last executing test programs: 8.922036429s ago: executing program 2 (id=261): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) gettid() timer_create(0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)={0xfffffffe}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x14, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbda], 0x4, 0x43100}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x9, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x1, 0x7d, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x5, 0x4, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0x0, 0x97}, {0x2000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x31, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0xc0, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0x4000, 0x9}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000300)={[{0x0, 0x6, 0x4, 0x8, 0x0, 0x3, 0xe7, 0x5, 0x4, 0x2, 0x4, 0x0, 0x4}, {0x2, 0x8, 0x3, 0x8, 0x0, 0x7, 0x8, 0xf, 0x5, 0xfc, 0x0, 0xf, 0xa}, {0xe6, 0x7, 0x8, 0x1e, 0x0, 0x3, 0x10, 0x8, 0x0, 0x3e, 0xfc, 0xe8, 0x7}], 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000140)={r0, &(0x7f0000000000)='/de\x00'/16, 0x240800, &(0x7f0000000040)={@_ha_fsid={[0xd, 0x8]}, {0x7000, 0xe, 0x2, 0x5}}, 0x80000000, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000100)=0x3}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001c00)=ANY=[@ANYBLOB="28040000", @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=r8], 0x428}, 0x1, 0x0, 0x0, 0x4000}, 0x40) gettid() setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000380)=r5, 0x4) 8.679553162s ago: executing program 4 (id=263): syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0700000000000000000000fe0b00"/28], 0x1c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfff3, 0x10}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x8}]}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044004}, 0x40010) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) 8.250725445s ago: executing program 4 (id=264): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x402, 0x0) ioctl$XFS_IOC_GOINGDOWN(r2, 0x8004587d, &(0x7f0000000300)=0xff) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0x2}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000001c0)="9a4af65b0e34777e38a2feb1c85420326762d60485fb1748eaafa35b1b2d5f8910c84f95a50b", 0x26}, {&(0x7f0000000380)="bcdca9f0471876798189670c16e4506979e2838e36edb8ab460a21339c2d3f61228c174def1ad3cea129e3512c2513d4c63f17939b722c72eaf6b4ab83a07d0dcbb3ed91c2edaf6158987173023abbbd198c1f766d289059f644eab0b4d4b812fe4927e6fe2efc49aa4cee30e4b26c009c6de07d82aeb42c7d2e0c28c8ec8928836ec763c04e8e4ab6", 0x89}], 0x2}, 0x0) recvmsg$can_j1939(r3, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r1) prlimit64(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x5f) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 6.509956027s ago: executing program 1 (id=270): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x10) syz_emit_ethernet(0x3e, &(0x7f00000050c0)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "091ea6", 0x8, 0x0, 0x1, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, {[], "223427d5c9a46b9f"}}}}}, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) 6.07568452s ago: executing program 1 (id=272): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r3, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000002480)) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) pause() syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000775000/0x3000)=nil, 0x3000, 0x3000001, 0x31, r2, 0x1000000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000100006900000400048008007a8004000b800800020001000000a00008801c000780080077144ebb0000080005000000000008000500000003e3"], 0xd0}}, 0x571f68543cec8180) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="016f0800010027000000270000004600fd5e00000000008490783fffff20ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0007009078001809c4000502ffe8c607000017000000da90afdc042810500150f0fd71c036d66f3239506c61bab43c7077b37c2e064c80ee13e8e995e5a2baa78c09946bce690c487f150e80cbbf664bea6d6dc4ba768a3155e0f85db55a7d7aef3e82bf94367249fe3aaf56990adadc3d696aead7906511643103581d25e784483100a90d6c049a60ba4fc971a8d20900006b204c750bf90edcd965db1a2757ee555cdbf23d9526074c7e681cd5af41ce285c5d59f89b14067d32a8ce13d1b7a9dcd48bdeeb9ada75c60b37f560f5f0d8c1bdaad6434fe34e31"], 0xfd6c) 4.556055088s ago: executing program 2 (id=274): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "0af5b0699d46dac48f29d158dbe8cfb1979e12979688dc039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c7667ce67af25166c2f0f85f36aa8867406119c2a6f1f892e31dea982c5ab0348d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b51424df36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459af0ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x48f, 0x9d, 0x18, 0xb, 0x13, 0x6}}]}}]}, 0x148}}, 0x4008010) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x7, 0x0, 0x6d0, 0x0, 0xffffffffffffffff, 0x6, '\x00', r1, 0xffffffffffffffff, 0x0, 0x2, 0x5, 0x5}, 0x50) close(0x3) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0400", 0x18, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x67, '\x00', @loopback}}}}}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100000d00a08dd679b7fc7011f089e65714a2244f3628f7847f4c3ea9ba01eef6", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3, r2}, 0xc) 4.12166126s ago: executing program 2 (id=276): prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x51]}}, 0x0, 0x52}, 0x20) 3.924139548s ago: executing program 1 (id=278): ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) add_key$fscrypt_provisioning(&(0x7f0000000740), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000048"], 0x48, 0xffffffffffffffff) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000100)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'cgroup\x00'}}, {@obj_user}, {@smackfsroot={'smackfsroot', 0x3d, 'cgroup\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'cgroup\x00'}}, {@obj_user={'obj_user', 0x3d, '@-(**^'}}, {@smackfshat={'smackfshat', 0x3d, 'cgroup\x00'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@euid_eq={'euid', 0x3d, r0}}]}) 3.923796549s ago: executing program 2 (id=279): setxattr$security_selinux(0x0, &(0x7f0000000080), &(0x7f00000000c0)='system_u:object_r:checkpolicy_exec_t:s0\x00', 0x28, 0x2) (async) syz_emit_vhci(0x0, 0x0) (async) r0 = socket(0x40000000015, 0x5, 0x0) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 32) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r2, 0x5607, 0x1) (async) r3 = getpid() fstat(r1, &(0x7f0000000180)) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f00000004c0)={&(0x7f0000000400), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x10, 0x1410, 0x20, 0x70bd2b, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x44) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) pselect6(0x40, &(0x7f0000000100)={0xffff, 0x5, 0x0, 0x1a730d2d, 0xca4, 0x8, 0x490a, 0x2}, &(0x7f0000000280)={0x4a6, 0x9, 0x9, 0xb49, 0x5e, 0x101, 0x431, 0x81}, &(0x7f00000002c0)={0x81, 0xe, 0xb, 0x1, 0x7fff, 0x6, 0x9, 0x2}, &(0x7f0000000300)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380)={[0xfffffffffffffffd]}, 0x8}) (async, rerun: 64) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r6 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r6, 0x4000) (async) close(r6) (async) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async, rerun: 64) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000019580)=ANY=[@ANYBLOB="1000000000000000040000000000000010000000000000001401000003"], 0x20}, 0x0) (rerun: 64) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04230d01"], 0x10) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80284504, &(0x7f0000000000)=""/52) (async, rerun: 64) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) (rerun: 64) r7 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKSECDISCARD(r7, 0x127d, 0x0) 3.731912131s ago: executing program 1 (id=280): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x3000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff58}, 0x48) 3.601441742s ago: executing program 1 (id=281): r0 = socket$nl_route(0x10, 0x3, 0x0) semtimedop(0x0, &(0x7f0000000280)=[{0x2, 0x180, 0x800}], 0x1, &(0x7f00000000c0)) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x4ee97ffd, 0x8e00) r2 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x5, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x2}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r2, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000001e00)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16=r2]}, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{}, {r3, r4+10000000}}, &(0x7f0000000200)) syz_usb_control_io$uac1(r2, 0x0, 0x0) r5 = epoll_create(0x8) ppoll(&(0x7f00000000c0)=[{r5, 0x2140}], 0x1, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f00000000c0)={0x12, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x2}]}}}]}, 0x3c}}, 0x0) 3.291246178s ago: executing program 0 (id=283): openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) mount(&(0x7f0000000300)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='xfs\x00', 0xfe, &(0x7f0000000400)='usrquota') 3.289227142s ago: executing program 2 (id=284): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) close_range(r3, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, 0x1c, 0x21, 0x0, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0xa, 0x2, 0x0, 0x0, @str='w\xa9\xe2\x00\x00\x00'}]}, 0x28}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chmod(0x0, 0x57eeb83c9526c7ac) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1747], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 3.118184565s ago: executing program 0 (id=285): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) (async) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902340001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000b40)={0x2c, &(0x7f0000000900)=ANY=[@ANYBLOB='N2-'], 0x0, 0x0, 0x0, 0x0}) (async) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x0, 0x200088}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000002c0)=0x6) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000001940)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x0, 0x3}}, 0x10, &(0x7f00000017c0), 0x0, &(0x7f0000001840)="1eb6f89be67bfaba8de77bb6a40f4883429cca1cde607573bb8ff8b2e61ef3fd68b404d63e965b0d00a56afc2603d0a369e80fa9f53f46676ab601750440361ba4151cbd82fd0d35b58df1e56ecb25bd42ad9f8abf520273bf37034ecc8bad3c92296a3c70ac627d2677fd3762e47b583138b93bbf2cb04ab754b18fa5a4932b6a2dc1183626d6a3bf6039696e6322f45d63a43baf5ecd8782511fa14ec22c4b61b6d5e61550cc0098789fcdf97025761283dde4d7470a2cee36fcc27e23409df70aec4a9b02e1932e8f625fe106ea666b87f5d0b412ba2e637a9fbad9f212b9f256da841e11912247ceac3c713745f7fb7e84", 0xf3, 0x40041}, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x15, 0x5, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_ACTIVATE_TARGET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000001300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010023010000340200001c"], 0x2c}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) bind$tipc(r0, &(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x3}}, 0x10) (async) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) (async) semctl$GETPID(0x0, 0x710a46238146441f, 0xb, 0x0) (async) sendmsg$tipc(r7, &(0x7f0000000280)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x3}}, 0x10, 0x0}, 0x8) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) (async) r9 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r9, &(0x7f0000000000)={0x1, 0x5}, 0x2) 2.39102644s ago: executing program 4 (id=287): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x14}}, 0x44014) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="51c78731fcd9f8a548af189b190e963909ca857f559b8346cb9c3389f5ce67730d54016040dbe065a56f0e404742a3036c678314b749a9841ecf643801d937da3f0ed5bf7791b68b844c433a844f6e25f38053c7e1795dcdfc445328bc7cf47b32d6ee5e63be53b23524f3736c19474072a0e5961ab8bcd8548c048b05cc4279eed215888db834aaf8e0f2c475274e2f99cba25a5573b9159b69e54f", 0x9c}], 0x1}}], 0x1, 0x40) close(r4) 2.017284527s ago: executing program 4 (id=289): syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff0800450000300000000000019078ac1e0001ac1434aa03049078030200004500000000000000002f00007f000001000000005d00cba8b76cda00b16273e44c3bb6c568f94691715814aed3a0f35d7899a85e"], 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64) r0 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x63e42000) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0xd2) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) (async) gettid() (async, rerun: 32) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) socket$inet(0x2, 0x2, 0x30) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) 1.955767242s ago: executing program 3 (id=290): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x7002, 0xffffffffffffffff}) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x200000000000d240, 0x7}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000140)={0x2, 0x1, 0x7, 0x2}) mount(&(0x7f0000000040)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='ubifs\x00', 0x800, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x30, r0, 0xa0eec000) 1.840087995s ago: executing program 3 (id=291): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xd, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe000000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x14}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x0, 0xa, 0x4, 0x2, 0x0, @mcast1, @empty, 0x40, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) r5 = syz_io_uring_setup(0x3bd2, &(0x7f0000000180)={0x0, 0xcc19, 0x130c9, 0x3, 0x30e}, &(0x7f0000000100), &(0x7f0000000400), &(0x7f0000000000)) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000140)) r7 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FICLONE(r7, 0x40049409, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003600)) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r3, r3, 0x3, 0x0, 0x0, 0x9, 0xb, 0x6, 0x5504, 0xc336, 0x1, 0xb, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x1, &(0x7f00000000c0)=0x7) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r12, 0x40044160, 0x3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r11, 0x0, r13, 0x0, 0xf3a, 0x0) write$binfmt_misc(r13, &(0x7f0000000980), 0xfdef) timer_settime(r10, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.763665083s ago: executing program 4 (id=292): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x90ff, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff58}, 0x48) 1.632099595s ago: executing program 2 (id=293): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$xdp(0x2c, 0x3, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4048015) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r9, 0x0, 0x2e, &(0x7f0000000340)={0x45, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x400, @dev={0xac, 0x14, 0x14, 0xf}}}}, 0x108) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x7}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$FIONREAD(r5, 0x541b, &(0x7f0000000040)) write(r2, &(0x7f0000000300)="c9", 0x1) close(r5) setresuid(0xee00, 0xee00, 0x0) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r11, 0xf, 0x0, 0x0) tee(r1, r6, 0x3ff, 0xe) write$binfmt_script(r6, 0x0, 0xd9) write(r3, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 1.63185488s ago: executing program 4 (id=294): syz_usb_connect$uac1(0x0, 0x8c, &(0x7f0000000540)=ANY=[@ANYBLOB="12011003000000103512148240000102030109027a00030103802f0904000000010100000a2401bb000a0002010209040100000102000009040197eb010200000a24020202005cb8f9010324010202021009240201060801043609050109ff"], &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) landlock_create_ruleset(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000080)) copy_file_range(r1, 0x0, r2, 0x0, 0x9, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) bind$inet(r0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = eventfd2(0xff, 0x80801) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)={0x1}) writev(r4, &(0x7f0000000580)=[{&(0x7f00000000c0)="331a7374cb1ef9c6", 0x8}], 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'macvtap0\x00'}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="480100001000010000000000000000000000000000000000000000000000000000000000f8ff0000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000001eb900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c00120073657169762863636d28626c6f77666973682d61736d29290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000c0008"], 0x148}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x85, 0xd, 0x403}, {0x8, 0xfc, 0x2, 0x1}]}) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) 1.406348451s ago: executing program 0 (id=295): openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) mount(&(0x7f0000000300)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='xfs\x00', 0x300, &(0x7f0000000400)='usrquota') 1.285786274s ago: executing program 0 (id=296): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x50) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f0000001840)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="000012e3f4a3c20c5ce933911d07f199da0f389937adfdd1d74ae14adab563b9ebd81c72a9aa60d4b7b63422829c93ce0207b4265fc4149dd063d7e9b0e27f324d"]) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYRES8=0x0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.203770771s ago: executing program 0 (id=297): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1ff, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0xc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000007c0)={0xef, 0x0, 0x1, 0x201, 0x0, 0x0, {0x1}, [@CTA_TUPLE_ORIG={0x10}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x36}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x428}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x800}, @CTA_FILTER_ORIG_FLAGS={0x8}]}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x0, 0x2, 0x1, 0x0, 0x3}]}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ffffffc}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xbd}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x454}]}, @CTA_NAT_DST={0x44, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x23}}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x0, 0x1, 0x4e23}]}]}, @CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x2000}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340), 0x0) mount(&(0x7f00000009c0)=@sr0, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='nfs4\x00', 0x1000080, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) setrlimit(0xd, &(0x7f0000000280)={0x10000, 0x400}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40046f41, 0x0) chroot(&(0x7f0000000380)='./file0\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 961.72669ms ago: executing program 3 (id=298): unshare(0x22020600) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x1, 0x0, 0x9, 0xfffffff7, {{0x5, 0x4, 0x2, 0x7, 0x14, 0x5f, 0x0, 0x5, 0x2f, 0x0, @multicast1, @empty}}}}) connect$unix(r1, &(0x7f0000000540)=@abs={0x27, 0x0, 0x8}, 0x6e) 816.100559ms ago: executing program 3 (id=299): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x14}}, 0x44014) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="51c78731fcd9f8a548af189b190e963909ca857f559b8346cb9c3389f5ce67730d54016040dbe065a56f0e404742a3036c678314b749a9841ecf643801d937da3f0ed5bf7791b68b844c433a844f6e25f38053c7e1795dcdfc445328bc7cf47b32d6ee5e63be53b23524f3736c19474072a0e5961ab8bcd8548c048b05cc4279eed215888db834aaf8e0f2c475274e2f99cba25a5573b9159b69e54f", 0x9c}, {0x0}], 0x2}}], 0x1, 0x40) close(r4) 235.677921ms ago: executing program 1 (id=300): syz_emit_ethernet(0x56, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0, [{}, {}, {0xe, 0x1, "24fcaa8fc05a"}]}}}}}}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000403810101400000000000109022400010000000009040000030300000009210000000122070009058103"], 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043009"], 0x6) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffcb5, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x5f) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x46eb, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc) bind$bt_l2cap(r7, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r7, &(0x7f0000004a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000002a40)="0e887bfe7cd7c6448551ab90b074053c300eca40a13d44358d18", 0x1a}, {&(0x7f0000002a80)="e41005e17f12b62f0ec71ce334ddc60c0a605247c028afd2820217584cc7833f21094b5818ab3c7e9f580535cd541ec3c1b7c1edca1e2b01039a90bb8b7b30927bb733b3e3ec1a1fdf61a08827ff9ad152414453345946881771022fed778ba4b8c4bea414e34c15aac26a848c5710b67aa9f21222a26c78033adb662f150b6d47a08d44447bf0ca7fd84d992e7cb9295af54f70f05799bee5cfcd609ad67bd2e97513be7bcf3748fcb73e9d8f9bb4936588189b0e7ccab3002b565219e7aec177713b40a9f7bdd8a8f081a6423e3eff40a828155e3d061610a07035a993ba5055a3785c6f7f93c5", 0xe8}, {&(0x7f0000002b80)="1dde78a08b46f81cda37b905494b1dd7ac9d24ef088222b7a5ba971f1ed4759f55efcdf7f939d6a9762aaee0b12272c8c3aee90c6633519627b67e3f9664b0ef6b9f9428d8fe2962d4e140d5a4182aa4f4ed41106c80a4abc2682e6969341355f507bf3944e9e6bdad0d3e414fc30f5309790320f8b95e86cad8a36a8fc67fb7597519866527c8add1824485fb2d19f09b7dff0389a9814b520bdd0f0f37d3ca3aa4ec8148d22c8a8a135c9f685bd7d3db466d2d0bbf52de028ba06d8e", 0xbd}, {&(0x7f0000002c40)="978fa222a5c8cdab49ff7bfca01b194f5fee13771ae702a0f9750df60e96e5815f1416d6", 0x24}, {&(0x7f0000002c80)="be171fb31d5d2d158da9b0a9cadd6c69655c2c8f3778bbaba16c80c7b508158ebe5f0be926f9f77e69e00e42b778d486436b84ae5641b31bbfb53c40d876290e86eba35a24ec93f31b7406d67abb6707ded6ed06dfc770ddbd84fec99f36e157e364516dfa44e787a46050b9071a296ad535a462474d9c8e6eec64a5729ef64d16e179f1a34a4acb65d0633c4d086ba74431d0860e814a001fae7aab266da61ecc7edcb53b90b180e0580d01e3de0063e744ba41c1bb4a964b6a7d0de0aa", 0xbe}], 0x5}}], 0x2, 0x40810) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343e", 0xc4}], 0x2}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xb0ff}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="2001080000000824090092"], 0x0, 0x0, 0x0, 0x0}, 0x0) 188.124747ms ago: executing program 3 (id=301): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, 0x0, 0x0) (async) r2 = openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x9, 0x7, 0x10000, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x34ff, 0xa, 0x1, 0x49}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) (async, rerun: 32) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) r5 = socket(0x2b, 0x1, 0x1) (async, rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0xf2a50000) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'bridge_slave_0\x00', 0x3}, 0x18) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="f00000001c00010027bd70"], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) (async, rerun: 32) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) 47.231353ms ago: executing program 0 (id=302): syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000200)={0x1007, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x1400037e) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x400) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000100)={'bond0\x00'}) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f00000001c0)={0x6, {0x80000001, 0xcf96, 0x6, 0x43c12c7c}, {0xfd, 0x101, 0x8, 0x101}, {0x7f, 0x6d}}) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 0s ago: executing program 3 (id=303): semop(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301142, 0x0) close(r1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000140)="6400000000000000000000b8155ddc2d00ec2f187523dd84c04599a8b86f399ac5ec84f641b7cff1", 0x28, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x8000) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r5, 0x6f2d, 0xffffffffff600003) kernel console output (not intermixed with test programs): 95438][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.407958][ T5610] team0: Port device team_slave_1 added [ 62.414190][ T5613] Bluetooth: hci1: command tx timeout [ 62.423087][ T5613] Bluetooth: hci0: command tx timeout [ 62.436028][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.445585][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.452578][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.478480][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.503751][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.514162][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.538302][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.545362][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.571364][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.583625][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.606728][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.613755][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.639897][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.651235][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.653827][ T5613] Bluetooth: hci4: command tx timeout [ 62.658382][ T4930] Bluetooth: hci3: command tx timeout [ 62.664299][ T5613] Bluetooth: hci2: command tx timeout [ 62.669864][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.700923][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.725273][ T5624] team0: Port device team_slave_0 added [ 62.731265][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.741018][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.766913][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.794402][ T5624] team0: Port device team_slave_1 added [ 62.813364][ T5621] team0: Port device team_slave_0 added [ 62.823493][ T5609] hsr_slave_0: entered promiscuous mode [ 62.829570][ T5609] hsr_slave_1: entered promiscuous mode [ 62.843390][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.850334][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.876375][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.894391][ T5621] team0: Port device team_slave_1 added [ 62.914309][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.921617][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.947668][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.990259][ T5618] hsr_slave_0: entered promiscuous mode [ 62.996486][ T5618] hsr_slave_1: entered promiscuous mode [ 63.002290][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 63.008193][ T5618] Cannot create hsr debugfs directory [ 63.019281][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.026440][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.053095][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.067507][ T5610] hsr_slave_0: entered promiscuous mode [ 63.073593][ T5610] hsr_slave_1: entered promiscuous mode [ 63.079407][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 63.085421][ T5610] Cannot create hsr debugfs directory [ 63.106871][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.113878][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.140097][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.193444][ T5624] hsr_slave_0: entered promiscuous mode [ 63.199493][ T5624] hsr_slave_1: entered promiscuous mode [ 63.206031][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 63.211754][ T5624] Cannot create hsr debugfs directory [ 63.302617][ T5621] hsr_slave_0: entered promiscuous mode [ 63.308959][ T5621] hsr_slave_1: entered promiscuous mode [ 63.315156][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 63.320877][ T5621] Cannot create hsr debugfs directory [ 63.571571][ T5609] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.582443][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.590792][ T5609] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.600458][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.609889][ T5609] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.619672][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.627640][ T5609] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.637291][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.688470][ T5610] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.698433][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.706971][ T5610] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.717240][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.725297][ T5610] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.734352][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.744266][ T5610] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.753528][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.829458][ T5618] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.839494][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.848248][ T5618] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.857624][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.865430][ T5618] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.874629][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.882192][ T5618] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.891486][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.970526][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.982242][ T5621] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.990779][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.998500][ T5621] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.007149][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.020982][ T5621] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.029775][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.038439][ T5621] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.048312][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.070986][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.097849][ T178] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.105199][ T178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.139714][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.146863][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.158152][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.188536][ T5624] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.199315][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.207494][ T5624] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.216535][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.231984][ T5624] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.240476][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.248724][ T5624] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.258564][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.276518][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.293430][ T1051] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.300509][ T1051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.336978][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.348193][ T1051] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.355342][ T1051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.371346][ T5609] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.445130][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.492611][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.499776][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.507846][ T5613] Bluetooth: hci0: command tx timeout [ 64.507854][ T4930] Bluetooth: hci1: command tx timeout [ 64.526880][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.534027][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.572231][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.630812][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.682549][ T3351] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.689698][ T3351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.706968][ T3351] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.714111][ T3351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.738175][ T5613] Bluetooth: hci2: command tx timeout [ 64.738384][ T4930] Bluetooth: hci3: command tx timeout [ 64.743695][ T5616] Bluetooth: hci4: command tx timeout [ 64.756357][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.827957][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.866624][ T178] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.873790][ T178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.911988][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.919146][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.955184][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.139934][ T5609] veth0_vlan: entered promiscuous mode [ 65.179012][ T5609] veth1_vlan: entered promiscuous mode [ 65.274482][ T5609] veth0_macvtap: entered promiscuous mode [ 65.305433][ T5609] veth1_macvtap: entered promiscuous mode [ 65.368716][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.419374][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.465618][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.484439][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.513709][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.531423][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.557144][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.586431][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.657480][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.746954][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.769297][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.789863][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.798285][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.861035][ T5618] veth0_vlan: entered promiscuous mode [ 65.862566][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.884051][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.891459][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.905870][ T5618] veth1_vlan: entered promiscuous mode [ 65.920498][ T30] audit: type=1400 audit(1777826063.127:152): avc: denied { mounton } for pid=5609 comm="syz-executor" path="/root/syzkaller.JOWsCW/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 65.967235][ T30] audit: type=1400 audit(1777826063.167:153): avc: denied { mount } for pid=5609 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 65.970697][ T5621] veth0_vlan: entered promiscuous mode [ 65.994894][ T30] audit: type=1400 audit(1777826063.167:154): avc: denied { mounton } for pid=5609 comm="syz-executor" path="/root/syzkaller.JOWsCW/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 66.022460][ T30] audit: type=1400 audit(1777826063.167:155): avc: denied { mount } for pid=5609 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 66.048024][ T5624] veth0_vlan: entered promiscuous mode [ 66.049993][ T30] audit: type=1400 audit(1777826063.167:156): avc: denied { mounton } for pid=5609 comm="syz-executor" path="/root/syzkaller.JOWsCW/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 66.058381][ T5609] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.084379][ T30] audit: type=1400 audit(1777826063.177:157): avc: denied { mounton } for pid=5609 comm="syz-executor" path="/root/syzkaller.JOWsCW/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 66.107416][ T5621] veth1_vlan: entered promiscuous mode [ 66.129389][ T30] audit: type=1400 audit(1777826063.177:158): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 66.134223][ T5618] veth0_macvtap: entered promiscuous mode [ 66.150650][ T30] audit: type=1400 audit(1777826063.207:159): avc: denied { mounton } for pid=5609 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 66.178908][ T30] audit: type=1400 audit(1777826063.207:160): avc: denied { mount } for pid=5609 comm="syz-executor" name="/" dev="gadgetfs" ino=6828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 66.207038][ T5624] veth1_vlan: entered promiscuous mode [ 66.213709][ T30] audit: type=1400 audit(1777826063.207:161): avc: denied { mount } for pid=5609 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 66.256282][ T5618] veth1_macvtap: entered promiscuous mode [ 66.309193][ T5621] veth0_macvtap: entered promiscuous mode [ 66.320273][ T5621] veth1_macvtap: entered promiscuous mode [ 66.344886][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.354922][ T5610] veth0_vlan: entered promiscuous mode [ 66.369218][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.382381][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.402543][ T5610] veth1_vlan: entered promiscuous mode [ 66.427737][ T5624] veth0_macvtap: entered promiscuous mode [ 66.441038][ T3351] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.469428][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.481675][ T3351] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.506714][ T5624] veth1_macvtap: entered promiscuous mode [ 66.516310][ T3351] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.550007][ T3351] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.572976][ T5613] Bluetooth: hci0: command tx timeout [ 66.583101][ T5613] Bluetooth: hci1: command tx timeout [ 66.584520][ T3351] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.606105][ T5610] veth0_macvtap: entered promiscuous mode [ 66.638436][ T5610] veth1_macvtap: entered promiscuous mode [ 66.690811][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.701744][ T3351] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.711105][ T3351] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.731427][ T3351] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.755937][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.784693][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.812641][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.821383][ T5613] Bluetooth: hci2: command tx timeout [ 66.826801][ T5616] Bluetooth: hci4: command tx timeout [ 66.826825][ T4930] Bluetooth: hci3: command tx timeout [ 66.842820][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.853758][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.886457][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.908243][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.939835][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.941067][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.957479][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.965105][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.010466][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.029840][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.068206][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.094561][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.094928][ T3351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.113405][ T3351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.129683][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.177238][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.314454][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.327755][ T3351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.335655][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.366291][ T3351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.477719][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.513933][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.531894][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.550223][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.707206][ T5817] syz.3.6 uses obsolete (PF_INET,SOCK_PACKET) [ 67.871767][ T5821] FAULT_INJECTION: forcing a failure. [ 67.871767][ T5821] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 67.883054][ T5742] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 67.931394][ T5821] CPU: 0 UID: 0 PID: 5821 Comm: syz.4.5 Tainted: G L syzkaller #0 PREEMPT(full) [ 67.931421][ T5821] Tainted: [L]=SOFTLOCKUP [ 67.931427][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 67.931436][ T5821] Call Trace: [ 67.931442][ T5821] [ 67.931448][ T5821] dump_stack_lvl+0x100/0x190 [ 67.931473][ T5821] should_fail_ex.cold+0x5/0xa [ 67.931496][ T5821] _copy_from_iter+0x1f4/0x1690 [ 67.931523][ T5821] ? __asan_memset+0x23/0x50 [ 67.931548][ T5821] ? __pfx__copy_from_iter+0x10/0x10 [ 67.931571][ T5821] ? __pfx___alloc_skb+0x10/0x10 [ 67.931604][ T5821] netlink_sendmsg+0x808/0xda0 [ 67.931629][ T5821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.931648][ T5821] ? __might_fault+0x90/0x140 [ 67.931679][ T5821] ____sys_sendmsg+0x9e1/0xb70 [ 67.931698][ T5821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.931720][ T5821] ? __pfx_____sys_sendmsg+0x10/0x10 [ 67.931749][ T5821] ___sys_sendmsg+0x190/0x1e0 [ 67.931771][ T5821] ? __pfx____sys_sendmsg+0x10/0x10 [ 67.931817][ T5821] __sys_sendmsg+0x170/0x220 [ 67.931843][ T5821] ? __pfx___sys_sendmsg+0x10/0x10 [ 67.931877][ T5821] ? rcu_is_watching+0x12/0xc0 [ 67.931905][ T5821] do_syscall_64+0x10b/0xf80 [ 67.931925][ T5821] ? clear_bhb_loop+0x40/0x90 [ 67.931945][ T5821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.931961][ T5821] RIP: 0033:0x7fde3ad9cdd9 [ 67.931976][ T5821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.931990][ T5821] RSP: 002b:00007fde3bbda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.932011][ T5821] RAX: ffffffffffffffda RBX: 00007fde3b015fa0 RCX: 00007fde3ad9cdd9 [ 67.932021][ T5821] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 67.932031][ T5821] RBP: 00007fde3bbda090 R08: 0000000000000000 R09: 0000000000000000 [ 67.932040][ T5821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.932049][ T5821] R13: 00007fde3b016038 R14: 00007fde3b015fa0 R15: 00007ffd9d802608 [ 67.932071][ T5821] [ 68.087520][ T5742] usb 3-1: not running at top speed; connect to a high speed hub [ 68.203705][ T5743] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 68.239567][ T5742] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 245, changing to 4 [ 68.277894][ T5742] usb 3-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 68.319824][ T5742] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.354278][ T5742] usb 3-1: Product: syz [ 68.363253][ T5743] usb 2-1: Using ep0 maxpacket: 16 [ 68.373648][ T5743] usb 2-1: config index 0 descriptor too short (expected 52, got 36) [ 68.383450][ T5743] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 68.395141][ T5743] usb 2-1: config 0 has no interface number 0 [ 68.401258][ T5742] usb 3-1: Manufacturer: syz [ 68.408372][ T5742] usb 3-1: SerialNumber: syz [ 68.413663][ T5828] cgroup: fork rejected by pids controller in /syz4 [ 68.416116][ T5743] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 68.461529][ T5743] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 68.488283][ T5743] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 68.503756][ T5743] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.511812][ T5743] usb 2-1: Product: syz [ 68.517287][ T5743] usb 2-1: Manufacturer: syz [ 68.532892][ T5743] usb 2-1: SerialNumber: syz [ 68.555130][ T5743] usb 2-1: config 0 descriptor?? [ 68.569579][ T5823] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 68.582342][ T5823] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 68.653145][ T4930] Bluetooth: hci1: command tx timeout [ 68.653151][ T5616] Bluetooth: hci0: command tx timeout [ 68.838013][ T5823] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 68.862941][ T5823] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 68.893909][ T5616] Bluetooth: hci2: command tx timeout [ 68.894565][ T5613] Bluetooth: hci3: command tx timeout [ 68.899417][ T4930] Bluetooth: hci4: command tx timeout [ 69.616469][ T5743] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 70.932769][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 70.971887][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 70.971903][ T30] audit: type=1400 audit(1777826067.827:215): avc: denied { read } for pid=5915 comm="syz.3.12" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 70.991551][ T5743] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -61 [ 71.015895][ T5743] asix 2-1:0.251: probe with driver asix failed with error -61 [ 71.073775][ T5743] usb 2-1: USB disconnect, device number 2 [ 71.410192][ T30] audit: type=1400 audit(1777826067.827:216): avc: denied { open } for pid=5915 comm="syz.3.12" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 71.434008][ T30] audit: type=1400 audit(1777826067.827:217): avc: denied { ioctl } for pid=5915 comm="syz.3.12" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 71.460209][ T30] audit: type=1400 audit(1777826067.837:218): avc: denied { set_context_mgr } for pid=5915 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 71.502959][ T30] audit: type=1400 audit(1777826068.707:219): avc: denied { create } for pid=5929 comm="syz.3.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 71.525014][ T5931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15'. [ 71.539431][ T5931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15'. [ 71.562829][ T5742] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 71.583076][ T30] audit: type=1400 audit(1777826068.737:220): avc: denied { write } for pid=5929 comm="syz.3.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 71.616310][ T5742] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 71.633777][ T5742] usb 3-1: unit 1 not found! [ 71.647686][ T30] audit: type=1400 audit(1777826068.767:221): avc: denied { read write } for pid=5929 comm="syz.3.15" name="vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 71.761411][ T30] audit: type=1400 audit(1777826068.767:222): avc: denied { open } for pid=5929 comm="syz.3.15" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 71.829593][ T5742] usb 3-1: USB disconnect, device number 2 [ 71.885150][ T30] audit: type=1400 audit(1777826068.767:223): avc: denied { ioctl } for pid=5929 comm="syz.3.15" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 71.964324][ T5631] udevd[5631]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 72.005236][ T30] audit: type=1400 audit(1777826069.197:224): avc: denied { read } for pid=5928 comm="syz.1.14" name="sg0" dev="devtmpfs" ino=800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 73.042206][ T5940] netlink: 'syz.1.14': attribute type 4 has an invalid length. [ 73.056919][ T5957] netlink: 'syz.2.16': attribute type 4 has an invalid length. [ 73.582856][ T5949] tipc: Can't bind to reserved service type 1 [ 73.709428][ T5967] Illegal XDP return value 8 on prog (id 6) dev N/A, expect packet loss! [ 73.761802][ T5969] Zero length message leads to an empty skb [ 73.799045][ T5964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21'. [ 75.289683][ T5742] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 75.443031][ T5742] usb 2-1: Using ep0 maxpacket: 16 [ 75.648844][ T5742] usb 2-1: config index 0 descriptor too short (expected 52, got 36) [ 75.674247][ T5742] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 75.723377][ T5742] usb 2-1: config 0 has no interface number 0 [ 75.749266][ T5742] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 75.814698][ T5742] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 75.847627][ T5742] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 75.870926][ T5742] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.893099][ T5742] usb 2-1: Product: syz [ 75.907539][ T5742] usb 2-1: Manufacturer: syz [ 75.919413][ T5742] usb 2-1: SerialNumber: syz [ 75.938942][ T5742] usb 2-1: config 0 descriptor?? [ 75.956674][ T5975] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 75.967781][ T5975] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 76.068573][ T9] cfg80211: failed to load regulatory.db [ 76.148228][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 76.148239][ T30] audit: type=1400 audit(1777826073.357:242): avc: denied { append } for pid=5992 comm="syz.0.31" name="comedi3" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.242867][ T5803] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 76.245954][ T5975] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 76.268045][ T5975] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 76.433039][ T5803] usb 3-1: Using ep0 maxpacket: 8 [ 76.552652][ T5803] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 76.672852][ T5803] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 76.697893][ T5803] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 76.738628][ T5803] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 76.777438][ T5803] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.822109][ T5803] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 76.857197][ T5803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.958996][ T5742] asix 2-1:0.251 (unnamed net_device) (uninitialized): invalid PHY address: 195 [ 76.994294][ T30] audit: type=1400 audit(1777826074.207:243): avc: denied { getopt } for pid=5997 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.123461][ T5803] usb 3-1: GET_CAPABILITIES returned 0 [ 77.240444][ T5742] usb 2-1: USB disconnect, device number 3 [ 77.260839][ T5803] usbtmc 3-1:16.0: can't read capabilities [ 77.347204][ T5987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29'. [ 77.414487][ T5803] usb 3-1: USB disconnect, device number 3 [ 77.449247][ T30] audit: type=1400 audit(1777826074.657:244): avc: denied { append } for pid=6004 comm="syz.3.33" name="sg0" dev="devtmpfs" ino=800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 77.719577][ T6008] netlink: 'syz.3.33': attribute type 21 has an invalid length. [ 77.729642][ T6008] netlink: 128 bytes leftover after parsing attributes in process `syz.3.33'. [ 77.738897][ T6008] netlink: 'syz.3.33': attribute type 4 has an invalid length. [ 77.746648][ T6008] netlink: 3 bytes leftover after parsing attributes in process `syz.3.33'. [ 77.819293][ T30] audit: type=1400 audit(1777826074.907:245): avc: denied { create } for pid=6004 comm="syz.3.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 77.842316][ T30] audit: type=1400 audit(1777826075.017:246): avc: denied { write } for pid=6004 comm="syz.3.33" name="sg0" dev="devtmpfs" ino=800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 77.964713][ T30] audit: type=1400 audit(1777826075.177:247): avc: denied { create } for pid=6016 comm="syz.1.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 79.173998][ T30] audit: type=1400 audit(1777826075.197:248): avc: denied { bind } for pid=6016 comm="syz.1.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 79.193419][ T30] audit: type=1400 audit(1777826075.267:249): avc: denied { create } for pid=6016 comm="syz.1.