last executing test programs: 50.875437482s ago: executing program 2 (id=164): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @quota={{0xa}, @void}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 50.568118349s ago: executing program 2 (id=167): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x408800, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000100)={{r1}, "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"}) userfaultfd(0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000540)='net/netlink\x00') pread64(r4, &(0x7f000001a240)=""/102399, 0x18fff, 0x100008) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet(0xffffffffffffffff, &(0x7f0000000500)="82", 0x1, 0x0, &(0x7f0000000600)={0x2, 0x1234, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) pselect6(0x40, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x8, 0x0, 0x1, 0x10, 0xffffffffffffffff, 0x3}, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x59) 49.530306878s ago: executing program 2 (id=171): socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000940)='timerslack_ns\x00') read$FUSE(r0, &(0x7f00000042c0)={0x2020}, 0x2020) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x8900, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x40, 0x0) syz_emit_ethernet(0xa, 0x0, &(0x7f00000001c0)={0x10004, 0x1, [0xb8f, 0x4a7, 0xb55, 0xcd3]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000400"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f00000002c0)='bfs\x00', 0x800041, 0x0) 47.922708277s ago: executing program 2 (id=175): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) writev(r0, &(0x7f0000000540), 0x0) 47.644344091s ago: executing program 2 (id=176): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x3, 0x2400) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000140)=""/15) mount(0x0, &(0x7f0000001080)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x4002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x7fe81e5246626bb5) lseek(r1, 0x101, 0x1) getdents64(r1, 0xfffffffffffffffe, 0x4a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00', 0xb0) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0x40, 0x135) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) setpgid(r3, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) chmod(&(0x7f00000002c0)='./file0\x00', 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x119402, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x20000000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x78, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4c23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x7fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000005580)={0x2020}, 0x2020) sendmmsg$inet(r5, 0x0, 0x0, 0x2090) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='romfs\x00', 0x2a08004, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0) writev(r5, &(0x7f0000000940)=[{&(0x7f0000000180)="39892593", 0x4}], 0x3a) 47.156373462s ago: executing program 2 (id=180): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001100)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vlan0\x00', 0x10) timer_create(0x0, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000002c0)) bpf$MAP_CREATE(0xb00000000000014, &(0x7f0000000280)=ANY=[], 0x48) connect$inet(r0, &(0x7f0000001200)={0x2, 0x4e1e, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r1, 0x6, 0x0) ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000080)={0xa2}) ioctl$SNDCTL_SEQ_GETINCOUNT(r1, 0x80045105, &(0x7f0000000040)) 32.136604988s ago: executing program 32 (id=180): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001100)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vlan0\x00', 0x10) timer_create(0x0, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000002c0)) bpf$MAP_CREATE(0xb00000000000014, &(0x7f0000000280)=ANY=[], 0x48) connect$inet(r0, &(0x7f0000001200)={0x2, 0x4e1e, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r1, 0x6, 0x0) ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000080)={0xa2}) ioctl$SNDCTL_SEQ_GETINCOUNT(r1, 0x80045105, &(0x7f0000000040)) 8.01623996s ago: executing program 0 (id=295): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x2000000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 7.938998579s ago: executing program 3 (id=296): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./trace/set_event\x00', &(0x7f0000000140)='ncpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace/set_event\x00', 0x2, 0x45) pread64(r0, &(0x7f0000000040)=""/107, 0x6b, 0xab7f) 7.870667661s ago: executing program 0 (id=298): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="f31fbd0d660f2a630066b8000000000f23d80f21f86635000000000f23f8b80d008ed82e667c75f364b646660fc735b800008ee866b9ff03000066ba000000000f3066b9bb0800000f32", 0x4a}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc08c5332, &(0x7f0000000400)={{0x44, 0x13}, 0x1, 0x7, 0x88, {0x3}, 0x3, 0x4000fffd}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r5], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@gettclass={0x24, 0x2a, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x8, 0x4}, {0xa, 0xffe0}, {0x10, 0x6}}, ["", "", "", "", "", "", "", ""]}, 0x24}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x3}}) r6 = gettid() r7 = syz_open_dev$video4linux(&(0x7f0000000280), 0x3cd, 0x40000) ioctl$VIDIOC_QUERYCTRL(r7, 0xc0445624, &(0x7f0000000400)={0xf0f001, 0x9, "b9a38e16cd00000000000000012147ca1117e419af26130ff88402ef5e4eb2c0", 0x3, 0x1254, 0x3, 0x5, 0x20000408}) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mlockall(0x2) r9 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmat(r9, &(0x7f0000776000/0x4000)=nil, 0x5000) r10 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @buffer={0x0, 0x1000, &(0x7f0000003f80)=""/4096}, &(0x7f00000000c0)="9109a81b133d", 0x0, 0x29, 0x10012, 0x0, 0x0}) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(0xffffffffffffffff, 0x40786e88, &(0x7f0000000600)={{0x0, 0x0, 0x40, 0x4, 0x3}, {&(0x7f00000003c0)=[{0x4, 0x2}], 0x1, 0x10, 0x7, 0xfffffffffffffff9}, {&(0x7f0000000480)=[0x4, 0x200, 0x2, 0x7, 0x649e, 0x9, 0xe, 0x5, 0x3b4], 0x9, 0x8, 0x5, 0x7f}, {&(0x7f0000000500)=[{0x3, 0x7, 0x6, 0x0, 0xec}, {0x2, 0x1, 0x80000000, 0x9, 0x7fff}, {0x4cf, 0x10001, 0xcd, 0x9}, {0x7, 0x4, 0x8000000000000000, 0x400, 0x2}], 0x4, 0x28, 0x5906, 0x24}, {&(0x7f00000005c0)=[0x2, 0x2], 0x2, 0x8, 0x200, 0x4}}) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000700)=""/242) read$FUSE(0xffffffffffffffff, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r12 = syz_open_procfs$pagemap(r6, &(0x7f0000006040)) sendmsg$netlink(r3, &(0x7f0000006100)={&(0x7f00000001c0)=@proc={0x10, 0x0, 0x8000, 0x2000}, 0xc, &(0x7f0000003f00)=[{&(0x7f0000000800)={0x234, 0x34, 0x4, 0x70bd25, 0x25dfdbfc, "", [@typed={0xc, 0x148, 0x0, 0x0, @u64=0x6}, @typed={0x8, 0x3, 0x0, 0x0, @u32=0x1ff}, @nested={0x8, 0xf, 0x0, 0x1, [@nested={0x4, 0xf2}]}, @generic="bbd0a9695f0c3fd6ad8260fc1e8a1a3f365e4407c0308a74b324ef9167bce84319f2a5ff0b5821495871311ccb48226816687c75d5e6522ffa0077742094618c04cbe63baa591b6e1181f9abdeaff4a0183bd4dfff1b76b7aacadab2e91525eebe7e16314203ed634d685d4eecdc2c89c7ab51e926039d511546c7961bfc5b1a9607bc41021adc08dc2bdb0debe9657dd1867091972890bab6a9e4f3e6536ff60417a839d28696941fd8144a16748d467e3eabe08c1d21b3c812f3dd998275329a8d8bfe2de45b9afa5045063bd6e8409def15403b506bf2c029eec85778643b47f36bb4ca12fd4bc8317435724bea25cabd30d1", @generic="30ccc708dbe9ea1f7f1c4fdb9c972ba5c2c0a363cb2c63495a66bfd1733447148627127900146817783009f635bdc830c6f1d7e7dce01f91856beed97983e22764e7ed377e2f0d4e7f0fb70e594d43a85dbbfbbce46346215aad277143c08bd0a80f4a", @generic="f8dfeebcd4e286fc", @generic="be7b5926b9c44d63b3903487c4f568467117e7691f732ed77402df0dd954859687722b07baad58bbc02098336dd055f82517756ed919cbd5963b0fa5717d7d3027bcf77c252ba581798867d2b333253f33091a34d8af4d4d6acdb66a6eb99677d98ab9971f8d6bffa6623257f0fdbaf0139f54bb548ec6cb89a96acd37101146797a9572d41e2773a28223672492ac963cd7d88cc9beb6bbde093136", @generic="303ce712ad5eea040aa617"]}, 0x234}, {&(0x7f0000004f80)={0x4a8, 0x25, 0x4, 0x70bd29, 0x25dfdbff, "", [@nested={0x2e, 0x64, 0x0, 0x1, [@nested={0x4, 0x149}, @nested={0x4, 0x84}, @generic="a4d46e200000006b04100f033add2b57afd150ff62062a704663fc8765aef0255a75"]}, @nested={0x11d, 0x107, 0x0, 0x1, [@typed={0x8, 0xb4, 0x0, 0x0, @fd=r3}, @nested={0x4, 0xe4}, @generic="1ec3531dcebae3106b1b0fc1e83427fa026fe1924a1964008fb9aad6a09672a890570710053815f9bcb6dd6d0c0aabbea020d5937ba7010662a43572cc06961ceeac3fa4ba0b9852fa3a02f6c7cbc7ef5e6e7bc543142c8b4bbcf6edbb27cc6f5121ef00560535fa89e9bd53444dd44330c5ac30d41d9f9831", @generic="619d82c1e432db2c0943d380034d800c26ea075e1f265cc7bfcc52b85503cfd6c7e8ec354592e9b481dcebc11197fc57cf73124e1c3626aa0c28d0a2d9c73c0013b91b44d8363174595da09cfccac51864868a90a4705bcb0c9b68204436996ce74ebfefa98bece0742773562fd21321084a26aeee2264bf00c0eafc4e4ac5f79c893f7b52e34a91", @typed={0x4, 0x153}, @typed={0x8, 0x1a, 0x0, 0x0, @fd=r3}]}, @nested={0x1c5, 0xc8, 0x0, 0x1, [@nested={0x4, 0x123}, @typed={0x9, 0x114, 0x0, 0x0, @str='.#@{\x00'}, @nested={0x4, 0x92}, @generic="b4f21d6f2912fb5ad68985fa9f4ea47002b1f35876eabb275efcc7e5399cd3c402cb8906a94252b022159f8769f2d5cd7cebd184901d6d6482f391fb7bef336ed4dbbd2862835d25c40dd15ca86b3dbaf5f247ba9762ffaff961ca9511ae17cee81f7dcd3f88845847e42d5734abea4bade1b885bd5f99b7e896f3cbecd6d086b7250800378feb1f1c661221a3", @typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}, @generic="53be14a123b9bb523dfdab8064f24ecc9ba03f16c93a1c31dc5dc0f8227cef83140a779596a89f363e46a1af160ccaae4802268574f763ddff9eabbe42adb856841c9e908cbebab5733990063545f6be4abe0e7fe2249c452f3f4a71e47b5413539f0def726195b49cf2f4f2c86dddc0d0c51d", @nested={0x4, 0xef}, @generic="2cb98e616581967ac87ed25a60e19eda27a600fbd2afd96e9fcf544341758b28c7b7edc84b5be55cc2f06f573f8f1bbeb991d1aae4894fcc76e6fcd2b2aea13744dfb09afee53743dfbe0dfb692e4eb000fecb052fdc0b453c79bf5a60787e6b4ffa61c4aca867f7d60ff3ba8ab82888dcbbf5dec81f7c2065af4fc7a380ed3818d29b250dc979de7bb711581c3543f697dcdd23cc746d82d5e2b1d94c", @nested={0x4, 0xb5}]}, @nested={0x17e, 0xbb, 0x0, 0x1, [@typed={0x8, 0x140, 0x0, 0x0, @pid=r6}, @typed={0x4, 0x168}, @nested={0x4, 0x113}, @typed={0x8, 0xdb, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="8b8dc5fa34ec3c32f7c70f32e6a40bd6dd857c76f648c0540713b464715955479749c079beb906c397db8800fd55aeb3d0175f8a66646d3c434e68449d8416c2041dd0b1d700fbbddfe42656fc", @generic="561ea4e938382785ba0c9540a7a347973cf2507c89047448818d2e5bdc00284d", @typed={0xc, 0x15b, 0x0, 0x0, @u64=0x9}, @generic="f5e2779752591fdf5b10b1f138f7c047c3ff42ce2839f1e9521712a5f0172b28a2fb42a74cbdf23b43270b9afe01447ded26a7e0b819f7ecb23dfe215b31e8dda7b4f1d75cbfd9c2aa2c1127ff23cad7b8bb3dfb7f31ffe47d4f082f393df3f4f06bbf947c432fa8a55ac3ae8fc9ede4119826e97985b30ecb070eb033a01a9921364a54288e9e4febbe1ca9edf0e045806ba572277c3f1a155003c647754577b50df2f337f15645311fdd50e00724e75fafc54b9a4f2d6cd4e90e1ecbcde9a2cd39090b9bca1161e4b3ed00f88d35b3f7fe5f7879bcf8ec4fcd2f9f6152", @generic="f833e03be32b5f8d32880d"]}]}, 0x4a8}, {&(0x7f0000001980)={0x2250, 0x28, 0x100, 0x70bd2a, 0x25dfdbff, "", [@generic="f4fc40", @nested={0xc, 0x87, 0x0, 0x1, [@nested={0x4, 0x102}, @nested={0x4, 0xb}]}, @generic="8ea211d69841a16fef669f939f0ce5e67f32b9e35f2b54d8204f2db38d1c02a128a7a611c66149ef5d2ae61d958db44b6e2c5019329672ce75935d615afa240c02b40376c840a3ba99b64f139155573f5ce2554bf3d626fae478aac20770254ffcc7fa21d936435b0d0a61d693ca3a3e4ecb11bb4383d054e692e17385f44a5d78999da81b35d41412010428351619f77c85d72421f02dfdaf20429dd85d0cb343e8cb4dc776cfda5abf49fdc57ce08e3644c8e2b1f2bb262a09bda6d4177fc2dbfa8c17bf5058324d41b55055e5032ae11ad8f9b897092f255d995d02a146157b1a3b42a83031b3f6af87f8ece2ed5f4f3577850e9c72c1e4caf2c0e631112ed82545b7776d883caa94fa65b9f8cf32ffb26f86441a178320c9b24a00d7a9efc261d25d9fcc2d852c0ed7b89fc16bb1d02b389508f451778b54abd83f34bfaee4052dfe1de02340f17741d7a3db660d62870f476cb7cc160b61babbb9600c50dc0e6523e0d3d4f93814f1bb4c14032456d84f15c9187d61777c58ec6459c46f2b8afd088252b6b7f8f269bff9016a41a538eea5bbd099466e67499c72f690d8b082496f00aaf02a535ed413b538e87318b0250e9c30ba6c5e70814e1b952db88e3102a8c7d748b807c62a14c47801b7fb038046235590ffd594d9f243a6618d2e56625a86e6f2e6304eaacfa3fef867956dfc544f921b99be6459451fe9468743a7979cca4fcaa9cddcfed2fbc95d71bb0aae5230eaadcf89cc9c2f69e50ee4db1c5fc053f9801abc064de8421bf1ff7e5ca30ab844d022816cd230c9431bc26036beb4a21a8954c6cb4ca4d19c71bfe5d202bc0ba27a5f1d22ed430ef9fef5af735da7880d26bc7daaf459c89f478c8395f2c54f35acf54865c87ed84fb62bccfdea15761307db8c5d99ed7a19a4339c7ba4309ef5212b4a5654c3b91d0e6df5a9afb6e55f8b33fcbd7adaf2ca36edba05ce3c4526a4d4a3fd20dc83da87e53b12d2fe45df8cc777c047151855d37c839fed452b972b2f4be93aaf090fd6795198ab9b7cf869a201dabd0f095d9dde13067a834ab4e4a20772ec832db0b13b4f60bac4ca1e6c765808621ec100777dcb0b8a488f8676f4b38b83d2ea7a8c396c48216da2891dfb113f1df2146d10f0ffb41518575d28a67856644f8a89316c1aba9e4c3be9f8c6d10965bf12b7a26bf8d7bbcc5015dc6d1fb88b32d6e3cb49e52b8a7a2a94df25f41788a73cde2bfda71ef9a1c19f9046852ff5f531728e09ee55f391917dbad903201d6740430087570492f20ac88a932f3835d9223ac78838c979c211c13513a38c2df79f1f2a70f404f01b6db2769794b679343bfe1a12fb2029af101a1fdce994b96df186fedebd8b279c17c3410343d0adac6eddc5ff0781a86f98e24e2421b4a833b173507bb23f3d676b153ed70a4a762f0599354d615c757b2e3adf3700db85a1bc1523c9ec756f57f5858bcbe6da577db4efb906afceb45120d73e7ebbdd9f474beb32873cec8e45c23388f390ea32619876fa3e46610e9cff4a4358f42326074d82f0c6d9160feede5783b62b2b4e85a8593fe5138f74861c1abfa94a1d8a86fc33548753937dbb65d86369f19146f18c4ac3071a07de4c9a42ba4d4dd218381122710d659160abd6619f3c45d650e7aa5b0661bd15b8350c931d505e7cdd077693faad5b3b8685658b21533590d03cf09e15d9e452ac7828946ef341891041d3828a9da8ede579e4bc0f6741b21391bca7b2cadba7a19eaf1f9ece60ddbe28c61311617aacb24665b90d997b75786251bfe1452561f623c7f6493b95842568f93b86f0533099baa1d20f823520b7097b43fb5fdcbf73b437814c038b2eef70d3876b3ca69c13e0e84b068a67f58da9562164831fe8870b3e2cd68acd4ef93bbe35540e45c1e55850e3ec4acae1a753b7ffbe402694dbda0d4bcddbbf8e4a0f8620d60bf19dd8040d920f7234cdf07401886cc1cf7401204482d374a80f835b5e9d3ac2bb2f1f36aac3e933a3b122a2c1428f8bc704dd9b95ce287145ab95639e4cc6ff3979e2084ae9013d08e9afb3ea41dcdfd8e6b6b01945b0166abd370c1b1c9cbdf8ddf36e17b9dbf422377e41b3618b79f29b7f77f69f9513875f1953d5bd2f0acf6e9aab673ab2ce0696b7e0628d9b4a2af46ec3089bccb026a86d18827b30d54a157d63d63d8ddef20fb96066144e82107ddfa9d5c0aff916ee8ea8907a21b8ea045b8a78788490d339db5e4e988673be4e0cabc23770283e10283e1ca69d17c35d50f3217d04e0d5437effd5f483b66aba3c13932f1bed2650826369dbc8abb596ebd05f9916b4b5160bfeff3f2686d9a5eef8db4c11ca50d4153b5f330fa9ad5ebac353cd75645fda701cd159dc8124c9cb1e81ed1bde57cab87025b20868a2d6f2bcf21885539c93303ebddd32da8faefffe230a934b5a926face73fc82f7355a11b897daea2a7b1aec457df23b6c4d62a8eb1d20628c73b709064256ff00a524755d895dbdbe9d846c4afdc1fec1f87a3a63f858a114be39d2d735c3bf786b079d44e2aee0141f6e55eb697551427f68da5f74530cf6703508ce2f1b1f66ff6f6c366e528f1ab2a804b504345fd608ca20baa1746e56e9161a1715ffa011f70957164cfd0eb9eb67379fdfeecc278b98117ea6ab89a65faab783a5ce4d6e60474dde6a2b1500ede59fea7643aa56a294a2351ac9ca2e2a586df866b7ccc22ec86d744e2d678bfdd7e6c5dc4b72f913569f8f02a5742b259162f512667214209221b026d38e6bffe1d706fe3f32ffd7eb0ff07c0f444e1e7a3b65e94e8247767b20d91327cc7194b077034530098a47476e59d5df257b12a0d0d6192a2dee5e40dd4529a05aad9e9dd32d2f3b136f4e8eedd23010721867e3ce41176db58650190ed9040c293fafb96886e4f3c13dd3c619219ff4059bf7903007a52544df21b64a55ed2395307e64504ee6e6aa492ef6dec62fcf8b050c57d56087f4d146bfa370a455de64d7c2572c42e0daa25f58e339e0d3180f6930bcef5f52ed337d8f51d57547848aba91e5b128c88def453c5ae4a9e959bc83f9c86ea79c91c25a9c5b4c39bd63c70dbbd03d4780cde3b1b2e97480eb40a1489e81c9b13fbdb7b8ce1298a75f40b2c863058eb23d5dcd2db7f1db54b1d5b5f364262864b388fa9c5e94e0f981d74aa5bede5a2f5851ac2ca65608e59a2fccd9c2f8766a443fdaef65e37cab213c151322247de663d13c6a8b1038ec26d795c74925903e5db5c540ce7a5e1f5a854a4b4b7bcf9c244506a076500b3f7238c1d266aa77dc7377eb0697e57eb0fc8a1e70b6d3d5adf9d0819241ca9157864fb008e7776a92a5d5f75f7d94445823ed8e18996892c32286c6c9c0ea1768fd06e31301952e5216a0430d66e6282c8fb32c2ed7969848d4b42fa2d669b159c8448afaefaab3d043e7f4eea4989152fc78647f2bfe7d72dbec67db14cd15edae2bbaa023d5f7534720efdabb0a0fc18dfa0a9cbfc621999ffbe53340df814f42e8e702732a8924707abc3d6505c0358fd6e693d904009ea86ddf9d3100ca0bb35c0574fe2cd6b0d72513cae503ca5702f1bbcab1a9be42a5c728ee45f5628f40a5674ab48519905cd5e56d0cacd05fcfb54385b9102c8e6d80a59d2bde6aca1eaed368b586e1b8dab68c7d2b97292e574eba5682ddbdbd1c8cf2324df64f54801205312187a9fed827bedfd31f0fbb07d0fd4e96ca9489ddc93535ee5b76846895f5f60c57b9ba30e80d26e2cfc31b65163682dc7a2c1345d7de26c38017c810955f13bf079e4d6e2983416920bf9e7d5d85096f3ff99ac6fe2113d5836eb112878d70c7015f0567ad23277e95616bbc03037cf74018e82de98038cdf4fad2d99d633b49af258486c36964951644d8d3dd9378f8244341b26fcff88859afb99f3c5ad05c37abad207ac86bf87d3a876f8a69c1553b74578ebad6d6b46984b5a7b44a4a4c7b5aee006d7ff700eeacc1cff37dca40334746ee2a039d5ed801823575a8b7bbd184e007582d04321cd7fca1694482470fa63a0a76d322c3348cc34e24287d4ef947f1fcf77c6815ca917090a53527659f7e1dd0148239f00c0b36929da8367436f8f24fa30a03a03c7ac119b2d14161dbe3edff37888376fe0f354426e8ad3d5456af9b30ee761c423114523f1605f794b5981dffbbc51bfa7845ee3d566c80c9d29f70be4d9eb829db82aea0a016d969d4818c2e76e40185fe5e62af26051225922f8870f6e72ee6218a9605bc3ad1e1e7fa38a6764fce56600d2d5ed88323ac049739a74e749119acac3203ab86ded9ba87899845ed290e6ad8b32a2a8d974c8ecb886e9591e0c43b12afa240fa107e14fae9e5a0c0c6822dffaaa705e0e4d967b7c1aa5768932f1d81591c0971cbcc602d4de6f55e14fc189b58a6de42bf1db07d6f2e41c8269d8b8fb509eeda270d4bedc925d5c25d8849e215f7efe9bc7f2fcaf3c5719ee6c05bcaebe623614690c56672f54035e21b06897fed2b86c84384ce947ba4b41aa01c6683fe8d7b7aeb11733c9d632c6c5b96b1365770378da1938dbfdcdf8ee42bb58026db7bfd271553b068a5f43bfa2eae44189496ac6e93140569994569b3d4a16374a921f28f3e48e8076697ba6746be421fe5297b42603f5613bbf7df608de4ed6aa25837c31d46cb855abb23f7ffdabf23bf7472983ddf1224bcbfb4728a7a26ebb69721dda024bcb508a75386db9704a002ed9a9935f29bbe534a35e71b5b01cd4e200e15382b1a1781a2efb242e8accdb3fc65b9776990a81642fddb5f738815b268238e23654f3835f50621bb4323440f442b5581eb5c4b391cd6b10a4a09d583b2202cf3c61df4f762d066f8429140849ddf32db80dcceaff97252ba17a7e2b47f72966e8d8f4577ae77e897736a8aac7bdc74c2ed0e6aa8f588f70dcc37567b7ed5d6fbbf63924216cf9aff52581dcf11f0342017935372b9a47864ffb806f9e608885271133cf21ccc57c319e59a5d566f46d5dde428e5dca40c986b007125eb210ff8084d55cf8103d9e8c3d31ac11ed901a5bcb789d2f9734dd382895fd3c65ddc7cbf6b40aba0c14a70e8dcc601cbb9577fdfad2dabffd649b8563d1a6c4dbf8c81302b423493188c57288850a5d143ba19cf54c1660634095eff1aa0794acb4f63fee328ee037bfc363826a2404fff601ceefdadcdc7d5ca6ccdf2c584f964996a7cd531ebf9e368eef9f4b0eb74a70984bb87b85c50060f7489abad5a0669aba2f8deb3b3fe1e6e7b45705ec1072e8056ebfcad874fc515742738646986a2e9c0b0a634307b531130efd22f36553b5506c6a32913d0fd8ff6ca3e4e41305890f9868a8893b8abcf7efe6fa53280ae4c0d21158ee1a6377c74299de427d8d14a58590a719c12490f93599167f16d78c29385c81a255e752f9f68eabe96be35fe5556156d7e0ef391ec179b1df68034e0e07218f496055495ebe45d85f7f44ae7a067d703c566671d07fa761233d7802fbbe753d73a0403967144832ab8dda460f0e544af7c89fe33e41e22ca24fbe3092e86239fe8a27606666d13dd49722daf94c9940645215eb161617e05a31f92aa8c063b288c21e10ec3e0c742e0e989df24aed3195b3c1248e821576fa9bfbfd10533a0e506a1d96de1f36b32b6e48551f5961422a29d718068a76b37b894dc34c51cfbef51172c5d5b4ac565e166722f1b14bb9a8bf447f5d2880ac2ec20632411c6452a82060b55d716e12414a5171cd99c669d2d599", @generic="ea44a60045d943766b3b377250946cbdab00cd6c744648207280a30e4e96481f786b9c096e25605f8a9982712775881a42e9503ff08975203bf0b01626d27afd18ebadc574b20c59480ccd07962ff78087bac0d64e78828093d23684dedfc5a546f443991df4a1db86f17a8ffd7d1b66d7df69072c85fb889d6cf30a9ecf6ef433315a8f2c99d7f31f74ff62b7b07179e8bda4352ac13eab7486fcb94be38274c316d14249393ae7960391f9f457137f2d1c0ba750f23cfe86c8ee872ae0f960895ab82b6549240e333e1fa8857de4e5b6cf0211d2e46b1aa5ee7e944800b57500ba0da887006da92dd17fa81f3cc7f7e3554d945cc062ce07a092890747", @generic="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", @typed={0x8, 