs: failed to clone upperpath [ 478.602643][ T6990] netlink: 'syz.0.2239': attribute type 1 has an invalid length. [ 479.219316][ T28] audit: type=1326 audit(1785762273.933:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7020 comm="syz.3.2255" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237919e019 code=0x7ffc0000 [ 479.246802][ T28] audit: type=1326 audit(1785762273.933:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7020 comm="syz.3.2255" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237919e019 code=0x7ffc0000 [ 479.288300][ T28] audit: type=1326 audit(1785762273.963:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7020 comm="syz.3.2255" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f237919e019 code=0x7ffc0000 [ 479.329149][ T7023] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2254'. [ 479.329824][ T28] audit: type=1326 audit(1785762273.963:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7020 comm="syz.3.2255" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237919e019 code=0x7ffc0000 [ 479.365729][ T28] audit: type=1326 audit(1785762273.963:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7020 comm="syz.3.2255" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237919e019 code=0x7ffc0000 [ 479.398354][ T28] audit: type=1326 audit(1785762273.963:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7020 comm="syz.3.2255" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f237915e84e code=0x7ffc0000 [ 479.424962][ T28] audit: type=1326 audit(1785762273.963:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7020 comm="syz.3.2255" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f237915e84e code=0x7ffc0000 [ 479.466474][ T28] audit: type=1326 audit(1785762273.963:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7020 comm="syz.3.2255" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237919e019 code=0x7ffc0000 [ 480.652306][ T7074] hub 8-0:1.0: USB hub found [ 480.657571][ T7074] hub 8-0:1.0: 1 port detected [ 481.024534][ T7089] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2282'. [ 481.652332][ T7108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2289'. [ 481.679950][ T7107] tipc: Started in network mode [ 481.685047][ T7107] tipc: Node identity 4, cluster identity 4711 [ 481.691736][ T7107] tipc: Node number set to 4 [ 481.965673][ T7123] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 483.267325][ T7162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2311'. [ 483.464935][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 483.464954][ T28] audit: type=1400 audit(1785762278.183:2358): avc: denied { sys_module } for pid=7195 comm="syz.5.2327" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 483.492244][ T28] audit: type=1400 audit(1785762278.183:2359): avc: denied { write } for pid=7195 comm="syz.5.2327" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 483.515241][ T28] audit: type=1400 audit(1785762278.183:2360): avc: denied { open } for pid=7195 comm="syz.5.2327" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 483.538443][ T28] audit: type=1400 audit(1785762278.183:2361): avc: denied { ioctl } for pid=7195 comm="syz.5.2327" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 484.266949][ T7225] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2340'. [ 484.519465][ T28] audit: type=1400 audit(1785762279.233:2362): avc: denied { sqpoll } for pid=7260 comm="syz.5.2357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 484.558525][ T7266] Line length is too long: Should be less than 4094 [ 484.574685][ T28] audit: type=1400 audit(1785762279.293:2363): avc: denied { unmount } for pid=6052 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 484.716032][ T7270] kvm [7269]: vcpu2, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x2 [ 485.119587][ T28] audit: type=1400 audit(1785762279.833:2364): avc: denied { lock } for pid=7292 comm="syz.1.2371" path="socket:[35311]" dev="sockfs" ino=35311 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 486.295592][ T28] audit: type=1400 audit(1785762281.013:2365): avc: denied { search } for pid=7318 comm="syz.5.2382" name="/" dev="configfs" ino=14797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 486.368476][ T28] audit: type=1400 audit(1785762281.053:2366): avc: denied { unmount } for pid=6052 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 486.404884][ T28] audit: type=1400 audit(1785762281.073:2367): avc: denied { read } for pid=7320 comm="syz.5.2384" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 487.718654][ T7354] fuse: Bad value for 'group_id' [ 487.839344][ T7315] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2380'. [ 487.848467][ T7315] tipc: Invalid UDP bearer configuration [ 487.848497][ T7315] tipc: Enabling of bearer rejected, failed to enable media [ 488.654379][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 488.654395][ T28] audit: type=1326 audit(1785762283.373:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7342 comm="syz.0.2392" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f7b05d9de47 code=0x7ffc0000 [ 488.687389][ T28] audit: type=1326 audit(1785762283.383:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7342 comm="syz.0.2392" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7b05d5e84e code=0x7ffc0000 [ 489.056024][ T28] audit: type=1326 audit(1785762283.383:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7342 comm="syz.0.2392" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7b05d9dcab code=0x7ffc0000 [ 489.232183][ T28] audit: type=1326 audit(1785762283.383:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7342 comm="syz.0.2392" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7b05d5e84e code=0x7ffc0000 [ 489.275799][ T28] audit: type=1326 audit(1785762283.383:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7342 comm="syz.0.2392" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7b05d5e84e code=0x7ffc0000 [ 489.357538][ T28] audit: type=1400 audit(1785762284.073:2385): avc: denied { read } for pid=7406 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 489.388943][ T7392] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 489.398713][ T7392] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 489.405428][ T28] audit: type=1400 audit(1785762284.103:2386): avc: denied { open } for pid=7406 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 489.460976][ T28] audit: type=1400 audit(1785762284.103:2387): avc: denied { getattr } for pid=7406 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 489.605499][ T28] audit: type=1400 audit(1785762284.323:2388): avc: denied { write } for pid=7404 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 489.643621][ T28] audit: type=1400 audit(1785762284.323:2389): avc: denied { add_name } for pid=7404 comm="dhcpcd-run-hook" name="resolv.conf.team_slave_1.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 489.669240][ T7428] tipc: Started in network mode [ 489.674586][ T7428] tipc: Node identity 4, cluster identity 4711 [ 489.681759][ T7428] tipc: Node number set to 4 [ 489.860885][ T7452] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2431'. [ 490.394590][ T7486] tipc: Started in network mode [ 490.399777][ T7486] tipc: Node identity 4, cluster identity 4711 [ 490.406019][ T7486] tipc: Node number set to 4 [ 490.795145][ T7491] fuse: Bad value for 'group_id' [ 491.859308][ T6120] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 492.039687][ T6120] usb 6-1: Using ep0 maxpacket: 32 [ 492.046592][ T6120] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 492.054978][ T6120] usb 6-1: config 0 has no interface number 0 [ 492.061612][ T6120] usb 6-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 492.072425][ T6120] usb 6-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 492.083352][ T6120] usb 6-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 492.098668][ T6120] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 492.107938][ T6120] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.116110][ T6120] usb 6-1: Product: syz [ 492.120408][ T6120] usb 6-1: Manufacturer: syz [ 492.125145][ T6120] usb 6-1: SerialNumber: syz [ 492.140060][ T6120] usb 6-1: config 0 descriptor?? [ 492.145869][ T7508] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 492.156719][ T6120] usbhid 6-1:0.119: couldn't find an input interrupt endpoint [ 492.367602][ T24] usb 6-1: USB disconnect, device number 5 [ 492.583824][ T7572] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.591481][ T7572] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.834240][ T7576] device veth0 entered promiscuous mode [ 492.871586][ T7574] device veth0 left promiscuous mode [ 493.446958][ T7617] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2499'. [ 493.619664][ T301] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 494.079670][ T301] usb 6-1: Using ep0 maxpacket: 16 [ 494.086053][ T301] usb 6-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.120165][ T301] usb 6-1: config 0 interface 0 has no altsetting 0 [ 494.126851][ T301] usb 6-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 494.159655][ T301] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.179007][ T301] usb 6-1: config 0 descriptor?? [ 494.414390][ T28] kauditd_printk_skb: 94 callbacks suppressed [ 494.414583][ T28] audit: type=1400 audit(1785762289.133:2484): avc: denied { getopt } for pid=7682 comm="syz.3.2521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 494.630314][ T301] hid-generic 0003:1038:12C2.0002: ignoring exceeding usage max [ 494.646673][ T28] audit: type=1400 audit(1785762289.363:2485): avc: denied { read } for pid=7706 