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 79.240627][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.422830][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 79.430905][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 79.540894][ T24] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 79.677614][ T30] audit: type=1400 audit(1777826076.877:250): avc: denied { mounton } for pid=6035 comm="syz.1.40" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 79.935267][ T30] audit: type=1400 audit(1777826076.947:251): avc: denied { ioctl } for pid=6035 comm="syz.1.40" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8958 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 81.520039][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.737278][ T24] usb 4-1: Product: syz [ 81.741580][ T24] usb 4-1: Manufacturer: syz [ 81.746349][ T24] usb 4-1: SerialNumber: syz [ 81.887522][ T24] usb 4-1: can't set config #1, error -71 [ 81.977080][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 81.977096][ T30] audit: type=1400 audit(1777826079.087:257): avc: denied { name_bind } for pid=6045 comm="syz.0.42" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 82.014147][ T24] usb 4-1: USB disconnect, device number 2 [ 82.071333][ T6055] XFS (nullb0): Invalid superblock magic number [ 82.105689][ T30] audit: type=1400 audit(1777826079.187:258): avc: denied { ioctl } for pid=6047 comm="syz.2.43" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=926 ioctlcmd=0x6f52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 82.152234][ T30] audit: type=1400 audit(1777826079.257:259): avc: denied { mounton } for pid=6054 comm="syz.4.45" path="/9/bus" dev="tmpfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 82.181630][ T30] audit: type=1400 audit(1777826079.267:260): avc: denied { write } for pid=6045 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 82.211541][ T30] audit: type=1400 audit(1777826079.357:261): avc: denied { read } for pid=6051 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 82.272361][ T30] audit: type=1400 audit(1777826079.397:262): avc: denied { setopt } for pid=6051 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 82.327395][ T30] audit: type=1400 audit(1777826079.447:263): avc: denied { getopt } for pid=6051 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.400207][ T30] audit: type=1400 audit(1777826079.457:264): avc: denied { read write } for pid=6051 comm="syz.3.44" name="rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 82.448680][ T6064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.47'. [ 82.512348][ T30] audit: type=1400 audit(1777826079.457:265): avc: denied { open } for pid=6051 comm="syz.3.44" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 82.591503][ T30] audit: type=1400 audit(1777826079.587:266): avc: denied { ioctl } for pid=6063 comm="syz.4.47" path="socket:[9527]" dev="sockfs" ino=9527 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 82.616043][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 83.172849][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 83.189114][ T24] usb 3-1: config index 0 descriptor too short (expected 52, got 36) [ 83.200440][ T24] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 83.225302][ T24] usb 3-1: config 0 has no interface number 0 [ 83.231489][ T24] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 83.255905][ T24] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 83.328275][ T24] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 83.337426][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.353819][ T24] usb 3-1: Product: syz [ 83.364992][ T24] usb 3-1: Manufacturer: syz [ 83.375815][ T24] usb 3-1: SerialNumber: syz [ 83.530668][ T24] usb 3-1: config 0 descriptor?? [ 83.537208][ T6066] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 83.544794][ T6066] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 83.763110][ T6066] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 83.841305][ T6074] netlink: 'syz.3.49': attribute type 21 has an invalid length. [ 83.849485][ T6074] netlink: 128 bytes leftover after parsing attributes in process `syz.3.49'. [ 83.964216][ T6066] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 84.060326][ T6074] netlink: 'syz.3.49': attribute type 4 has an invalid length. [ 84.098291][ T6074] netlink: 3 bytes leftover after parsing attributes in process `syz.3.49'. [ 84.475790][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.491551][ T6103] netlink: 68 bytes leftover after parsing attributes in process `syz.3.56'. [ 84.524197][ T6101] GUP no longer grows the stack in syz.1.57 (6101): 200000004000-20000000a000 (200000002000) [ 84.549818][ T6101] CPU: 0 UID: 0 PID: 6101 Comm: syz.1.57 Tainted: G L syzkaller #0 PREEMPT(full) [ 84.549845][ T6101] Tainted: [L]=SOFTLOCKUP [ 84.549850][ T6101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 84.549858][ T6101] Call Trace: [ 84.549864][ T6101] [ 84.549870][ T6101] dump_stack_lvl+0x100/0x190 [ 84.549896][ T6101] gup_vma_lookup.cold+0x83/0x96 [ 84.549921][ T6101] __get_user_pages+0x241/0x32a0 [ 84.549949][ T6101] ? find_held_lock+0x2b/0x80 [ 84.549966][ T6101] ? mtree_load+0x311/0xa90 [ 84.549985][ T6101] ? __pfx___get_user_pages+0x10/0x10 [ 84.550009][ T6101] get_user_pages_remote+0x3d2/0xb10 [ 84.550029][ T6101] ? mas_root_expand+0x670/0x750 [ 84.550050][ T6101] ? __pfx_get_user_pages_remote+0x10/0x10 [ 84.550070][ T6101] ? __access_remote_vm+0x755/0x890 [ 84.550086][ T6101] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.550108][ T6101] __access_remote_vm+0x3bb/0x890 [ 84.550127][ T6101] ? do_raw_spin_lock+0x128/0x260 [ 84.550158][ T6101] ? __pfx___access_remote_vm+0x10/0x10 [ 84.550172][ T6101] ? proc_pid_cmdline_read+0x31b/0x8c0 [ 84.550197][ T6101] proc_pid_cmdline_read+0x4f2/0x8c0 [ 84.550217][ T6101] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 84.550237][ T6101] ? rw_verify_area+0xce/0x6d0 [ 84.550253][ T6101] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 84.550270][ T6101] vfs_readv+0x5d8/0x8d0 [ 84.550293][ T6101] ? __pfx_vfs_readv+0x10/0x10 [ 84.550325][ T6101] ? __fget_files+0x21f/0x3d0 [ 84.550353][ T6101] ? do_preadv+0x1ac/0x270 [ 84.550367][ T6101] do_preadv+0x1ac/0x270 [ 84.550383][ T6101] ? __pfx_do_preadv+0x10/0x10 [ 84.550399][ T6101] ? rcu_is_watching+0x12/0xc0 [ 84.550426][ T6101] do_syscall_64+0x10b/0xf80 [ 84.550445][ T6101] ? clear_bhb_loop+0x40/0x90 [ 84.550466][ T6101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.550483][ T6101] RIP: 0033:0x7feb4059cdd9 [ 84.550498][ T6101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.550512][ T6101] RSP: 002b:00007feb41500028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 84.550527][ T6101] RAX: ffffffffffffffda RBX: 00007feb40815fa0 RCX: 00007feb4059cdd9 [ 84.550538][ T6101] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000004 [ 84.550547][ T6101] RBP: 00007feb40632d69 R08: 00000000fffffff9 R09: 0000000000000000 [ 84.550555][ T6101] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 84.550564][ T6101] R13: 00007feb40816038 R14: 00007feb40815fa0 R15: 00007ffebb77a328 [ 84.550586][ T6101] [ 84.551248][ T6101] netlink: 20 bytes leftover after parsing attributes in process `syz.1.57'. [ 84.836500][ T24] asix 3-1:0.251 (unnamed net_device) (uninitialized): invalid PHY address: 195 [ 84.882812][ T9] usb 5-1: device descriptor read/64, error -71 [ 85.947890][ T24] usb 3-1: USB disconnect, device number 4 [ 86.052817][ T5706] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 86.060378][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 86.070260][ T6120] netlink: 24 bytes leftover after parsing attributes in process `syz.0.60'. [ 86.189410][ T6120] netlink: 24 bytes leftover after parsing attributes in process `syz.0.60'. [ 86.473006][ T5706] usb 2-1: Using ep0 maxpacket: 8 [ 86.489081][ T5706] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 86.499352][ T9] usb 5-1: device descriptor read/64, error -71 [ 86.511318][ T6132] binder: 6131:6132 ioctl c0306201 200000000080 returned -14 [ 86.527015][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.564873][ T5706] pvrusb2: Hardware description: Terratec Grabster AV400 [ 86.578003][ T6132] binder: 6131:6132 ioctl c0306201 2000000003c0 returned -14 [ 86.586925][ T5706] pvrusb2: ********** [ 86.592107][ T5706] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 86.605400][ T5706] pvrusb2: Important functionality might not be entirely working. [ 86.613477][ T5706] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 86.629930][ T5706] pvrusb2: ********** [ 86.635359][ T9] usb usb5-port1: attempt power cycle [ 86.756542][ T6116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.773914][ T6116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.789796][ T2356] pvrusb2: Invalid write control endpoint [ 86.883554][ T5803] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 86.886237][ T2356] pvrusb2: Invalid write control endpoint [ 86.919794][ T2356] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 86.937912][ T2356] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 86.948769][ T2356] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 86.959936][ T2356] pvrusb2: Device being rendered inoperable [ 86.967685][ T2356] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 86.982971][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 86.991337][ T2356] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 87.002448][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 87.002463][ T30] audit: type=1400 audit(1777826084.207:282): avc: denied { read } for pid=6115 comm="syz.1.61" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 87.041954][ T5803] usb 3-1: device descriptor read/64, error -71 [ 87.111981][ T9] usb 5-1: device descriptor read/8, error -71 [ 87.118125][ T2356] pvrusb2: Attached sub-driver cx25840 [ 87.654163][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 87.677455][ T2356] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 87.719273][ T2356] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 87.728497][ T5803] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 87.746441][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 87.758459][ T9] usb 5-1: device descriptor read/8, error -32 [ 88.174783][ T30] audit: type=1400 audit(1777826084.207:283): avc: denied { open } for pid=6115 comm="syz.1.61" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 88.222676][ T30] audit: type=1400 audit(1777826084.247:284): avc: denied { name_connect } for pid=6115 comm="syz.1.61" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 88.287986][ T9] usb usb5-port1: unable to enumerate USB device [ 88.307402][ T5803] usb 3-1: device descriptor read/64, error -71 [ 88.445394][ T6116] block device autoloading is deprecated and will be removed. [ 88.472418][ T5803] usb usb3-port1: attempt power cycle [ 88.616419][ T30] audit: type=1400 audit(1777826084.247:285): avc: denied { setopt } for pid=6115 comm="syz.1.61" laddr=fe80::b lport=51579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 88.810528][ T9] usb 2-1: USB disconnect, device number 4 [ 88.923222][ T30] audit: type=1400 audit(1777826086.117:286): avc: denied { create } for pid=6157 comm="syz.0.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 88.945328][ T5803] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 89.115019][ T30] audit: type=1400 audit(1777826086.147:287): avc: denied { write } for pid=6157 comm="syz.0.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 89.167705][ T5803] usb 3-1: device descriptor read/8, error -71 [ 89.792882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 90.372931][ T30] audit: type=1400 audit(1777826087.507:288): avc: denied { mounton } for pid=6154 comm="syz.4.72" path="/13/bus" dev="tmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 90.586535][ T30] audit: type=1400 audit(1777826087.747:289): avc: denied { create } for pid=6154 comm="syz.4.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 90.662980][ T30] audit: type=1400 audit(1777826087.787:290): avc: denied { write } for pid=6154 comm="syz.4.72" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 90.771501][ T30] audit: type=1400 audit(1777826087.977:291): avc: denied { create } for pid=6170 comm="syz.0.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.338636][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 92.338647][ T30] audit: type=1400 audit(1777826089.547:299): avc: denied { connect } for pid=6209 comm="syz.0.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 92.709951][ T30] audit: type=1400 audit(1777826089.807:300): avc: denied { bind } for pid=6210 comm="syz.4.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 92.885023][ T6227] tipc: Failed to remove unknown binding: 66,1,1/0:1597898287/1597898289 [ 92.905459][ T30] audit: type=1400 audit(1777826090.107:301): avc: denied { read } for pid=6231 comm="syz.1.94" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 92.936191][ T30] audit: type=1400 audit(1777826090.107:302): avc: denied { open } for pid=6231 comm="syz.1.94" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 92.960739][ T30] audit: type=1400 audit(1777826090.137:303): avc: denied { create } for pid=6231 comm="syz.1.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 92.982337][ T30] audit: type=1400 audit(1777826090.137:304): avc: denied { write } for pid=6226 comm="syz.2.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.011988][ T30] audit: type=1400 audit(1777826090.217:305): avc: denied { ioctl } for pid=6233 comm="syz.3.95" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 93.099454][ T5742] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.504609][ T6238] openvswitch: netlink: EtherType 0 is less than min 600 [ 93.554663][ T30] audit: type=1400 audit(1777826090.727:306): avc: denied { create } for pid=6231 comm="syz.1.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 93.628355][ T30] audit: type=1400 audit(1777826090.787:307): avc: denied { read write } for pid=5618 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.671596][ T30] audit: type=1400 audit(1777826090.787:308): avc: denied { open } for pid=5618 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.708899][ T5742] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.720038][ T5742] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.750600][ T5742] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 93.833128][ T5742] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.844170][ T5742] usb 1-1: config 0 descriptor?? [ 93.932118][ T6246] netlink: 112 bytes leftover after parsing attributes in process `syz.2.98'. [ 94.434020][ T5720] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 94.749501][ T6256] infiniband syz2: set active [ 94.754453][ T6256] infiniband syz2: added bridge_slave_1 [ 94.790754][ T6256] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 94.794262][ T6256] infiniband syz2: Couldn't open port 1 [ 94.809058][ T6256] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 94.825088][ T6256] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 94.842282][ T6256] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 94.867772][ T5742] usbhid 1-1:0.0: can't add hid device: -71 [ 94.876563][ T5742] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 94.885644][ T6256] RDS/IB: syz2: added [ 94.890429][ T6256] smc: adding ib device syz2 with port count 1 [ 94.896799][ T6256] smc: ib device syz2 port 1 has no pnetid [ 95.465833][ T6274] binder: 6272:6274 ioctl c0306201 200000000640 returned -22 [ 95.611612][ T6278] raw_sendmsg: syz.0.106 forgot to set AF_INET. Fix it! [ 95.845760][ T5742] usb 1-1: USB disconnect, device number 2 [ 95.880105][ T5720] usb 3-1: config 0 has an invalid interface number: 74 but max is 1 [ 95.976954][ T5720] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.150212][ T5720] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 96.182834][ T5720] usb 3-1: config 0 has no interface number 0 [ 96.212978][ T5720] usb 3-1: config 0 interface 74 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 96.303495][ T5720] usb 3-1: config 0 interface 74 altsetting 0 endpoint 0xE has invalid maxpacket 8192, setting to 1024 [ 96.314713][ T5720] usb 3-1: config 0 interface 74 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 96.342357][ T5720] usb 3-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66 [ 96.369552][ T5720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.404883][ T5720] usb 3-1: Product: syz [ 96.422238][ T6301] random: crng reseeded on system resumption [ 96.498158][ T5720] usb 3-1: Manufacturer: syz [ 96.509880][ T5720] usb 3-1: SerialNumber: syz [ 96.761001][ T5720] usb 3-1: config 0 descriptor?? [ 96.805212][ T6300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.111'. [ 96.831854][ T6300] team0: No ports can be present during mode change [ 97.032815][ T5706] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 97.072836][ T5742] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 97.129929][ T5720] cypress_m8 3-1:0.74: HID->COM RS232 Adapter converter detected [ 97.151607][ T5720] cyphidcom ttyUSB0: required endpoint is missing [ 97.174124][ T5720] usb 3-1: USB disconnect, device number 9 [ 97.200162][ T5720] cypress_m8 3-1:0.74: device disconnected [ 97.249914][ T5706] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 97.276155][ T5706] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.296624][ T5706] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 97.316922][ T5742] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 97.323202][ T5706] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.328326][ T5742] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 97.350878][ T5742] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 97.360382][ T5742] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.384660][ T5706] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 97.407847][ T5803] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.418764][ T5706] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 97.448113][ T5706] usb 5-1: Product: syz [ 97.464895][ T5706] usb 5-1: Manufacturer: syz [ 97.572883][ T5803] usb 1-1: device descriptor read/64, error -71 [ 97.585324][ T5742] usb 4-1: config 0 descriptor?? [ 97.704906][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 97.704940][ T30] audit: type=1800 audit(1777826094.917:320): pid=6320 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.2.118" name="/newroot/18" dev="tmpfs" ino=104 res=0 errno=0 [ 97.807659][ T5706] cdc_wdm 5-1:1.0: skipping garbage [ 97.815359][ T5803] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 97.836690][ T5706] cdc_wdm 5-1:1.0: skipping garbage [ 97.881900][ T5706] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 97.973759][ T5803] usb 1-1: device descriptor read/64, error -71 [ 97.996964][ T5706] cdc_wdm 5-1:1.0: Unknown control protocol [ 98.212039][ T5803] usb usb1-port1: attempt power cycle [ 98.268463][ T5742] ath6kl: Failed to submit usb control message: -71 [ 98.456703][ T5706] usb 5-1: USB disconnect, device number 6 [ 98.856481][ T5803] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 98.934708][ T5803] usb 1-1: device descriptor read/8, error -71 [ 99.433131][ T5742] ath6kl: unable to send the bmi data to the device: -71 [ 99.433157][ T5742] ath6kl: Unable to send get target info: -71 [ 99.434458][ T30] audit: type=1400 audit(1777826096.467:321): avc: denied { bind } for pid=6342 comm="syz.3.