0xa, 0x0, 0x0, @uid}, @generic="139a44353dd9a3b9022c0f8b52491fd48802a0d6f60e4caed52fd465cba243632714116639e6ecb465334054e0dcda7cedd328162a0401372feb5a7089ab71d6e9bf180c818a940b756c6349223a2b1b4fae54876f6615348c16102c14af14eb6a3542441aea3bb3dc49166c1a827aceb32841ce4c16cc74817b8a4fe3a628b9743d497d4283e0f8e433d7b8ddc88dfe6dd76ffc95a1c2117ce38fbc7c75df2d0673dcc3eaafc4ade412060c81c6fe798dfa01b47e67adb5a744337e898fa28db6faa2d9e936e19f09", @generic="d2dfb2627442df4ab12da143ff058857b33472a78aefd945f2da558a9bc9a09987ec40bace4e07194eff8240018b820ab9f64c4fd1e7f23773bba49114caadfb31992d89f445d7b03c9ff9779882112f1daa2bf86c708aabbfe2fde2b3a402f6"]}, 0x2250}, {&(0x7f0000005440)={0x218, 0x38, 0x8, 0x70bd27, 0x25dfdbfe, "", [@typed={0x14, 0xfc, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @generic="814959abfb5df42a01606ff1214cddfc262577ac26b351977b015237a850b8d8cb8131d68a40eb451714436e14e17485d83bf71a36a06509622fdfdaa385d69cb1ff88c4d9b84ac448fe8d13ba38d50bc1eec68cfe1f392f421af613d4058963470c55911ca919ef67f0d5b08c4dec20800eae2be2953bd2aa572c908441e8e2a6bf5a92630e5c7abd9d95544207a70591d2177f02cb8b4d", @generic="e92763aac03c25", @nested={0x77, 0x5f, 0x0, 0x1, [@nested={0x8, 0x163, 0x0, 0x1, [@typed={0x4, 0x8f}]}, @nested={0x4, 0x143}, @generic="17b4c4d6350d91cd5bf1a10efcae05f11bd66c5ae9d21a8696c138d0b0db", @generic="84218e631444dd391442325c7b13be3aab0b792158a731f03f7173ce6cbe7630d336b309f23d3224f6d52b027e69ed2ea559b4ff5743a39b92ed3de35bf8a48ef2", @nested={0x4, 0x11f}, @nested={0x4, 0xb2}]}, @typed={0x8, 0xac, 0x0, 0x0, @u32=0x800}, @nested={0xca, 0xab, 0x0, 0x1, [@generic="350c5b89ba856d8e9309d0f59a59ad85ece0b3c1af6dc1d6957bda945a134ab570c11049cbc317f923a34be66849c98e1225caf7b4142721ba0979d4b16130306ccf4d52875e9d5bd6514a2bfec7127aebb4b30ac666152aea1a230643abde735cee41d6818f3dd2f0f98e449a608a6f696749d73fc98c8bcf98f0f4dca1577565d282552cb5b46b64c81c4c57835c5df8351c3eca44b2dee254999c5c203ef443457aa06bab3d010d0450eaac630829b454", @nested={0x4, 0x90}, @nested={0x4, 0xb8}, @typed={0x8, 0x15a, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @nested={0x4, 0x7f}]}, @typed={0x4, 0xc5}, @typed={0x4, 0xe}]}, 0x218}, {&(0x7f0000003ec0)=ANY=[@ANYBLOB="1c0000003700010026bd7000ffdbdf09000000000500000000000000"], 0x1c}], 0x5, &(0x7f0000006080)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB="00000000140000001d0000000100000001000000", @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r12, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x1}, 0x4000800) 7.697616239s ago: executing program 3 (id=300): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="30000000100021042abd700033bc430000000000", @ANYRES32=r1, @ANYBLOB="000000000002010010001280080001006772650004000280"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x24000800) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, 0xffffffffffffffff, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f0000000300)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000007c0)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000280)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x5, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000003060300000000000000000001000007090002fc73797a3100000000050001000703"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x28880) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000001f00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0xbb8}, 0x1, 0x0, 0x0, 0x24008004}, 0x4000) 7.696071699s ago: executing program 0 (id=301): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000108, 0xec000000}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) r6 = dup(r5) write$cgroup_subtree(r6, &(0x7f00000001c0)=ANY=[], 0x32600) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r6, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000180)={0x92, @time={0x65757100, 0x1000000}}) 6.690732817s ago: executing program 1 (id=303): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x74}}, 0x4004000) 6.574397998s ago: executing program 5 (id=305): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) 6.528218902s ago: executing program 0 (id=306): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x50, &(0x7f00000006c0)=@generic={0x0, 0x0, 0x48, "e411c939", "b5b88dba02f33588c4ab05cf3747af0c0d2727aeb9bc66238e2d0d053fe22521beee255c45e3f7c2444b8140fbc783d47cafc6d9d60396258ae3818b170ce3a2152075204e329919"}) 6.390719789s ago: executing program 1 (id=308): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x2000000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 6.336955982s ago: executing program 5 (id=309): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb0800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7090500eb03000000000000649a3bfbc1d19cb307b3"], 0x0) recvmsg(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000025c0)=[{0x0}, {&(0x7f00000015c0)=""/4096, 0x94}], 0x2}, 0x1) syz_open_dev$dri(0x0, 0x400000000020, 0x20400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet(0x2, 0xa, 0x100) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/split_huge_pages\x00', 0x1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000040)=@ethtool_cmd={0x3a, 0x2, 0x0, 0x0, 0x0, 0x7e, 0x8, 0x0, 0x87, 0x0, 0x80000, 0x0, 0x1, 0x8, 0x0, 0x80000065, [0x2, 0x89ff]}}) write(r3, &(0x7f0000000600)='/,0x7f0', 0x7) shutdown(r2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r6) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091) write$cgroup_devices(r6, &(0x7f00000005c0)=ANY=[], 0xfffffeff) sendmsg$inet(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x3006c016) mount(0x0, 0x0, &(0x7f0000000010)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/net/afs/cells\x00', 0x24000, 0x0) 6.268220683s ago: executing program 3 (id=310): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) writev(r0, &(0x7f0000000540)=[{&(0x7f00000005c0)="08000000140019", 0x7}], 0x1) 6.172172147s ago: executing program 4 (id=311): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="30000000100021042abd700033bc430000000000", @ANYRES32=r1, @ANYBLOB="000000000002010010001280080001006772650004000280"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x60}}, 0x24000800) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, 0xffffffffffffffff, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f0000000300)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000007c0)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000280)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x5, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000003060300000000000000000001000007090002fc73797a3100000000050001000703"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x28880) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000001f00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0xbb8}, 0x1, 0x0, 0x0, 0x24008004}, 0x4000) ioctl$OCFS2_IOC_UNRESVSP64(r3, 0x4030582b, &(0x7f00000002c0)={0x2, 0x2, 0x1, 0x4, 0x6, 0x8000}) socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 5.038734645s ago: executing program 1 (id=312): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0xb9d4, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, 0x0) 4.907885861s ago: executing program 3 (id=313): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000108, 0xec000000}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) r6 = dup(r5) write$cgroup_subtree(r6, &(0x7f00000001c0)=ANY=[], 0x32600) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r6, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000180)={0x92, @time={0x65757100, 0x1000000}}) 4.776097873s ago: executing program 5 (id=314): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @remote, 0x9}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_getvlan={0x38, 0x72, 0xb01, 0x70bd2b, 0x25dfdbfe, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x38}}, 0x4040) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r6, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0xc, "d92984ad1ca44c226af5160e961711a000f2170e65e3f50327e4221c0000000000195f0000000000005700", 0x100000100000003c}, 0x60) getpeername(r6, 0x0, &(0x7f0000000100)) syz_emit_ethernet(0x66, &(0x7f0000000880)={@link_local, @random="0000fc00", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x1, 0x1b, 0x58, 0x64, 0x0, 0x4, 0x2f, 0x0, @multicast1, @multicast2}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x0, {{0x3, 0x1, 0xe2, 0x0, 0x1, 0x1, 0x1, 0x8}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x4, {{0xf, 0x2, 0x2, 0x3, 0x0, 0x0, 0x7}, 0x2, {0x9c, 0xbd, 0x0, 0x19, 0x1, 0x1, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f00000007c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000600)=[0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2, 0x3}) 4.683335178s ago: executing program 1 (id=315): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x40}, &(0x7f0000000300)=0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) listen(r1, 0x100004) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000040)=0x80000005, 0x4) sendmmsg(r2, &(0x7f0000004d40)=[{{&(0x7f0000000080)=@in={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x34}}, 0x80, 0x0}}], 0x1, 0x24008010) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) userfaultfd(0x801) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='1', 0x1) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) bind(r5, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80) connect(r5, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) 4.675899335s ago: executing program 4 (id=316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @quota={{0xa}, @void}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.641554529s ago: executing program 5 (id=317): socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) read$FUSE(0xffffffffffffffff, &(0x7f00000042c0)={0x2020}, 0x2020) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x25, 0x0, 0x1, 0xfffffffd}, {}, {0x81}, {0x0, 0x1}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8090}, 0x8000) syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x8900, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x40, 0x0) syz_emit_ethernet(0xa, 0x0, &(0x7f00000001c0)={0x10004, 0x1, [0xb8f, 0x4a7, 0xb55, 0xcd3]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000400"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f00000002c0)='bfs\x00', 0x800041, 0x0) 3.638456138s ago: executing program 4 (id=318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x74}}, 0x4004000) 2.76883554s ago: executing program 0 (id=319): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x3ff]}, 0x8) poll(&(0x7f0000000080)=[{r0, 0x1000}], 0x1, 0xfffffff9) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(0x0, 0x0) r3 = open(0x0, 0x0, 0x122) memfd_create(0x0, 0x5) syz_ublk_setup_io_uring(0x22, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x840, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000080)={'dt2815\x00', [0x3c4, 0x14, 0x2, 0x9, 0x46, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x0, 0x723, 0x400, 0x1, 0x13, 0x100, 0x2, 0x66, 0x34d, 0x5, 0x402, 0x9, 0x200, 0xe2df, 0x8, 0xfffffffe, 0x4, 0x0, 0x7, 0xf56, 0x6]}) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f00000001c0)={0x1fd, 0x0, &(0x7f0000ffc000/0x1000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYRES16, @ANYBLOB="0100fdffffff000000", @ANYRES32=r6], 0x4c}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000000) r7 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r7, 0x40106f52, &(0x7f0000000040)={0x1b, &(0x7f00000000c0)=[{0x1b, '\x00', @st={0x4, [{0x70cf3a29631e7de, @svalue=0x8}, {0x1, @svalue=0xff}, {0x1, @uvalue=0x105}, {0x2, @svalue=0x1400}]}, 0x8000006}, {0x16, '\x00', @st={0x4, [{0x0, @svalue=0x3ff}, {0x2, @svalue=0x3}, {0x1, @uvalue=0x4}, {0x3, @svalue=0x7fffffffffffffff}]}, 0x27fffffc}]}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mptcp/available_schedulers\x00', 0x0, 0x0) read(r8, 0x0, 0x0) signalfd4(r0, &(0x7f00000003c0)={[0x4]}, 0x8, 0x80000) 2.737709457s ago: executing program 4 (id=320): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace/set_event\x00', 0x2, 0x45) pread64(r0, &(0x7f0000000040)=""/107, 0x6b, 0xab7f) (fail_nth: 2) 2.731404331s ago: executing program 1 (id=321): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="30000000100021042abd700033bc430000000000", @ANYRES32=r1, @ANYBLOB="000000000002010010001280080001006772650004000280"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x24000800) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, 0xffffffffffffffff, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f0000000300)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000007c0)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000280)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x5, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000003060300000000000000000001000007090002fc73797a3100000000050001000703"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x28880) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000001f00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0xbb8}, 0x1, 0x0, 0x0, 0x24008004}, 0x4000) 2.268621942s ago: executing program 3 (id=322): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x2000000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 2.148341092s ago: executing program 4 (id=323): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) writev(r0, &(0x7f0000000540)=[{&(0x7f00000005c0)="08000000140019", 0x7}], 0x1) 2.143414587s ago: executing program 5 (id=324): r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYRES32, @ANYBLOB="45d252adcf62150a325e93a71e530184650da1afc97e33f469643526c998a066d109b35920df03dd3548032c85eabcd123b89aaa5e06b076629fe713efc7e4bb2c9cbd0d1e5072b409e62fd73cfbbac726898279b98e734192d4bb1bde38ad0e293155a73bf9b48feca19070d4d8c46be4a54456323f86dc45a9108bf29b78c68fdc04546f19074345ec2c40015ac57cf30d794efe6737b06c56954b60f9f7f1ef2544ab45365b6f86eb6191b585d38ef49cb980a72a97aaa716ac4ea877f571c349c768e2f0fd60f530523d6e576e3d6ca4012db109cef090fb61a6151b2ca9bea4e104c26dc17f8faf", @ANYRES32=r0], 0x58}, 0x1, 0x0, 0x0, 0x40810}, 0x48001) openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) socket$netlink(0x10, 0x3, 0x10) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r2, 0x89e1, &(0x7f00000000c0)='lapb0') socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000940)={0x2, 0x0, 0xfffdffff, 0x2, 0xb5}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'dummy0\x00', @random="8ed3e46724fa"}) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x4, 0x8, 0xfffffff9, @vifc_lcl_addr=@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x3, 0x0, 0x87, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x24}, 0x6b) listen(0xffffffffffffffff, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) 524.043265ms ago: executing program 4 (id=325): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1fe) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r5, 0x0, 0x0) write(r5, &(0x7f0000000400), 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, 0x0, 0x0) close(r5) unlinkat(r5, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00', 0x0) rmdir(&(0x7f0000000340)='./config/usb_gadget/g1/functions/phonet.usb0\x00') rmdir(0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) 396.233101ms ago: executing program 3 (id=326): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0xb9d4, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, 0x0) 279.479535ms ago: executing program 5 (id=327): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24841}, 0x4840) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x4040880) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0xe8, 0x180, 0xffffffff, 0xffffffff, 0xe8, 0x180, 0x218, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x830, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010102, @broadcast}, {{0xfffc, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x8}}}}}}, 0x0) 252.605833ms ago: executing program 1 (id=328): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x40}, &(0x7f0000000300)=0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) listen(r1, 0x100004) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000040)=0x80000005, 0x4) sendmmsg(r2, &(0x7f0000004d40)=[{{&(0x7f0000000080)=@in={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x34}}, 0x80, 0x0}}], 0x1, 0x24008010) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) userfaultfd(0x801) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='1', 0x1) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r5, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) bind(r5, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80) connect(r5, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) sendto(r5, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=329): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000940)='timerslack_ns\x00') read$FUSE(r0, &(0x7f00000042c0)={0x2020}, 0x2020) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x25, 0x0, 0x1, 0xfffffffd}, {}, {0x81}, {0x0, 0x1}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8090}, 0x8000) syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x8900, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x40, 0x0) syz_emit_ethernet(0xa, 0x0, &(0x7f00000001c0)={0x10004, 0x1, [0xb8f, 0x4a7, 0xb55, 0xcd3]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000400"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f00000002c0)='bfs\x00', 0x800041, 0x0) kernel console output (not intermixed with test programs): valid bInterval 0, changing to 7 [ 82.798261][ T968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.846709][ T968] usb 5-1: config 0 descriptor?? [ 82.867293][ T25] usb 3-1: config 0 descriptor?? [ 82.880173][ T25] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 82.880219][ T25] usb 3-1: selecting invalid altsetting 1 [ 82.880264][ T25] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 82.912413][ T25] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 82.926184][ T25] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 82.936074][ T25] usb 3-1: media controller created [ 82.955377][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 83.066172][ T968] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 83.318344][ T92] usb 5-1: USB disconnect, device number 2 [ 83.396001][ T6054] netlink: 388 bytes leftover after parsing attributes in process `syz.1.53'. [ 83.452147][ T6057] FAULT_INJECTION: forcing a failure. [ 83.452147][ T6057] name failslab, interval 1, probability 0, space 0, times 0 [ 83.452191][ T6057] CPU: 0 UID: 0 PID: 6057 Comm: syz.3.54 Not tainted syzkaller #0 PREEMPT(full) [ 83.452213][ T6057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 83.452223][ T6057] Call Trace: [ 83.452230][ T6057] [ 83.452237][ T6057] dump_stack_lvl+0x100/0x190 [ 83.452268][ T6057] should_fail_ex.cold+0x5/0xa [ 83.452294][ T6057] should_failslab+0xc2/0x120 [ 83.452324][ T6057] __kmalloc_noprof+0xfc/0x840 [ 83.452341][ T6057] ? enqueue_to_backlog+0x45d/0x1130 [ 83.452360][ T6057] ? ___neigh_create+0x1532/0x2940 [ 83.452387][ T6057] ___neigh_create+0x1532/0x2940 [ 83.452413][ T6057] ? __pfx_nf_hook+0x10/0x10 [ 83.452440][ T6057] ? netif_rx+0x65/0xb0 [ 83.452458][ T6057] ? __local_bh_enable_ip+0xa5/0x120 [ 83.452478][ T6057] ? lockdep_hardirqs_on+0x7d/0x110 [ 83.452497][ T6057] ? netif_rx+0x65/0xb0 [ 83.452512][ T6057] ? __pfx____neigh_create+0x10/0x10 [ 83.452536][ T6057] ip6_finish_output2+0x1052/0x1d50 [ 83.452566][ T6057] __ip6_finish_output+0x357/0xdf0 [ 83.452585][ T6057] ip6_output+0x2aa/0xa60 [ 83.452600][ T6057] ? __pfx_ip6_output+0x10/0x10 [ 83.452614][ T6057] ? lock_acquire+0x1d1/0x380 [ 83.452640][ T6057] ? __pfx_ip6_finish_output+0x10/0x10 [ 83.452655][ T6057] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 83.452680][ T6057] ip6_mr_output+0x233/0x1180 [ 83.452702][ T6057] ? __pfx_ip6_mr_output+0x10/0x10 [ 83.452719][ T6057] ? __ip6_local_out+0x4f4/0xaf0 [ 83.452736][ T6057] ? __ip6_local_out+0x4f4/0xaf0 [ 83.452763][ T6057] ? __pfx_dst_output+0x10/0x10 [ 83.452778][ T6057] ? lock_acquire+0x1d1/0x380 [ 83.452793][ T6057] ? ip6_send_skb+0xb9/0x430 [ 83.452808][ T6057] ? __pfx_ip6_mr_output+0x10/0x10 [ 83.452828][ T6057] ? ip6_local_out+0x1ad/0x1f0 [ 83.452843][ T6057] ip6_local_out+0x1ad/0x1f0 [ 83.452861][ T6057] ip6_send_skb+0x112/0x430 [ 83.452878][ T6057] udp_v6_send_skb+0x9cb/0x13c0 [ 83.452905][ T6057] udpv6_sendmsg+0x227d/0x2c20 [ 83.452923][ T6057] ? avc_has_perm_noaudit+0x56/0x3b0 [ 83.452957][ T6057] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 83.452974][ T6057] ? avc_has_perm_noaudit+0x145/0x3b0 [ 83.452998][ T6057] ? __pfx_avc_has_perm+0x10/0x10 [ 83.453024][ T6057] ? sock_has_perm+0x25a/0x2f0 [ 83.453060][ T6057] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 83.453080][ T6057] ? inet6_sendmsg+0x105/0x140 [ 83.453099][ T6057] inet6_sendmsg+0x105/0x140 [ 83.453120][ T6057] ____sys_sendmsg+0x704/0xbe0 [ 83.453141][ T6057] ? __pfx_____sys_sendmsg+0x10/0x10 [ 83.453163][ T6057] ? _kstrtoull+0x144/0x200 [ 83.453179][ T6057] ? __pfx__kstrtoull+0x10/0x10 [ 83.453200][ T6057] ___sys_sendmsg+0x190/0x1e0 [ 83.453221][ T6057] ? __pfx____sys_sendmsg+0x10/0x10 [ 83.453250][ T6057] ? __fget_files+0x34/0x3d0 [ 83.453283][ T6057] __sys_sendmmsg+0x20c/0x440 [ 83.453301][ T6057] ? __pfx___sys_sendmmsg+0x10/0x10 [ 83.453316][ T6057] ? ksys_write+0x190/0x250 [ 83.453346][ T6057] ? fput+0x7c/0x100 [ 83.453364][ T6057] ? ksys_write+0x1ac/0x250 [ 83.453379][ T6057] ? __pfx_ksys_write+0x10/0x10 [ 83.453397][ T6057] __x64_sys_sendmmsg+0x9c/0x100 [ 83.453412][ T6057] ? lockdep_hardirqs_on+0x7d/0x110 [ 83.453429][ T6057] do_syscall_64+0x123/0x790 [ 83.453448][ T6057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.453464][ T6057] RIP: 0033:0x7f851999e159 [ 83.453478][ T6057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.453492][ T6057] RSP: 002b:00007f851a84d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 83.453508][ T6057] RAX: ffffffffffffffda RBX: 00007f8519c25fa0 RCX: 00007f851999e159 [ 83.453519][ T6057] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 0000000000000003 [ 83.453528][ T6057] RBP: 00007f851a84d090 R08: 0000000000000000 R09: 0000000000000000 [ 83.453537][ T6057] R10: 0000000034001405 R11: 0000000000000246 R12: 0000000000000001 [ 83.453546][ T6057] R13: 00007f8519c26038 R14: 00007f8519c25fa0 R15: 00007ffdcb9e66f8 [ 83.453568][ T6057] [ 83.884254][ T6062] FAULT_INJECTION: forcing a failure. [ 83.884254][ T6062] name failslab, interval 1, probability 0, space 0, times 0 [ 83.884308][ T6062] CPU: 0 UID: 0 PID: 6062 Comm: syz.1.55 Not tainted syzkaller #0 PREEMPT(full) [ 83.884329][ T6062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 83.884338][ T6062] Call Trace: [ 83.884344][ T6062] [ 83.884349][ T6062] dump_stack_lvl+0x100/0x190 [ 83.884376][ T6062] should_fail_ex.cold+0x5/0xa [ 83.884399][ T6062] should_failslab+0xc2/0x120 [ 83.884418][ T6062] __kmalloc_cache_noprof+0x91/0x6d0 [ 83.884441][ T6062] ? sctp_add_bind_addr+0xae/0x3e0 [ 83.884464][ T6062] sctp_add_bind_addr+0xae/0x3e0 [ 83.884484][ T6062] sctp_copy_one_addr.part.0+0xea/0x120 [ 83.884504][ T6062] sctp_bind_addr_copy+0x1b4/0x530 [ 83.884527][ T6062] sctp_connect_new_asoc+0x1c9/0x770 [ 83.884551][ T6062] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 83.884575][ T6062] ? selinux_sctp_bind_connect+0xe0/0x230 [ 83.884607][ T6062] sctp_sendmsg+0x1743/0x22e0 [ 83.884634][ T6062] ? __pfx_sctp_sendmsg+0x10/0x10 [ 83.884656][ T6062] ? sock_has_perm+0x25a/0x2f0 [ 83.884676][ T6062] ? __pfx_sock_has_perm+0x10/0x10 [ 83.884702][ T6062] ? __might_fault+0xc5/0x140 [ 83.884729][ T6062] ? __pfx_sctp_sendmsg+0x10/0x10 [ 83.884752][ T6062] inet_sendmsg+0x11c/0x140 [ 83.884773][ T6062] __sys_sendto+0x453/0x4e0 [ 83.884794][ T6062] ? __pfx_inet_sendmsg+0x10/0x10 [ 83.884814][ T6062] ? __pfx___sys_sendto+0x10/0x10 [ 83.884841][ T6062] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 83.884869][ T6062] ? ksys_write+0x1ac/0x250 [ 83.884883][ T6062] ? __pfx_ksys_write+0x10/0x10 [ 83.884900][ T6062] __x64_sys_sendto+0xe0/0x1c0 [ 83.884921][ T6062] ? do_syscall_64+0xae/0x790 [ 83.884938][ T6062] ? lockdep_hardirqs_on+0x7d/0x110 [ 83.884955][ T6062] do_syscall_64+0x123/0x790 [ 83.884974][ T6062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.884990][ T6062] RIP: 0033:0x7efe57d9e159 [ 83.885004][ T6062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.885018][ T6062] RSP: 002b:00007efe58d37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 83.885034][ T6062] RAX: ffffffffffffffda RBX: 00007efe58025fa0 RCX: 00007efe57d9e159 [ 83.885044][ T6062] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 83.885054][ T6062] RBP: 00007efe58d37090 R08: 000020000005ffe4 R09: 000000000000001c [ 83.885063][ T6062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.885072][ T6062] R13: 00007efe58026038 R14: 00007efe58025fa0 R15: 00007ffcf3289e78 [ 83.885098][ T6062] [ 83.947709][ T5709] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 83.947731][ T5709] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 83.949410][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 84.049790][ T25] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 84.049858][ T25] zl10353_read_register: readreg error (reg=127, ret==-110) [ 84.130585][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 84.130601][ T30] audit: type=1400 audit(1788222067.625:328): avc: denied { create } for pid=6065 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 84.149963][ T30] audit: type=1400 audit(1788222067.645:329): avc: denied { bind } for pid=6065 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 84.210009][ T30] audit: type=1400 audit(1788222067.705:330): avc: denied { setopt } for pid=6065 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 84.262861][ T30] audit: type=1400 audit(1788222067.755:331): avc: denied { accept } for pid=6065 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 84.293822][ T30] audit: type=1400 audit(1788222067.785:332): avc: denied { name_bind } for pid=6068 comm="syz.4.58" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 84.360866][ T30] audit: type=1400 audit(1788222067.855:333): avc: denied { read write } for pid=6077 comm="syz.1.59" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.384976][ T30] audit: type=1400 audit(1788222067.875:334): avc: denied { open } for pid=6077 comm="syz.1.59" path="/dev/raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.410017][ T30] audit: type=1400 audit(1788222067.905:335): avc: denied { ioctl } for pid=6077 comm="syz.1.59" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.553848][ T25] usb 3-1: USB disconnect, device number 2 [ 84.684731][ T5723] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 84.845875][ T5723] usb 2-1: Using ep0 maxpacket: 32 [ 84.851723][ T5723] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 84.865186][ T5723] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.865228][ T5723] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.865276][ T5723] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.906861][ T5723] usb 2-1: config 0 descriptor?? [ 84.934250][ T5723] hub 2-1:0.0: USB hub found [ 84.940539][ T968] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.948161][ T30] audit: type=1400 audit(1788222068.445:336): avc: denied { write } for pid=6072 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.974803][ T30] audit: type=1400 audit(1788222068.475:337): avc: denied { write } for pid=6098 comm="syz.4.63" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 85.116112][ T968] usb 4-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 85.131055][ T968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.206388][ T5723] hub 2-1:0.0: 1 port detected [ 85.604643][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 86.074630][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 86.284633][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 86.392745][ T6106] syz.2.64 (6106) used greatest stack depth: 19976 bytes left [ 86.449728][ T5709] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 86.449751][ T5709] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 86.458274][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 86.506516][ T968] dln2 4-1:1.0: USB write failed: -110 [ 86.513186][ T968] dln2 4-1:1.0: failed to initialize hardware [ 86.545863][ T968] dln2 4-1:1.0: probe with driver dln2 failed with error -110 [ 86.865568][ T6091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.865942][ T6091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.043441][ T6110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.043860][ T6110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.061416][ T5723] hub 2-1:0.0: activate --> -90 [ 87.638163][ T968] usb 2-1: USB disconnect, device number 3 [ 88.175905][ T10] usb 4-1: USB disconnect, device number 2 [ 88.580895][ T6124] erspan0: entered promiscuous mode [ 88.656661][ T6133] FAULT_INJECTION: forcing a failure. [ 88.656661][ T6133] name failslab, interval 1, probability 0, space 0, times 0 [ 88.656709][ T6133] CPU: 1 UID: 0 PID: 6133 Comm: syz.0.68 Not tainted syzkaller #0 PREEMPT(full) [ 88.656731][ T6133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 88.656740][ T6133] Call Trace: [ 88.656747][ T6133] [ 88.656754][ T6133] dump_stack_lvl+0x100/0x190 [ 88.656784][ T6133] should_fail_ex.cold+0x5/0xa [ 88.656810][ T6133] should_failslab+0xc2/0x120 [ 88.656832][ T6133] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 88.656854][ T6133] ? kvasprintf_const+0x66/0x1a0 [ 88.656884][ T6133] kvasprintf+0xbc/0x150 [ 88.656908][ T6133] ? __pfx_kvasprintf+0x10/0x10 [ 88.656935][ T6133] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 88.656964][ T6133] ? __debug_object_init+0x2de/0x3d0 [ 88.656985][ T6133] kvasprintf_const+0x66/0x1a0 [ 88.657012][ T6133] kobject_set_name_vargs+0x5a/0x140 [ 88.657046][ T6133] dev_set_name+0xc7/0x100 [ 88.657069][ T6133] ? __pfx_dev_set_name+0x10/0x10 [ 88.657090][ T6133] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 88.657111][ T6133] ? lockdep_init_map_type+0x5c/0x250 [ 88.657129][ T6133] ? __init_waitqueue_head+0xca/0x150 [ 88.657154][ T6133] wakeup_source_device_create+0x204/0x2e0 [ 88.657177][ T6133] wakeup_source_sysfs_add+0x1c/0x90 [ 88.657197][ T6133] wakeup_source_register+0x154/0x3e0 [ 88.657226][ T6133] ep_create_wakeup_source+0x1df/0x2e0 [ 88.657252][ T6133] ? __mutex_unlock_slowpath+0x35d/0x930 [ 88.657273][ T6133] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 88.657300][ T6133] ? find_held_lock+0x2b/0x80 [ 88.657323][ T6133] ? do_epoll_ctl_file+0x2ba2/0x36e0 [ 88.657345][ T6133] ? do_epoll_ctl_file+0x2ba2/0x36e0 [ 88.657370][ T6133] do_epoll_ctl_file+0x1e26/0x36e0 [ 88.657400][ T6133] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 88.657423][ T6133] ? lock_acquire+0x1d1/0x380 [ 88.657438][ T6133] ? __fget_files+0x34/0x3d0 [ 88.657455][ T6133] ? find_held_lock+0x2b/0x80 [ 88.657478][ T6133] ? __fget_files+0x215/0x3d0 [ 88.657501][ T6133] ? __fget_files+0x21f/0x3d0 [ 88.657527][ T6133] ? do_epoll_ctl+0xfd/0x1a0 [ 88.657549][ T6133] do_epoll_ctl+0xfd/0x1a0 [ 88.657575][ T6133] ? __pfx_do_epoll_ctl+0x10/0x10 [ 88.657606][ T6133] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 88.657632][ T6133] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 88.657664][ T6133] do_syscall_64+0x123/0x790 [ 88.657686][ T6133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.657704][ T6133] RIP: 0033:0x7f8805b9e159 [ 88.657718][ T6133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.657734][ T6133] RSP: 002b:00007f8806a4a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 88.657751][ T6133] RAX: ffffffffffffffda RBX: 00007f8805e26180 RCX: 00007f8805b9e159 [ 88.657763][ T6133] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000006 [ 88.657773][ T6133] RBP: 00007f8806a4a090 R08: 0000000000000000 R09: 0000000000000000 [ 88.657783][ T6133] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.657793][ T6133] R13: 00007f8805e26218 R14: 00007f8805e26180 R15: 00007ffc8a0a0c78 [ 88.657817][ T6133] [ 88.939605][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 89.169887][ T10] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 89.265186][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.407437][ T10] usb 3-1: config 0 descriptor?? [ 89.500048][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 89.500088][ T30] audit: type=1400 audit(1788222072.995:352): avc: denied { map_read map_write } for pid=6135 comm="syz.4.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 89.658201][ T10] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 89.666725][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 89.679567][ T6139] smpboot: CPU 1 is now offline [ 89.771222][ T10] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 89.779867][ T10] [drm] Initialized udl on minor 1 [ 89.808578][ T10] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 89.835003][ T10] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 89.872433][ T30] audit: type=1400 audit(1788222073.365:353): avc: denied { append } for pid=6144 comm="syz.3.74" name="sg0" dev="devtmpfs" ino=1124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 89.896712][ T10] usb 3-1: USB disconnect, device number 3 [ 89.898652][ T6147] FAULT_INJECTION: forcing a failure. [ 89.898652][ T6147] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 89.898671][ T6147] CPU: 0 UID: 0 PID: 6147 Comm: syz.0.75 Not tainted syzkaller #0 PREEMPT(full) [ 89.898683][ T6147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 89.898690][ T6147] Call Trace: [ 89.898693][ T6147] [ 89.898698][ T6147] dump_stack_lvl+0x100/0x190 [ 89.898717][ T6147] should_fail_ex.cold+0x5/0xa [ 89.898731][ T6147] ? prepare_alloc_pages+0x16d/0x5b0 [ 89.898745][ T6147] should_fail_alloc_page+0xeb/0x140 [ 89.898760][ T6147] prepare_alloc_pages+0x1f0/0x5b0 [ 89.898775][ T6147] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 89.898798][ T6147] ? lock_acquire+0x1d1/0x380 [ 89.898809][ T6147] ? is_bpf_text_address+0x25/0x1a0 [ 89.898824][ T6147] ? find_held_lock+0x2b/0x80 [ 89.898838][ T6147] ? is_bpf_text_address+0x8a/0x1a0 [ 89.898851][ T6147] ? is_bpf_text_address+0x8a/0x1a0 [ 89.898864][ T6147] ? bpf_ksym_find+0x128/0x1c0 [ 89.898880][ T6147] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 89.898898][ T6147] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 89.898914][ T6147] ? is_bpf_text_address+0x94/0x1a0 [ 89.898928][ T6147] ? __kernel_text_address+0xd/0x30 [ 89.898944][ T6147] ? unwind_get_return_address+0x59/0xa0 [ 89.898960][ T6147] ? arch_stack_walk+0xa6/0xf0 [ 89.898980][ T6147] ? __pfx_stack_trace_save+0x10/0x10 [ 89.898996][ T6147] ? stack_depot_save_flags+0x27/0x9f0 [ 89.899009][ T6147] ? up_write+0x2dc/0x5b0 [ 89.899021][ T6147] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 89.899034][ T6147] ? policy_nodemask+0xed/0x4f0 [ 89.899049][ T6147] alloc_pages_mpol+0x201/0x550 [ 89.899063][ T6147] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 89.899087][ T6147] alloc_pages_noprof+0x1a/0x160 [ 89.899103][ T6147] get_free_pages_noprof+0x10/0xb0 [ 89.899114][ T6147] __kasan_populate_vmalloc+0xa0/0x210 [ 89.899136][ T6147] alloc_vmap_area+0x95d/0x2bb0 [ 89.899152][ T6147] ? kasan_save_track+0x14/0x30 [ 89.899163][ T6147] ? __kasan_kmalloc+0xaa/0xb0 [ 89.899174][ T6147] ? __pfx_alloc_vmap_area+0x10/0x10 [ 89.899186][ T6147] ? __get_vm_area_node+0x124/0x350 [ 89.899200][ T6147] __get_vm_area_node+0x1ed/0x350 [ 89.899215][ T6147] __vmalloc_node_range_noprof+0x268/0x1420 [ 89.899233][ T6147] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 89.899250][ T6147] ? __pfx_stack_trace_save+0x10/0x10 [ 89.899266][ T6147] ? stack_depot_save_flags+0x27/0x9f0 [ 89.899280][ T6147] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 89.899293][ T6147] ? __kasan_kmalloc+0xaa/0xb0 [ 89.899303][ T6147] ? do_syscall_64+0x123/0x790 [ 89.899317][ T6147] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 89.899335][ T6147] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 89.899347][ T6147] __vmalloc_node_noprof+0xad/0xf0 [ 89.899361][ T6147] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 89.899375][ T6147] __vmalloc_noprof+0xa3/0x120 [ 89.899388][ T6147] ? __pfx___vmalloc_noprof+0x10/0x10 [ 89.899406][ T6147] bpf_prog_alloc_no_stats+0x59/0x690 [ 89.899420][ T6147] bpf_prog_alloc+0x3b/0x200 [ 89.899434][ T6147] bpf_prog_create_from_user+0xb4/0x2e0 [ 89.899448][ T6147] ? __pfx_seccomp_check_filter+0x10/0x10 [ 89.899464][ T6147] do_seccomp+0x870/0x27c0 [ 89.899479][ T6147] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 89.899494][ T6147] ? __pfx___seccomp_filter+0x10/0x10 [ 89.899509][ T6147] ? __pfx_do_seccomp+0x10/0x10 [ 89.899525][ T6147] ? ksys_write+0x1ac/0x250 [ 89.899535][ T6147] ? __pfx_ksys_write+0x10/0x10 [ 89.899549][ T6147] do_syscall_64+0x123/0x790 [ 89.899562][ T6147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.899573][ T6147] RIP: 0033:0x7f8805b9e159 [ 89.899583][ T6147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.899593][ T6147] RSP: 002b:00007f8806a8c028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 89.899604][ T6147] RAX: ffffffffffffffda RBX: 00007f8805e25fa0 RCX: 00007f8805b9e159 [ 89.899616][ T6147] RDX: 0000200000000040 RSI: 000000000000000a RDI: 0000000000000001 [ 89.899622][ T6147] RBP: 00007f8806a8c090 R08: 0000000000000000 R09: 0000000000000000 [ 89.899628][ T6147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.899634][ T6147] R13: 00007f8805e26038 R14: 00007f8805e25fa0 R15: 00007ffc8a0a0c78 [ 