comm="syz.0.2526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 494.696698][ T301] hid-generic 0003:1038:12C2.0002: item fetching failed at offset 15/40 [ 494.718110][ T301] hid-generic: probe of 0003:1038:12C2.0002 failed with error -22 [ 494.768118][ T7709] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2527'. [ 494.995668][ T301] usb 6-1: USB disconnect, device number 6 [ 495.106992][ T7731] tmpfs: Unknown parameter 'usrquota' [ 495.135139][ T7737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2539'. [ 495.499702][ T28] audit: type=1400 audit(1785762290.143:2486): avc: denied { setopt } for pid=7752 comm="syz.3.2546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 497.532103][ T7812] tipc: Enabling of bearer rejected, failed to enable media [ 497.695335][ T7837] overlayfs: failed to clone lowerpath [ 497.857118][ T28] audit: type=1400 audit(1785762292.573:2487): avc: denied { append } for pid=7841 comm="syz.5.2579" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 498.006132][ T7844] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 499.173720][ T28] audit: type=1326 audit(1785762293.893:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.5.2605" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff456d9e019 code=0x7ffc0000 [ 499.200278][ T28] audit: type=1326 audit(1785762293.893:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.5.2605" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff456d9e019 code=0x7ffc0000 [ 499.225351][ T28] audit: type=1326 audit(1785762293.893:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.5.2605" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff456d9e019 code=0x7ffc0000 [ 499.250604][ T28] audit: type=1326 audit(1785762293.893:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.5.2605" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff456d9e019 code=0x7ffc0000 [ 499.286843][ T28] audit: type=1326 audit(1785762293.893:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.5.2605" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7ff456d9e019 code=0x7ffc0000 [ 499.348844][ T28] audit: type=1326 audit(1785762293.893:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.5.2605" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff456d9e019 code=0x7ffc0000 [ 499.829744][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 499.829762][ T28] audit: type=1400 audit(1785762294.533:2497): avc: denied { connect } for pid=7924 comm="syz.5.2614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 499.867288][ T28] audit: type=1400 audit(1785762294.533:2498): avc: denied { write } for pid=7924 comm="syz.5.2614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 500.156935][ T7968] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 500.165921][ T7968] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 500.463062][ T28] audit: type=1400 audit(1785762295.183:2499): avc: denied { mounton } for pid=7982 comm="syz.5.2640" path="/150/file0" dev="tmpfs" ino=794 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 500.947452][ T7995] tipc: New replicast peer: 127.0.0.1 [ 500.953519][ T7995] tipc: Enabled bearer , priority 10 [ 501.068129][ T28] audit: type=1400 audit(1785762295.783:2500): avc: denied { name_bind } for pid=8003 comm="syz.5.2646" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 501.663721][ T28] audit: type=1400 audit(1785762296.383:2501): avc: denied { remount } for pid=8050 comm="syz.1.2668" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 501.711610][ T8055] device veth0 entered promiscuous mode [ 501.719064][ T8054] device veth0 left promiscuous mode [ 502.190460][ T28] audit: type=1400 audit(1785762296.913:2502): avc: denied { mount } for pid=8081 comm="syz.1.2682" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 503.297048][ T28] audit: type=1400 audit(1785762298.013:2503): avc: denied { getopt } for pid=8130 comm="syz.3.2704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 503.359721][ T6129] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 503.583888][ T6129] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.620936][ T6129] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 503.632600][ T6129] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 503.728262][ T6129] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 503.738507][ T6129] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 503.747716][ T6129] usb 6-1: Product: syz [ 503.752985][ T6129] usb 6-1: Manufacturer: syz [ 503.758682][ T6129] usb 6-1: SerialNumber: syz [ 503.811370][ T6129] usb 6-1: config 0 descriptor?? [ 503.817800][ T6129] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 504.390532][ T8180] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2725'. [ 504.399708][ T8180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2725'. [ 505.285130][ T8191] tipc: Started in network mode [ 505.357594][ T8191] tipc: Node identity 4, cluster identity 1 [ 505.363617][ T8191] tipc: Node number set to 4 [ 506.095847][ T6129] usb 6-1: USB disconnect, device number 7 [ 506.215413][ T8241] overlayfs: failed to clone lowerpath [ 508.459795][ T6129] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 508.486242][ T8274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2761'. [ 509.389694][ T28] audit: type=1400 audit(1785762304.103:2504): avc: denied { execute } for pid=8282 comm="syz.5.2764" path="/file1" dev="ramfs" ino=37779 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 509.911340][ T28] audit: type=1400 audit(1785762304.633:2505): avc: denied { getopt } for pid=8305 comm="syz.4.2772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 509.999753][ T28] audit: type=1400 audit(1785762304.713:2506): avc: denied { read write } for pid=8317 comm="syz.5.2778" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 510.029069][ T28] audit: type=1400 audit(1785762304.713:2507): avc: denied { open } for pid=8317 comm="syz.5.2778" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 511.048869][ T6129] usb 6-1: device not accepting address 8, error -71 [ 511.058534][ T28] audit: type=1400 audit(1785762304.713:2508): avc: denied { ioctl } for pid=8317 comm="syz.5.2778" path="/dev/loop-control" dev="devtmpfs" ino=117 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 513.044500][ T8395] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2805'. [ 513.173867][ T28] audit: type=1400 audit(1785762307.893:2509): avc: denied { mounton } for pid=8408 comm="syz.5.2814" path="/proc/445/task" dev="proc" ino=38534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 513.218436][ T8407] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.227843][ T8407] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.235821][ T8407] device bridge_slave_0 entered promiscuous mode [ 513.243543][ T8407] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.250744][ T8407] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.258415][ T8407] device bridge_slave_1 entered promiscuous mode [ 513.325183][ T8407] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.332307][ T8407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.339660][ T8407] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.346719][ T8407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.369984][ T657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 513.377725][ T657] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.385370][ T657] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.395464][ T657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 513.403882][ T657] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.410994][ T657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.471020][ T8407] device veth0_vlan entered promiscuous mode [ 513.478753][ T657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 513.487695][ T657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 513.496127][ T657] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 513.503771][ T657] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 513.511519][ T657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 513.519842][ T657] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.526921][ T657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.534445][ T657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 513.542621][ T657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 513.557805][ T8407] device veth1_macvtap entered promiscuous mode [ 513.565576][ T657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 513.581900][ T657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 513.590787][ T657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 513.606252][ T28] audit: type=1400 audit(1785762308.323:2510): avc: denied { mounton } for pid=8407 comm="syz-executor" path="/root/syzkaller.h2PfhP/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 513.649996][ T6129] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 513.700989][ T28] audit: type=1400 audit(1785762308.413:2511): avc: denied { mounton } for pid=8429 comm="syz.1.2820" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 514.111925][ T8448] kvm: emulating exchange as write [ 514.539643][ T6129] usb 6-1: Using ep0 maxpacket: 8 [ 514.898730][ T6129] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.909000][ T6129] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 514.918197][ T6129] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 514.933219][ T6129] usb 6-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 514.985894][ T8479] file system registered [ 515.009022][ T28] audit: type=1400 audit(1785762309.703:2512): avc: denied { write } for pid=8476 