last executing test programs: 17m7.415334614s ago: executing program 1 (id=5165): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x5c, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1234}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 17m7.231349261s ago: executing program 1 (id=5166): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_connect$uac1(0x6, 0x7a, &(0x7f00000002c0)={{0x12, 0x1, 0x140, 0x0, 0x0, 0x0, 0x8, 0x499, 0x101c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x3, 0x1, 0x7, 0x40, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x3, 0x2, 0xd}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3, 0x8, 0x3, {0x7, 0x25, 0x1, 0xc, 0x0, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x64, 0x40, 0x52, {0x7, 0x25, 0x1, 0xc, 0x8e, 0x5}}}}}}}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xb8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201500200000008990425104000010203010902a60003010110020904000000010100000a2401040029000201020b240402062974f2ee440a092407030100742f590b240606010201000900030904010000010200000904010101010200000b240201d80109027960340924020101010dcbdc0a240201030407"], 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 17m2.930486287s ago: executing program 1 (id=5178): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0xc3a1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x20040000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r4, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000080)={0x20, r1, 0x0, 0x0, &(0x7f00000001c0)}) 17m1.835534889s ago: executing program 1 (id=5183): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}, @IFLA_VF_PORTS={0x4}, @IFLA_MTU={0x8, 0x4, 0x7ff}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) ioprio_get$pid(0x1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x1) 17m1.384553765s ago: executing program 1 (id=5184): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r1) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xd) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="100000000000000029000000070000001c000000000000000100000008000000", @ANYRES32=r2], 0x30}}], 0x1, 0xc0) 17m0.579219721s ago: executing program 1 (id=5187): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) syz_usb_connect$uac2(0x3, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="06002a00dd00000014002d8004"], 0x38}}, 0x0) 17m0.48889558s ago: executing program 32 (id=5187): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) syz_usb_connect$uac2(0x3, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="06002a00dd00000014002d8004"], 0x38}}, 0x0) 10m42.097917876s ago: executing program 2 (id=6675): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8805}, 0xc000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042abd7000fddbdf054500000008000300", @ANYRES32=r3, @ANYBLOB="0c00990800000000951d5a57bbba15f61275a4faff5773"], 0x28}, 0x1, 0x0, 0x0, 0x20040894}, 0x20008040) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000280)={0xdddd1000, 0x110000, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = userfaultfd(0x80001) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000004c0)={0x1, 0x0, 0x0, &(0x7f0000000380)=""/48, 0x0, 0x41000}) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000000)={0x1}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x501}) 10m40.687560715s ago: executing program 2 (id=6680): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@mcast2, @in6}}, {{@in6=@private2}, 0x0, @in=@multicast1}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x2}}) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000001010101000000000000000002001c002000018006000340000000001400018008c301007f000001080002007f0000010c00198008000100", @ANYRES32, @ANYRES64, @ANYRES8, @ANYRESDEC=r6, @ANYRES32=r6, @ANYRES16, @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) 10m39.565544986s ago: executing program 2 (id=6682): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r1, @ANYBLOB="100804002010000324001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) timer_create(0x7, 0x0, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 10m39.015465247s ago: executing program 2 (id=6686): ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000280)={0x0, 0xffff, 0x0, 0x0, 0x0}) capset(&(0x7f0000000500)={0x19980330, r0}, &(0x7f0000000200)={0x200ffe, 