89.899647][ T6147] [ 89.899776][ T6147] syz.0.75: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 90.139002][ T6147] CPU: 0 UID: 0 PID: 6147 Comm: syz.0.75 Not tainted syzkaller #0 PREEMPT(full) [ 90.139015][ T6147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 90.139022][ T6147] Call Trace: [ 90.139026][ T6147] [ 90.139030][ T6147] dump_stack_lvl+0x100/0x190 [ 90.139050][ T6147] warn_alloc.cold+0x9e/0xb2 [ 90.139063][ T6147] ? __pfx_warn_alloc+0x10/0x10 [ 90.139101][ T6147] ? lockdep_hardirqs_on+0x7d/0x110 [ 90.139115][ T6147] ? __get_vm_area_node+0x2f0/0x350 [ 90.139130][ T6147] ? __get_vm_area_node+0x22b/0x350 [ 90.139145][ T6147] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 90.139159][ T6147] ? __pfx_stack_trace_save+0x10/0x10 [ 90.139177][ T6147] ? stack_depot_save_flags+0x27/0x9f0 [ 90.139192][ T6147] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 90.139206][ T6147] ? __kasan_kmalloc+0xaa/0xb0 [ 90.139217][ T6147] ? do_syscall_64+0x123/0x790 [ 90.139230][ T6147] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 90.139248][ T6147] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 90.139261][ T6147] __vmalloc_node_noprof+0xad/0xf0 [ 90.139274][ T6147] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 90.139288][ T6147] __vmalloc_noprof+0xa3/0x120 [ 90.139302][ T6147] ? __pfx___vmalloc_noprof+0x10/0x10 [ 90.139319][ T6147] bpf_prog_alloc_no_stats+0x59/0x690 [ 90.139334][ T6147] bpf_prog_alloc+0x3b/0x200 [ 90.139347][ T6147] bpf_prog_create_from_user+0xb4/0x2e0 [ 90.139361][ T6147] ? __pfx_seccomp_check_filter+0x10/0x10 [ 90.139378][ T6147] do_seccomp+0x870/0x27c0 [ 90.139393][ T6147] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 90.139407][ T6147] ? __pfx___seccomp_filter+0x10/0x10 [ 90.139422][ T6147] ? __pfx_do_seccomp+0x10/0x10 [ 90.139439][ T6147] ? ksys_write+0x1ac/0x250 [ 90.139449][ T6147] ? __pfx_ksys_write+0x10/0x10 [ 90.139462][ T6147] do_syscall_64+0x123/0x790 [ 90.139475][ T6147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.139486][ T6147] RIP: 0033:0x7f8805b9e159 [ 90.139496][ T6147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.139506][ T6147] RSP: 002b:00007f8806a8c028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 90.139516][ T6147] RAX: ffffffffffffffda RBX: 00007f8805e25fa0 RCX: 00007f8805b9e159 [ 90.139522][ T6147] RDX: 0000200000000040 RSI: 000000000000000a RDI: 0000000000000001 [ 90.139528][ T6147] RBP: 00007f8806a8c090 R08: 0000000000000000 R09: 0000000000000000 [ 90.139534][ T6147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.139540][ T6147] R13: 00007f8805e26038 R14: 00007f8805e25fa0 R15: 00007ffc8a0a0c78 [ 90.139554][ T6147] [ 90.139558][ T6147] Mem-Info: [ 90.139563][ T6147] active_anon:119797 inactive_anon:10 isolated_anon:0 [ 90.139563][ T6147] active_file:0 inactive_file:57310 isolated_file:0 [ 90.139563][ T6147] unevictable:0 dirty:1134 writeback:0 [ 90.139563][ T6147] slab_reclaimable:11188 slab_unreclaimable:94890 [ 90.139563][ T6147] mapped:84472 shmem:111269 pagetables:1522 [ 90.139563][ T6147] sec_pagetables:0 bounce:0 [ 90.139563][ T6147] kernel_misc_reclaimable:0 [ 90.139563][ T6147] free:1200444 free_pcp:10699 free_cma:0 [ 90.139588][ T6147] Node 0 active_anon:479188kB inactive_anon:40kB active_file:0kB inactive_file:229036kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:337888kB dirty:4524kB writeback:0kB shmem:445076kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12220kB pagetables:5984kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 90.139614][ T6147] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 90.139638][ T6147] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 90.139666][ T6147] lowmem_reserve[]: 0 2470 2471 2471 2471 [ 90.139684][ T6147] Node 0 DMA32 free:836836kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:479188kB inactive_anon:40kB active_file:0kB inactive_file:229036kB unevictable:0kB writepending:4524kB zspages:0kB present:3129332kB managed:2530276kB mlocked:0kB bounce:0kB free_pcp:42796kB local_pcp:42796kB free_cma:0kB [ 90.139713][ T6147] lowmem_reserve[]: 0 0 0 0 0 [ 90.139730][ T6147] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:76kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 90.139757][ T6147] lowmem_reserve[]: 0 0 0 0 0 [ 90.139774][ T6147] Node 1 Normal free:3949580kB boost:0kB min:55904kB low:69880kB high:83856kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:12kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 90.139803][ T6147] lowmem_reserve[]: 0 0 0 0 0 [ 90.139820][ T6147] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 90.208770][ T6147] Node 0 DMA32: 47*4kB (UE) 527*8kB (UE) 249*16kB (UE) 161*32kB (UME) 23*64kB (UME) 9*128kB (UME) 2*256kB (UE) 3*512kB (UME) 1*1024kB (U) 1*2048kB (M) 199*4096kB (UM) = 836388kB [ 90.208852][ T6147] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 90.208901][ T6147] Node 1 Normal: 1*4kB (M) 5*8kB (UM) 4*16kB (UM) 9*32kB (UM) 8*64kB (UM) 5*128kB (UM) 4*256kB (UM) 3*512kB (UM) 1*1024kB (M) 2*2048kB (U) 962*4096kB (M) = 3949580kB [ 90.208981][ T6147] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 90.208989][ T6147] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 90.208997][ T6147] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 90.209004][ T6147] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 90.209012][ T6147] 168610 total pagecache pages [ 90.209016][ T6147] 9 pages in swap cache [ 90.209019][ T6147] Free swap = 114908kB [ 90.209023][ T6147] Total swap = 124996kB [ 90.209027][ T6147] 2097051 pages RAM [ 90.209030][ T6147] 0 pages HighMem/MovableOnly [ 90.209033][ T6147] 432847 pages reserved [ 90.209036][ T6147] 0 pages cma reserved [ 90.783349][ T5709] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 91.385695][ T30] audit: type=1400 audit(1788222074.885:354): avc: denied { allowed } for pid=6155 comm="syz.2.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 91.486045][ T30] audit: type=1400 audit(1788222074.975:355): avc: denied { name_connect } for pid=6151 comm="syz.1.76" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 91.555871][ T30] audit: type=1400 audit(1788222075.055:356): avc: denied { read } for pid=6158 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 91.645684][ T30] audit: type=1400 audit(1788222075.135:357): avc: denied { read } for pid=6151 comm="syz.1.76" lport=50962 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.839386][ T6169] netlink: 16 bytes leftover after parsing attributes in process `syz.0.81'. [ 92.949914][ T6172] FAULT_INJECTION: forcing a failure. [ 92.949914][ T6172] name failslab, interval 1, probability 0, space 0, times 0 [ 92.949945][ T6172] CPU: 0 UID: 0 PID: 6172 Comm: syz.2.83 Not tainted syzkaller #0 PREEMPT(full) [ 92.949958][ T6172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 92.949964][ T6172] Call Trace: [ 92.949968][ T6172] [ 92.949973][ T6172] dump_stack_lvl+0x100/0x190 [ 92.949994][ T6172] should_fail_ex.cold+0x5/0xa [ 92.950010][ T6172] should_failslab+0xc2/0x120 [ 92.950024][ T6172] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 92.950036][ T6172] ? sidtab_sid2str_get+0x84/0x670 [ 92.950055][ T6172] ? sidtab_sid2str_get+0x17a/0x670 [ 92.950069][ T6172] kmemdup_noprof+0x29/0x60 [ 92.950086][ T6172] sidtab_sid2str_get+0x17a/0x670 [ 92.950099][ T6172] security_sid_to_context_core+0x373/0x700 [ 92.950120][ T6172] avc_audit_post_callback+0x109/0x910 [ 92.950133][ T6172] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 92.950146][ T6172] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 92.950157][ T6172] ? skb_put+0x138/0x180 [ 92.950171][ T6172] ? audit_log_n_string+0x2a3/0x5a0 [ 92.950193][ T6172] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 92.950205][ T6172] common_lsm_audit+0x23f/0x2b0 [ 92.950216][ T6172] ? __pfx_common_lsm_audit+0x10/0x10 [ 92.950227][ T6172] ? lockdep_hardirqs_on+0x7d/0x110 [ 92.950240][ T6172] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 92.950260][ T6172] slow_avc_audit+0x186/0x210 [ 92.950273][ T6172] ? __pfx_slow_avc_audit+0x10/0x10 [ 92.950287][ T6172] ? avc_denied+0x14a/0x190 [ 92.950300][ T6172] ? avc_has_perm_noaudit+0x2fc/0x3b0 [ 92.950315][ T6172] avc_has_perm+0x1a6/0x1e0 [ 92.950329][ T6172] ? __pfx_avc_has_perm+0x10/0x10 [ 92.950344][ T6172] ? bpf_lsm_key_permission+0x9/0x10 [ 92.950360][ T6172] ? security_key_permission+0x7b/0x230 [ 92.950379][ T6172] selinux_key_permission+0x150/0x1d0 [ 92.950394][ T6172] security_key_permission+0x9b/0x230 [ 92.950410][ T6172] key_task_permission+0x2c0/0x3c0 [ 92.950428][ T6172] proc_keys_show+0x228/0xdc0 [ 92.950440][ T6172] ? __pfx_map_id_range_up+0x10/0x10 [ 92.950453][ T6172] ? __pfx_proc_keys_show+0x10/0x10 [ 92.950467][ T6172] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 92.950483][ T6172] ? __pfx_keyring_search_iterator+0x10/0x10 [ 92.950498][ T6172] ? proc_keys_start+0x38b/0x460 [ 92.950512][ T6172] seq_read_iter+0x32f/0x1270 [ 92.950524][ T6172] ? avc_policy_seqno+0x9/0x20 [ 92.950541][ T6172] proc_reg_read_iter+0x220/0x310 [ 92.950556][ T6172] ? __pfx_proc_reg_read_iter+0x10/0x10 [ 92.950571][ T6172] vfs_read+0x82e/0xb40 [ 92.950590][ T6172] ? __pfx_vfs_read+0x10/0x10 [ 92.950606][ T6172] ? find_held_lock+0x2b/0x80 [ 92.950629][ T6172] ksys_read+0x12a/0x250 [ 92.950646][ T6172] ? __pfx_ksys_read+0x10/0x10 [ 92.950666][ T6172] do_syscall_64+0x123/0x790 [ 92.950679][ T6172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.950691][ T6172] RIP: 0033:0x7f428199e159 [ 92.950701][ T6172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.950711][ T6172] RSP: 002b:00007f428287b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 92.950721][ T6172] RAX: ffffffffffffffda RBX: 00007f4281c25fa0 RCX: 00007f428199e159 [ 92.950728][ T6172] RDX: 00000000000015be RSI: 0000200000002980 RDI: 0000000000000003 [ 92.950734][ T6172] RBP: 00007f428287b090 R08: 0000000000000000 R09: 0000000000000000 [ 92.950741][ T6172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.950747][ T6172] R13: 00007f4281c26038 R14: 00007f4281c25fa0 R15: 00007fffa2b7b7c8 [ 92.950760][ T6172] [ 92.975186][ T30] audit: type=1400 audit(1788222076.445:358): avc: denied { view } for pid=6170 comm="syz.2.83" ssid=147 tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 93.499105][ T6174] netlink: 24 bytes leftover after parsing attributes in process `syz.0.81'. [ 93.513699][ T6174] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.81'. [ 93.608243][ T6176] FAULT_INJECTION: forcing a failure. [ 93.608243][ T6176] name failslab, interval 1, probability 0, space 0, times 0 [ 93.608273][ T6176] CPU: 0 UID: 0 PID: 6176 Comm: syz.2.85 Not tainted syzkaller #0 PREEMPT(full) [ 93.608286][ T6176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 93.608292][ T6176] Call Trace: [ 93.608296][ T6176] [ 93.608301][ T6176] dump_stack_lvl+0x100/0x190 [ 93.608321][ T6176] should_fail_ex.cold+0x5/0xa [ 93.608337][ T6176] should_failslab+0xc2/0x120 [ 93.608351][ T6176] __kmalloc_noprof+0xfc/0x840 [ 93.608363][ T6176] ? tomoyo_encode2+0xfb/0x3c0 [ 93.608380][ T6176] tomoyo_encode2+0xfb/0x3c0 [ 93.608395][ T6176] tomoyo_encode+0x29/0x50 [ 93.608405][ T6176] tomoyo_realpath_from_path+0x18c/0x690 [ 93.608420][ T6176] tomoyo_mount_acl+0x1b6/0x8b0 [ 93.608436][ T6176] ? is_bpf_text_address+0x8a/0x1a0 [ 93.608450][ T6176] ? is_bpf_text_address+0x8a/0x1a0 [ 93.608472][ T6176] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 93.608496][ T6176] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 93.608514][ T6176] ? kernel_text_address+0x8d/0x100 [ 93.608532][ T6176] ? unwind_get_return_address+0x59/0xa0 [ 93.608548][ T6176] ? arch_stack_walk+0xa6/0xf0 [ 93.608565][ T6176] ? __lock_acquire+0x4c5/0x1ec0 [ 93.608588][ T6176] ? tomoyo_mount_permission+0x1f6/0x460 [ 93.608607][ T6176] ? tomoyo_domain+0xb2/0x150 [ 93.608619][ T6176] ? tomoyo_profile+0x47/0x60 [ 93.608633][ T6176] tomoyo_mount_permission+0x214/0x460 [ 93.608649][ T6176] ? tomoyo_mount_permission+0x1f6/0x460 [ 93.608667][ T6176] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 93.608693][ T6176] security_sb_mount+0xdd/0x270 [ 93.608710][ T6176] path_mount+0x158/0x24c0 [ 93.608728][ T6176] ? __pfx_path_mount+0x10/0x10 [ 93.608742][ T6176] ? lockdep_hardirqs_on+0x7d/0x110 [ 93.608756][ T6176] ? putname+0xb1/0x110 [ 93.608768][ T6176] ? kmem_cache_free+0x127/0x6c0 [ 93.608789][ T6176] ? __x64_sys_mount+0x293/0x310 [ 93.608803][ T6176] __x64_sys_mount+0x293/0x310 [ 93.608818][ T6176] ? __pfx___x64_sys_mount+0x10/0x10 [ 93.608838][ T6176] do_syscall_64+0x123/0x790 [ 93.608851][ T6176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.608863][ T6176] RIP: 0033:0x7f428199e159 [ 93.608873][ T6176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.608883][ T6176] RSP: 002b:00007f428287b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 93.608894][ T6176] RAX: ffffffffffffffda RBX: 00007f4281c25fa0 RCX: 00007f428199e159 [ 93.608900][ T6176] RDX: 0000200000000340 RSI: 00002000000002c0 RDI: 0000000000000000 [ 93.608907][ T6176] RBP: 00007f428287b090 R08: 0000200000000380 R09: 0000000000000000 [ 93.608913][ T6176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.608919][ T6176] R13: 00007f4281c26038 R14: 00007f4281c25fa0 R15: 00007fffa2b7b7c8 [ 93.608937][ T6176] [ 93.608957][ T6176] ERROR: Out of memory at tomoyo_realpath_from_path. [ 94.127756][ T6180] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 95.110483][ T30] audit: type=1400 audit(1788222078.605:359): avc: denied { create } for pid=6184 comm="syz.3.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 95.268601][ T6187] FAULT_INJECTION: forcing a failure. [ 95.268601][ T6187] name failslab, interval 1, probability 0, space 0, times 0 [ 95.268629][ T6187] CPU: 0 UID: 0 PID: 6187 Comm: syz.1.89 Not tainted syzkaller #0 PREEMPT(full) [ 95.268642][ T6187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 95.268648][ T6187] Call Trace: [ 95.268651][ T6187] [ 95.268656][ T6187] dump_stack_lvl+0x100/0x190 [ 95.268675][ T6187] should_fail_ex.cold+0x5/0xa [ 95.268691][ T6187] should_failslab+0xc2/0x120 [ 95.268705][ T6187] kmem_cache_alloc_noprof+0x92/0x6a0 [ 95.268716][ T6187] ? do_getname+0x35/0x390 [ 95.268734][ T6187] do_getname+0x35/0x390 [ 95.268750][ T6187] __x64_sys_execveat+0xc5/0x130 [ 95.268762][ T6187] do_syscall_64+0x123/0x790 [ 95.268775][ T6187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.268786][ T6187] RIP: 0033:0x7efe57d9e159 [ 95.268796][ T6187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.268806][ T6187] RSP: 002b:00007efe58d37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 95.268817][ T6187] RAX: ffffffffffffffda RBX: 00007efe58025fa0 RCX: 00007efe57d9e159 [ 95.268824][ T6187] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 95.268830][ T6187] RBP: 00007efe58d37090 R08: 0000000000001000 R09: 0000000000000000 [ 95.268836][ T6187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.268842][ T6187] R13: 00007efe58026038 R14: 00007efe58025fa0 R15: 00007ffcf3289e78 [ 95.268856][ T6187] [ 95.539687][ T5709] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 95.714769][ T5709] usb 4-1: Using ep0 maxpacket: 32 [ 95.722824][ T5709] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 95.722854][ T5709] usb 4-1: no configurations [ 95.722868][ T5709] usb 4-1: can't read configurations, error -22 [ 95.766847][ T30] audit: type=1400 audit(1788222079.265:360): avc: denied { bind } for pid=6188 comm="syz.4.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 95.790007][ T6189] Bluetooth: MGMT ver 1.23 [ 95.795353][ T30] audit: type=1400 audit(1788222079.285:361): avc: denied { write } for pid=6188 comm="syz.4.90" path="socket:[11412]" dev="sockfs" ino=11412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 95.862231][ T6189] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 95.876203][ T5709] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 96.034682][ T5709] usb 4-1: Using ep0 maxpacket: 32 [ 96.040368][ T5709] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 96.040405][ T5709] usb 4-1: no configurations [ 96.040414][ T5709] usb 4-1: can't read configurations, error -22 [ 96.062895][ T5709] usb usb4-port1: attempt power cycle [ 96.225994][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 96.304466][ T6169] syz.0.81 (6169): drop_caches: 2 [ 96.348801][ T30] audit: type=1400 audit(1788222079.845:362): avc: denied { write } for pid=6193 comm="syz.2.87" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 96.376587][ T6195] random: crng reseeded on system resumption [ 96.385056][ T30] audit: type=1400 audit(1788222079.875:363): avc: denied { open } for pid=6193 comm="syz.2.87" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 96.408589][ T5709] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 96.417884][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 96.429295][ T5709] usb 4-1: Using ep0 maxpacket: 32 [ 96.436876][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.436900][ T10] usb 5-1: Product: syz [ 96.436915][ T10] usb 5-1: Manufacturer: syz [ 96.436925][ T10] usb 5-1: SerialNumber: syz [ 96.446540][ T5709] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 96.446562][ T5709] usb 4-1: no configurations [ 96.446569][ T5709] usb 4-1: can't read configurations, error -22 [ 96.556071][ T6195] FAULT_INJECTION: forcing a failure. [ 96.556071][ T6195] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 96.574713][ T5709] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 96.598846][ T5709] usb 4-1: Using ep0 maxpacket: 32 [ 96.604427][ T5709] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 96.604460][ T5709] usb 4-1: no configurations [ 96.604480][ T5709] usb 4-1: can't read configurations, error -22 [ 96.613723][ T5709] usb usb4-port1: unable to enumerate USB device [ 96.636845][ T6195] CPU: 0 UID: 0 PID: 6195 Comm: syz.2.87 Not tainted syzkaller #0 PREEMPT(full) [ 96.636865][ T6195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 96.636873][ T6195] Call Trace: [ 96.636878][ T6195] [ 96.636883][ T6195] dump_stack_lvl+0x100/0x190 [ 96.636906][ T6195] should_fail_ex.cold+0x5/0xa [ 96.636920][ T6195] ? prepare_alloc_pages+0x16d/0x5b0 [ 96.636937][ T6195] should_fail_alloc_page+0xeb/0x140 [ 96.636955][ T6195] prepare_alloc_pages+0x1f0/0x5b0 [ 96.636974][ T6195] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 96.636994][ T6195] ? mark_held_locks+0x40/0x70 [ 96.637006][ T6195] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 96.637029][ T6195] ? lockdep_hardirqs_on+0x7d/0x110 [ 96.637044][ T6195] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 96.637063][ T6195] ? stack_depot_save_flags+0x49a/0x9f0 [ 96.637079][ T6195] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 96.637098][ T6195] ? kasan_save_stack+0x3f/0x50 [ 96.637111][ T6195] ? kasan_save_track+0x14/0x30 [ 96.637122][ T6195] ? __kasan_kmalloc+0xaa/0xb0 [ 96.637135][ T6195] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 96.637150][ T6195] ? memory_bm_create+0x12c/0xcf0 [ 96.637164][ T6195] ? create_basic_memory_bitmaps+0xbd/0x350 [ 96.637179][ T6195] ? snapshot_open+0x23b/0x2b0 [ 96.637194][ T6195] ? misc_open+0x26d/0x450 [ 96.637208][ T6195] ? chrdev_open+0x234/0x6a0 [ 96.637219][ T6195] ? do_dentry_open+0x6ab/0x14d0 [ 96.637229][ T6195] ? vfs_open+0x82/0x3f0 [ 96.637240][ T6195] ? path_openat+0x19fa/0x2440 [ 96.637252][ T6195] ? do_file_open+0x20e/0x430 [ 96.637263][ T6195] ? do_sys_openat2+0x10f/0x1e0 [ 96.637275][ T6195] ? __x64_sys_openat+0x12d/0x210 [ 96.637289][ T6195] ? do_syscall_64+0x123/0x790 [ 96.637300][ T6195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.637321][ T6195] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 96.637336][ T6195] ? policy_nodemask+0xed/0x4f0 [ 96.637352][ T6195] alloc_pages_mpol+0x201/0x550 [ 96.637365][ T6195] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 96.637382][ T6195] ? kasan_save_track+0x14/0x30 [ 96.637393][ T6195] ? __kasan_kmalloc+0xaa/0xb0 [ 96.637406][ T6195] alloc_pages_noprof+0x1a/0x160 [ 96.637421][ T6195] get_zeroed_page_noprof+0x18/0xb0 [ 96.637434][ T6195] get_image_page+0x18/0x1a0 [ 96.637451][ T6195] memory_bm_create+0x408/0xcf0 [ 96.637471][ T6195] create_basic_memory_bitmaps+0xbd/0x350 [ 96.637489][ T6195] snapshot_open+0x23b/0x2b0 [ 96.637505][ T6195] ? __pfx_snapshot_open+0x10/0x10 [ 96.637522][ T6195] misc_open+0x26d/0x450 [ 96.637541][ T6195] ? __pfx_misc_open+0x10/0x10 [ 96.637556][ T6195] chrdev_open+0x234/0x6a0 [ 96.637569][ T6195] ? __pfx_chrdev_open+0x10/0x10 [ 96.637581][ T6195] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 96.637599][ T6195] do_dentry_open+0x6ab/0x14d0 [ 96.637609][ T6195] ? __pfx_chrdev_open+0x10/0x10 [ 96.637624][ T6195] vfs_open+0x82/0x3f0 [ 96.637639][ T6195] path_openat+0x19fa/0x2440 [ 96.637654][ T6195] ? __pfx_path_openat+0x10/0x10 [ 96.637670][ T6195] do_file_open+0x20e/0x430 [ 96.637684][ T6195] ? __pfx_do_file_open+0x10/0x10 [ 96.637706][ T6195] ? _raw_spin_unlock+0x28/0x50 [ 96.637724][ T6195] ? alloc_fd+0x471/0x7a0 [ 96.637741][ T6195] do_sys_openat2+0x10f/0x1e0 [ 96.637755][ T6195] ? __pfx_do_sys_openat2+0x10/0x10 [ 96.637769][ T6195] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 96.637786][ T6195] __x64_sys_openat+0x12d/0x210 [ 96.637800][ T6195] ? __pfx___x64_sys_openat+0x10/0x10 [ 96.637819][ T6195] do_syscall_64+0x123/0x790 [ 96.637833][ T6195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.637844][ T6195] RIP: 0033:0x7f428199e159 [ 96.637854][ T6195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.637864][ T6195] RSP: 002b:00007f428287b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 96.637875][ T6195] RAX: ffffffffffffffda RBX: 00007f4281c25fa0 RCX: 00007f428199e159 [ 96.637882][ T6195] RDX: 0000000000042801 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 96.637888][ T6195] RBP: 00007f4281a35024 R08: 0000000000000000 R09: 0000000000000000 [ 96.637894][ T6195] R10: 000000000000004f R11: 0000000000000246 R12: 0000000000000000 [ 96.637900][ T6195] R13: 00007f4281c26038 R14: 00007f4281c25fa0 R15: 00007fffa2b7b7c8 [ 96.637914][ T6195] [ 97.276779][ T30] audit: type=1400 audit(1788222080.765:364): avc: denied { cmd } for pid=6202 comm="iou-wrk-6204" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 97.651784][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 97.698483][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 98.018170][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 98.062688][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 98.063896][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 98.205886][ T6204] input: syz1 as /devices/virtual/input/input10 [ 98.215303][ T10] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 98.262346][ T10] usb 5-1: USB disconnect, device number 3 [ 98.612355][ T30] audit: type=1400 audit(1788222082.105:365): avc: denied { connect } for pid=6210 comm="syz.3.95" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 99.478964][ T30] audit: type=1400 audit(1788222082.975:366): avc: denied { read } for pid=6218 comm="syz.4.98" name="trace" dev="tracefs" ino=543 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 99.565793][ T5716] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 99.673244][ T5709] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 99.747434][ T5716] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 99.758211][ T5716] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 99.765835][ T5716] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 99.777001][ T5716] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 99.777019][ T5716] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 99.777032][ T5716] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 99.802570][ T5716] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 99.802600][ T5716] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 99.802613][ T5716] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 99.802631][ T5716] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 99.802644][ T5716] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 99.822787][ T5716] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 99.822813][ T5716] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 99.822827][ T5716] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 99.822840][ T5716] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 99.822853][ T5716] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 99.874261][ T5709] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 99.875241][ T5709] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.875258][ T5709] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.875317][ T5709] usb 2-1: config 0 interface 0 has no altsetting 0 [ 99.875333][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.993828][ T5709] usb 2-1: config 0 descriptor?? [ 100.004797][ T5716] usb 3-1: string descriptor 0 read error: -22 [ 100.005130][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.061762][ T5716] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 100.297300][ T6224] netlink: 16 bytes leftover after parsing attributes in process `syz.3.100'. [ 100.493691][ T5709] hid-multitouch 0003:0EEF:72C4.0001: unknown main item tag 0x6 [ 100.513620][ T5709] hid-multitouch 0003:0EEF:72C4.0001: unknown main item tag 0x0 [ 100.531387][ T5709] hid-multitouch 0003:0EEF:72C4.0001: unknown main item tag 0x0 [ 100.539810][ T5709] hid-multitouch 0003:0EEF:72C4.0001: unknown main item tag 0x0 [ 100.550778][ T5709] hid-multitouch 0003:0EEF:72C4.0001: unknown main item tag 0x0 [ 100.550810][ T5709] hid-multitouch 0003:0EEF:72C4.0001: unknown main item tag 0x0 [ 100.550825][ T5709] hid-multitouch 0003:0EEF:72C4.0001: unknown main item tag 0x0 [ 100.550839][ T5709] hid-multitouch 0003:0EEF:72C4.0001: unknown main item tag 0x0 [ 100.550853][ T5709] hid-multitouch 0003:0EEF:72C4.0001: unknown main item tag 0x0 [ 100.550867][ T5709] hid-multitouch 0003:0EEF:72C4.0001: unknown main item tag 0x0 [ 100.657916][ T5709] hid-multitouch 0003:0EEF:72C4.0001: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.1-1/input0 [ 100.678170][ T30] audit: type=1400 audit(1788222084.175:367): avc: denied { mount } for pid=6212 comm="syz.1.96" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 100.727428][ T6215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.727637][ T6215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.778711][ T6227] netlink: 24 bytes leftover after parsing attributes in process `syz.3.100'. [ 100.789847][ T6227] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.100'. [ 101.131059][ T6215] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=786 sclass=netlink_route_socket pid=6215 comm=syz.1.96 [ 101.156293][ T92] usb 2-1: USB disconnect, device number 4 [ 101.386888][ T30] audit: type=1400 audit(1788222084.885:368): avc: denied { create } for pid=6235 comm="syz.4.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 101.429699][ T30] audit: type=1400 audit(1788222084.925:369): avc: denied { ioctl } for pid=6235 comm="syz.4.99" path="socket:[11667]" dev="sockfs" ino=11667 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.488709][ T30] audit: type=1400 audit(1788222084.985:370): avc: denied { write } for pid=6235 comm="syz.4.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 101.548405][ T30] audit: type=1400 audit(1788222085.045:371): avc: denied { listen } for pid=6235 comm="syz.4.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 101.577955][ T6234] syzkaller0: entered promiscuous mode [ 101.586635][ T6234] syzkaller0: entered allmulticast mode [ 101.611691][ T30] audit: type=1400 audit(1788222085.105:372): avc: denied { accept } for pid=6235 comm="syz.4.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 101.659525][ T6237] FAULT_INJECTION: forcing a failure. [ 101.659525][ T6237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.659554][ T6237] CPU: 0 UID: 0 PID: 6237 Comm: syz.0.101 Not tainted syzkaller #0 PREEMPT(full) [ 101.659567][ T6237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 101.659574][ T6237] Call Trace: [ 101.659578][ T6237] [ 101.659583][ T6237] dump_stack_lvl+0x100/0x190 [ 101.659603][ T6237] should_fail_ex.cold+0x5/0xa [ 101.659619][ T6237] _copy_from_iter+0x1f4/0x1690 [ 101.659641][ T6237] ? __pfx__copy_from_iter+0x10/0x10 [ 101.659659][ T6237] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 101.659675][ T6237] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 101.659693][ T6237] skb_copy_datagram_from_iter+0x11f/0x720 [ 101.659713][ T6237] packet_sendmsg+0x2257/0x4f00 [ 101.659737][ T6237] ? sock_has_perm+0x25a/0x2f0 [ 101.659752][ T6237] ? __pfx_sock_has_perm+0x10/0x10 [ 101.659770][ T6237] ? __pfx_packet_sendmsg+0x10/0x10 [ 101.659790][ T6237] ? selinux_socket_sendmsg+0x198/0x2f0 [ 101.659808][ T6237] ____sys_sendmsg+0xa4d/0xbe0 [ 101.659820][ T6237] ? __pfx_packet_sendmsg+0x10/0x10 [ 101.659838][ T6237] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.659854][ T6237] ? lock_acquire+0x1d1/0x380 [ 101.659865][ T6237] ? get_pid_task+0x2a/0x250 [ 101.659881][ T6237] ___sys_sendmsg+0x190/0x1e0 [ 101.659896][ T6237] ? __pfx____sys_sendmsg+0x10/0x10 [ 101.659909][ T6237] ? get_pid_task+0x106/0x250 [ 101.659928][ T6237] ? find_held_lock+0x2b/0x80 [ 101.659951][ T6237] __sys_sendmsg+0x160/0x210 [ 101.659961][ T6237] ? __pfx___sys_sendmsg+0x10/0x10 [ 101.659979][ T6237] do_syscall_64+0x123/0x790 [ 101.659992][ T6237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.660004][ T6237] RIP: 0033:0x7f8805b9e159 [ 101.660013][ T6237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.660023][ T6237] RSP: 002b:00007f8806a6b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.660034][ T6237] RAX: ffffffffffffffda RBX: 00007f8805e26090 RCX: 00007f8805b9e159 [ 101.660041][ T6237] RDX: 0000000020000885 RSI: 0000200000002900 RDI: 0000000000000006 [ 101.660047][ T6237] RBP: 00007f8806a6b090 R08: 0000000000000000 R09: 0000000000000000 [ 101.660053][ T6237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.660059][ T6237] R13: 00007f8805e26128 R14: 00007f8805e26090 R15: 00007ffc8a0a0c78 [ 101.660072][ T6237] [ 101.968303][ T5709] usb 3-1: USB disconnect, device number 4 [ 102.111279][ T30] audit: type=1400 audit(1788222085.605:373): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 102.173715][ T6224] syz.3.100 (6224): drop_caches: 2 [ 102.330720][ T6244] fuse: fd is not a fuse device [ 102.330770][ T6244] FAULT_INJECTION: forcing a failure. [ 102.330770][ T6244] name fail_futex, interval 1, probability 0, space 0, times 1 [ 102.330792][ T6244] CPU: 0 UID: 0 PID: 6244 Comm: syz.2.104 Not tainted syzkaller #0 PREEMPT(full) [ 102.330806][ T6244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 102.330813][ T6244] Call Trace: [ 102.330818][ T6244] [ 102.330823][ T6244] dump_stack_lvl+0x100/0x190 [ 102.330844][ T6244] should_fail_ex.cold+0x5/0xa [ 102.330861][ T6244] get_futex_key+0x1d0/0x14f0 [ 102.330878][ T6244] ? __pfx_get_futex_key+0x10/0x10 [ 102.330892][ T6244] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 102.330909][ T6244] futex_wait_setup+0x91/0x540 [ 102.330932][ T6244] __futex_wait+0x19f/0x300 [ 102.330950][ T6244] ? __pfx___futex_wait+0x10/0x10 [ 102.330966][ T6244] ? __pfx_try_to_wake_up+0x10/0x10 [ 102.330977][ T6244] ? futex_hash+0x311/0x400 [ 102.330991][ T6244] ? __pfx_futex_wake_mark+0x10/0x10 [ 102.331010][ T6244] ? find_held_lock+0x2b/0x80 [ 102.331026][ T6244] ? futex_wake+0x4ea/0x5e0 [ 102.331045][ T6244] futex_wait+0xe6/0x370 [ 102.331061][ T6244] ? __pfx_futex_wait+0x10/0x10 [ 102.331085][ T6244] do_futex+0x265/0x440 [ 102.331099][ T6244] ? __pfx_do_futex+0x10/0x10 [ 102.331113][ T6244] ? kasan_quarantine_put+0x104/0x240 [ 102.331124][ T6244] ? lockdep_hardirqs_on+0x7d/0x110 [ 102.331139][ T6244] __x64_sys_futex+0x34f/0x4d0 [ 102.331155][ T6244] ? __pfx___x64_sys_futex+0x10/0x10 [ 102.331170][ T6244] ? __pfx___x64_sys_mount+0x10/0x10 [ 102.331189][ T6244] do_syscall_64+0x123/0x790 [ 102.331202][ T6244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.331214][ T6244] RIP: 0033:0x7f428199e159 [ 102.331223][ T6244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.331233][ T6244] RSP: 002b:00007f428287b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 102.331248][ T6244] RAX: ffffffffffffffda RBX: 00007f4281c25fa8 RCX: 00007f428199e159 [ 102.331256][ T6244] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4281c25fa8 [ 102.331263][ T6244] RBP: 00007f4281c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 102.331269][ T6244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.331275][ T6244] R13: 00007f4281c26038 R14: 00007fffa2b7b6e0 R15: 00007fffa2b7b7c8 [ 102.331289][ T6244] [ 102.349550][ T30] audit: type=1400 audit(1788222085.825:374): avc: denied { mounton } for pid=6243 comm="syz.2.104" path="/21/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 102.543969][ T6244] random: crng reseeded on system resumption [ 102.715208][ T30] audit: type=1400 audit(1788222086.215:375): avc: denied { create } for pid=6246 comm="syz.1.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 102.872719][ T30] audit: type=1400 audit(1788222086.365:376): avc: denied { create } for pid=6251 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.974720][ T92] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 103.134674][ T92] usb 4-1: Using ep0 maxpacket: 32 [ 103.141857][ T92] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 103.154689][ T92] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.154712][ T92] usb 4-1: config 0 has no interfaces? [ 103.179974][ T92] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.179998][ T92] usb 4-1: Product: syz [ 103.180012][ T92] usb 4-1: Manufacturer: syz [ 103.180022][ T92] usb 4-1: SerialNumber: syz [ 103.207102][ T92] usb 4-1: config 0 descriptor?? [ 103.490294][ T92] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 103.505084][ T5702] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 103.602995][ T10] usb 4-1: USB disconnect, device number 7 [ 103.645623][ T92] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 103.656330][ T5702] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 103.665971][ T92] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 103.665991][ T92] usb 5-1: can't read configurations, error -61 [ 103.687241][ T5702] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.687268][ T5702] usb 3-1: config 0 has no interfaces? [ 103.709873][ T5702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.709900][ T5702] usb 3-1: Product: syz [ 103.709922][ T5702] usb 3-1: Manufacturer: syz [ 103.709932][ T5702] usb 3-1: SerialNumber: syz [ 103.733203][ T5702] usb 3-1: config 0 descriptor?? [ 103.794703][ T92] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 103.945067][ T92] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 103.957040][ T92] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 103.957067][ T92] usb 5-1: can't read configurations, error -61 [ 103.957214][ T92] usb usb5-port1: attempt power cycle [ 103.982658][ T5702] usb 3-1: USB disconnect, device number 5 [ 105.954920][ T6267] syz.1.103 (6267) used greatest stack depth: 17560 bytes left [ 106.025009][ T92] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 106.046730][ T92] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 106.057864][ T92] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 106.057891][ T92] usb 5-1: can't read configurations, error -61 [ 106.224690][ T92] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 106.270727][ T92] usb 5-1: device descriptor read/8, error -71 [ 106.285317][ T6271] FAULT_INJECTION: forcing a failure. [ 106.285317][ T6271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.285346][ T6271] CPU: 0 UID: 0 PID: 6271 Comm: syz.3.113 Not tainted syzkaller #0 PREEMPT(full) [ 106.285360][ T6271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 106.285367][ T6271] Call Trace: [ 106.285372][ T6271] [ 106.285376][ T6271] dump_stack_lvl+0x100/0x190 [ 106.285398][ T6271] should_fail_ex.cold+0x5/0xa [ 106.285415][ T6271] _copy_from_user+0x2e/0xd0 [ 106.285432][ T6271] bpf_prog_load+0x1490/0x2a80 [ 106.285450][ T6271] ? __pfx_bpf_prog_load+0x10/0x10 [ 106.285475][ T6271] __sys_bpf+0x1f46/0x4a30 [ 106.285495][ T6271] ? __pfx___sys_bpf+0x10/0x10 [ 106.285512][ T6271] ? find_held_lock+0x2b/0x80 [ 106.285527][ T6271] ? get_pid_task+0xfc/0x250 [ 106.285541][ T6271] ? get_pid_task+0xfc/0x250 [ 106.285559][ T6271] ? find_held_lock+0x2b/0x80 [ 106.285577][ T6271] ? rcu_read_lock_any_held+0x6a/0x90 [ 106.285592][ T6271] ? find_held_lock+0x2b/0x80 [ 106.285606][ T6271] ? ksys_write+0x190/0x250 [ 106.285616][ T6271] ? ksys_write+0x190/0x250 [ 106.285626][ T6271] ? lock_acquire+0x1d1/0x380 [ 106.285645][ T6271] ? fput+0x7c/0x100 [ 106.285658][ T6271] ? ksys_write+0x1ac/0x250 [ 106.285669][ T6271] ? __x64_sys_bpf+0xce/0x140 [ 106.285678][ T6271] __x64_sys_bpf+0xce/0x140 [ 106.285689][ T6271] ? do_syscall_64+0xae/0x790 [ 106.285703][ T6271] do_syscall_64+0x123/0x790 [ 106.285716][ T6271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.285727][ T6271] RIP: 0033:0x7f851999e159 [ 106.285736][ T6271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.285747][ T6271] RSP: 002b:00007f851a84d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 106.285759][ T6271] RAX: ffffffffffffffda RBX: 00007f8519c25fa0 RCX: 00007f851999e159 [ 106.285766][ T6271] RDX: 0000000000000094 RSI: 0000200000002c40 RDI: 0000000000000005 [ 106.285772][ T6271] RBP: 00007f851a84d090 R08: 0000000000000000 R09: 0000000000000000 [ 106.285778][ T6271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.285784][ T6271] R13: 00007f8519c26038 R14: 00007f8519c25fa0 R15: 00007ffdcb9e66f8 [ 106.285798][ T6271] [ 106.394118][ T92] usb usb5-port1: unable to enumerate USB device [ 106.456068][ T5709] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 106.652660][ T6273] mmap: syz.4.115 (6273) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 106.707387][ T5709] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 106.717820][ T5709] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 106.717849][ T5709] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 106.717868][ T5709] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 106.717888][ T5709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.776396][ T5709] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 107.838041][ T5702] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 108.015557][ T5702] usb 5-1: Using ep0 maxpacket: 32 [ 108.021073][ T5702] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 108.030870][ T5702] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 108.030886][ T5702] usb 5-1: config 0 has no interface number 0 [ 108.046689][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.046704][ T5702] usb 5-1: Product: syz [ 108.046712][ T5702] usb 5-1: Manufacturer: syz [ 108.046721][ T5702] usb 5-1: SerialNumber: syz [ 108.074156][ T5702] usb 5-1: config 0 descriptor?? [ 108.095137][ T5702] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 108.310451][ T5702] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 108.337108][ T5702] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 108.646689][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 108.657087][ T5702] usb 5-1: USB disconnect, device number 8 [ 108.682759][ T6285] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 108.705198][ T5702] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 108.754522][ T5702] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 108.774102][ T5709] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 108.791066][ T5702] quatech2 5-1:0.51: device disconnected [ 108.838573][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 108.838603][ T30] audit: type=1400 audit(1788222092.335:382): avc: denied { bind } for pid=6287 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 108.876404][ T30] audit: type=1400 audit(1788222092.375:383): avc: denied { write } for pid=6287 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 108.904957][ T30] audit: type=1400 audit(1788222092.405:384): avc: denied { setopt } for pid=6287 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 109.946752][ T92] usb 1-1: USB disconnect, device number 2 [ 110.004366][ T6294] tipc: Started in network mode [ 110.004394][ T6294] tipc: Node identity 0010000000000000002, cluster identity 4711 [ 110.848879][ T30] audit: type=1400 audit(1788222094.345:385): avc: denied { create } for pid=6293 comm="syz.4.