comm="syz.1.2839" name="functions" dev="configfs" ino=16180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 515.048545][ T6129] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.051878][ T28] audit: type=1400 audit(1785762309.703:2513): avc: denied { add_name } for pid=8476 comm="syz.1.2839" name="ffs.usb0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 515.078395][ T6129] usb 6-1: Product: syz [ 515.083284][ T6129] usb 6-1: Manufacturer: syz [ 515.088168][ T6129] usb 6-1: SerialNumber: syz [ 515.093019][ T28] audit: type=1400 audit(1785762309.713:2514): avc: denied { mount } for pid=8476 comm="syz.1.2839" name="/" dev="functionfs" ino=39330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 517.539169][ T8407] ffs_data_put(): freeing [ 517.546251][ T28] audit: type=1400 audit(1785762312.253:2515): avc: denied { unmount } for pid=8407 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 517.580513][ T6129] snd-usb-audio: probe of 6-1:1.0 failed with error -71 [ 517.602878][ T8486] udevd[8486]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 517.618893][ T6129] usb 6-1: USB disconnect, device number 10 [ 518.094494][ T8506] tmpfs: Unknown parameter 'usrquota' [ 518.607109][ T28] audit: type=1400 audit(1785762313.323:2516): avc: denied { getopt } for pid=8521 comm="syz.1.2856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 518.635666][ T28] audit: type=1400 audit(1785762313.353:2517): avc: denied { read } for pid=8523 comm="syz.1.2857" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 518.660410][ T8524] binder: 8523:8524 ioctl 4018620d 0 returned -22 [ 518.681362][ T28] audit: type=1400 audit(1785762313.383:2518): avc: denied { open } for pid=8523 comm="syz.1.2857" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 518.706066][ T28] audit: type=1400 audit(1785762313.383:2519): avc: denied { ioctl } for pid=8523 comm="syz.1.2857" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 518.732811][ T28] audit: type=1400 audit(1785762313.383:2520): avc: denied { listen } for pid=8525 comm="syz.5.2858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 518.784126][ T28] audit: type=1400 audit(1785762313.503:2521): avc: denied { ioctl } for pid=8534 comm="syz.1.2862" path="/18/file0" dev="tmpfs" ino=112 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 522.288577][ T28] audit: type=1400 audit(1785762317.003:2522): avc: denied { unlink } for pid=8601 comm="syz.1.2888" name="#5" dev="tmpfs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 522.487809][ T8620] mmap: syz.3.2895 (8620) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 522.603232][ T28] audit: type=1400 audit(1785762317.323:2523): avc: denied { bind } for pid=8623 comm="syz.1.2897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 522.634649][ T28] audit: type=1400 audit(1785762317.343:2524): avc: denied { map } for pid=8623 comm="syz.1.2897" path="socket:[39617]" dev="sockfs" ino=39617 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 522.657988][ T28] audit: type=1400 audit(1785762317.343:2525): avc: denied { read } for pid=8623 comm="syz.1.2897" path="socket:[39617]" dev="sockfs" ino=39617 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 523.045513][ T8655] overlayfs: failed to resolve './bus': -2 [ 524.950691][ T28] audit: type=1400 audit(1785762319.673:2526): avc: denied { unmount } for pid=8407 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 525.178139][ T8686] overlayfs: failed to clone lowerpath [ 525.663451][ T28] audit: type=1400 audit(1785762320.373:2527): avc: denied { create } for pid=8693 comm="syz.5.2923" name="#9" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 525.694289][ T28] audit: type=1400 audit(1785762320.373:2528): avc: denied { link } for pid=8693 comm="syz.5.2923" name="#9" dev="tmpfs" ino=995 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 525.749798][ T28] audit: type=1400 audit(1785762320.373:2529): avc: denied { rename } for pid=8693 comm="syz.5.2923" name="#a" dev="tmpfs" ino=995 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 526.483391][ T28] audit: type=1400 audit(1785762321.203:2530): avc: denied { unmount } for pid=6052 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 527.179721][ T7579] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 527.371252][ T7579] usb 2-1: not running at top speed; connect to a high speed hub [ 527.393344][ T7579] usb 2-1: config 0 has no interfaces? [ 527.427712][ T7579] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 527.481541][ T7579] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 527.640819][ T7579] usb 2-1: Product: syz [ 527.649791][ T7579] usb 2-1: Manufacturer: syz [ 527.670356][ T7579] usb 2-1: config 0 descriptor?? [ 527.951910][ T7579] usb 2-1: USB disconnect, device number 2 [ 528.212586][ T28] audit: type=1400 audit(1785762322.933:2531): avc: denied { read } for pid=8767 comm="syz.5.2951" name="usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 528.236022][ T28] audit: type=1400 audit(1785762322.933:2532): avc: denied { open } for pid=8767 comm="syz.5.2951" path="/dev/usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 529.154884][ T10] tipc: Left network mode [ 529.197767][ T8791] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.212100][ T8791] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.220133][ T8791] device bridge_slave_0 entered promiscuous mode [ 529.231843][ T8791] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.240772][ T8791] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.248459][ T8791] device bridge_slave_1 entered promiscuous mode [ 529.324847][ T8791] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.332827][ T8791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.340187][ T8791] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.347238][ T8791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.381461][ T657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 529.389208][ T657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 529.397880][ T657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 529.413771][ T657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 529.424998][ T657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 529.442860][ T657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 529.458011][ T8791] device veth0_vlan entered promiscuous mode [ 529.466192][ T657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 529.474890][ T657] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 529.482977][ T657] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 529.500758][ T657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 529.509536][ T8791] device veth1_macvtap entered promiscuous mode [ 529.519963][ T657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 529.530553][ T657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 530.152417][ T10] device bridge_slave_1 left promiscuous mode [ 530.158989][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.167016][ T10] device bridge_slave_0 left promiscuous mode [ 530.173367][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.738245][ T28] audit: type=1400 audit(1785762325.453:2533): avc: denied { remount } for pid=8844 comm="syz.1.2984" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 530.955519][ T8855] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.963314][ T8855] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.002002][ T8855] device bridge_slave_0 entered promiscuous mode [ 531.024890][ T8855] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.032198][ T8855] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.052399][ T8855] device bridge_slave_1 entered promiscuous mode [ 531.184518][ T8880] tipc: Started in network mode [ 531.189550][ T8880] tipc: Node identity 4, cluster identity 4711 [ 531.196261][ T8880] tipc: Node number set to 4 [ 531.276908][ T657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 531.291417][ T657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 531.326468][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 531.338484][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 531.348045][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.355161][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.378905][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 531.389263][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 531.398645][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 531.408262][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.415372][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.432115][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 531.458007][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 531.472509][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 531.482317][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 531.505579][ T8855] device veth0_vlan entered promiscuous mode [ 531.549932][ T28] audit: type=1400 audit(1785762326.253:2534): avc: denied { read } for pid=8894 comm="syz.3.3003" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 531.583865][ T8897] hub 8-0:1.0: USB hub found [ 531.589115][ T8897] hub 8-0:1.0: 1 port detected [ 531.686116][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 531.713254][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 531.747856][ T28] audit: type=1400 audit(1785762326.253:2535): avc: denied { open } for pid=8894 comm="syz.3.3003" path="/dev/rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 531.796209][ T8898] block device autoloading is deprecated and will be removed. [ 531.815771][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 531.860617][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 