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 99.723837][ T30] audit: type=1400 audit(1777826096.857:322): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 99.750270][ T5742] ath6kl: Failed to init ath6kl core: -71 [ 99.923499][ T5803] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 99.924659][ T5742] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 99.925266][ T6346] process 'syz.3.123' launched './file1' with NULL argv: empty string added [ 99.932599][ T30] audit: type=1400 audit(1777826097.137:323): avc: denied { execute } for pid=6342 comm="syz.3.123" name="file1" dev="tmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 99.932628][ T30] audit: type=1400 audit(1777826097.137:324): avc: denied { execute_no_trans } for pid=6342 comm="syz.3.123" path="/31/file1" dev="tmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 99.939907][ T6346] netlink: 'syz.3.123': attribute type 7 has an invalid length. [ 99.949747][ T5803] usb 1-1: device descriptor read/8, error -71 [ 99.957996][ T5742] usb 4-1: USB disconnect, device number 3 [ 100.072937][ T5803] usb usb1-port1: unable to enumerate USB device [ 100.127920][ T30] audit: type=1400 audit(1777826097.337:325): avc: denied { read } for pid=6351 comm="syz.4.124" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 100.237064][ T30] audit: type=1400 audit(1777826097.337:326): avc: denied { open } for pid=6351 comm="syz.4.124" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 100.669821][ T30] audit: type=1400 audit(1777826097.337:327): avc: denied { ioctl } for pid=6351 comm="syz.4.124" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 100.739202][ T30] audit: type=1400 audit(1777826097.937:328): avc: denied { name_connect } for pid=6365 comm="syz.3.127" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 100.806720][ T30] audit: type=1400 audit(1777826097.977:329): avc: denied { listen } for pid=6365 comm="syz.3.127" lport=59386 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 101.189780][ T6383] netlink: 16 bytes leftover after parsing attributes in process `syz.4.132'. [ 102.377357][ T6389] netlink: 32 bytes leftover after parsing attributes in process `syz.2.134'. [ 102.394361][ T6389] netlink: 32 bytes leftover after parsing attributes in process `syz.2.134'. [ 102.723453][ T6400] random: crng reseeded on system resumption [ 103.200624][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 103.200639][ T30] audit: type=1400 audit(1777826100.407:336): avc: denied { mounton } for pid=6402 comm="syz.1.138" path="/29/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 103.245025][ T30] audit: type=1400 audit(1777826100.427:337): avc: denied { mount } for pid=6402 comm="syz.1.138" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 103.271013][ T6405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.185345][ T30] audit: type=1400 audit(1777826101.307:338): avc: denied { unmount } for pid=5624 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 104.213274][ T30] audit: type=1400 audit(1777826101.397:339): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 106.060582][ T30] audit: type=1400 audit(1777826102.937:340): avc: denied { write } for pid=6413 comm="syz.3.141" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 106.060769][ T30] audit: type=1400 audit(1777826102.967:341): avc: denied { open } for pid=6413 comm="syz.3.141" path="/34/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 106.634025][ T5803] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 106.729876][ T30] audit: type=1400 audit(1777826103.937:342): avc: denied { read } for pid=6442 comm="syz.3.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.749197][ T5804] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 106.761595][ T6441] mmap: syz.1.147 (6441) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 106.814463][ T5803] usb 1-1: Using ep0 maxpacket: 16 [ 106.830847][ T5803] usb 1-1: config index 0 descriptor too short (expected 52, got 36) [ 106.839469][ T5803] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 106.857666][ T5803] usb 1-1: config 0 has no interface number 0 [ 106.877476][ T5803] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 106.911639][ T5803] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 106.939454][ T5804] usb 3-1: Using ep0 maxpacket: 16 [ 106.948978][ T5803] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 106.962393][ T5803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.973470][ T5804] usb 3-1: unable to get BOS descriptor or descriptor too short [ 106.983536][ T5803] usb 1-1: Product: syz [ 106.989999][ T5804] usb 3-1: config 1 has an invalid interface number: 93 but max is 0 [ 107.002106][ T5803] usb 1-1: Manufacturer: syz [ 107.009470][ T5803] usb 1-1: SerialNumber: syz [ 107.016371][ T5804] usb 3-1: config 1 has no interface number 0 [ 107.030754][ T5803] usb 1-1: config 0 descriptor?? [ 107.035896][ T5804] usb 3-1: config 1 interface 93 altsetting 13 endpoint 0x83 has invalid maxpacket 15699, setting to 1024 [ 107.048778][ T6435] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 107.058346][ T5804] usb 3-1: config 1 interface 93 altsetting 13 bulk endpoint 0x83 has invalid maxpacket 1024 [ 107.069795][ T6435] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 107.077351][ T5804] usb 3-1: config 1 interface 93 has no altsetting 0 [ 107.095078][ T5804] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0203, bcdDevice=56.2a [ 107.107986][ T5804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 107.140864][ T5804] usb 3-1: Product: syz [ 107.148542][ T5804] usb 3-1: Manufacturer: syz [ 107.163356][ T5804] usb 3-1: SerialNumber: syz [ 107.183282][ T6415] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 107.718895][ T6435] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 107.738242][ T6435] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 107.740034][ T5804] option 3-1:1.93: GSM modem (1-port) converter detected [ 107.760712][ T5804] usb 3-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 107.804873][ T5804] usb 3-1: USB disconnect, device number 10 [ 107.835913][ T5804] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 107.871225][ T5804] option 3-1:1.93: device disconnected [ 108.243822][ T5803] asix 1-1:0.251 (unnamed net_device) (uninitialized): invalid PHY address: 195 [ 108.412860][ T30] audit: type=1400 audit(1777826105.617:343): avc: denied { listen } for pid=6458 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 108.449248][ T5720] usb 1-1: USB disconnect, device number 7 [ 108.683388][ T6468] netlink: 'syz.4.155': attribute type 21 has an invalid length. [ 108.691138][ T6468] netlink: 128 bytes leftover after parsing attributes in process `syz.4.155'. [ 108.700182][ T6468] netlink: 'syz.4.155': attribute type 4 has an invalid length. [ 108.707829][ T6468] netlink: 3 bytes leftover after parsing attributes in process `syz.4.155'. [ 108.749422][ T30] audit: type=1400 audit(1777826105.957:344): avc: denied { write } for pid=6469 comm="syz.1.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 108.886866][ T30] audit: type=1400 audit(1777826106.097:345): avc: denied { getopt } for pid=6472 comm="syz.4.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 108.889965][ T6475] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.157'. [ 108.997251][ T6477] dlm: non-version read from control device 0 [ 109.016018][ T30] audit: type=1400 audit(1777826106.217:346): avc: denied { connect } for pid=6480 comm="syz.3.161" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.017247][ T6482] xt_hashlimit: size too large, truncated to 1048576 [ 109.055974][ T30] audit: type=1400 audit(1777826106.227:347): avc: denied { setopt } for pid=6480 comm="syz.3.161" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.087121][ T5720] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 109.409377][ T5720] usb 2-1: unable to get BOS descriptor or descriptor too short [ 109.417245][ T30] audit: type=1400 audit(1777826106.327:348): avc: denied { create } for pid=6489 comm="syz.0.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 109.444574][ T5720] usb 2-1: not running at top speed; connect to a high speed hub [ 109.465555][ T5720] usb 2-1: config 9 has an invalid interface number: 172 but max is 0 [ 109.482491][ T5720] usb 2-1: config 9 has no interface number 0 [ 109.508665][ T5720] usb 2-1: config 9 interface 172 altsetting 33 endpoint 0x85 has invalid maxpacket 512, setting to 64 [ 109.527174][ T5720] usb 2-1: config 9 interface 172 has no altsetting 0 [ 109.618712][ T5720] usb 2-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=7b.c2 [ 109.663206][ T30] audit: type=1400 audit(1777826106.847:349): avc: denied { block_suspend } for pid=6478 comm="syz.4.160" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 109.709877][ T5720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.887062][ T5720] usb 2-1: Product: syz [ 109.896241][ T6507] netlink: 'syz.3.165': attribute type 21 has an invalid length. [ 109.904116][ T6507] netlink: 128 bytes leftover after parsing attributes in process `syz.3.165'. [ 109.913497][ T6507] netlink: 'syz.3.165': attribute type 4 has an invalid length. [ 109.921199][ T6507] netlink: 3 bytes leftover after parsing attributes in process `syz.3.165'. [ 110.029347][ T30] audit: type=1400 audit(1777826107.237:350): avc: denied { connect } for pid=6495 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 110.084337][ T5720] usb 2-1: Manufacturer: syz [ 110.093653][ T5720] usb 2-1: SerialNumber: syz [ 110.152685][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.166'. [ 110.321817][ T6490] pimreg3: entered allmulticast mode [ 110.485705][ T6517] netlink: 28 bytes leftover after parsing attributes in process `syz.3.167'. [ 110.494791][ T6517] netlink: 28 bytes leftover after parsing attributes in process `syz.3.167'. [ 110.511092][ T6517] netlink: 28 bytes leftover after parsing attributes in process `syz.3.167'. [ 110.520172][ T6517] netlink: 28 bytes leftover after parsing attributes in process `syz.3.167'. [ 110.679802][ T6519] ======================================================= [ 110.679802][ T6519] WARNING: The mand mount option has been deprecated and [ 110.679802][ T6519] and is ignored by this kernel. Remove the mand [ 110.679802][ T6519] option from the mount to silence this warning. [ 110.679802][ T6519] ======================================================= [ 110.763420][ T5804] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 111.102799][ T5804] usb 1-1: Using ep0 maxpacket: 8 [ 111.131942][ T5804] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.199614][ T5804] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 111.233804][ T30] audit: type=1400 audit(1777826108.437:351): avc: denied { accept } for pid=6527 comm="syz.2.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 111.261563][ T5804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.288624][ T5720] usb 2-1: USB disconnect, device number 5 [ 111.443957][ T6530] netlink: 'syz.3.168': attribute type 21 has an invalid length. [ 111.451720][ T6530] netlink: 'syz.3.168': attribute type 4 has an invalid length. [ 111.471569][ T5804] usb 1-1: config 0 descriptor?? [ 111.523717][ T5804] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 111.561389][ T30] audit: type=1400 audit(1777826108.767:352): avc: denied { ioctl } for pid=6536 comm="syz.3.171" path="socket:[11618]" dev="sockfs" ino=11618 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 111.563580][ T6537] batadv_slave_0: entered promiscuous mode [ 111.627123][ T6537] batadv_slave_0: left promiscuous mode [ 111.658491][ T6535] EXT4-fs (loop2): unable to read superblock [ 111.813491][ T6542] netlink: 'syz.3.172': attribute type 1 has an invalid length. [ 111.814320][ T6541] syzkaller0: entered promiscuous mode [ 111.826863][ T6541] syzkaller0: entered allmulticast mode [ 112.147627][ T6542] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.171354][ T6543] bond1: (slave geneve2): making interface the new active one [ 112.200322][ T6543] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 113.172378][ T6563] IPv6: NLM_F_CREATE should be specified when creating new route [ 113.183152][ T6563] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 113.191010][ T6563] IPv6: NLM_F_CREATE should be set when creating new route [ 113.198281][ T6563] IPv6: NLM_F_CREATE should be set when creating new route [ 113.494011][ T6568] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!l1*$pOcɔr$G [ 113.574630][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 113.574644][ T30] audit: type=1400 audit(1777826110.787:362): avc: denied { getopt } for pid=6550 comm="syz.4.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 113.611871][ T5803] usb 1-1: USB disconnect, device number 8 [ 113.817625][ T6579] random: crng reseeded on system resumption [ 114.086888][ T6580] netlink: 'syz.3.181': attribute type 21 has an invalid length. [ 114.095171][ T6580] __nla_validate_parse: 2 callbacks suppressed [ 114.095204][ T6580] netlink: 128 bytes leftover after parsing attributes in process `syz.3.181'. [ 114.202964][ T6580] netlink: 'syz.3.181': attribute type 4 has an invalid length. [ 114.212087][ T6580] netlink: 3 bytes leftover after parsing attributes in process `syz.3.181'. [ 114.656892][ T6588] NILFS (nullb0): couldn't find nilfs on the device [ 114.830034][ T30] audit: type=1400 audit(1777826111.937:363): avc: denied { read } for pid=6581 comm="syz.0.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 114.858044][ T6595] kAFS: Can only specify source 'none' with -o dyn [ 114.887059][ T6596] netlink: 'syz.4.183': attribute type 2 has an invalid length. [ 114.895111][ T6596] netlink: 'syz.4.183': attribute type 2 has an invalid length. [ 114.987779][ T30] audit: type=1400 audit(1777826111.987:364): avc: denied { setopt } for pid=6581 comm="syz.0.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 115.092619][ T6593] : entered promiscuous mode [ 115.302645][ T5804] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 115.770822][ T5720] libceph: connect (1)[c::]:6789 error -101 [ 115.770958][ T30] audit: type=1400 audit(1777826112.977:365): avc: denied { create } for pid=6601 comm="syz.4.