0x200010, 0x7fd, 0x80, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000001180)=ANY=[@ANYBLOB='quota,usrquota_inode_hardlimit=7']) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6e) syz_clone(0x140000, 0x0, 0x4a, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 10m37.548046165s ago: executing program 2 (id=6691): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={[{@uuid_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0xffffffffffffffea, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 10m34.126580595s ago: executing program 2 (id=6704): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={[{@uuid_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 10m33.483744146s ago: executing program 33 (id=6704): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={[{@uuid_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 8.526059883s ago: executing program 3 (id=9820): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f000007c000/0x2000)=nil, &(0x7f0000839000/0x1000)=nil, 0xb8, &(0x7f0000000700)=[{0x1}], 0xaaaac9c, 0x2, 0x0, 0x0, 0x0, 0x4c}) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r3 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x14}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000004000/0x1000)=nil, &(0x7f0000000000/0x3000)=nil], &(0x7f0000001800)=[0x1], &(0x7f0000000100), 0x2) syz_usb_control_io$uac3(r3, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r3, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000000080)={r5, 0x0, 0x1, 0x0, 0x3}) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x17, 0x5c}, [@ldst={0x6, 0x0, 0x5, 0x7, 0x0, 0x0, 0x300}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) lsm_get_self_attr(0x65, 0x0, &(0x7f00000002c0)=0x3000, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0xc8640) ppoll(&(0x7f0000000040)=[{r2, 0x20}], 0x1, 0x0, 0x0, 0x0) read$dsp(r2, &(0x7f0000000180)=""/67, 0x43) landlock_restrict_self(r1, 0xe) 6.758512986s ago: executing program 4 (id=9831): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000080000000200000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 4) 6.299399355s ago: executing program 4 (id=9833): bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x10) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000016c0)={'sit0\x00', &(0x7f00000015c0)={'sit0\x00', 0x0, 0x20, 0x7, 0x401, 0x1, {{0x2b, 0x4, 0x0, 0x6, 0xac, 0x67, 0x0, 0x81, 0x2f, 0x0, @remote, @empty, {[@ra={0x94, 0x4, 0x1}, @noop, @end, @generic={0x89, 0xa, "f85c816baa1e4a6a"}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x20, 0xdb, 0x0, 0x6, [0x9, 0xffff6714, 0x80000000, 0xad4b, 0x0, 0x4, 0xfd68]}, @end, @cipso={0x86, 0x40, 0x3, [{0x0, 0x11, "c85eac8a3335a03739c8d1d1f39c13"}, {0x1, 0x2}, {0x5, 0x11, "a5a67eb7bb12e5901ca4269bf2ab04"}, {0x7, 0x11, "18601b66a5c6ea7d5926ca55808581"}, {0x0, 0x5, "c62b42"}]}, @lsrr={0x83, 0x23, 0x42, [@multicast1, @dev={0xac, 0x14, 0x14, 0x41}, @loopback, @rand_addr=0x64010102, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @empty]}]}}}}}) sendmsg$inet(r0, &(0x7f0000001800)={&(0x7f00000010c0)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000001540)=[{&(0x7f0000001140)="f97ecc04fb841c9df937c9b4bd", 0xd}, {&(0x7f0000001180)="b50bde169688381b81b17d563ccdf7ad4d64b92e2f3daba95f66143109922a756cd0a99a67f9d3f66e9a6d3f9af3fc722144f34fcbd936895b918b055af3155193edb86fd4e1bc87d8cc4dfc152d123fcf752abf9d2eec7a9125da6b0f5ffe4b7359349617a81f8ae3ae76fbafc799b2679f33cbb234f1b7a689f383f77f53a513a15a06fe428ca10c", 0x89}, {&(0x7f0000001240)="95824f0178b5aa5818ccd837a8ba55745b07c4ec27da003c997e9b60c781fe3645999b3bb19142a5555bbbf3491a6e0483b0df61304b61ba6d68d5248642a4335f21323bc13de7d2a6cdff91cb71dd194c0aa6fd6922", 0x56}, {&(0x7f0000001380)="cf4ada94623fa4370efccf587547a8cb6430221afd14406ac5b6600afeb93a562ab7260d9a1ce61c9d45704a01e47996ea27f80888a5dfc43cd9a710c11c092d0779de2b296887496445f7600b86c09318aa8e2748f2eb517283bd87b766dec20ded935a050b69c9e159d9d3922052711f52d5eb109bffce6916312c45c08c7ba303259834fad52f3f947d2b47e8f64cbb790c6fd1a51e330e033c7a", 0x9c}, {&(0x7f0000001440)="2bdedd718fd459b5bcc56c1ccc5fcac2e610c65c9e6ca7e7c6318ca15451f37da469ae2ab0a05c88d5d3cd0913049c3c116652708c7f150e75d5841d3abcff4bdcbebba52d0c5eadad1455a6874aa139f12d07076ab951ded8d205f3e170ec6c63cffab8356523375ecbe8aa0791388831db6b85539d92f7c69bc828fe21e46bfba2c5fb544f80b83758f72aaabb33a5a0160de8e1eed5aaaa3a7ba621ee97de7c0908115adc1f2f0a10728e7e50ca913b675031e74dc3473e6fe7c93ca7a8505704b5fcda5270a71d7b807c3b54bc6162dfaae7ca23b9c9c12d6a0fe5b2a9b6dba93ad3876867d7cdc5176396e673efca27", 