531.984498][ T657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 531.998948][ T8855] device veth1_macvtap entered promiscuous mode [ 532.034770][ T657] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 532.043742][ T657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 532.056153][ T657] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 532.065535][ T657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 532.892900][ T2521] tipc: Left network mode [ 532.959583][ T8938] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.966815][ T8938] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.974678][ T8938] device bridge_slave_0 entered promiscuous mode [ 532.982174][ T8938] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.989318][ T8938] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.996521][ T301] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 533.005715][ T8938] device bridge_slave_1 entered promiscuous mode [ 533.087200][ T8938] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.094345][ T8938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.101684][ T8938] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.108745][ T8938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.179705][ T301] usb 2-1: Using ep0 maxpacket: 16 [ 533.187335][ T301] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 533.207854][ T301] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 533.257697][ T301] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 533.285990][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 533.297693][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.305137][ T301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.325117][ T301] usb 2-1: Product: syz [ 533.329974][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.330678][ T301] usb 2-1: Manufacturer: syz [ 533.342041][ T301] usb 2-1: SerialNumber: syz [ 533.348276][ T8952] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3023'. [ 533.364385][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 533.373037][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.380127][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.418441][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 533.427910][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.435037][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.443792][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 533.451950][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 533.538486][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 533.557864][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 533.566527][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 533.572147][ T301] usb 2-1: 0:2 : does not exist [ 533.576924][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 533.585030][ T301] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 533.592155][ T8938] device veth0_vlan entered promiscuous mode [ 533.600056][ T7579] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 533.782246][ T7579] usb 6-1: unable to get BOS descriptor or descriptor too short [ 533.805458][ T7579] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 533.893504][ T7579] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 533.944884][ T301] usb 2-1: USB disconnect, device number 3 [ 533.954065][ T7579] usb 6-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 533.985887][ T7579] usb 6-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 534.007769][ T7579] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 534.018914][ T7579] usb 6-1: config 1 interface 1 has no altsetting 0 [ 534.029219][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 534.038412][ T7579] usb 6-1: string descriptor 0 read error: -22 [ 534.045105][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 534.053258][ T7579] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 534.064620][ T8938] device veth1_macvtap entered promiscuous mode [ 534.074137][ T7579] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.084345][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 534.092381][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 534.104300][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 534.126357][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 534.146709][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 534.280794][ T8486] udevd[8486]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 534.367454][ T8961] loop0: detected capacity change from 0 to 40427 [ 534.374649][ T8961] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 534.381925][ T8961] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 534.391996][ T8961] F2FS-fs (loop0): fault_injection options not supported [ 534.399125][ T8961] F2FS-fs (loop0): fault_type options not supported [ 534.406502][ T8961] F2FS-fs (loop0): invalid crc value [ 534.413446][ T8961] F2FS-fs (loop0): Found nat_bits in checkpoint [ 534.486500][ T8961] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 534.493807][ T8961] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 534.549270][ T8961] syz.0.3018: attempt to access beyond end of device [ 534.549270][ T8961] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 534.564434][ T8961] syz.0.3018: attempt to access beyond end of device [ 534.564434][ T8961] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 534.580151][ T8961] syz.0.3018: attempt to access beyond end of device [ 534.580151][ T8961] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 534.676324][ T7579] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 534.800644][ T8938] syz-executor: attempt to access beyond end of device [ 534.800644][ T8938] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 534.819824][ T678] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 534.966905][ T28] audit: type=1400 audit(1785762329.683:2536): avc: denied { module_load } for pid=8977 comm="syz.3.3031" path="/11/bus" dev="tmpfs" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 534.998155][ T8978] Invalid ELF header magic: != ELF [ 535.019713][ T678] usb 2-1: Using ep0 maxpacket: 8 [ 535.025970][ T678] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 535.060089][ T678] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 535.071312][ T678] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 535.092764][ T678] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 535.114433][ T678] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.126921][ T678] usb 2-1: Product: syz [ 535.131336][ T678] usb 2-1: Manufacturer: syz [ 535.136075][ T678] usb 2-1: SerialNumber: syz [ 535.148571][ T8985] tipc: Started in network mode [ 535.155118][ T8985] tipc: Node identity 4, cluster identity 4711 [ 535.161647][ T8985] tipc: Node number set to 4 [ 535.258157][ T8991] overlayfs: failed to resolve './bus': -2 [ 535.357101][ T678] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 535.365396][ T678] cdc_ncm 2-1:1.0: bind() failure [ 535.382697][ T678] usb 2-1: USB disconnect, device number 4 [ 535.469730][ T7579] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 535.681688][ T7579] usb 1-1: config 0 has an invalid interface number: 147 but max is 0 [ 535.696748][ T7579] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 535.739485][ T7579] usb 1-1: config 0 has no interface number 0 [ 535.754403][ T7579] usb 1-1: config 0 interface 147 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 535.765405][ T7579] usb 1-1: config 0 interface 147 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 535.786045][ T7579] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03 [ 535.795462][ T7579] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.803752][ T7579] usb 1-1: Product: syz [ 535.808164][ T7579] usb 1-1: Manufacturer: syz [ 535.813127][ T7579] usb 1-1: SerialNumber: syz [ 535.821627][ T7579] usb 1-1: config 0 descriptor?? [ 536.008228][ T9001] loop3: detected capacity change from 0 to 2048 [ 536.032493][ T5048] usb 1-1: USB disconnect, device number 2 [ 536.041743][ T9001] Alternate GPT is invalid, using primary GPT. [ 536.048168][ T9001] loop3: p2 p3 p7 [ 536.058684][ T28] audit: type=1400 audit(1785762330.773:2537): avc: denied { read append } for pid=9000 comm="syz.3.3039" name="loop3p3" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 536.082744][ T28] audit: type=1400 audit(1785762330.773:2538): avc: denied { open } for pid=9000 comm="syz.3.3039" path="/dev/loop3p3" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 536.108488][ T8416] udevd[8416]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 536.108496][ T28] audit: type=1400 audit(1785762330.773:2539): avc: denied { ioctl } for pid=9000 comm="syz.3.3039" path="/dev/loop3p3" dev="devtmpfs" ino=640 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 536.124035][ T8415] udevd[8415]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 536.149064][ T8486] udevd[8486]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 536.239724][ T301] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 536.287756][ T9003] loop3: detected capacity change from 0 to 40427 [ 536.297816][ T6120] usb 6-1: USB disconnect, device number 11 [ 536.308962][ T9003] F2FS-fs (loop3): fault_injection options not supported [ 536.325094][ T9003] F2FS-fs (loop3): fault_type options not supported [ 536.339572][ T9003] F2FS-fs (loop3): invalid crc value [ 536.347171][ T9003] F2FS-fs (loop3): Found nat_bits in checkpoint [ 536.386862][ T9003] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 536.430569][ T301] usb 2-1: Using ep0 maxpacket: 16 [ 536.441872][ T28] audit: type=1400 audit(1785762331.163:2540): avc: denied { create } for