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 115.797522][ T5720] libceph: mon0 (1)[c::]:6789 connect error [ 115.835815][ T30] audit: type=1400 audit(1777826113.007:366): avc: denied { read write } for pid=6601 comm="syz.4.188" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 115.860695][ T30] audit: type=1400 audit(1777826113.007:367): avc: denied { open } for pid=6601 comm="syz.4.188" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 115.876744][ T6613] SELinux: ebitmap: truncated map [ 115.884284][ T30] audit: type=1400 audit(1777826113.077:368): avc: denied { load_policy } for pid=6612 comm="syz.3.190" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 115.896757][ T6613] SELinux: failed to load policy [ 115.915120][ T5803] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 115.942899][ T5804] usb 3-1: Using ep0 maxpacket: 32 [ 115.951645][ T5804] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 115.961664][ T5804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.969779][ T5804] usb 3-1: Product: syz [ 115.975625][ T5804] usb 3-1: Manufacturer: syz [ 115.980229][ T5804] usb 3-1: SerialNumber: syz [ 115.988011][ T5804] usb 3-1: config 0 descriptor?? [ 116.058338][ T6605] ceph: No mds server is up or the cluster is laggy [ 116.074030][ T5803] usb 2-1: Using ep0 maxpacket: 16 [ 116.086428][ T5803] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 116.106752][ T5803] usb 2-1: config 0 interface 0 has no altsetting 0 [ 116.121406][ T5803] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 116.132704][ T5803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.141122][ T5803] usb 2-1: Product: syz [ 116.146711][ T5803] usb 2-1: Manufacturer: syz [ 116.169681][ T5803] usb 2-1: SerialNumber: syz [ 116.181926][ T5803] usb 2-1: config 0 descriptor?? [ 116.272889][ T803] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 116.406987][ T5804] airspy 3-1:0.0: Board ID: 00 [ 116.409426][ T6624] ipip0: entered promiscuous mode [ 116.418870][ T30] audit: type=1400 audit(1777826113.617:369): avc: denied { read } for pid=6617 comm="syz.4.192" lport=58002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 116.439330][ T6624] ipip0: entered allmulticast mode [ 116.440247][ T5804] airspy 3-1:0.0: Firmware version: [ 116.446920][ T6624] team0: Device ipip0 is of different type [ 116.467210][ T803] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 116.479990][ T803] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 116.503154][ T803] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 116.513301][ T803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.542588][ T6616] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 116.554196][ T5803] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6 [ 116.563668][ T803] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 116.587092][ T6602] ipip0: entered promiscuous mode [ 116.592816][ T6602] ipip0: entered allmulticast mode [ 116.634814][ T6602] team0: Device ipip0 is of different type [ 116.813294][ T5803] rc_core: IR keymap rc-imon-pad not found [ 116.832481][ T6616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.848001][ T5803] Registered IR keymap rc-empty [ 116.857098][ T6616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.884012][ T6602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.892544][ T5803] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 116.899156][ T6602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.909598][ T5803] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 116.943093][ T6628] netlink: 'syz.0.193': attribute type 21 has an invalid length. [ 116.950895][ T6628] netlink: 128 bytes leftover after parsing attributes in process `syz.0.193'. [ 116.960087][ T6628] netlink: 'syz.0.193': attribute type 4 has an invalid length. [ 116.967761][ T6628] netlink: 3 bytes leftover after parsing attributes in process `syz.0.193'. [ 117.084273][ T5803] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 117.097136][ T6595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.109674][ T6595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.117154][ T5803] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7 [ 117.153721][ T5803] imon 2-1:0.0: iMON device (15c2:0041, intf0) on usb<2:6> initialized [ 117.387704][ T6634] random: crng reseeded on system resumption [ 117.853020][ T5804] airspy 3-1:0.0: usb_control_msg() failed -110 request 12 [ 117.879836][ T5804] airspy 3-1:0.0: Registered as swradio24 [ 117.888775][ T5804] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 117.905568][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 117.913168][ T5706] usb 2-1: USB disconnect, device number 6 [ 117.926534][ T9] usb 4-1: USB disconnect, device number 4 [ 118.058729][ T6637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.195'. [ 118.647051][ T30] audit: type=1400 audit(1777826115.857:370): avc: denied { create } for pid=6641 comm="syz.4.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 118.678751][ T30] audit: type=1400 audit(1777826115.887:371): avc: denied { ioctl } for pid=6641 comm="syz.4.196" path="socket:[11870]" dev="sockfs" ino=11870 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 118.717901][ T9] usb 3-1: USB disconnect, device number 11 [ 118.953739][ T5742] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 119.744988][ T30] audit: type=1400 audit(1777826116.497:372): avc: denied { listen } for pid=6654 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 119.953821][ T5742] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.993827][ T5742] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 120.029685][ T30] audit: type=1400 audit(1777826116.497:373): avc: denied { accept } for pid=6654 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 120.087536][ T5742] usb 1-1: New USB device found, idVendor=0499, idProduct=1013, bcdDevice= 0.40 [ 120.099283][ T30] audit: type=1326 audit(1777826116.857:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6657 comm="syz.3.202" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69f79cdd9 code=0x7ffc0000 [ 120.100788][ T6667] netlink: 'syz.1.204': attribute type 21 has an invalid length. [ 120.134339][ T6667] netlink: 128 bytes leftover after parsing attributes in process `syz.1.204'. [ 120.143303][ T6667] netlink: 'syz.1.204': attribute type 4 has an invalid length. [ 120.150914][ T6667] netlink: 3 bytes leftover after parsing attributes in process `syz.1.204'. [ 120.172661][ T5742] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.184061][ T5742] usb 1-1: Product: syz [ 120.188255][ T5742] usb 1-1: Manufacturer: syz [ 120.193145][ T5742] usb 1-1: SerialNumber: syz [ 120.237551][ T30] audit: type=1326 audit(1777826116.857:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6657 comm="syz.3.202" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69f79cdd9 code=0x7ffc0000 [ 120.264770][ T6670] tipc: Started in network mode [ 120.280649][ T6670] tipc: Node identity aaaaaaaaaa24, cluster identity 4711 [ 120.293418][ T6675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.302486][ T30] audit: type=1326 audit(1777826116.857:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6657 comm="syz.3.202" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fd69f79cdd9 code=0x7ffc0000 [ 120.305705][ T6670] tipc: Enabled bearer , priority 10 [ 120.337681][ T6675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.359961][ T30] audit: type=1326 audit(1777826116.857:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6657 comm="syz.3.202" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69f79cdd9 code=0x7ffc0000 [ 120.432846][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 120.449600][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.207'. [ 120.458519][ T30] audit: type=1326 audit(1777826116.857:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6657 comm="syz.3.202" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69f79cdd9 code=0x7ffc0000 [ 120.485693][ T6672] XFS (nullb0): Invalid superblock magic number [ 120.501919][ T30] audit: type=1326 audit(1777826116.857:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6657 comm="syz.3.202" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd69f75d60e code=0x7ffc0000 [ 120.674984][ T6688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.951998][ T6688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.549977][ T803] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 121.582483][ T5705] tipc: Node number set to 9349802 [ 121.837835][ T5705] IPVS: starting estimator thread 0... [ 121.838721][ T6698] IPVS: fo: FWM 3 0x00000003 - no destination available [ 121.923430][ T6707] IPVS: using max 78 ests per chain, 187200 per kthread [ 122.016875][ T6713] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.089947][ T6717] netlink: 'syz.4.217': attribute type 21 has an invalid length. [ 122.098236][ T6717] netlink: 128 bytes leftover after parsing attributes in process `syz.4.217'. [ 122.107281][ T6717] netlink: 'syz.4.217': attribute type 4 has an invalid length. [ 122.115111][ T6717] netlink: 3 bytes leftover after parsing attributes in process `syz.4.217'. [ 122.182898][ T5705] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 122.234979][ T6713] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.374363][ T5705] usb 4-1: config 1 interface 0 has no altsetting 0 [ 122.374605][ T6713] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.387888][ T5705] usb 4-1: string descriptor 0 read error: -22 [ 122.403639][ T5804] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 122.415029][ T5705] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.40 [ 122.432244][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.468564][ T6713] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.514458][ T5898] IPVS: stop unused estimator thread 0... [ 122.572811][ T5804] usb 3-1: Using ep0 maxpacket: 16 [ 122.601454][ T5804] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.625370][ T5742] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 122.649368][ T5804] usb 3-1: config 0 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 122.703931][ T5804] usb 3-1: config 0 interface 0 has no altsetting 0 [ 122.707287][ T5888] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.739058][ T5804] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 122.759935][ T5742] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 122.774478][ T5888] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.786571][ T5742] usb 1-1: USB disconnect, device number 9 [ 122.804674][ T5888] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.814286][ T5804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.845757][ T5897] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.867359][ T6360] udevd[6360]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.886800][ T5804] usb 3-1: config 0 descriptor?? [ 122.903843][ T5804] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 122.919654][ T6714] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.986545][ T6714] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.043620][ T6714] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.086602][ T5705] usbhid 4-1:1.0: can't add hid device: -71 [ 123.095132][ T5705] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 123.117080][ T5705] usb 4-1: USB disconnect, device number 5 [ 123.149234][ T6714] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.418241][ T6732] XFS (nullb0): Invalid superblock magic number [ 123.592030][ T6742] binder: BINDER_SET_CONTEXT_MGR already set [ 123.602065][ T6742] binder: 6741:6742 ioctl 4018620d 200000000100 returned -16 [ 123.610327][ T6744] binder: BINDER_SET_CONTEXT_MGR already set [ 123.618737][ T6744] binder: 6741:6744 ioctl 4018620d 2000000002c0 returned -16 [ 123.634818][ T6742] binder: BINDER_SET_CONTEXT_MGR already set [ 123.644570][ T6742] binder: 6741:6742 ioctl 4018620d 200000000100 returned -16 [ 123.713244][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.225'. [ 123.737362][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 123.737376][ T30] audit: type=1400 audit(1777826120.947:432): avc: denied { append } for pid=6750 comm="syz.4.226" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 123.879239][ T6752] netlink: 84 bytes leftover after parsing attributes in process `syz.2.214'. [ 123.889743][ T6752] netlink: 84 bytes leftover after parsing attributes in process `syz.2.214'. [ 123.899799][ T6752] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 123.982837][ T5804] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 124.032860][ T5706] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 124.144158][ T5804] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 124.160937][ T5804] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 124.171380][ T5804] usb 4-1: config 8 has no interface number 0 [ 124.177810][ T5804] usb 4-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 124.194647][ T5804] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 124.205016][ T5804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.213400][ T5706] usb 5-1: Using ep0 maxpacket: 16 [ 124.218894][ T5804] usb 4-1: Product: syz [ 124.261815][ T5804] usb 4-1: Manufacturer: syz [ 124.266958][ T5706] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 124.275240][ T5804] usb 4-1: SerialNumber: syz [ 124.281208][ T6756] netlink: 'syz.0.228': attribute type 21 has an invalid length. [ 124.288979][ T6756] netlink: 128 bytes leftover after parsing attributes in process `syz.0.228'. [ 124.297977][ T6756] netlink: 'syz.0.228': attribute type 4 has an invalid length. [ 124.306188][ T6756] netlink: 3 bytes leftover after parsing attributes in process `syz.0.228'. [ 124.323116][ T5706] usb 5-1: config 0 has an invalid descriptor of length 173, skipping remainder of the config [ 124.345159][ T5706] usb 5-1: config 0 has no interface number 0 [ 124.371763][ T5706] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 124.382559][ T5706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.390774][ T5706] usb 5-1: Product: syz [ 124.395165][ T5706] usb 5-1: Manufacturer: syz [ 124.399797][ T5706] usb 5-1: SerialNumber: syz [ 124.408893][ T5706] usb 5-1: config 0 descriptor?? [ 124.431273][ T5706] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 124.433954][ T30] audit: type=1400 audit(1777826121.647:433): avc: denied { write } for pid=6759 comm="syz.0.230" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 124.439970][ T5706] uvcvideo 5-1:0.105: No valid video chain found. [ 124.656744][ T5743] usb 5-1: USB disconnect, device number 7 [ 124.812935][ T5705] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 124.943300][ T5706] usb 3-1: USB disconnect, device number 12 [ 124.963021][ T5705] usb 1-1: Using ep0 maxpacket: 32 [ 124.974202][ T5705] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 124.992579][ T5705] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 125.006174][ T5705] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 125.016288][ T5705] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 125.029472][ T5705] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 125.042624][ T5705] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 125.052693][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.061073][ T5705] usb 1-1: Product: syz [ 125.065490][ T5705] usb 1-1: Manufacturer: syz [ 125.070168][ T5705] usb 1-1: SerialNumber: syz [ 125.088465][ T5705] usb 1-1: config 0 descriptor?? [ 125.204533][ T6769] XFS (nullb0): Invalid superblock magic number [ 125.306105][ T5705] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 125.312687][ T5705] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 125.319847][ T6760] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 125.330210][ T30] audit: type=1400 audit(1777826122.547:434): avc: denied { map } for pid=6759 comm="syz.0.230" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 125.356701][ T30] audit: type=1400 audit(1777826122.547:435): avc: denied { execute } for pid=6759 comm="syz.0.230" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 125.412857][ T5706] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 125.512861][ T5803] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 125.564701][ T5706] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.578380][ T5706] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.581730][ T5705] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 125.589817][ T5706] usb 3-1: config 1 interface 0 has no altsetting 0 [ 125.599352][ T5705] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 125.607687][ T5705] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 125.614902][ T5705] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 125.616158][ T5706] usb 3-1: string descriptor 0 read error: -22 [ 125.621202][ T5705] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 125.631859][ T5706] usb 3-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.40 [ 125.636635][ T5705] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 125.646752][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.651094][ T5705] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 125.672181][ T5705] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 125.674855][ T5803] usb 5-1: config 1 interface 0 has no altsetting 0 [ 125.680024][ T5705] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 125.690484][ T5803] usb 5-1: string descriptor 0 read error: -22 [ 125.691197][ T5705] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 125.699207][ T5803] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.40 [ 125.704658][ T5705] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 125.713154][ T5803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.718953][ T5705] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 125.733946][ T5705] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 125.748666][ T5705] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 125.755419][ T5705] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 125.761742][ T5705] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 125.768315][ T5705] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 125.775118][ T5705] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 125.781170][ T5705] input input8: Timeout waiting for response from device. [ 125.792574][ T5705] usb 1-1: USB disconnect, device number 10 [ 126.070618][ T6767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.079448][ T6767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.201486][ T6778] netlink: 'syz.0.235': attribute type 7 has an invalid length. [ 126.210373][ T6778] netlink: 'syz.0.235': attribute type 7 has an invalid length. [ 126.295286][ T5706] usbhid 3-1:1.0: can't add hid device: -71 [ 126.301364][ T5706] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 126.312363][ T5706] usb 3-1: USB disconnect, device number 13 [ 126.348325][ T5803] usbhid 5-1:1.0: can't add hid device: -71 [ 126.358868][ T5803] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 126.369921][ T5803] usb 5-1: USB disconnect, device number 8 [ 126.462856][ T5705] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 126.561463][ T5898] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.580504][ T5898] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.599314][ T5899] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.615053][ T5705] usb 1-1: unable to get BOS descriptor or descriptor too short [ 126.632918][ T5899] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.635074][ T5705] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 126.653071][ T5705] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 126.667934][ T5705] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 126.682764][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.695073][ T5705] usb 1-1: Product: syz [ 126.699324][ T5705] usb 1-1: Manufacturer: syz [ 126.762631][ T5804] usb 4-1: USB disconnect, device number 6 [ 126.841049][ T5705] usb 1-1: SerialNumber: syz [ 126.873462][ T5705] usb 1-1: selecting invalid altsetting 1 [ 126.877585][ T30] audit: type=1400 audit(1777826124.087:436): avc: denied { mounton } for pid=6784 comm="syz.2.238" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 126.881089][ T5705] usb 1-1: unit 6 not found! [ 126.913675][ T6785] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 126.913923][ T6785] qnx6: wrong signature (magic) in superblock #1. [ 126.913933][ T6785] qnx6: unable to read the first superblock [ 126.981772][ T30] audit: type=1400 audit(1777826124.197:437): avc: denied { mount } for pid=6787 comm="syz.4.240" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 126.986856][ T6788] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 127.011870][ T30] audit: type=1400 audit(1777826124.197:438): avc: denied { mounton } for pid=6787 comm="syz.4.240" path="/45/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 127.095592][ T30] audit: type=1400 audit(1777826124.307:439): avc: denied { mount } for pid=6777 comm="syz.0.235" name="/" dev="autofs" ino=12517 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 127.124365][ T6793] netlink: 'syz.2.239': attribute type 21 has an invalid length. [ 127.132211][ T6793] __nla_validate_parse: 1 callbacks suppressed [ 127.132245][ T6793] netlink: 128 bytes leftover after parsing attributes in process `syz.2.239'. [ 127.134408][ T5705] usb 1-1: 2:0: cannot get min/max values for control 1 (id 2) [ 127.143840][ T6793] netlink: 'syz.2.239': attribute type 4 has an invalid length. [ 127.163015][ T6793] netlink: 3 bytes leftover after parsing attributes in process `syz.2.239'. [ 127.183275][ T5804] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 127.237698][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.253366][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.357420][ T30] audit: type=1400 audit(1777826124.567:440): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 127.525960][ T5804] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 127.610657][ T5804] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 127.644701][ T5804] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 127.656710][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.675091][ T5705] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 127.693103][ T6798] FAULT_INJECTION: forcing a failure. [ 127.693103][ T6798] name failslab, interval 1, probability 0, space 0, times 0 [ 127.709098][ T6782] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 127.741575][ T5804] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 127.752214][ T5705] usb 1-1: USB disconnect, device number 11 [ 127.774634][ T6798] CPU: 0 UID: 0 PID: 6798 Comm: syz.1.242 Tainted: G L syzkaller #0 PREEMPT(full) [ 127.774652][ T6798] Tainted: [L]=SOFTLOCKUP [ 127.774655][ T6798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 127.774661][ T6798] Call Trace: [ 127.774666][ T6798] [ 127.774670][ T6798] dump_stack_lvl+0x100/0x190 [ 127.774687][ T6798] should_fail_ex.cold+0x5/0xa [ 127.774704][ T6798] should_failslab+0xc2/0x120 [ 127.774717][ T6798] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 127.774734][ T6798] ? __alloc_skb+0x140/0x710 [ 127.774752][ T6798] __alloc_skb+0x140/0x710 [ 127.774766][ T6798] ? __alloc_skb+0x5b7/0x710 [ 127.774781][ T6798] ? __pfx___alloc_skb+0x10/0x10 [ 127.774795][ T6798] ? genl_rcv_msg+0x4be/0x800 [ 127.774813][ T6798] netlink_ack+0x117/0xb80 [ 127.774830][ T6798] netlink_rcv_skb+0x333/0x420 [ 127.774843][ T6798] ? __pfx_genl_rcv_msg+0x10/0x10 [ 127.774858][ T6798] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 127.774877][ T6798] ? netlink_deliver_tap+0x1ae/0xcc0 [ 127.774891][ T6798] genl_rcv+0x28/0x40 [ 127.774904][ T6798] netlink_unicast+0x585/0x850 [ 127.774919][ T6798] ? __pfx_netlink_unicast+0x10/0x10 [ 127.774935][ T6798] netlink_sendmsg+0x8b0/0xda0 [ 127.774956][ T6798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.774968][ T6798] ? __might_fault+0x90/0x140 [ 127.774988][ T6798] ____sys_sendmsg+0x9e1/0xb70 [ 127.775000][ T6798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.775013][ T6798] ? __pfx_____sys_sendmsg+0x10/0x10 [ 127.775032][ T6798] ___sys_sendmsg+0x190/0x1e0 [ 127.775046][ T6798] ? __pfx____sys_sendmsg+0x10/0x10 [ 127.775075][ T6798] __sys_sendmsg+0x170/0x220 [ 127.775092][ T6798] ? __pfx___sys_sendmsg+0x10/0x10 [ 127.775115][ T6798] ? rcu_is_watching+0x12/0xc0 [ 127.775134][ T6798] do_syscall_64+0x10b/0xf80 [ 127.775146][ T6798] ? clear_bhb_loop+0x40/0x90 [ 127.775159][ T6798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.775170][ T6798] RIP: 0033:0x7feb4059cdd9 [ 127.775179][ T6798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.775189][ T6798] RSP: 002b:00007feb41500028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.775200][ T6798] RAX: ffffffffffffffda RBX: 00007feb40815fa0 RCX: 00007feb4059cdd9 [ 127.775206][ T6798] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 127.775212][ T6798] RBP: 00007feb41500090 R08: 0000000000000000 R09: 0000000000000000 [ 127.775218][ T6798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.775225][ T6798] R13: 00007feb40816038 R14: 00007feb40815fa0 R15: 00007ffebb77a328 [ 127.775238][ T6798] [ 128.261704][ T5804] usb 4-1: USB disconnect, device number 7 [ 128.293692][ T6805] netlink: 16 bytes leftover after parsing attributes in process `syz.1.245'. [ 128.333699][ T30] audit: type=1400 audit(1777826125.517:441): avc: denied { ioctl } for pid=6803 comm="syz.0.244" path="socket:[13595]" dev="sockfs" ino=13595 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 128.428127][ T6360] udevd[6360]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.523244][ T5743] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 128.950552][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.993155][ T5803] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 129.026877][ T5743] usb 3-1: unable to get BOS descriptor or descriptor too short [ 129.055888][ T5743] usb 3-1: string descriptor 0 read error: -22 [ 129.063774][ T5743] usb 3-1: New USB device found, idVendor=10f5, idProduct=0200, bcdDevice= 0.40 [ 129.073153][ T5743] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.131102][ T30] audit: type=1400 audit(1777826126.337:442): avc: denied { mounton } for pid=6816 comm="syz.3.247" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 129.221715][ T5803] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.259882][ T5803] usb 5-1: config 0 has no interfaces? [ 129.301599][ T5803] usb 5-1: New USB device found, idVendor=1235, idProduct=8219, bcdDevice= 0.40 [ 129.321448][ T5803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.342529][ T5803] usb 5-1: Product: syz [ 129.357328][ T5803] usb 5-1: Manufacturer: syz [ 129.367313][ T5803] usb 5-1: SerialNumber: syz [ 129.387926][ T5803] usb 5-1: config 0 descriptor?? [ 129.488461][ T5743] usb 3-1: unit 4 not found! [ 129.502400][ T5743] usb 3-1: unit 0 not found! [ 129.572339][ T6802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.243'. [ 129.628636][ T6802] qnx4: no qnx4 filesystem (no root dir). [ 129.689378][ T5743] usb 3-1: USB disconnect, device number 14 [ 129.985059][ T5742] usb 5-1: USB disconnect, device number 9 [ 130.264349][ T6835] XFS (nullb0): Invalid superblock magic number [ 130.842835][ T5803] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 131.600906][ T5803] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 131.712837][ T5803] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.736438][ T5803] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 131.760339][ T5803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.804661][ T5803] usb 1-1: config 0 descriptor?? [ 131.993534][ T6860] netlink: 'syz.2.258': attribute type 4 has an invalid length. [ 132.011405][ T30] audit: type=1400 audit(1777826129.217:443): avc: denied { append } for pid=6859 comm="syz.3.259" name="frontend0" dev="devtmpfs" ino=926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 132.063327][ T6864] netlink: 16 bytes leftover after parsing attributes in process `syz.4.260'. [ 132.280671][ T30] audit: type=1400 audit(1777826129.487:444): avc: denied { bind } for pid=6869 comm="syz.4.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 132.432979][ T5804] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 132.767538][ T5804] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 132.779347][ T5804] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 132.841284][ T5804] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 132.856493][ T5804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.872249][ T6868] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 132.885600][ T5804] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 133.104082][ T6885] XFS (nullb0): Invalid superblock magic number [ 133.272910][ T5705] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 133.321428][ T5803] usbhid 1-1:0.0: can't add hid device: -71 [ 133.363153][ T5803] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 133.371150][ T6899] netlink: 'syz.3.267': attribute type 21 has an invalid length. [ 133.391130][ T6899] netlink: 128 bytes leftover after parsing attributes in process `syz.3.267'. [ 133.407263][ T5803] usb 1-1: USB disconnect, device number 12 [ 133.511007][ T6899] netlink: 'syz.3.267': attribute type 4 has an invalid length. [ 133.533278][ T6899] netlink: 3 bytes leftover after parsing attributes in process `syz.3.267'. [ 133.556204][ T5705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 133.711263][ T6907] fuse: Unknown parameter '0x0000000000000006' [ 133.726080][ T30] audit: type=1400 audit(1777826130.907:445): avc: denied { bind } for pid=6901 comm="syz.0.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 134.516731][ T5705] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 134.527629][ T5705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 134.580605][ T30] audit: type=1400 audit(1777826130.907:446): avc: denied { name_bind } for pid=6901 comm="syz.0.269" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 134.769137][ T5705] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 134.786170][ T5705] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 134.797720][ T5705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.828069][ T5705] usb 5-1: config 0 descriptor?? [ 134.833564][ T30] audit: type=1400 audit(1777826130.917:447): avc: denied { node_bind } for pid=6901 comm="syz.0.269" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 134.858292][ T5803] usb 3-1: USB disconnect, device number 15 [ 134.936116][ T6912] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 135.139037][ T30] audit: type=1400 audit(1777826132.347:448): avc: denied { bind } for pid=6876 comm="syz.4.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 135.181241][ T30] audit: type=1400 audit(1777826132.377:449): avc: denied { write } for pid=6876 comm="syz.4.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 135.393323][ T30] audit: type=1400 audit(1777826132.407:450): avc: denied { wake_alarm } for pid=6917 comm="syz.0.273" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 136.483699][ T6925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.273'. [ 136.540336][ T6918] netlink: 128 bytes leftover after parsing attributes in process `syz.1.272'. [ 137.596501][ T30] audit: type=1400 audit(1777826134.797:451): avc: denied { append } for pid=6946 comm="syz.1.281" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 137.632756][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 137.774595][ T5705] hdpvr 5-1:0.0: unexpected answer of status request, len -71 [ 137.795906][ T5705] hdpvr 5-1:0.0: device init failed [ 137.827653][ T5705] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 137.885895][ T30] audit: type=1400 audit(1777826135.097:452): avc: denied { remount } for pid=6954 comm="syz.0.283" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 137.887601][ T5705] usb 5-1: USB disconnect, device number 10 [ 137.906214][ T5804] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 138.161224][ T6961] random: crng reseeded on system resumption [ 138.536543][ T5804] usb 2-1: Using ep0 maxpacket: 16 [ 138.548982][ T5804] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 138.560206][ T5804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.585852][ T5804] usb 2-1: Product: syz [ 138.605271][ T5804] usb 2-1: Manufacturer: syz [ 138.615363][ T5804] usb 2-1: SerialNumber: syz [ 138.685531][ T5803] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 138.842732][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 139.034890][ T5803] usb 1-1: Using ep0 maxpacket: 16 [ 139.043782][ T5803] usb 1-1: config index 0 descriptor too short (expected 52, got 36) [ 139.063005][ T5803] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 139.073111][ T5803] usb 1-1: config 0 has no interface number 0 [ 139.079267][ T5803] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 139.108709][ T5803] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 139.135005][ T5803] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 139.145442][ T5803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.156068][ T5803] usb 1-1: Product: syz [ 139.161145][ T5803] usb 1-1: Manufacturer: syz [ 139.166346][ T5803] usb 1-1: SerialNumber: syz [ 139.176345][ T5803] usb 1-1: config 0 descriptor?? [ 139.182212][ T6958] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 139.191869][ T6958] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 139.203028][ T6979] Invalid source name [ 139.212402][ T6979] UBIFS error (pid: 6979): cannot open "/dev/nullb0", error -22 [ 139.416891][ T6958] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 139.433628][ T6958] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 139.656272][ T5803] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 139.668780][ T5803] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 139.682005][ T5803] asix 1-1:0.251: probe with driver asix failed with error -71 [ 139.683596][ T5743] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 139.694747][ T5803] usb 1-1: USB disconnect, device number 13 [ 139.703571][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 139.748386][ T6995] XFS (nullb0): Invalid superblock magic number [ 139.815076][ T7002] 9p: Bad value for 'rfdno' [ 139.866972][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 139.873033][ T5743] usb 5-1: Using ep0 maxpacket: 16 [ 139.883067][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.885425][ T5743] usb 5-1: unable to get BOS descriptor or descriptor too short [ 139.900939][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.903504][ T5743] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 139.920035][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 139.920493][ T5743] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.944603][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 139.944609][ T5743] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 139.944648][ T5743] usb 5-1: too many endpoints for config 1 interface 1 altsetting 151: 235, using maximum allowed: 30 [ 139.957228][ T9] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 