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 111.010037][ T30] audit: type=1400 audit(1788222094.505:386): avc: denied { read } for pid=6301 comm="syz.0.123" name="mouse0" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 111.107485][ T30] audit: type=1400 audit(1788222094.605:387): avc: denied { ioctl } for pid=6300 comm="syz.3.124" path="socket:[11976]" dev="sockfs" ino=11976 ioctlcmd=0x937a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 111.316082][ T10] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 111.476000][ T10] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 111.486074][ T10] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 111.486098][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.486114][ T10] usb 5-1: config 0 has no interface number 0 [ 111.486129][ T10] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 111.486151][ T10] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 111.486166][ T10] usb 5-1: config 0 interface 255 has no altsetting 0 [ 111.551781][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.551806][ T10] usb 5-1: Product: syz [ 111.551822][ T10] usb 5-1: Manufacturer: syz [ 111.551833][ T10] usb 5-1: SerialNumber: syz [ 111.581860][ T10] usb 5-1: config 0 descriptor?? [ 111.593286][ T10] streamzap 5-1:0.255: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 111.609390][ T30] audit: type=1400 audit(1788222095.105:388): avc: denied { getopt } for pid=6311 comm="syz.3.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 111.702466][ T30] audit: type=1326 audit(1788222095.195:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.3.127" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f851999e159 code=0x0 [ 113.807146][ T6322] netlink: 5 bytes leftover after parsing attributes in process `syz.3.129'. [ 113.808257][ T6322] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.855624][ T30] audit: type=1400 audit(1788222097.355:390): avc: denied { node_bind } for pid=6319 comm="syz.3.129" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 114.074662][ T92] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 114.113540][ T10] usb 5-1: USB disconnect, device number 9 [ 114.225042][ T92] usb 3-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 114.237591][ T92] usb 3-1: config index 0 descriptor too short (expected 69, got 51) [ 114.237620][ T92] usb 3-1: config 1 interface 1 altsetting 0 has an endpoint descriptor with address 0x73, changing to 0x3 [ 114.237634][ T92] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x3 has an invalid bInterval 97, changing to 7 [ 114.237647][ T92] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid maxpacket 25466, setting to 1024 [ 114.239181][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.239193][ T92] usb 3-1: Product: syz [ 114.239200][ T92] usb 3-1: Manufacturer: syz [ 114.239207][ T92] usb 3-1: SerialNumber: syz [ 115.091337][ T92] usb 3-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 115.109037][ T30] audit: type=1400 audit(1788222098.605:391): avc: denied { create } for pid=6329 comm="syz.3.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 115.141100][ T30] audit: type=1400 audit(1788222098.635:392): avc: denied { ioctl } for pid=6329 comm="syz.3.134" path="socket:[12144]" dev="sockfs" ino=12144 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 115.180321][ T6331] dummy0: entered promiscuous mode [ 115.180351][ T6331] dummy0: entered allmulticast mode [ 115.238998][ T30] audit: type=1400 audit(1788222098.735:393): avc: denied { setopt } for pid=6330 comm="syz.0.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 115.321852][ T92] usb 3-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 115.410598][ T30] audit: type=1400 audit(1788222098.905:394): avc: denied { connect } for pid=6340 comm="syz.4.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 115.542573][ T92] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 115.653215][ T5617] udevd[5617]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.670984][ T30] audit: type=1400 audit(1788222099.165:395): avc: denied { ioctl } for pid=6342 comm="syz.4.138" path="socket:[12186]" dev="sockfs" ino=12186 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 115.822965][ T30] audit: type=1400 audit(1788222099.315:396): avc: denied { setopt } for pid=6325 comm="syz.2.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 115.857013][ T30] audit: type=1400 audit(1788222099.345:397): avc: denied { write } for pid=6342 comm="syz.4.138" name="netlink" dev="proc" ino=4026532943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 115.933244][ T5702] usb 3-1: USB disconnect, device number 6 [ 116.001603][ T30] audit: type=1400 audit(1788222099.495:398): avc: denied { create } for pid=6348 comm="syz.0.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 116.145504][ T30] audit: type=1400 audit(1788222099.645:399): avc: denied { ioctl } for pid=6352 comm="syz.1.140" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x9365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 116.557730][ T6358] jffs2: notice: (6358) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 118.874427][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 118.874450][ T30] audit: type=1400 audit(1788222102.365:408): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 119.412105][ T30] audit: type=1400 audit(1788222102.905:409): avc: denied { lock } for pid=6381 comm="syz.1.153" path="socket:[12494]" dev="sockfs" ino=12494 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 119.568754][ T6370] input: syz0 as /devices/virtual/input/input11 [ 119.658566][ T30] audit: type=1400 audit(1788222103.155:410): avc: denied { sqpoll } for pid=6401 comm="syz.4.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 119.914103][ T6390] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 119.982317][ T30] audit: type=1400 audit(1788222103.475:411): avc: denied { write } for pid=6401 comm="syz.4.158" name="usb_gadget" dev="configfs" ino=3742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 120.026854][ T30] audit: type=1400 audit(1788222103.515:412): avc: denied { add_name } for pid=6401 comm="syz.4.158" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 120.894346][ T30] audit: type=1400 audit(1788222103.515:413): avc: denied { create } for pid=6401 comm="syz.4.158" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 122.157517][ T6436] capability: warning: `syz.3.169' uses 32-bit capabilities (legacy support in use) [ 122.485860][ T92] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 122.646386][ T92] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 122.657021][ T92] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.667715][ T92] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 122.701280][ T92] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.701306][ T92] usb 5-1: Product: syz [ 122.701321][ T92] usb 5-1: Manufacturer: syz [ 122.701331][ T92] usb 5-1: SerialNumber: syz [ 122.725955][ T92] usb 5-1: config 0 descriptor?? [ 122.970534][ T10] usb 5-1: USB disconnect, device number 10 [ 124.082970][ T6456] netlink: Unknown conntrack attr (0) [ 124.082995][ T6456] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.091079][ T6456] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 124.424871][ T92] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 124.569635][ T92] usb 4-1: device descriptor read/64, error -71 [ 124.608224][ T30] audit: type=1400 audit(1788222108.105:414): avc: denied { append } for pid=6471 comm="syz.2.176" name="event3" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 124.804801][ T92] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 124.934905][ T92] usb 4-1: device descriptor read/64, error -71 [ 125.045090][ T92] usb usb4-port1: attempt power cycle [ 125.133333][ T6481] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 125.141864][ T5709] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 125.141977][ T30] audit: type=1400 audit(1788222108.625:415): avc: denied { mounton } for pid=6479 comm="syz.0.179" path="/29/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 125.195411][ T6481] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 125.195757][ T6481] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 125.195772][ T6481] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 125.274679][ T5709] usb 5-1: device descriptor read/64, error -71 [ 125.386025][ T92] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 125.405500][ T92] usb 4-1: device descriptor read/8, error -71 [ 125.415386][ T6460] input: syz0 as /devices/virtual/input/input12 [ 125.514663][ T5709] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 125.815836][ T5709] usb 5-1: device descriptor read/64, error -71 [ 125.815880][ T92] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 125.837706][ T92] usb 4-1: device descriptor read/8, error -71 [ 125.921865][ T6487] netlink: 16 bytes leftover after parsing attributes in process `syz.1.182'. [ 125.931275][ T5709] usb usb5-port1: attempt power cycle [ 125.945031][ T92] usb usb4-port1: unable to enumerate USB device [ 126.109684][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.109724][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.143863][ T13] IPVS: starting estimator thread 0... [ 126.183915][ T6488] netlink: 24 bytes leftover after parsing attributes in process `syz.1.182'. [ 126.203785][ T6488] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.182'. [ 126.235896][ T6489] IPVS: using max 76 ests per chain, 182400 per kthread [ 126.264824][ T5709] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 126.295973][ T5709] usb 5-1: device descriptor read/8, error -71 [ 126.334063][ T6487] syz.1.182 (6487): drop_caches: 2 [ 126.574781][ T5709] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 126.595323][ T5709] usb 5-1: device descriptor read/8, error -71 [ 126.706125][ T5709] usb usb5-port1: unable to enumerate USB device [ 127.254654][ T30] audit: type=1400 audit(1788222110.745:416): avc: denied { read } for pid=6507 comm="syz.1.187" name="btrfs-control" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 127.280678][ T30] audit: type=1400 audit(1788222110.775:417): avc: denied { open } for pid=6507 comm="syz.1.187" path="/dev/btrfs-control" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 127.373399][ T6511] FAULT_INJECTION: forcing a failure. [ 127.373399][ T6511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.373431][ T6511] CPU: 0 UID: 0 PID: 6511 Comm: syz.0.188 Not tainted syzkaller #0 PREEMPT(full) [ 127.373444][ T6511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 127.373451][ T6511] Call Trace: [ 127.373454][ T6511] [ 127.373459][ T6511] dump_stack_lvl+0x100/0x190 [ 127.373479][ T6511] should_fail_ex.cold+0x5/0xa [ 127.373496][ T6511] _copy_from_user+0x2e/0xd0 [ 127.373514][ T6511] copy_msghdr_from_user+0x9f/0x4c0 [ 127.373530][ T6511] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 127.373546][ T6511] ? rcu_is_watching+0x13/0xc0 [ 127.373560][ T6511] ? ___sys_sendmsg+0x19d/0x1e0 [ 127.373573][ T6511] ? kfree+0x1e5/0x6d0 [ 127.373590][ T6511] ___sys_sendmsg+0x106/0x1e0 [ 127.373604][ T6511] ? __pfx____sys_sendmsg+0x10/0x10 [ 127.373624][ T6511] ? __fget_files+0x34/0x3d0 [ 127.373642][ T6511] ? __pfx___might_resched+0x10/0x10 [ 127.373655][ T6511] __sys_sendmmsg+0x20c/0x440 [ 127.373667][ T6511] ? __pfx___sys_sendmmsg+0x10/0x10 [ 127.373677][ T6511] ? ksys_write+0x190/0x250 [ 127.373697][ T6511] ? fput+0x7c/0x100 [ 127.373710][ T6511] ? ksys_write+0x1ac/0x250 [ 127.373719][ T6511] ? __pfx_ksys_write+0x10/0x10 [ 127.373731][ T6511] __x64_sys_sendmmsg+0x9c/0x100 [ 127.373741][ T6511] ? lockdep_hardirqs_on+0x7d/0x110 [ 127.373753][ T6511] do_syscall_64+0x123/0x790 [ 127.373767][ T6511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.373778][ T6511] RIP: 0033:0x7f8805b9e159 [ 127.373788][ T6511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.373799][ T6511] RSP: 002b:00007f8806a8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 127.373809][ T6511] RAX: ffffffffffffffda RBX: 00007f8805e25fa0 RCX: 00007f8805b9e159 [ 127.373816][ T6511] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000009 [ 127.373823][ T6511] RBP: 00007f8806a8c090 R08: 0000000000000000 R09: 0000000000000000 [ 127.373829][ T6511] R10: 000000000000fff0 R11: 0000000000000246 R12: 0000000000000001 [ 127.373836][ T6511] R13: 00007f8805e26038 R14: 00007f8805e25fa0 R15: 00007ffc8a0a0c78 [ 127.373850][ T6511] [ 127.675187][ T5709] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 127.825313][ T5709] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 127.844871][ T5709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.844897][ T5709] usb 2-1: Product: syz [ 127.844912][ T5709] usb 2-1: Manufacturer: syz [ 127.844922][ T5709] usb 2-1: SerialNumber: syz [ 127.868922][ T5709] usb 2-1: config 0 descriptor?? [ 127.889775][ T5709] usb 2-1: Waiting for MOTU Microbook II to boot up... [ 127.902997][ T5709] usb 2-1: failed setting the sample rate for Motu MicroBook II: -22 [ 127.903056][ T5709] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 128.092549][ T6517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.191'. [ 128.241977][ T5709] usb 2-1: USB disconnect, device number 5 [ 128.986027][ T30] audit: type=1400 audit(1788222112.475:418): avc: denied { write } for pid=6520 comm="syz.4.192" name="001" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 129.046352][ T6524] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 131.954252][ T30] audit: type=1400 audit(1788222115.445:419): avc: denied { ioctl } for pid=6533 comm="syz.4.195" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 132.194048][ T6549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3092 sclass=netlink_route_socket pid=6549 comm=syz.0.197 [ 132.243876][ T6550] fuse: Bad value for 'fd' [ 132.365075][ T6552] netlink: 16 bytes leftover after parsing attributes in process `syz.1.198'. [ 132.392300][ T6548] smbdirect: ib_dev[Syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 132.453425][ T6548] smbdirect: ib_dev[Syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 132.453470][ T6548] smbdirect: ib_dev[Syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 132.612568][ T6548] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 132.736109][ T6548] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 133.269202][ T6562] erspan0: entered promiscuous mode [ 133.432455][ T6442] smbdirect: ib_dev[Syz1] removed [ 133.880701][ T6573] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 133.971696][ T6577] netlink: 24 bytes leftover after parsing attributes in process `syz.1.206'. [ 134.221696][ T6581] syz.3.208 (6581): drop_caches: 2 [ 134.260468][ T6581] netlink: 24 bytes leftover after parsing attributes in process `syz.3.208'. [ 134.273413][ T6581] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.208'. [ 134.284740][ T92] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 134.438810][ T92] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 134.456384][ T92] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.456410][ T92] usb 1-1: Product: syz [ 134.456426][ T92] usb 1-1: Manufacturer: syz [ 134.456436][ T92] usb 1-1: SerialNumber: syz [ 134.913981][ T6592] fuse: Bad value for 'fd' [ 134.981118][ T92] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 134.993214][ T92] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 135.022364][ T92] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 135.022404][ T92] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 135.022674][ T92] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 135.063675][ T92] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 135.113277][ T5709] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 135.757724][ T92] usb 1-1: USB disconnect, device number 3 [ 135.849400][ T5709] usb 2-1: Using ep0 maxpacket: 16 [ 135.903785][ T5709] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 135.917726][ T5709] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.917760][ T5709] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 135.917782][ T5709] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 135.917797][ T5709] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 135.917811][ T5709] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.917841][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.997201][ T5709] usb 2-1: config 0 descriptor?? [ 136.219262][ T6588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.219486][ T6588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.228663][ T5709] rc_core: IR keymap rc-hauppauge not found [ 136.228673][ T5709] Registered IR keymap rc-empty [ 136.228948][ T5709] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 136.266097][ T5709] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 136.293905][ T5709] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 136.308863][ T5709] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input13 [ 136.377391][ T30] audit: type=1400 audit(1788222119.865:420): avc: denied { read } for pid=4953 comm="acpid" name="event6" dev="devtmpfs" ino=2892 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 136.377433][ T30] audit: type=1400 audit(1788222119.865:421): avc: denied { open } for pid=4953 comm="acpid" path="/dev/input/event6" dev="devtmpfs" ino=2892 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 136.377475][ T30] audit: type=1400 audit(1788222119.865:422): avc: denied { ioctl } for pid=4953 comm="acpid" path="/dev/input/event6" dev="devtmpfs" ino=2892 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 136.563096][ T5709] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 136.574945][ T5709] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 136.594701][ T5709] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 136.617206][ T5709] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 136.635561][ T5709] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 136.655034][ T5709] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 136.675390][ T5709] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 136.704874][ T5709] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 136.725515][ T5709] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 136.744963][ T5709] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 136.765892][ T5709] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 136.809818][ T5709] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 136.819758][ T5709] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 136.846751][ T5709] usb 2-1: USB disconnect, device number 6 [ 137.164418][ T6604] erspan0: entered promiscuous mode [ 139.824016][ T6610] netlink: 5 bytes leftover after parsing attributes in process `syz.3.215'. [ 139.824285][ T6610] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 140.297983][ T6633] fuse: Bad value for 'fd' [ 141.131648][ T30] audit: type=1400 audit(1788222124.625:423): avc: denied { name_connect } for pid=6629 comm="syz.1.224" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 141.215755][ T6638] netlink: 14 bytes leftover after parsing attributes in process `syz.1.224'. [ 141.225041][ T30] audit: type=1400 audit(1788222124.705:424): avc: denied { listen } for pid=6629 comm="syz.1.224" lport=39942 faddr=10.