pid=9002 comm="syz.3.3040" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 536.445534][ T301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.473980][ T301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.484665][ T301] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 536.497710][ T301] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 536.504329][ T28] audit: type=1400 audit(1785762331.213:2541): avc: denied { write open } for pid=9002 comm="syz.3.3040" path=2F202864656C6574656429 dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 536.507407][ T301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.530728][ T28] audit: type=1400 audit(1785762331.213:2542): avc: denied { create } for pid=9002 comm="syz.3.3040" name="#c" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 536.558641][ T301] usb 2-1: config 0 descriptor?? [ 536.578647][ T28] audit: type=1400 audit(1785762331.223:2543): avc: denied { rename } for pid=9002 comm="syz.3.3040" name="#c" dev="loop3" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 536.600790][ T28] audit: type=1400 audit(1785762331.223:2544): avc: denied { unlink } for pid=9002 comm="syz.3.3040" name="#c" dev="loop3" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 536.623597][ T28] audit: type=1400 audit(1785762331.223:2545): avc: denied { unlink } for pid=9002 comm="syz.3.3040" name="#d" dev="loop3" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 536.670938][ T8791] syz-executor: attempt to access beyond end of device [ 536.670938][ T8791] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 536.685705][ T8791] syz-executor: attempt to access beyond end of device [ 536.685705][ T8791] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 536.699932][ T6120] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 536.737074][ T2521] kworker/u4:7: attempt to access beyond end of device [ 536.737074][ T2521] loop3: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 537.140657][ T301] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 537.151530][ T301] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 537.158839][ T301] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 537.166376][ T301] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 537.173858][ T301] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 537.181913][ T301] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 537.189165][ T301] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 537.196683][ T301] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 537.204122][ T301] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 537.211556][ T301] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 537.218869][ T301] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 537.227372][ T301] HID 045e:07da: Invalid code 65791 type 1 [ 537.233878][ T301] HID 045e:07da: Invalid code 768 type 1 [ 537.239560][ T301] HID 045e:07da: Invalid code 769 type 1 [ 537.245474][ T301] HID 045e:07da: Invalid code 770 type 1 [ 537.251326][ T301] HID 045e:07da: Invalid code 771 type 1 [ 537.257035][ T301] HID 045e:07da: Invalid code 772 type 1 [ 537.263038][ T301] HID 045e:07da: Invalid code 773 type 1 [ 537.268756][ T301] HID 045e:07da: Invalid code 774 type 1 [ 537.276327][ T6120] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 537.287145][ T301] HID 045e:07da: Invalid code 775 type 1 [ 537.293139][ T6120] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 537.303254][ T301] HID 045e:07da: Invalid code 776 type 1 [ 537.313364][ T6120] usb 6-1: config 2 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 537.330548][ T301] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0003/input/input4 [ 537.342472][ T6120] usb 6-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 537.360023][ T6120] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 537.379846][ T6120] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 537.399671][ T6120] usb 6-1: config 2 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 537.409471][ T6120] usb 6-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 537.426128][ T301] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 537.454898][ T6120] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 537.479674][ T301] usb 2-1: USB disconnect, device number 5 [ 537.488573][ T6120] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.545164][ T2521] device bridge_slave_1 left promiscuous mode [ 537.558224][ T2521] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.570570][ T6120] usb 6-1: Product: syz [ 537.574881][ T6120] usb 6-1: Manufacturer: syz [ 537.591694][ T6120] usb 6-1: SerialNumber: syz [ 537.621623][ T9026] overlayfs: failed to resolve './bus': -2 [ 537.632226][ T2521] device bridge_slave_0 left promiscuous mode [ 537.643733][ T2521] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.665366][ T2521] device veth1_macvtap left promiscuous mode [ 537.687423][ T2521] device veth0_vlan left promiscuous mode [ 537.779497][ T9018] fido_id[9018]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 537.841566][ T7579] usb 6-1: USB disconnect, device number 12 [ 538.217750][ T9028] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.239143][ T9028] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.248443][ T9028] device bridge_slave_0 entered promiscuous mode [ 538.257011][ T9028] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.264251][ T9028] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.273012][ T9028] device bridge_slave_1 entered promiscuous mode [ 538.698617][ T9028] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.705754][ T9028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.713552][ T9028] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.720656][ T9028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.744092][ T2521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 538.752083][ T2521] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.759507][ T2521] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.769206][ T2521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 538.777549][ T2521] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.784651][ T2521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.793584][ T2521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 538.802011][ T2521] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.809067][ T2521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.859952][ T2521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 538.870113][ T2521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 538.888177][ T2521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 538.901731][ T2521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 538.910301][ T2521] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 538.917923][ T2521] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 538.926664][ T9028] device veth0_vlan entered promiscuous mode [ 538.939293][ T2521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 538.949572][ T9028] device veth1_macvtap entered promiscuous mode [ 538.956131][ T7579] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 538.963959][ T9050] hub 8-0:1.0: USB hub found [ 538.968839][ T9050] hub 8-0:1.0: 1 port detected [ 538.974231][ T5048] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 538.984302][ T2521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 538.997766][ T2521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 539.162441][ T5048] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 539.171850][ T5048] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.600214][ T9058] loop0: detected capacity change from 0 to 512 [ 539.787537][ T5048] usb 6-1: Product: syz [ 539.791975][ T7579] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.792126][ T5048] usb 6-1: Manufacturer: syz [ 539.807972][ T7579] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.819124][ T5048] usb 6-1: SerialNumber: syz [ 539.824592][ T7579] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 539.834071][ T5048] usb 6-1: config 0 descriptor?? [ 539.836081][ T7579] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.854827][ T7579] usb 5-1: config 0 descriptor?? [ 539.861259][ T9058] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 539.870658][ T9058] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 540.096650][ T8938] EXT4-fs (loop0): unmounting filesystem. [ 540.124764][ T9077] UDC core: g1: couldn't find an available UDC or it's busy [ 540.152490][ T9078] overlayfs: failed to resolve './bus': -2 [ 540.191103][ T9082] hub 8-0:1.0: USB hub found [ 540.195888][ T9082] hub 8-0:1.0: 1 port detected [ 540.702224][ T7579] hid-led 0003:27B8:01ED.0004: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.4-1/input0 [ 540.715900][ T7579] hid-led 0003:27B8:01ED.0004: ThingM blink(1) initialized [ 540.915166][ T6122] usb 5-1: USB disconnect, device number 2 [ 541.046071][ T9101] overlayfs: overlapping lowerdir path [ 541.057695][ T9101] overlayfs: failed to resolve './cgroup.net/devices.allow': -2 [ 541.337607][ T9104] loop0: detected capacity change from 0 to 512 [ 541.345032][ T9104] EXT4-fs (loop0): Test dummy encryption mode enabled [ 541.362185][ T9104] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 541.381611][ T8938] EXT4-fs (loop0): unmounting filesystem. [ 541.755168][ T7579] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 541.918192][ T678] usb 6-1: USB disconnect, device number 13 [ 541.949647][ T7579] usb 1-1: Using ep0 maxpacket: 16 [ 541.956660][ T7579] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.967886][ T7579] usb 1-1: config 0 interface 0 has no altsetting 0 [ 542.021743][ T7579] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 542.031007][ T7579] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.045757][ T7579] usb 1-1: config 0 descriptor?? [ 542.079718][ T301] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 542.483195][ T7579] hid-generic 0003:1E71:2009.0005: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 542.540791][ T301] usb 7-1: config 0 has no interfaces? [ 542.547082][ T301] usb 7-1: config 0 has no interfaces? [ 542.554020][ T301] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 542.563407][ T301] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.571687][ T301] usb 7-1: Product: syz [ 542.575921][ T301] usb 7-1: Manufacturer: syz [ 542.580607][ T301] usb 7-1: SerialNumber: syz [ 542.590480][ T301] usb 7-1: config 0 descriptor?? [ 542.801190][ T7579] usb 7-1: USB disconnect, device number 2 [ 542.961084][ T301] usb 1-1: USB disconnect, device number 3 [ 543.358628][ T9150] overlayfs: missing 'lowerdir' [ 543.409321][ T9152] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 544.276588][ T9172] loop6: detected capacity change from 0 to 512 [ 544.542208][ T9172] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 544.644092][ T9172] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 544.660236][ T9179] UDC core: g1: couldn't find an available UDC or it's busy [ 544.676819][ T9172] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 544.697111][ T9172] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 4097 with max blocks 1 with error 28 [ 544.718890][ T9172] EXT4-fs (loop6): This should not happen!! Data will be lost [ 544.718890][ T9172] [ 544.731047][ T9183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3097'. [ 544.743297][ T9172] EXT4-fs (loop6): Total free blocks count 0 [ 544.749409][ T9172] EXT4-fs (loop6): Free/Dirty block details [ 544.759706][ T9172] EXT4-fs (loop6): free_blocks=65280 [ 544.765199][ T9172] EXT4-fs (loop6): dirty_blocks=1 [ 544.770589][ T9172] EXT4-fs (loop6): Block reservation details [ 544.776711][ T9172] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 544.789657][ T7579] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 544.802927][ T9028] EXT4-fs (loop6): unmounting filesystem. [ 544.979658][ T7579] usb 5-1: Using ep0 maxpacket: 8 [ 544.985950][ T7579] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 544.994332][ T7579] usb 5-1: config 0 has no interface number 0 [ 545.000617][ T7579] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 545.011832][ T7579] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 545.022738][ T7579] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 545.035928][ T7579] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 545.049678][ T7579] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.066844][ T7579] usb 5-1: config 0 descriptor?? [ 545.487007][ T678] usb 5-1: USB disconnect, device number 3 [ 547.450142][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 547.450157][ T28] audit: type=1400 audit(1785762342.173:2558): avc: denied { set_context_mgr } for pid=9223 comm="syz.6.3112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 547.499671][ T28] audit: type=1400 audit(1785762342.203:2559): avc: denied { map } for pid=9223 comm="syz.6.3112" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 547.579078][ T28] audit: type=1400 audit(1785762342.203:2560): avc: denied { call } for pid=9223 comm="syz.6.3112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 547.743511][ T28] audit: type=1400 audit(1785762342.453:2561): avc: denied { write } for pid=9224 comm="syz.4.3114" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 548.159648][ T486] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 548.206591][ T28] audit: type=1400 audit(1785762342.923:2562): avc: denied { write } for pid=9242 comm="syz.6.3121" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 548.369708][ T486] usb 1-1: Using ep0 maxpacket: 8 [ 548.412564][ T486] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 548.581018][ T486] usb 1-1: config 0 has no interface number 0 [ 548.633111][ T486] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 548.754693][ T486] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 548.853167][ T486] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 548.959077][ T486] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 549.040746][ T486] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.563533][ T486] usb 1-1: config 0 descriptor?? [ 549.831881][ T9267] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 549.843322][ T28] audit: type=1400 audit(1785762344.553:2563): avc: denied { mounton } for pid=9265 comm="syz.4.3130" path="/27/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 549.908297][ T486] usb 1-1: USB disconnect, device number 4 [ 550.199667][ T366] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 550.249645][ T7580] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 550.379646][ T366] usb 7-1: Using ep0 maxpacket: 8 [ 550.385859][ T366] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 550.393752][ T366] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 550.405235][ T366] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 550.416779][ T366] usb 7-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 550.427765][ T366] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 550.441418][ T7580] usb 2-1: Using ep0 maxpacket: 16 [ 550.446654][ T366] usb 7-1: config 168 interface 0 has no altsetting 0 [ 550.454789][ T366] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 550.468387][ T7580] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 550.480909][ T9274] loop0: detected capacity change from 0 to 1024 [ 550.506505][ T9274] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 550.522188][ T366] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 550.533495][ T366] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 550.545263][ T366] usb 7-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 550.556250][ T366] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 550.570426][ T366] usb 7-1: config 168 interface 0 has no altsetting 0 [ 550.577858][ T7580] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 550.587109][ T7580] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.595329][ T7580] usb 2-1: Product: syz [ 550.599634][ T7580] usb 2-1: Manufacturer: syz [ 550.604552][ T366] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 550.615206][ T7580] usb 2-1: SerialNumber: syz [ 550.629716][ T366] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 550.641073][ T28] audit: type=1400 audit(1785762345.353:2564): avc: denied { rmdir } for pid=8938 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 550.664613][ T7580] usb 2-1: config 0 descriptor?? [ 550.669764][ T366] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 550.686022][ T28] audit: type=1400 audit(1785762345.363:2565): avc: denied { unlink } for pid=8938 comm="syz-executor" name="file1" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 550.687271][ T8938] EXT4-fs (loop0): unmounting filesystem. [ 550.709393][ T366] usb 7-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 550.745905][ T366] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 550.769633][ T366] usb 7-1: config 168 interface 0 has no altsetting 0 [ 550.778938][ T366] usb 7-1: string descriptor 0 read error: -22 [ 550.796816][ T366] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 550.818962][ T366] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.827573][ T9288] loop4: detected capacity change from 0 to 256 [ 551.246403][ T366] usb 7-1: USB disconnect, device number 3 [ 551.338994][ T9307] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 552.555917][ T9333] loop6: detected capacity change from 0 to 256 [ 552.571412][ T9333] exfat: Deprecated parameter 'namecase' [ 552.577140][ T9333] exfat: Unknown parameter 'zero_size_dir' [ 552.618752][ T8486] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 553.061140][ T6120] usb 2-1: USB disconnect, device number 6 [ 553.089549][ T28] audit: type=1400 audit(1785762347.803:2566): avc: denied { mounton } for pid=9355 comm="syz.1.3163" path="/72/file0" dev="tmpfs" ino=410 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 553.194950][ T9361] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 553.202810][ T28] audit: type=1400 audit(1785762347.913:2567): avc: denied { mounton } for pid=9357 comm="syz.6.3164" path="/25/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 553.243575][ T9363] fuse: Unknown parameter '00000000000000000000003' [ 553.248089][ T28] audit: type=1400 audit(1785762347.963:2568): avc: denied { mounton } for pid=9355 comm="syz.1.3163" path="/72/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 555.457717][ T9429] loop0: detected capacity change from 0 to 128 [ 555.719654][ T5048] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 555.768186][ T9431] kvm [9430]: vcpu0, guest rIP: 0x610c Unhandled WRMSR(0x11e) = 0xbe702911 [ 555.784291][ T9431] kvm [9430]: vcpu0, guest rIP: 0x610c Unhandled WRMSR(0x186) = 0x800 [ 555.800251][ T9431] kvm [9430]: vcpu0, guest rIP: 0x610c Unhandled WRMSR(0x11e) = 0xbe702911 [ 555.835988][ T9431] kvm [9430]: vcpu0, guest rIP: 0x610c Unhandled WRMSR(0x187) = 0x800 [ 555.878803][ T9431] kvm [9430]: vcpu0, guest rIP: 0x610c Unhandled WRMSR(0x187) = 0x800 [ 555.919715][ T5048] usb 2-1: Using ep0 maxpacket: 8 [ 555.926878][ T5048] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 555.940833][ T9431] kvm [9430]: vcpu0, guest rIP: 0x610c Unhandled WRMSR(0x187) = 0x800 [ 555.955891][ T5048] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 