0xf2}], 0x5, &(0x7f0000001700)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @broadcast, @dev={0xac, 0x14, 0x14, 0x1d}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}], 0xd0}, 0x804) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ac1e0101000000000000000000000000fc010000000000000000000000000001000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc010000000000000000000000000001fe00ffb4000000000000000000000010a39b000000000800ffff0000000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffff9030000000000007e00000005350000020801002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002000000"], 0x140}}, 0x844) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x80) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c00), 0x12) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x5}, {0x2, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x1}, [@offload={0xc}]}, 0xc4}}, 0x0) write$UHID_INPUT(r10, &(0x7f0000000080)={0x18, {"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", 0x5bb1f126059684ef}}, 0x1006) 6.055666684s ago: executing program 6 (id=9834): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000005840)=ANY=[], 0x201b) 5.578527354s ago: executing program 5 (id=9836): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2d00000004000000000000000000000001000000000000f8000000800000230005"], 0x2d) 5.408692609s ago: executing program 3 (id=9837): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xff) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000600)={0x10098, 0x180, 0x0, 0x8001}) r4 = dup(r0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000a40)={0x70, 0x0, &(0x7f0000000640)=[@exit_looper, @release={0x40046306, 0x3}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000900)={@ptr={0x70742a85, 0x0, &(0x7f0000000880)=""/91, 0x5b, 0x0, 0xf}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f00000003c0)=""/237, 0xed, 0x2, 0x19}}, &(0x7f0000000580)={0x0, 0x28, 0x40}}, 0x40}, @request_death={0x400c630e, 0x3}, @release={0x40046306, 0x2}], 0x4e, 0x0, &(0x7f00000009c0)="b0d575908f7ce2f31cc1d809d25f07957eaaa808a6f64db9c0a2991d810a03ff3e5a74a3300f6697e8c2779d48e227cbf2880c9ba63e7394b9038769d310bda4e72e404f3b95b837c23db129cb0c"}) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000100)=0x60, 0x400) r5 = timerfd_create(0x7, 0x705750e214189cf5) timerfd_gettime(r5, &(0x7f0000000040)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x3751, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r6, r6, r6}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.267900418s ago: executing program 5 (id=9838): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000100)=r3) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 4.434656587s ago: executing program 6 (id=9840): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x5, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xfffbfffe, 0x2, 0xb2, 0x40000a8}, 0x12}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x84}, 0xc110) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r3, 0x18}, 0x80, &(0x7f00000008c0)=[{0x0}], 0x1}, 0x4005) 4.118434312s ago: executing program 3 (id=9841): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x6, 0x9, 0x1}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r9, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 3.962503766s ago: executing program 0 (id=9842): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002480)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000010000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f3ca1664fe2f3ced8416dc180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8070000001fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491d04aaee0d409731091f4fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e1590bab105b0cb578af7dc7d5e87d48d376444e2de02f47c61e8e84ff828de453f34c2b08660b080efc707e676e1fb4d5865c0ca177a4c7fbb4e829ab0894a1062b445c00f576b2b5cc7f819abd0f885cc4806f47ffb966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329bb8cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5b5a182cb5e8380100632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481