139.963523][ T5743] usb 5-1: config 1 interface 1 altsetting 151 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 139.994209][ T5743] usb 5-1: config 1 interface 1 altsetting 151 has 1 endpoint descriptor, different from the interface descriptor's value: 235 [ 140.007729][ T5743] usb 5-1: config 1 interface 1 has no altsetting 1 [ 140.017769][ T5743] usb 5-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 140.027200][ T5743] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.027395][ T9] usb 3-1: Manufacturer: syz [ 140.035627][ T5743] usb 5-1: Product: syz [ 140.044268][ T5743] usb 5-1: Manufacturer: syz [ 140.049086][ T5743] usb 5-1: SerialNumber: syz [ 140.053105][ T9] usb 3-1: config 0 descriptor?? [ 140.205358][ T7004] netlink: 203 bytes leftover after parsing attributes in process `syz.0.297'. [ 140.214617][ T7004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.297'. [ 140.232042][ T30] audit: type=1400 audit(1777826137.437:453): avc: denied { mount } for pid=7003 comm="syz.0.297" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 140.272121][ T7004] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 140.289573][ T30] audit: type=1400 audit(1777826137.467:454): avc: denied { mounton } for pid=7003 comm="syz.0.297" path="/56/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 140.464577][ T30] audit: type=1400 audit(1777826137.477:455): avc: denied { unlink } for pid=7003 comm="syz.0.297" name="#1" dev="tmpfs" ino=317 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 140.781736][ T5804] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 140.816050][ T5804] usb 2-1: USB disconnect, device number 8 [ 141.044297][ T30] audit: type=1400 audit(1777826138.257:456): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 141.120232][ T30] audit: type=1400 audit(1777826138.327:457): avc: denied { write } for pid=6988 comm="syz.4.294" path="socket:[13093]" dev="sockfs" ino=13093 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 141.136416][ T7025] syzkaller0: entered promiscuous mode [ 141.155551][ T5743] usb 5-1: 1:151 : invalid UAC_AS_GENERAL desc [ 141.163714][ T30] audit: type=1400 audit(1777826138.327:458): avc: denied { ioctl } for pid=7024 comm="syz.3.303" path="socket:[13096]" dev="sockfs" ino=13096 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 141.166827][ T7025] syzkaller0: entered allmulticast mode [ 141.189366][ T5743] usb 5-1: 0:2 : does not exist [ 141.241105][ T5743] usb 5-1: USB disconnect, device number 11 [ 141.252847][ T5804] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 141.277426][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.315659][ T7025] syz.3.303: vmalloc error: size 18446744073699065859, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 141.339497][ T7025] CPU: 0 UID: 0 PID: 7025 Comm: syz.3.303 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.339537][ T7025] Tainted: [L]=SOFTLOCKUP [ 141.339543][ T7025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 141.339555][ T7025] Call Trace: [ 141.339562][ T7025] [ 141.339569][ T7025] dump_stack_lvl+0x100/0x190 [ 141.339596][ T7025] warn_alloc.cold+0x95/0x1c1 [ 141.339617][ T7025] ? __pfx_warn_alloc+0x10/0x10 [ 141.339648][ T7025] ? __lock_acquire+0xd73/0x2630 [ 141.339677][ T7025] ? __UNIQUE_ID_modinfo_717+0x63e5698a/0xffffffffffeca987 [ 141.339704][ T7025] ? __UNIQUE_ID_modinfo_717+0x63e5698a/0xffffffffffeca987 [ 141.339726][ T7025] __vmalloc_node_range_noprof+0x136c/0x1630 [ 141.339754][ T7025] ? rcu_is_watching+0x12/0xc0 [ 141.339779][ T7025] ? __UNIQUE_ID_modinfo_717+0x63e5698a/0xffffffffffeca987 [ 141.339802][ T7025] ? trace_contention_end+0x122/0x170 [ 141.339827][ T7025] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 141.339847][ T7025] ? dvb_demux_do_ioctl+0x929/0x1200 [ 141.339867][ T7025] ? find_held_lock+0x2b/0x80 [ 141.339886][ T7025] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 141.339909][ T7025] ? __pfx___mutex_lock+0x10/0x10 [ 141.339936][ T7025] ? tomoyo_path_number_perm+0x188/0x580 [ 141.339961][ T7025] ? __UNIQUE_ID_modinfo_717+0x63e5698a/0xffffffffffeca987 [ 141.339986][ T7025] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 141.340003][ T7025] __vmalloc_node_noprof+0xad/0xf0 [ 141.340025][ T7025] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 141.340041][ T7025] ? __UNIQUE_ID_modinfo_717+0x63e5698a/0xffffffffffeca987 [ 141.340067][ T7025] dvb_demux_do_ioctl+0x9e0/0x1200 [ 141.340086][ T7025] ? do_vfs_ioctl+0x226/0x13e0 [ 141.340107][ T7025] ? __UNIQUE_ID_modinfo_717+0x63e5698a/0xffffffffffeca987 [ 141.340131][ T7025] dvb_usercopy+0x167/0x340 [ 141.340156][ T7025] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 141.340172][ T7025] ? __UNIQUE_ID_modinfo_717+0x63e5698a/0xffffffffffeca987 [ 141.340196][ T7025] ? __pfx_dvb_usercopy+0x10/0x10 [ 141.340231][ T7025] ? __UNIQUE_ID_modinfo_717+0x63e5698a/0xffffffffffeca987 [ 141.340253][ T7025] ? __UNIQUE_ID_modinfo_717+0x63e5698a/0xffffffffffeca987 [ 141.340277][ T7025] ? selinux_file_ioctl+0x13b/0x290 [ 141.340301][ T7025] ? __UNIQUE_ID_modinfo_717+0x63e5698a/0xffffffffffeca987 [ 141.340323][ T7025] ? selinux_file_ioctl+0xb6/0x290 [ 141.340346][ T7025] ? __UNIQUE_ID_modinfo_717+0x63e5698a/0xffffffffffeca987 [ 141.340369][ T7025] ? __UNIQUE_ID_modinfo_717+0x63e5698a/0xffffffffffeca987 [ 141.340392][ T7025] dvb_demux_ioctl+0x29/0x40 [ 141.340417][ T7025] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 141.340445][ T7025] __x64_sys_ioctl+0x18e/0x210 [ 141.340466][ T7025] do_syscall_64+0x10b/0xf80 [ 141.340487][ T7025] ? clear_bhb_loop+0x40/0x90 [ 141.340509][ T7025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.340539][ T7025] RIP: 0033:0x7fd69f79cdd9 [ 141.340555][ T7025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.340574][ T7025] RSP: 002b:00007fd6a0700028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 141.340592][ T7025] RAX: ffffffffffffffda RBX: 00007fd69fa15fa0 RCX: 00007fd69f79cdd9 [ 141.340602][ T7025] RDX: ffffffffff600003 RSI: 0000000000006f2d RDI: 0000000000000009 [ 141.340612][ T7025] RBP: 00007fd69f832d69 R08: 0000000000000000 R09: 0000000000000000 [ 141.340622][ T7025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.340631][ T7025] R13: 00007fd69fa16038 R14: 00007fd69fa15fa0 R15: 00007ffda4dfef48 [ 141.340649][ T7025] ? __UNIQUE_ID_modinfo_717+0x63e5698a/0xffffffffffeca987 [ 141.340676][ T7025] [ 141.340786][ T7025] Mem-Info: [ 141.392802][ T5742] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 141.399522][ T7025] active_anon:14672 inactive_anon:0 isolated_anon:0 [ 141.399522][ T7025] active_file:18184 inactive_file:40667 isolated_file:0 [ 141.399522][ T7025] unevictable:768 dirty:352 writeback:0 [ 141.399522][ T7025] slab_reclaimable:11574 slab_unreclaimable:102406 [ 141.399522][ T7025] mapped:34848 shmem:5493 pagetables:1272 [ 141.399522][ T7025] sec_pagetables:0 bounce:0 [ 141.399522][ T7025] kernel_misc_reclaimable:0 [ 141.399522][ T7025] free:1291427 free_pcp:11757 free_cma:0 [ 141.562997][ T5742] usb 1-1: Using ep0 maxpacket: 32 [ 141.566280][ T7025] Node 0 active_anon:58788kB inactive_anon:0kB active_file:72736kB inactive_file:162464kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:143392kB dirty:1408kB writeback:0kB shmem:20436kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12504kB pagetables:5052kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 141.576067][ T5742] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 141.581679][ T7025] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 141.611724][ T5742] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.615454][ T5742] usb 1-1: config 0 descriptor?? [ 141.623971][ T9] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 141.645797][ T5742] as10x_usb: device has been detected [ 141.657522][ T5804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.661398][ T5742] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 141.690115][ T5804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.718530][ T5742] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 141.757961][ T5804] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 141.804645][ T7025] Node 0 [ 141.891841][ T5804] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 141.935020][ T7025] DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 141.937116][ T7027] ------------[ cut here ]------------ [ 141.965069][ T7025] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 141.969913][ T7027] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 141.975676][ T7027] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x94f/0x1b10, CPU#1: syz.0.302/7027 [ 141.975984][ T7025] Node 0 [ 141.981539][ T7027] Modules linked in: [ 141.991526][ T5804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.994328][ T7027] [ 141.994341][ T7027] CPU: 1 UID: 0 PID: 7027 Comm: syz.0.302 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.994365][ T7027] Tainted: [L]=SOFTLOCKUP [ 141.994372][ T7027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 141.994393][ T7027] RIP: 0010:__mutex_lock+0x956/0x1b10 [ 141.994419][ T7027] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 a8 10 00 00 44 8b 35 3d fe 4b 05 45 85 f6 75 13 48 8d 3d 71 1c 4f 05 48 c7 c6 20 bb af 8b <67> 48 0f b9 3a 90 e9 10 f8 ff ff 4d 8d a7 e0 0a 00 00 4c 89 e7 e8 [ 141.994434][ T7027] RSP: 0018:ffffc90002e17a50 EFLAGS: 00010246 [ 141.994447][ T7027] RAX: 0000000000000003 RBX: ffff8880500cab30 RCX: 1ffffffff21af9dc [ 141.994458][ T7027] RDX: 0000000000000000 RSI: ffffffff8bafbb20 RDI: ffffffff90daed20 [ 141.994469][ T7027] RBP: ffffc90002e17bc0 R08: 0000000000000001 R09: 0000000000000000 [ 141.994481][ T7027] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 141.994491][ T7027] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 142.001850][ T9] appleir 0003:05AC:8243.0001: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 142.006361][ T7027] FS: 00007f158de3f6c0(0000) GS:ffff888124476000(0000) knlGS:0000000000000000 [ 142.084452][ T5804] usb 2-1: config 0 descriptor?? [ 142.090071][ T7027] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.138185][ T7027] CR2: 0000001b33423ffc CR3: 0000000077641000 CR4: 00000000003526f0 [ 142.146240][ T7027] Call Trace: [ 142.149514][ T7027] [ 142.152453][ T7027] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 142.158125][ T7027] ? __mutex_lock+0x26d/0x1b10 [ 142.158287][ T7025] DMA32 free:1217248kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:47188kB inactive_anon:0kB active_file:72736kB inactive_file:162464kB unevictable:1536kB writepending:1408kB zspages:0kB present:3129332kB managed:2537116kB mlocked:0kB bounce:0kB free_pcp:39968kB local_pcp:24340kB free_cma:0kB [ 142.162918][ T7027] ? dmx_section_feed_start_filtering+0x56/0x660 [ 142.162942][ T7027] ? find_held_lock+0x2b/0x80 [ 142.162957][ T7027] ? __pfx___mutex_lock+0x10/0x10 [ 142.212057][ T7027] ? __pfx___mutex_lock+0x10/0x10 [ 142.217162][ T7027] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 142.223315][ T7027] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 142.228966][ T7027] as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 142.234745][ T7027] dmx_section_feed_start_filtering+0x3a8/0x660 [ 142.238433][ T9] usb 3-1: USB disconnect, device number 16 [ 142.240996][ T7027] dvb_dmxdev_filter_start+0x767/0xdd0 [ 142.241022][ T7027] dvb_demux_do_ioctl+0xe64/0x1200 [ 142.257487][ T7027] dvb_usercopy+0x167/0x340 [ 142.262005][ T7027] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 142.267625][ T7027] ? __pfx_dvb_usercopy+0x10/0x10 [ 142.272660][ T7027] ? selinux_file_ioctl+0x13b/0x290 [ 142.277898][ T7027] ? selinux_file_ioctl+0xb6/0x290 [ 142.283045][ T7027] dvb_demux_ioctl+0x29/0x40 [ 142.287639][ T7027] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 142.292971][ T7027] __x64_sys_ioctl+0x18e/0x210 [ 142.297771][ T7027] do_syscall_64+0x10b/0xf80 [ 142.301306][ T7025] lowmem_reserve[]: [ 142.302369][ T7027] ? clear_bhb_loop+0x40/0x90 [ 142.303345][ T7025] 0 [ 142.306210][ T7027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.319246][ T7027] RIP: 0033:0x7f158cf9cdd9 [ 142.319636][ T7025] 0 [ 142.323693][ T7027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.323713][ T7027] RSP: 002b:00007f158de3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.329203][ T7033] fido_id[7033]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 142.346295][ T7027] RAX: ffffffffffffffda RBX: 00007f158d215fa0 RCX: 00007f158cf9cdd9 [ 142.356808][ T7025] 1 [ 142.368806][ T7027] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 142.368821][ T7027] RBP: 00007f158d032d69 R08: 0000000000000000 R09: 0000000000000000 [ 142.368832][ T7027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.368843][ T7027] R13: 00007f158d216038 R14: 00007f158d215fa0 R15: 00007fff81822028 [ 142.377382][ T7025] 1 [ 142.379291][ T7027] [ 142.379303][ T7027] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 142.379318][ T7027] CPU: 1 UID: 0 PID: 7027 Comm: syz.0.302 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.379340][ T7027] Tainted: [L]=SOFTLOCKUP [ 142.379346][ T7027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 142.379355][ T7027] Call Trace: [ 142.379361][ T7027] [ 142.379367][ T7027] dump_stack_lvl+0x100/0x190 [ 142.379390][ T7027] vpanic+0x552/0x970 [ 142.379405][ T7027] ? __pfx_vpanic+0x10/0x10 [ 142.379419][ T7027] ? lock_release+0x245/0x310 [ 142.379442][ T7027] panic+0xd1/0xe0 [ 142.379456][ T7027] ? __pfx_panic+0x10/0x10 [ 142.379474][ T7027] check_panic_on_warn.cold+0x19/0x34 [ 142.379490][ T7027] ? __mutex_lock+0x94f/0x1b10 [ 142.379509][ T7027] __warn.cold+0x191/0x328 [ 142.379525][ T7027] __report_bug+0x296/0x3d0 [ 142.379542][ T7027] ? __mutex_lock+0x94f/0x1b10 [ 142.379560][ T7027] ? __pfx___report_bug+0x10/0x10 [ 142.379576][ T7027] ? rcu_is_watching+0x12/0xc0 [ 142.379599][ T7027] ? is_bpf_text_address+0x8a/0x1a0 [ 142.379622][ T7027] ? is_bpf_text_address+0x94/0x1a0 [ 142.379641][ T7027] ? kernel_text_address+0x8d/0x100 [ 142.379663][ T7027] ? __kernel_text_address+0xd/0x30 [ 142.379684][ T7027] report_bug_entry+0xe1/0x290 [ 142.379700][ T7027] ? __mutex_lock+0x956/0x1b10 [ 142.379718][ T7027] handle_bug+0x1cd/0x2a0 [ 142.379739][ T7027] exc_invalid_op+0x17/0x50 [ 142.379764][ T7027] asm_exc_invalid_op+0x1a/0x20 [ 142.379779][ T7027] RIP: 0010:__mutex_lock+0x956/0x1b10 [ 142.379798][ T7027] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 a8 10 00 00 44 8b 35 3d fe 4b 05 45 85 f6 75 13 48 8d 3d 71 1c 4f 05 48 c7 c6 20 bb af 8b <67> 48 0f b9 3a 90 e9 10 f8 ff ff 4d 8d a7 e0 0a 00 00 4c 89 e7 e8 [ 142.379814][ T7027] RSP: 0018:ffffc90002e17a50 EFLAGS: 00010246 [ 142.379827][ T7027] RAX: 0000000000000003 RBX: ffff8880500cab30 RCX: 1ffffffff21af9dc [ 142.379837][ T7027] RDX: 0000000000000000 RSI: ffffffff8bafbb20 RDI: ffffffff90daed20 [ 142.379847][ T7027] RBP: ffffc90002e17bc0 R08: 0000000000000001 R09: 0000000000000000 [ 142.379857][ T7027] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 142.379866][ T7027] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 142.379881][ T7027] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 142.379905][ T7027] ? __mutex_lock+0x26d/0x1b10 [ 142.379923][ T7027] ? dmx_section_feed_start_filtering+0x56/0x660 [ 142.379941][ T7027] ? find_held_lock+0x2b/0x80 [ 142.379957][ T7027] ? __pfx___mutex_lock+0x10/0x10 [ 142.379975][ T7027] ? __pfx___mutex_lock+0x10/0x10 [ 142.379994][ T7027] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 142.380017][ T7027] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 142.380040][ T7027] as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 142.380066][ T7027] dmx_section_feed_start_filtering+0x3a8/0x660 [ 142.380086][ T7027] dvb_dmxdev_filter_start+0x767/0xdd0 [ 142.380104][ T7027] dvb_demux_do_ioctl+0xe64/0x1200 [ 142.380122][ T7027] dvb_usercopy+0x167/0x340 [ 142.380143][ T7027] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 142.380158][ T7027] ? __pfx_dvb_usercopy+0x10/0x10 [ 142.380184][ T7027] ? selinux_file_ioctl+0x13b/0x290 [ 142.380204][ T7027] ? selinux_file_ioctl+0xb6/0x290 [ 142.380223][ T7027] dvb_demux_ioctl+0x29/0x40 [ 142.380244][ T7027] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 142.380266][ T7027] __x64_sys_ioctl+0x18e/0x210 [ 142.380284][ T7027] do_syscall_64+0x10b/0xf80 [ 142.380301][ T7027] ? clear_bhb_loop+0x40/0x90 [ 142.380319][ T7027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.380334][ T7027] RIP: 0033:0x7f158cf9cdd9 [ 142.380346][ T7027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.380361][ T7027] RSP: 002b:00007f158de3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.380375][ T7027] RAX: ffffffffffffffda RBX: 00007f158d215fa0 RCX: 00007f158cf9cdd9 [ 142.380386][ T7027] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 142.380395][ T7027] RBP: 00007f158d032d69 R08: 0000000000000000 R09: 0000000000000000 [ 142.380404][ T7027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.380414][ T7027] R13: 00007f158d216038 R14: 00007f158d215fa0 R15: 00007fff81822028 [ 142.380429][ T7027] [ 142.387541][ T7027] Kernel Offset: disabled