555.968240][ T5048] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 555.988725][ T9431] kvm [9430]: vcpu0, guest rIP: 0x610c Unhandled WRMSR(0x187) = 0x800 [ 556.006361][ T5048] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 556.031957][ T5048] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 556.052714][ T9447] overlayfs: missing 'lowerdir' [ 556.065319][ T5048] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.087361][ T9431] kvm [9430]: vcpu0, guest rIP: 0x610c Unhandled WRMSR(0x187) = 0x800 [ 556.107858][ T9431] kvm [9430]: vcpu0, guest rIP: 0x610c Unhandled WRMSR(0x187) = 0x800 [ 556.143214][ T5048] hub 2-1:1.0: bad descriptor, ignoring hub [ 556.153913][ T9431] kvm [9430]: vcpu0, guest rIP: 0x610c Unhandled WRMSR(0x187) = 0x800 [ 556.163405][ T5048] hub: probe of 2-1:1.0 failed with error -5 [ 556.185605][ T5048] cdc_wdm 2-1:1.0: skipping garbage [ 556.197631][ T5048] cdc_wdm 2-1:1.0: skipping garbage [ 556.212752][ T5048] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 556.623064][ T28] audit: type=1400 audit(1785762351.343:2569): avc: denied { ioctl } for pid=9454 comm="syz.5.3187" path="/dev/usbmon3" dev="devtmpfs" ino=168 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 556.699773][ T678] usb 2-1: USB disconnect, device number 7 [ 556.778950][ T9451] loop0: detected capacity change from 0 to 40427 [ 556.805226][ T9451] F2FS-fs (loop0): fault_injection options not supported [ 556.818798][ T9451] F2FS-fs (loop0): fault_type options not supported [ 556.832014][ T9451] F2FS-fs (loop0): invalid crc value [ 556.850736][ T9451] F2FS-fs (loop0): Found nat_bits in checkpoint [ 556.929217][ T9464] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 556.962530][ T9451] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 557.056772][ T28] audit: type=1400 audit(1785762351.773:2570): avc: denied { read } for pid=9450 comm="syz.0.3185" name="file1" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 557.095700][ T486] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 557.107537][ T486] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 557.119220][ T28] audit: type=1400 audit(1785762351.813:2571): avc: denied { read write } for pid=9475 comm="syz.6.3193" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 557.152543][ T486] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 557.182237][ T9477] syz.0.3185: attempt to access beyond end of device [ 557.182237][ T9477] loop0: rw=2049, sector=45096, nr_sectors = 3600 limit=40427 [ 557.193666][ T28] audit: type=1400 audit(1785762351.813:2572): avc: denied { open } for pid=9475 comm="syz.6.3193" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 557.247658][ T9482] fido_id[9482]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 557.304992][ T9477] syz.0.3185: attempt to access beyond end of device [ 557.304992][ T9477] loop0: rw=2049, sector=48696, nr_sectors = 3688 limit=40427 [ 557.612512][ T9477] syz.0.3185: attempt to access beyond end of device [ 557.612512][ T9477] loop0: rw=2049, sector=52384, nr_sectors = 864 limit=40427 [ 557.779103][ T9477] syz.0.3185: attempt to access beyond end of device [ 557.779103][ T9477] loop0: rw=2049, sector=45056, nr_sectors = 8 limit=40427 [ 557.794375][ T9498] overlayfs: missing 'lowerdir' [ 557.801862][ T9477] syz.0.3185: attempt to access beyond end of device [ 557.801862][ T9477] loop0: rw=2049, sector=57344, nr_sectors = 2592 limit=40427 [ 557.886757][ T8938] syz-executor: attempt to access beyond end of device [ 557.886757][ T8938] loop0: rw=2049, sector=59936, nr_sectors = 8 limit=40427 [ 559.043421][ T9520] binder: 9514:9520 ioctl 40046210 0 returned -14 [ 559.069770][ T28] audit: type=1400 audit(1785762353.773:2573): avc: denied { create } for pid=9514 comm="syz.4.3207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 559.196977][ T9527] loop1: detected capacity change from 0 to 4096 [ 559.207566][ T9527] ext4: Unknown parameter 'fsname' [ 559.304406][ T9532] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 559.491784][ T9535] can0: slcan on ttyS3. [ 559.824425][ T9562] loop4: detected capacity change from 0 to 512 [ 559.840787][ T9562] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 559.852757][ T9562] EXT4-fs (loop4): 1 truncate cleaned up [ 559.858546][ T9562] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 559.878064][ T8855] EXT4-fs (loop4): unmounting filesystem. [ 560.159659][ T9526] can0 (unregistered): slcan off ttyS3. [ 560.490561][ T9579] overlayfs: failed to resolve './bus': -2 [ 561.602057][ T9326] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 561.626879][ T28] audit: type=1400 audit(1785762356.343:2574): avc: denied { setopt } for pid=9623 comm="syz.4.3232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 561.784500][ T9638] tipc: Started in network mode [ 561.789428][ T9638] tipc: Node identity 4, cluster identity 4711 [ 561.795950][ T9638] tipc: Node number set to 4 [ 561.859469][ T9647] loop6: detected capacity change from 0 to 4096 [ 561.869126][ T9326] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 561.884394][ T9647] ext4: Unknown parameter 'fsname' [ 561.910579][ T9326] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 561.930587][ T9326] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.938647][ T9326] usb 6-1: Product: syz [ 561.959623][ T9326] usb 6-1: Manufacturer: syz [ 561.964340][ T9326] usb 6-1: SerialNumber: syz [ 563.150068][ T9668] loop6: detected capacity change from 0 to 16 [ 563.158852][ T9668] erofs: (device loop6): mounted with root inode @ nid 36. [ 563.319791][ T6128] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 563.519924][ T6128] usb 2-1: Using ep0 maxpacket: 8 [ 563.527542][ T6128] usb 2-1: config 2 has an invalid interface number: 111 but max is 0 [ 563.536129][ T6128] usb 2-1: config 2 has no interface number 0 [ 563.542938][ T6128] usb 2-1: too many endpoints for config 2 interface 111 altsetting 55: 172, using maximum allowed: 30 [ 563.560531][ T6128] usb 2-1: config 2 interface 111 altsetting 55 has 0 endpoint descriptors, different from the interface descriptor's value: 172 [ 563.582608][ T6128] usb 2-1: config 2 interface 111 has no altsetting 0 [ 563.589918][ T6128] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 563.599085][ T6128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.614009][ T678] usb 6-1: USB disconnect, device number 14 [ 563.671958][ T9683] UDC core: g1: couldn't find an available UDC or it's busy [ 563.779661][ T6122] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 563.868848][ T9689] can0: slcan on ttyS3. [ 563.908495][ T6128] usb 2-1: string descriptor 0 read error: -71 [ 564.089679][ T6122] usb 5-1: Using ep0 maxpacket: 32 [ 564.121976][ T6122] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 564.135025][ T6122] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.145092][ T6128] usb 2-1: USB disconnect, device number 8 [ 564.152207][ T6122] usb 5-1: Product: syz [ 564.164051][ T6122] usb 5-1: Manufacturer: syz [ 564.168868][ T6122] usb 5-1: SerialNumber: syz [ 564.178442][ T6122] usb 5-1: config 0 descriptor?? [ 564.289794][ T678] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 564.491558][ T678] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 564.517794][ T678] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 564.529945][ T678] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 564.542781][ T9708] UDC core: g1: couldn't find an available UDC or it's busy [ 564.551065][ T678] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 564.568457][ T678] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 564.591272][ T678] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 564.601929][ T678] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 564.610212][ T9685] can0 (unregistered): slcan off ttyS3. [ 564.613155][ T678] usb 6-1: Product: syz [ 564.665655][ T678] usb 6-1: Manufacturer: syz [ 564.670229][ T9718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3260'. [ 564.685593][ T678] cdc_wdm 6-1:1.0: skipping garbage [ 564.691366][ T678] cdc_wdm 6-1:1.0: skipping garbage [ 564.700657][ T678] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 564.724332][ T9722] loop0: detected capacity change from 0 to 512 [ 564.785354][ T9726] overlayfs: missing 'lowerdir' [ 565.148534][ T678] usb 6-1: USB disconnect, device number 15 [ 565.156660][ T9733] tipc: Started in network mode [ 565.162478][ T9733] tipc: Node identity 4, cluster identity 4711 [ 565.168904][ T9733] tipc: Node number set to 4 [ 565.247295][ T9738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=531 sclass=netlink_route_socket pid=9738 comm=syz.0.3261 [ 565.299948][ T28] audit: type=1400 audit(1785762359.963:2575): avc: denied { write } for pid=9721 comm="syz.0.3261" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 565.512266][ T28] audit: type=1400 audit(1785762359.983:2576): avc: denied { ioctl } for pid=9721 comm="syz.0.3261" path="/dev/rtc0" dev="devtmpfs" ino=263 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 565.712932][ T9756] UDC core: g1: couldn't find an available UDC or it's busy [ 565.754087][ T9758] dummy_hcd dummy_hcd.0: remove, state 1 [ 565.769673][ T9758] usb usb1: USB disconnect, device number 1 [ 565.809785][ T9762] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 565.809787][ T6122] usb usb1-port1: attempt power cycle [ 565.908049][ T9758] dummy_hcd dummy_hcd.0: stopped [ 565.915906][ T9758] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 566.528267][ T6122] usb 5-1: USB disconnect, device number 4 [ 566.687152][ T9791] UDC core: g1: couldn't find an available UDC or it's busy [ 566.719629][ T6128] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 566.728417][ T9795] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 566.762342][ T9800] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3284'. [ 566.771663][ T9800] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3284'. [ 566.836408][ T9326] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 567.029664][ T6128] usb 2-1: Using ep0 maxpacket: 8 [ 567.036093][ T6128] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 567.044392][ T6128] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 567.054380][ T6128] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 567.064215][ T6128] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 567.074312][ T6128] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 567.087507][ T6128] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 567.096691][ T6128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.111029][ T9326] usb 7-1: Using ep0 maxpacket: 16 [ 567.117761][ T9326] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.129973][ T9326] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.139810][ T9326] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 567.153747][ T9326] usb 7-1: New USB device found, idVendor=045e, idProduct=10da, bcdDevice= 0.00 [ 567.163120][ T9326] usb 7-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 567.171219][ T9326] usb 7-1: Product: syz [ 567.176145][ T9326] usb 7-1: config 0 descriptor?? [ 567.586607][ T9326] hid-generic 0003:045E:10DA.0007: ignoring exceeding usage max [ 567.595673][ T9326] hid-generic 0003:045E:10DA.0007: unknown main item tag 0x0 [ 567.603134][ T9326] hid-generic 0003:045E:10DA.0007: unknown main item tag 0x0 [ 567.610609][ T9326] hid-generic 0003:045E:10DA.0007: unknown main item tag 0x0 [ 567.618008][ T9326] hid-generic 0003:045E:10DA.0007: unknown main item tag 0x0 [ 567.650706][ T9326] hid-generic 0003:045E:10DA.0007: unknown main item tag 0x0 [ 567.658360][ T9326] hid-generic 0003:045E:10DA.0007: unknown main item tag 0x0 [ 567.666436][ T9326] hid-generic 0003:045E:10DA.0007: unknown main item tag 0x0 [ 567.674011][ T9326] hid-generic 0003:045E:10DA.0007: unknown main item tag 0x0 [ 567.681544][ T9326] hid-generic 0003:045E:10DA.0007: unknown main item tag 0x0 [ 567.734267][ T9326] hid-generic 0003:045E:10DA.0007: unknown main item tag 0x0 [ 567.741760][ T9326] hid-generic 0003:045E:10DA.0007: unknown main item tag 0x0 [ 567.749341][ T9326] hid-generic 0003:045E:10DA.0007: unknown main item tag 0x0 [ 567.757613][ T9326] hid-generic 0003:045E:10DA.0007: unknown main item tag 0x0 [ 567.765235][ T9326] hid-generic 0003:045E:10DA.0007: unknown main item tag 0x0 [ 567.785864][ T9326] hid-generic 0003:045E:10DA.0007: unknown main item tag 0x0 [ 567.799749][ T9326] hid-generic 0003:045E:10DA.0007: unbalanced collection at end of report description [ 567.825452][ T9326] hid-generic: probe of 0003:045E:10DA.0007 failed with error -22 [ 567.886198][ T9326] usb 7-1: USB disconnect, device number 4 [ 568.180234][ T9823] loop4: detected capacity change from 0 to 256 [ 568.193261][ T9823] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 568.209083][ T28] audit: type=1400 audit(1785762362.933:2577): avc: denied { append } for pid=9822 comm="syz.4.3291" path="/64/file2/memory.swap.events" dev="loop4" ino=1048636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 568.383469][ T28] audit: type=1400 audit(1785762363.103:2578): avc: denied { map } for pid=9822 comm="syz.4.3291" path="/64/file2/memory.swap.events" dev="loop4" ino=1048636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 568.605711][ T9748] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 568.617593][ T9748] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 568.626041][ T9748] CPU: 0 PID: 9748 Comm: syz.0.3266 Not tainted syzkaller #0 [ 568.633450][ T9748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 568.643565][ T9748] RIP: 0010:set_link_state+0x2a/0x1230 [ 568.649251][ T9748] Code: 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 60 49 89 fd 48 bb 00 00 00 00 00 fc ff df e8 4d fb 24 fe 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 e8 85 6a fe 4d 8b 75 00 49 8d 95 9b [ 568.668896][ T9748] RSP: 0018:ffffc9000a62f560 EFLAGS: 00010046 [ 568.675077][ T9748] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88810d226540 [ 568.683078][ T9748] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 568.691071][ T9748] RBP: ffffc9000a62f5e8 R08: 0000000000000003 R09: 0000000000000004 [ 568.699073][ T9748] R10: dffffc0000000000 R11: fffff520014c5eac R12: 0000000000000000 [ 568.707106][ T9748] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88810da88000 [ 568.715122][ T9748] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 568.724083][ T9748] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 568.730695][ T9748] CR2: 0000200000000140 CR3: 000000000700f000 CR4: 00000000003506b0 [ 568.738704][ T9748] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 568.746706][ T9748] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 568.754714][ T9748] Call Trace: [ 568.758029][ T9748] [ 568.760997][ T9748] ? __kasan_check_write+0x14/0x20 [ 568.766234][ T9748] ? mutex_lock+0x93/0x1b0 [ 568.770796][ T9748] dummy_pullup+0xcd/0x130 [ 568.775248][ T9748] ? __cfi_dummy_pullup+0x10/0x10 [ 568.780311][ T9748] usb_gadget_disconnect_locked+0x14c/0x3f0 [ 568.786326][ T9748] gadget_unbind_driver+0xab/0x3d0 [ 568.791479][ T9748] ? __cfi_gadget_unbind_driver+0x10/0x10 [ 568.797251][ T9748] device_release_driver_internal+0x486/0x7e0 [ 568.803409][ T9748] driver_detach+0x1f1/0x2d0 [ 568.808012][ T9748] bus_remove_driver+0x121/0x1d0 [ 568.812956][ T9748] driver_unregister+0x75/0xa0 [ 568.817766][ T9748] usb_gadget_unregister_driver+0x4e/0x70 [ 568.823517][ T9748] raw_release+0xda/0x260 [ 568.827944][ T9748] ? __cfi_raw_release+0x10/0x10 [ 568.832906][ T9748] __fput+0x1fd/0x8f0 [ 568.837001][ T9748] ____fput+0x15/0x20 [ 568.841023][ T9748] task_work_run+0x1e1/0x250 [ 568.845623][ T9748] ? __cfi_task_work_run+0x10/0x10 [ 568.850778][ T9748] ? __kasan_check_write+0x14/0x20 [ 568.855920][ T9748] do_exit+0xaf2/0x2850 [ 568.860104][ T9748] ? timerqueue_del+0xd3/0x120 [ 568.864969][ T9748] ? __cfi_do_exit+0x10/0x10 [ 568.869580][ T9748] ? __remove_hrtimer+0x157/0x3d0 [ 568.874671][ T9748] ? remove_hrtimer+0x137/0x280 [ 568.879546][ T9748] ? __kasan_check_write+0x14/0x20 [ 568.884685][ T9748] ? _raw_spin_lock_irq+0x95/0xf0 [ 568.889735][ T9748] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 568.895306][ T9748] do_group_exit+0x21b/0x2e0 [ 568.899924][ T9748] ? __kasan_check_write+0x14/0x20 [ 568.905078][ T9748] ? recalc_sigpending+0x180/0x1c0 [ 568.910217][ T9748] get_signal+0x167c/0x1700 [ 568.914751][ T9748] ? __cfi_get_signal+0x10/0x10 [ 568.919627][ T9748] arch_do_signal_or_restart+0xd1/0x11c0 [ 568.925279][ T9748] ? do_futex+0x2e2/0x430 [ 568.929700][ T9748] ? _copy_from_user+0x8f/0xc0 [ 568.934550][ T9748] ? __cfi_do_futex+0x10/0x10 [ 568.939254][ T9748] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 568.945430][ T9748] ? __se_sys_futex+0x136/0x310 [ 568.950299][ T9748] ? do_user_addr_fault+0x9a5/0x1030 [ 568.955611][ T9748] exit_to_user_mode_loop+0x7a/0xb0 [ 568.960893][ T9748] exit_to_user_mode_prepare+0x87/0xd0 [ 568.966365][ T9748] syscall_exit_to_user_mode+0x1a/0x30 [ 568.971885][ T9748] do_syscall_64+0x58/0xa0 [ 568.976350][ T9748] ? clear_bhb_loop+0x30/0x80 [ 568.981066][ T9748] ? clear_bhb_loop+0x30/0x80 [ 568.985758][ T9748] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 568.991671][ T9748] RIP: 0033:0x7f6d6d79e019 [ 568.996108][ T9748] Code: Unable to access opcode bytes at 0x7f6d6d79dfef. [ 569.003135][ T9748] RSP: 002b:00007fffa68e1fc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 569.011567][ T9748] RAX: fffffffffffffdfc RBX: 000000000008a14d RCX: 00007f6d6d79e019 [ 569.019571][ T9748] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6d6da25fac [ 569.027573][ T9748] RBP: 0000000000000bea R08: 002245b9f2001eca R09: 0000000000000000 [ 569.035615][ T9748] R10: 00007fffa68e20d0 R11: 0000000000000246 R12: 00007fffa68e20f0 [ 569.043604][ T9748] R13: 00007f6d6da25fac R14: 000000000008ad37 R15: 00007fffa68e20d0 [ 569.051600][ T9748] [ 569.054649][ T9748] Modules linked in: [ 569.058563][ T9748] ---[ end trace 0000000000000000 ]--- [ 569.064030][ T9748] RIP: 0010:set_link_state+0x2a/0x1230 [ 569.069514][ T9748] Code: 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 60 49 89 fd 48 bb 00 00 00 00 00 fc ff df e8 4d fb 24 fe 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 e8 85 6a fe 4d 8b 75 00 49 8d 95 9b [ 569.089136][ T9748] RSP: 0018:ffffc9000a62f560 EFLAGS: 00010046 [ 569.095227][ T9748] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88810d226540 [ 569.103220][ T9748] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 569.111213][ T9748] RBP: ffffc9000a62f5e8 R08: 0000000000000003 R09: 0000000000000004 [ 569.119204][ T9748] R10: dffffc0000000000 R11: fffff520014c5eac R12: 0000000000000000 [ 569.127191][ T9748] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88810da88000 [ 569.135191][ T9748] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 569.144135][ T9748] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 569.150735][ T9748] CR2: 0000200000000140 CR3: 000000000700f000 CR4: 00000000003506b0 [ 569.158724][ T9748] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 569.166711][ T9748] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 569.174792][ T9748] Kernel panic - not syncing: Fatal exception [ 569.181480][ T9748] Kernel Offset: disabled [ 569.185814][ T9748] Rebooting in 86400 seconds..