edbf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026def743f1213bf817becd9e5a225d67521d1128eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979030000007081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661351df747aa6a65872dfdcfa68f65bd06b4082d43e121861b5cc09b986bf56c747d9a1cc5b506892c3a16ff10feea20bdac89bfb758cf3500000000000000000000000000000098e6db5a96055e764a3bfd4ccb20d2e800994f4b602d25b2c076f21c7102687e054bb93b2d013be6227fd99902b074c0de00733128c81c48c5e140b17d71ac48f137d10798c4272826d2ba55bbda0059636528c132ed06759d880d1bc291a76456ed7ee8bcb392fdf886dbc74879ec4b831904d7c101ebbaef3c0ae6d0cf0000000000000000000000000000000011cb735f66a559ef0cdb5163a15c0bb986474bf5d9542e3e48805ce53127e4c076d69d868df543717aaaa07d7aca056f7f036c2bcba0795d1a64868a29ac5321b3cd6ef5b1a741afc7124ee3df3a35e8014d6cb5fd6c054a10bb2146174c1d68b45fcfd7e531090ceae2f05536a4d5d6a4081e743827fb9c031d1fc9f195c2da189c49eaed6c30c71da0452e502ef393efeb02ebe82b1851cae5fa7c958ba23110b5e0e5b890803f28a356b2920e74564e0f8377b0ba5187fed2882b4780a1bcb583f1cb1470003ef9b592b9461328cfc01ebfce0ecdcea714a517dc40000000000000000000000000006bd0561e1cc72880cc3ec1bdf35eb670a9040e3b53cd826b94ad8aeb014e74787fe89fb3247a87d8bfb6d400142369f88964708d1d4db5a5df9d62ea6d805dfce568b885a50ed8e2eaf8a932287a1d3bfac17774e58875a63b77e07298e4b4f515189c6fcac3cd35dac9240e633219bb6a5a25865e6ed8e16caa5406b56702afe0befcabbc9a2a772a1a087f0d633d457bceb695b2cba3a1a2daa2dda796373cc0fe0a53236d028fc1076bb746b2717c8b6052f58c91bb8cc19474ab9d4d2160773829f078727f6c684ca749136a7f46ca28b00bb4237695b409859a3cb7dbf298c7802264387811e20a0d78489eab0b0e", @ANYBLOB="b1e89de5f90c58874c60583a1f815b2abec3d966ed5e58647d465af5b3601e4d55c268c667c6b0f3e18586362cb39dab10369515b187615978046ec1a45f9192cb36845a6e9ec021d7c78439ae777cd0"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffb7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2e0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x3f, 0x3d, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af41", 0x0, 0x3}, 0x50) 3.82219456s ago: executing program 4 (id=9843): mkdir(&(0x7f0000000400)='./file0\x00', 0x114) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xb7, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) 3.73641794s ago: executing program 0 (id=9844): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x6c, r1, 0x1, 0x70bd2b, 0x25dfdc00, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f8ffffdf00"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="4a728547bd465b93f636ccba030104b9"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="00b636fa7305a8a2700a18e7178798710ffeda0f04225711ffc96fe2cae3e235"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}]}]}, 0x6c}}, 0x24044004) 3.225386166s ago: executing program 5 (id=9845): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffea}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0xfffffff7, 0xb47e, 0xb, 0x20000003, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x5, 0x7, 0x8, 0x1, 0xfffffffc, 0x6}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x6, 0x8}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000001f00000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20044804) 3.13801786s ago: executing program 0 (id=9846): mkdir(&(0x7f0000000400)='./file0\x00', 0x114) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xb7, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) 3.131066266s ago: executing program 6 (id=9847): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000002c0)={0x0, 0x1}, 0x8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x22) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x22) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003240)={0x14, 0x26, 0x109, 0x870bd22, 0xfffffff9, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket(0x10, 0x80002, 0x0) (async) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtaction={0xcc, 0x30, 0x100, 0x4, 0x0, {}, [{0xb8, 0x1, [@m_simple={0xb4, 0x1, 0x0, 0x0, {{0xb}, {0x88, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x81, 0x3, '5\x18Q/\x92-\f^~\x82D\x16\xbe\x05<.\xd7L\x9e\x87n\x9fZ|av\x9b\xa0\xcc:\x03\x1c\x17\xc9\x8b6\xa3\xfb\x06\x00\x00Uw\xb0\xe7\x00\x1eVV.