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 141.225072][ T30] audit: type=1400 audit(1788222124.705:425): avc: denied { accept } for pid=6629 comm="syz.1.224" lport=39942 faddr=10.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 141.343620][ T5603] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 141.356484][ T5603] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 141.367748][ T6638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.388507][ T5603] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 141.401310][ T6638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.402173][ T6638] bond0 (unregistering): Released all slaves [ 141.426101][ T5603] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 141.434502][ T5603] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 141.929226][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 142.144042][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 142.171270][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 142.322854][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 142.330690][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 142.514895][ T30] audit: type=1400 audit(1788222126.015:426): avc: denied { create } for pid=6632 comm="syz.3.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 142.808507][ T5716] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 142.988727][ T5716] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 143.008053][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.008079][ T5716] usb 2-1: Product: syz [ 143.008094][ T5716] usb 2-1: Manufacturer: syz [ 143.008104][ T5716] usb 2-1: SerialNumber: syz [ 143.155468][ T30] audit: type=1400 audit(1788222126.655:427): avc: denied { write } for pid=6660 comm="syz.0.229" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 143.155504][ T30] audit: type=1400 audit(1788222126.655:428): avc: denied { open } for pid=6660 comm="syz.0.229" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 143.275281][ T30] audit: type=1400 audit(1788222126.765:429): avc: denied { ioctl } for pid=6660 comm="syz.0.229" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 144.136410][ T30] audit: type=1400 audit(1788222127.635:430): avc: denied { firmware_load } for pid=5702 comm="kworker/0:4" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 144.246436][ T5702] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 144.426321][ T52] Bluetooth: hci5: command tx timeout [ 144.471678][ T30] audit: type=1400 audit(1788222127.965:431): avc: denied { setopt } for pid=6663 comm="syz.3.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 144.514191][ T30] audit: type=1400 audit(1788222128.005:432): avc: denied { write } for pid=6669 comm="syz.0.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 144.557655][ T6667] netlink: 24 bytes leftover after parsing attributes in process `syz.3.231'. [ 144.570637][ T6667] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.231'. [ 144.850437][ T6668] syz.3.231 (6668): drop_caches: 2 [ 144.964036][ T10] usb 2-1: USB disconnect, device number 7 [ 145.397644][ T5702] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 145.397892][ T5702] ath9k_htc: Failed to initialize the device [ 145.412541][ T10] usb 2-1: ath9k_htc: USB layer deinitialized [ 146.062259][ T6688] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.189251][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 146.189275][ T30] audit: type=1400 audit(1788222129.685:469): avc: denied { read } for pid=6684 comm="syz.0.235" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 146.189303][ T30] audit: type=1400 audit(1788222129.685:470): avc: denied { open } for pid=6684 comm="syz.0.235" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 146.498801][ T30] audit: type=1400 audit(1788222129.995:471): avc: denied { bind } for pid=6698 comm="syz.4.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 146.498837][ T30] audit: type=1400 audit(1788222129.995:472): avc: denied { name_bind } for pid=6698 comm="syz.4.239" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 146.498863][ T30] audit: type=1400 audit(1788222129.995:473): avc: denied { node_bind } for pid=6698 comm="syz.4.239" saddr=127.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 146.518276][ T52] Bluetooth: hci5: command tx timeout [ 146.575226][ T30] audit: type=1400 audit(1788222130.075:474): avc: denied { write } for pid=6698 comm="syz.4.239" laddr=127.0.0.1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 146.613684][ T6640] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.626052][ T6640] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.626146][ T6640] bridge_slave_0: entered allmulticast mode [ 146.626887][ T6640] bridge_slave_0: entered promiscuous mode [ 146.664750][ T6640] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.682411][ T6640] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.682518][ T6640] bridge_slave_1: entered allmulticast mode [ 146.683257][ T6640] bridge_slave_1: entered promiscuous mode [ 146.812652][ T6640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.833165][ T6640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.870116][ T30] audit: type=1400 audit(1788222130.365:475): avc: denied { write } for pid=6707 comm="syz.4.241" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 146.947024][ T6640] team0: Port device team_slave_0 added [ 146.948340][ T6640] team0: Port device team_slave_1 added [ 147.039860][ T6640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.048784][ T6640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.075453][ T6640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.076376][ T6640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.076384][ T6640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.076397][ T6640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.144712][ T92] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 147.260632][ T6640] hsr_slave_0: entered promiscuous mode [ 147.279409][ T6640] hsr_slave_1: entered promiscuous mode [ 147.287078][ T6640] debugfs: 'hsr0' already exists in 'hsr' [ 147.293234][ T6640] Cannot create hsr debugfs directory [ 147.299315][ T92] usb 2-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 147.314865][ T92] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.328539][ T92] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.328564][ T92] usb 2-1: Product: syz [ 147.328578][ T92] usb 2-1: Manufacturer: syz [ 147.328588][ T92] usb 2-1: SerialNumber: syz [ 147.355843][ T92] usb 2-1: config 0 descriptor?? [ 147.368776][ T92] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 147.383539][ T92] dvb-usb: bulk message failed: -22 (3/0) [ 147.430629][ T92] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 147.442569][ T92] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 147.442605][ T92] usb 2-1: media controller created [ 147.443456][ T92] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 147.534771][ T92] dvb-usb: bulk message failed: -22 (6/0) [ 147.534836][ T92] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 147.553533][ T92] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 147.577869][ T30] audit: type=1400 audit(1788222131.075:476): avc: denied { read } for pid=4953 comm="acpid" name="event4" dev="devtmpfs" ino=2904 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 147.577905][ T30] audit: type=1400 audit(1788222131.075:477): avc: denied { open } for pid=4953 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2904 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 147.577931][ T30] audit: type=1400 audit(1788222131.075:478): avc: denied { ioctl } for pid=4953 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2904 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 147.655287][ T92] dvb-usb: schedule remote query interval to 150 msecs. [ 147.655359][ T92] dvb-usb: bulk message failed: -22 (3/0) [ 147.675168][ T92] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 147.696860][ T6712] netlink: 24 bytes leftover after parsing attributes in process `syz.3.243'. [ 147.816463][ T5702] dvb-usb: bulk message failed: -22 (1/0) [ 147.816497][ T5702] dvb-usb: error while querying for an remote control event. [ 147.975587][ T92] dvb-usb: bulk message failed: -22 (1/0) [ 147.975614][ T92] dvb-usb: error while querying for an remote control event. [ 148.134687][ T92] dvb-usb: bulk message failed: -22 (1/0) [ 148.134726][ T92] dvb-usb: error while querying for an remote control event. [ 148.319121][ T92] dvb-usb: bulk message failed: -22 (1/0) [ 148.319154][ T92] dvb-usb: error while querying for an remote control event. [ 148.584665][ T52] Bluetooth: hci5: command tx timeout [ 148.749933][ T5702] dvb-usb: bulk message failed: -22 (1/0) [ 148.749961][ T5702] dvb-usb: error while querying for an remote control event. [ 148.905727][ T5702] dvb-usb: bulk message failed: -22 (1/0) [ 148.905753][ T5702] dvb-usb: error while querying for an remote control event. [ 149.065581][ T5702] dvb-usb: bulk message failed: -22 (1/0) [ 149.065606][ T5702] dvb-usb: error while querying for an remote control event. [ 149.225715][ T92] dvb-usb: bulk message failed: -22 (1/0) [ 149.225743][ T92] dvb-usb: error while querying for an remote control event. [ 149.384846][ T92] dvb-usb: bulk message failed: -22 (1/0) [ 149.384927][ T92] dvb-usb: error while querying for an remote control event. [ 149.468603][ T6640] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 149.544773][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 149.546169][ T10] dvb-usb: error while querying for an remote control event. [ 149.562729][ T6640] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 149.570642][ T6640] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 149.619099][ T6640] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 149.635022][ T6640] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 149.664170][ T6640] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 149.672225][ T6640] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 149.700674][ T6640] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 149.712269][ T92] dvb-usb: bulk message failed: -22 (1/0) [ 149.739655][ T92] dvb-usb: error while querying for an remote control event. [ 149.895738][ T92] dvb-usb: bulk message failed: -22 (1/0) [ 149.896223][ T92] dvb-usb: error while querying for an remote control event. [ 150.055245][ T92] dvb-usb: bulk message failed: -22 (1/0) [ 150.055272][ T92] dvb-usb: error while querying for an remote control event. [ 150.076455][ T6640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.134070][ T6640] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.167765][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.167821][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.196203][ T6442] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.196258][ T6442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.217551][ T92] dvb-usb: bulk message failed: -22 (1/0) [ 150.223470][ T92] dvb-usb: error while querying for an remote control event. [ 150.374999][ T92] dvb-usb: bulk message failed: -22 (1/0) [ 150.375024][ T92] dvb-usb: error while querying for an remote control event. [ 150.513048][ T6734] syz.3.247 uses obsolete (PF_INET,SOCK_PACKET) [ 150.534667][ T5702] dvb-usb: bulk message failed: -22 (1/0) [ 150.534694][ T5702] dvb-usb: error while querying for an remote control event. [ 150.666073][ T52] Bluetooth: hci5: command tx timeout [ 150.695715][ T92] dvb-usb: bulk message failed: -22 (1/0) [ 150.695742][ T92] dvb-usb: error while querying for an remote control event. [ 150.855286][ T92] dvb-usb: bulk message failed: -22 (1/0) [ 150.855313][ T92] dvb-usb: error while querying for an remote control event. [ 151.015976][ T5702] dvb-usb: bulk message failed: -22 (1/0) [ 151.016004][ T5702] dvb-usb: error while querying for an remote control event. [ 151.068563][ T10] usb 2-1: USB disconnect, device number 8 [ 151.211417][ T10] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 151.276939][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 151.276962][ T30] audit: type=1400 audit(1788222134.765:503): avc: denied { read write } for pid=6749 comm="syz.1.250" name="mouse0" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 151.308393][ T30] audit: type=1400 audit(1788222134.805:504): avc: denied { open } for pid=6749 comm="syz.1.250" path="/dev/input/mouse0" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 151.346571][ T30] audit: type=1400 audit(1788222134.845:505): avc: denied { create } for pid=6750 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 151.373019][ T30] audit: type=1400 audit(1788222134.865:506): avc: denied { bind } for pid=6750 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 151.398027][ T30] audit: type=1400 audit(1788222134.895:507): avc: denied { write } for pid=6750 comm="syz.0.251" path="socket:[14632]" dev="sockfs" ino=14632 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 151.425889][ T6752] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 151.674328][ T30] audit: type=1400 audit(1788222135.165:508): avc: denied { create } for pid=6754 comm="syz.1.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 151.711988][ T30] audit: type=1400 audit(1788222135.205:509): avc: denied { ioctl } for pid=6754 comm="syz.1.252" path="socket:[14644]" dev="sockfs" ino=14644 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 152.649420][ T6640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.695764][ T30] audit: type=1400 audit(1788222136.185:510): avc: denied { create } for pid=6762 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 152.736889][ T30] audit: type=1400 audit(1788222136.235:511): avc: denied { read write } for pid=6762 comm="syz.1.254" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 152.736934][ T30] audit: type=1400 audit(1788222136.235:512): avc: denied { open } for pid=6762 comm="syz.1.254" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 152.795554][ T6763] fuse: Unknown parameter 'group_i00000000000000000000' [ 153.267457][ T6640] veth0_vlan: entered promiscuous mode [ 153.293315][ T6640] veth1_vlan: entered promiscuous mode [ 153.339220][ T6640] veth0_macvtap: entered promiscuous mode [ 153.353987][ T6640] veth1_macvtap: entered promiscuous mode [ 153.381451][ T6640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.401498][ T6640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.456705][ T6453] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.466822][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 153.481048][ T6453] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.481083][ T6453] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.481109][ T6453] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.600097][ T6453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.600112][ T6453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.641746][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 153.659893][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.659919][ T10] usb 1-1: Product: syz [ 153.659934][ T10] usb 1-1: Manufacturer: syz [ 153.659943][ T10] usb 1-1: SerialNumber: syz [ 153.739997][ T10] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 153.788725][ T6442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.788748][ T6442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.808403][ T6780] genirq: Flags mismatch irq 4. 00200000 (aio_iiro_16) vs. 00200080 (ttyS0) [ 155.108615][ T10] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 155.115937][ T10] ath9k_htc: Failed to initialize the device [ 155.760606][ T5730] usb 1-1: USB disconnect, device number 4 [ 155.804479][ T5730] usb 1-1: ath9k_htc: USB layer deinitialized [ 156.262067][ T6808] netlink: 24 bytes leftover after parsing attributes in process `syz.1.267'. [ 156.277698][ T6808] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.267'. [ 156.363586][ T6804] syz.1.267 (6804): drop_caches: 2 [ 156.423431][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 156.423455][ T30] audit: type=1400 audit(1788222139.915:556): avc: denied { write } for pid=6810 comm="syz.4.270" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 156.459422][ T30] audit: type=1400 audit(1788222139.955:557): avc: denied { open } for pid=6810 comm="syz.4.270" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 156.492457][ T30] audit: type=1400 audit(1788222139.985:558): avc: denied { read } for pid=6810 comm="syz.4.270" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 156.519218][ T30] audit: type=1400 audit(1788222140.015:559): avc: denied { ioctl } for pid=6810 comm="syz.4.270" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x6f02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 156.553066][ T30] audit: type=1400 audit(1788222140.045:560): avc: denied { map } for pid=6810 comm="syz.4.270" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 156.590545][ T30] audit: type=1400 audit(1788222140.085:561): avc: denied { mount } for pid=6812 comm="syz.0.271" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 156.652803][ T30] audit: type=1400 audit(1788222140.145:562): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 157.743503][ T30] audit: type=1400 audit(1788222141.235:563): avc: denied { ioctl } for pid=6805 comm="syz.3.269" path="/dev/uinput" dev="devtmpfs" ino=914 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 157.796972][ T6806] input: syz0 as /devices/virtual/input/input16 [ 157.920067][ T6790] input: syz0 as /devices/virtual/input/input15 [ 158.597835][ T30] audit: type=1400 audit(1788222142.095:564): avc: denied { shutdown } for pid=6826 comm="syz.4.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 159.864950][ T52] Bluetooth: hci5: command 0x0c1a tx timeout [ 159.875565][ T5709] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 159.875583][ T5709] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 160.353929][ T30] audit: type=1400 audit(1788222143.845:565): avc: denied { kexec_image_load } for pid=6848 comm="syz.3.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 160.553228][ T6856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.284'. [ 160.634664][ T5709] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 160.932507][ T5709] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 161.412636][ T5709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.439901][ T5709] usb 6-1: Product: syz [ 161.439915][ T5709] usb 6-1: Manufacturer: syz [ 161.439925][ T5709] usb 6-1: SerialNumber: syz [ 161.616633][ T5709] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 161.637935][ T30] audit: type=1400 audit(1788222145.135:566): avc: denied { mounton } for pid=6855 comm="syz.0.284" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 161.693864][ T30] audit: type=1400 audit(1788222145.185:567): avc: denied { create } for pid=6863 comm="syz.4.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 161.718251][ T30] audit: type=1400 audit(1788222145.215:568): avc: denied { write } for pid=6863 comm="syz.4.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 161.810643][ T6856] 9p: Could not find request transport: f±d [ 162.001020][ T30] audit: type=1400 audit(1788222145.495:569): avc: denied { create } for pid=6870 comm="syz.0.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 162.032425][ T30] audit: type=1400 audit(1788222145.525:570): avc: denied { bind } for pid=6870 comm="syz.0.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 162.065212][ T10] usb 6-1: USB disconnect, device number 2 [ 162.086552][ T30] audit: type=1400 audit(1788222145.585:571): avc: denied { listen } for pid=6870 comm="syz.0.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 162.112234][ T30] audit: type=1400 audit(1788222145.605:572): avc: denied { connect } for pid=6870 comm="syz.0.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 162.133233][ T30] audit: type=1400 audit(1788222145.635:573): avc: denied { write } for pid=6870 comm="syz.0.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 162.165240][ T30] audit: type=1400 audit(1788222145.665:574): avc: denied { read } for pid=6870 comm="syz.0.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 162.665885][ T5709] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 162.666003][ T5709] ath9k_htc: Failed to initialize the device [ 162.709481][ T10] usb 6-1: ath9k_htc: USB layer deinitialized [ 164.390264][ T6897] netlink: 24 bytes leftover after parsing attributes in process `syz.0.298'. [ 165.313929][ T6905] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 165.339458][ T30] audit: type=1400 audit(1788222148.815:575): avc: denied { create } for pid=6898 comm="syz.1.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 165.365500][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.365556][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.650627][ T6903] netlink: 24 bytes leftover after parsing attributes in process `syz.3.300'. [ 165.662639][ T6903] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.300'. [ 165.975481][ T5730] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 166.135032][ T5730] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 166.318667][ T5730] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.318693][ T5730] usb 1-1: Product: syz [ 166.318708][ T5730] usb 1-1: Manufacturer: syz [ 166.318719][ T5730] usb 1-1: SerialNumber: syz [ 167.133505][ T5730] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 167.281068][ T6931] syz.4.311 (6931): drop_caches: 2 [ 167.319252][ T6442] IPVS: starting estimator thread 0... [ 167.333742][ T6931] netlink: 24 bytes leftover after parsing attributes in process `syz.4.311'. [ 167.344001][ T6931] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.311'. [ 167.415097][ T6934] IPVS: using max 76 ests per chain, 182400 per kthread [ 167.665208][ T5702] usb 1-1: USB disconnect, device number 5 [ 168.361534][ T6943] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 168.385244][ T5730] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 168.385353][ T5730] ath9k_htc: Failed to initialize the device [ 168.400087][ T5702] usb 1-1: ath9k_htc: USB layer deinitialized [ 169.518321][ T6949] netlink: Unknown conntrack attr (0) [ 169.518347][ T6949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.542558][ T6949] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 169.553925][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 169.553937][ T30] audit: type=1400 audit(1788222153.035:579): avc: denied { mounton } for pid=6946 comm="syz.5.317" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 169.599365][ T30] audit: type=1400 audit(1788222153.095:580): avc: denied { read } for pid=6954 comm="syz.4.320" name="set_event" dev="tracefs" ino=533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 169.627359][ T6955] FAULT_INJECTION: forcing a failure. [ 169.627359][ T6955] name failslab, interval 1, probability 0, space 0, times 0 [ 169.627390][ T6955] CPU: 0 UID: 0 PID: 6955 Comm: syz.4.320 Not tainted syzkaller #0 PREEMPT(full) [ 169.627404][ T6955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 169.627411][ T6955] Call Trace: [ 169.627415][ T6955] [ 169.627419][ T6955] dump_stack_lvl+0x100/0x190 [ 169.627439][ T6955] should_fail_ex.cold+0x5/0xa [ 169.627456][ T6955] should_failslab+0xc2/0x120 [ 169.627469][ T6955] __kmalloc_cache_noprof+0x91/0x6d0 [ 169.627485][ T6955] ? __kasan_kmalloc+0xaa/0xb0 [ 169.627496][ T6955] ? s_start+0x7b/0x320 [ 169.627512][ T6955] s_start+0x7b/0x320 [ 169.627526][ T6955] traverse.part.0.constprop.0+0xaf/0x650 [ 169.627539][ T6955] ? lock_acquire+0x1d1/0x380 [ 169.627557][ T6955] ? __might_fault+0xc5/0x140 [ 169.627575][ T6955] seq_read_iter+0x93f/0x1270 [ 169.627592][ T6955] seq_read+0x344/0x4d0 [ 169.627604][ T6955] ? __pfx_seq_read+0x10/0x10 [ 169.627618][ T6955] ? avc_policy_seqno+0x9/0x20 [ 169.627631][ T6955] ? selinux_file_permission+0x8f/0x6d0 [ 169.627652][ T6955] ? rw_verify_area+0xce/0x6d0 [ 169.627668][ T6955] ? __pfx_seq_read+0x10/0x10 [ 169.627680][ T6955] vfs_read+0x1e4/0xb40 [ 169.627696][ T6955] ? lock_acquire+0x1d1/0x380 [ 169.627707][ T6955] ? __fget_files+0x34/0x3d0 [ 169.627719][ T6955] ? __pfx_vfs_read+0x10/0x10 [ 169.627734][ T6955] ? find_held_lock+0x2b/0x80 [ 169.627749][ T6955] ? __fget_files+0x215/0x3d0 [ 169.627761][ T6955] ? __fget_files+0x215/0x3d0 [ 169.627775][ T6955] ? __fget_files+0x21f/0x3d0 [ 169.627791][ T6955] __x64_sys_pread64+0x1eb/0x250 [ 169.627802][ T6955] ? __pfx___x64_sys_pread64+0x10/0x10 [ 169.627817][ T6955] do_syscall_64+0x123/0x790 [ 169.627832][ T6955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.627843][ T6955] RIP: 0033:0x7f4b8079e159 [ 169.627852][ T6955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.627863][ T6955] RSP: 002b:00007f4b81724028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 169.627874][ T6955] RAX: ffffffffffffffda RBX: 00007f4b80a25fa0 RCX: 00007f4b8079e159 [ 169.627881][ T6955] RDX: 000000000000006b RSI: 0000200000000040 RDI: 0000000000000003 [ 169.627887][ T6955] RBP: 00007f4b81724090 R08: 0000000000000000 R09: 0000000000000000 [ 169.627894][ T6955] R10: 000000000000ab7f R11: 0000000000000246 R12: 0000000000000001 [ 169.627900][ T6955] R13: 00007f4b80a26038 R14: 00007f4b80a25fa0 R15: 00007ffe56a433e8 [ 169.627914][ T6955] [ 169.911603][ T30] audit: type=1400 audit(1788222153.405:581): avc: denied { bind } for pid=6952 comm="syz.0.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 171.670224][ T6963] netlink: 24 bytes leftover after parsing attributes in process `syz.1.321'. [ 171.681354][ T6963] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.321'. [ 171.702992][ T30] audit: type=1400 audit(1788222155.195:582): avc: denied { ioctl } for pid=6952 comm="syz.0.319" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=920 ioctlcmd=0x6f52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 171.729479][ T6956] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 171.787605][ T6966] dummy0: entered promiscuous mode [ 171.787627][ T6966] dummy0: entered allmulticast mode [ 171.862026][ T6973] syzkaller0: entered promiscuous mode [ 171.862052][ T6973] syzkaller0: entered allmulticast mode [ 171.937818][ T30] audit: type=1400 audit(1788222155.435:583): avc: denied { mount } for pid=6972 comm="syz.4.325" name="/" dev="configfs" ino=1085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 171.971642][ T30] audit: type=1400 audit(1788222155.465:584): avc: denied { search } for pid=6972 comm="syz.4.325" name="/" dev="configfs" ino=1085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 171.971679][ T30] audit: type=1400 audit(1788222155.465:585): avc: denied { search } for pid=6972 comm="syz.4.325" name="usb_gadget" dev="configfs" ino=3742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 171.971706][ T30] audit: type=1400 audit(1788222155.465:586): avc: denied { search } for pid=6972 comm="syz.4.325" name="g1" dev="configfs" ino=12641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 171.971727][ T30] audit: type=1400 audit(1788222155.465:587): avc: denied { search } for pid=6972 comm="syz.4.325" name="configs" dev="configfs" ino=12643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 171.971748][ T30] audit: type=1400 audit(1788222155.465:588): avc: denied { write search } for pid=6972 comm="syz.4.325" name="configs" dev="configfs" ino=12643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 172.163556][ T6977] ip_tables: iptables: counters copy to user failed while replacing table [ 172.192911][ T6974] ================================================================== [ 172.192925][ T6974] BUG: KASAN: slab-use-after-free in configfs_dirent_is_ready+0x6b/0x70 [ 172.192945][ T6974] Read of size 4 at addr ffff88801f30ca38 by task syz.4.325/6974 [ 172.192955][ T6974] [ 172.192962][ T6974] CPU: 0 UID: 0 PID: 6974 Comm: syz.4.325 Not tainted syzkaller #0 PREEMPT(full) [ 172.192976][ T6974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 172.192984][ T6974] Call Trace: [ 172.192989][ T6974] [ 172.192993][ T6974] dump_stack_lvl+0x100/0x190 [ 172.193011][ T6974] print_report+0x13d/0x4b0 [ 172.193027][ T6974] ? __virt_addr_valid+0x239/0x430 [ 172.193040][ T6974] ? configfs_dirent_is_ready+0x6b/0x70 [ 172.193051][ T6974] kasan_report+0xdf/0x1c0 [ 172.193066][ T6974] ? configfs_dirent_is_ready+0x6b/0x70 [ 172.193078][ T6974] configfs_dirent_is_ready+0x6b/0x70 [ 172.193089][ T6974] configfs_symlink+0x5c4/0x11f0 [ 172.193101][ T6974] ? __pfx_configfs_symlink+0x10/0x10 [ 172.193113][ T6974] vfs_symlink+0x178/0x4d0 [ 172.193133][ T6974] filename_symlinkat+0x2a6/0x560 [ 172.193147][ T6974] ? __pfx_filename_symlinkat+0x10/0x10 [ 172.193161][ T6974] ? strncpy_from_user+0x19d/0x2d0 [ 172.193178][ T6974] ? do_getname+0x191/0x390 [ 172.193193][ T6974] __x64_sys_symlinkat+0x9c/0xe0 [ 172.193206][ T6974] do_syscall_64+0x123/0x790 [ 172.193220][ T6974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.193234][ T6974] RIP: 0033:0x7f4b8079e159 [ 172.193244][ T6974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.193254][ T6974] RSP: 002b:00007f4b81703028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 172.193265][ T6974] RAX: ffffffffffffffda RBX: 00007f4b80a26090 RCX: 00007f4b8079e159 [ 172.193272][ T6974] RDX: 0000200000000200 RSI: ffffffffffffff9c RDI: 00002000000001c0 [ 172.193279][ T6974] RBP: 00007f4b80835024 R08: 0000000000000000 R09: 0000000000000000 [ 172.193285][ T6974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.193295][ T6974] R13: 00007f4b80a26128 R14: 00007f4b80a26090 R15: 00007ffe56a433e8 [ 172.193305][ T6974] [ 172.193309][ T6974] [ 172.193311][ T6974] Allocated by task 6973: [ 172.193318][ T6974] kasan_save_stack+0x30/0x50 [ 172.193328][ T6974] kasan_save_track+0x14/0x30 [ 172.193338][ T6974] __kasan_slab_alloc+0x89/0x90 [ 172.193348][ T6974] kmem_cache_alloc_noprof+0x269/0x6a0 [ 172.193357][ T6974] configfs_new_dirent+0x52/0x570 [ 172.193372][ T6974] configfs_make_dirent+0x36/0x1a0 [ 172.193382][ T6974] configfs_create_dir+0xbd/0x5c0 [ 172.193391][ T6974] configfs_attach_group+0x2a/0x440 [ 172.193399][ T6974] configfs_mkdir+0x657/0xd40 [ 172.193407][ T6974] vfs_mkdir+0x364/0x850 [ 172.193421][ T6974] filename_mkdirat+0x48b/0x5e0 [ 172.193437][ T6974] __x64_sys_mkdirat+0x89/0xc0 [ 172.193452][ T6974] do_syscall_64+0x123/0x790 [ 172.193463][ T6974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.193476][ T6974] [ 172.193478][ T6974] Freed by task 6973: [ 172.193484][ T6974] kasan_save_stack+0x30/0x50 [ 172.193494][ T6974] kasan_save_track+0x14/0x30 [ 172.193504][ T6974] kasan_save_free_info+0x3b/0x70 [ 172.193519][ T6974] __kasan_slab_free+0x5f/0x80 [ 172.193529][ T6974] kmem_cache_free+0x127/0x6c0 [ 172.193542][ T6974] configfs_d_iput+0x20d/0x290 [ 172.193556][ T6974] dentry_unlink_inode+0x265/0x470 [ 172.193568][ T6974] d_delete+0x213/0x280 [ 172.193580][ T6974] vfs_rmdir+0x4ab/0x8a0 [ 172.193596][ T6974] filename_rmdir+0x31a/0x5c0 [ 172.193608][ T6974] __x64_sys_rmdir+0x46/0x70 [ 172.193619][ T6974] do_syscall_64+0x123/0x790 [ 172.193629][ T6974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.193638][ T6974] [ 172.193640][ T6974] The buggy address belongs to the object at ffff88801f30ca00 [ 172.193640][ T6974] which belongs to the cache configfs_dir_cache of size 96 [ 172.193649][ T6974] The buggy address is located 56 bytes inside of [ 172.193649][ T6974] freed 96-byte region [ffff88801f30ca00, ffff88801f30ca60) [ 172.193659][ T6974] [ 172.193661][ T6974] The buggy address belongs to the physical page: [ 172.193666][ T6974] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1f30c [ 172.193676][ T6974] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 172.193684][ T6974] page_type: f5(slab) [ 172.193693][ T6974] raw: 00fff00000000000 ffff888020e9c140 dead000000000122 0000000000000000 [ 172.193703][ T6974] raw: 0000000000000000 0000000200200020 00000000f5000000 0000000000000000 [ 172.193708][ T6974] page dumped because: kasan: bad access detected [ 172.193713][ T6974] page_owner tracks the page as allocated [ 172.193717][ T6974] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3184379675 [ 172.193733][ T6974] post_alloc_hook+0xfd/0x120 [ 172.193747][ T6974] get_page_from_freelist+0x110d/0x35d0 [ 172.193761][ T6974] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 172.193776][ T6974] new_slab+0xa9/0x6e0 [ 172.193788][ T6974] refill_objects+0xe3/0x410 [ 172.193802][ T6974] __pcs_replace_empty_main+0x35e/0x650 [ 172.193815][ T6974] kmem_cache_alloc_noprof+0x4c4/0x6a0 [ 172.193825][ T6974] configfs_new_dirent+0x52/0x570 [ 172.193839][ T6974] configfs_make_dirent+0x36/0x1a0 [ 172.193847][ T6974] configfs_create_dir+0xbd/0x5c0 [ 172.193856][ T6974] configfs_attach_group+0x2a/0x440 [ 172.193864][ T6974] configfs_register_subsystem+0x2c7/0x5e0 [ 172.193873][ T6974] init_dlm+0x4e/0x120 [ 172.193884][ T6974] do_one_initcall+0x11c/0x6f0 [ 172.193894][ T6974] kernel_init_freeable+0x6ea/0x7b0 [ 172.193908][ T6974] kernel_init+0x21/0x1e0 [ 172.193921][ T6974] page_owner free stack trace missing [ 172.193924][ T6974] [ 172.193928][ T6974] Memory state around the buggy address: [ 172.193934][ T6974] ffff88801f30c900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 172.193942][ T6974] ffff88801f30c980: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 172.193948][ T6974] >ffff88801f30ca00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 172.193954][ T6974] ^ [ 172.193959][ T6974] ffff88801f30ca80: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 172.193965][ T6974] ffff88801f30cb00: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 172.193971][ T6974] ================================================================== [ 172.194017][ T6974] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 172.809036][ T6974] CPU: 0 UID: 0 PID: 6974 Comm: syz.4.325 Not tainted syzkaller #0 PREEMPT(full) [ 172.818239][ T6974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 172.828279][ T6974] Call Trace: [ 172.831548][ T6974] [ 172.834482][ T6974] dump_stack_lvl+0x100/0x190 [ 172.839170][ T6974] vpanic+0x553/0x970 [ 172.843139][ T6974] ? __pfx_vpanic+0x10/0x10 [ 172.847628][ T6974] ? mark_held_locks+0x40/0x70 [ 172.852366][ T6974] ? irqentry_exit+0x24d/0xa10 [ 172.857121][ T6974] ? configfs_dirent_is_ready+0x6b/0x70 [ 172.862648][ T6974] panic+0xd1/0xe0 [ 172.866343][ T6974] ? __pfx_panic+0x10/0x10 [ 172.870745][ T6974] check_panic_on_warn.cold+0x19/0x34 [ 172.876100][ T6974] end_report.part.0+0x3a/0x90 [ 172.880863][ T6974] kasan_report.cold+0xe/0x18 [ 172.885545][ T6974] ? configfs_dirent_is_ready+0x6b/0x70 [ 172.891065][ T6974] configfs_dirent_is_ready+0x6b/0x70 [ 172.896420][ T6974] configfs_symlink+0x5c4/0x11f0 [ 172.901345][ T6974] ? __pfx_configfs_symlink+0x10/0x10 [ 172.906689][ T6974] vfs_symlink+0x178/0x4d0 [ 172.911158][ T6974] filename_symlinkat+0x2a6/0x560 [ 172.916188][ T6974] ? __pfx_filename_symlinkat+0x10/0x10 [ 172.921732][ T6974] ? strncpy_from_user+0x19d/0x2d0 [ 172.926823][ T6974] ? do_getname+0x191/0x390 [ 172.931303][ T6974] __x64_sys_symlinkat+0x9c/0xe0 [ 172.936226][ T6974] do_syscall_64+0x123/0x790 [ 172.940801][ T6974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.946667][ T6974] RIP: 0033:0x7f4b8079e159 [ 172.951147][ T6974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.970736][ T6974] RSP: 002b:00007f4b81703028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 172.979219][ T6974] RAX: ffffffffffffffda RBX: 00007f4b80a26090 RCX: 00007f4b8079e159 [ 172.987164][ T6974] RDX: 0000200000000200 RSI: ffffffffffffff9c RDI: 00002000000001c0 [ 172.995114][ T6974] RBP: 00007f4b80835024 R08: 0000000000000000 R09: 0000000000000000 [ 173.003079][ T6974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.011022][ T6974] R13: 00007f4b80a26128 R14: 00007f4b80a26090 R15: 00007ffe56a433e8 [ 173.018977][ T6974] [ 173.022016][ T6974] Kernel Offset: disabled [ 173.026314][ T6974] Rebooting in 86400 seconds..