\x8e\xd4\x8eK\xa0\xdc\x86to\a\xc2P\x0f\xaak\vM\x11\x9c\x89 \f\xea\xe9A\x92s\xdf\xdd\x8b\n\t\xea\x9a\xf0\xa2\x98\bh\xec\x94\xd5;\xado\xf8\x9cJ\xf0\xf0\xa1P\xba\x98\xb5G\xb5\xd4\x03\xdb0h\x891q\xc8\xf9\x00\x00\x00\x00\x00\x00\x00\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xcc}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r4, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x7e}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x200}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8fc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x800}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x3b}, @chandef_params]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0xc894) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r4, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x7e}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x200}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8fc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x800}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x3b}, @chandef_params]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0xc894) 3.040834918s ago: executing program 3 (id=9848): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000080000000200000004"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000140)=ANY=[@ANYRESOCT=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYBLOB="7147e4f2caf4a355ab5000f90cbe65d5ad3e41601db8a4aefdbc8c537bdad75c78c363e16e5e0b43af195ab617b6320bd3ab2e28a6cab6ca", @ANYRES32=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.898208193s ago: executing program 6 (id=9849): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x803}}}, 0x7) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x54}}, 0x24000840) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, 0x7, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20000004) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000200)={0x0, 'lo\x00', 0x3}, 0x18) 2.56651741s ago: executing program 4 (id=9850): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000005840)=ANY=[], 0x201b) 2.488198887s ago: executing program 6 (id=9851): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xff) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000600)={0x10098, 0x180, 0x0, 0x8001}) r4 = dup(r0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000a40)={0x70, 0x0, &(0x7f0000000640)=[@exit_looper, @release={0x40046306, 0x3}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000900)={@ptr={0x70742a85, 0x0, &(0x7f0000000880)=""/91, 0x5b, 0x0, 0xf}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f00000003c0)=""/237, 0xed, 0x2, 0x19}}, &(0x7f0000000580)={0x0, 0x28, 0x40}}, 0x40}, @request_death={0x400c630e, 0x3}, @release={0x40046306, 0x2}], 0x4e, 0x0, &(0x7f00000009c0)="b0d575908f7ce2f31cc1d809d25f07957eaaa808a6f64db9c0a2991d810a03ff3e5a74a3300f6697e8c2779d48e227cbf2880c9ba63e7394b9038769d310bda4e72e404f3b95b837c23db129cb0c"}) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000100)=0x60, 0x400) r5 = timerfd_create(0x7, 0x705750e214189cf5) timerfd_gettime(r5, &(0x7f0000000040)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x3751, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r6, r6, r6}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.48786027s ago: executing program 3 (id=9852): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xf0, 0x0, 0x3, 0x3, 0x3, 0x4}, {0xd0, 0x2, 0x9, 0x100, 0x7f, 0xd1a7}, 0x1c000, 0x80000001, 0x2bf}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x968378ce08bc2429}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x7}, 0x80, &(0x7f0000004900)=[{&(0x7f0000000180)}], 0x1}, 0x0) 2.464180658s ago: executing program 5 (id=9853): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8fea, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002480)=ANY=[@ANYBLOB="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", @ANYBLOB="b1e89de5f90c58874c60583a1f815b2abec3d966ed5e58647d465af5b3601e4d55c268c667c6b0f3e18586362cb39dab10369515b187615978046ec1a45f9192cb36845a6e9ec021d7c78439ae777cd0"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffb7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2e0, 0xef, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e0cf086dd0de0ffff00184000630677fbac141414e000000162079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6e", 0x0, 0xfe, 0x60000000, 0x3f, 0x51, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x50) 2.09295953s ago: executing program 0 (id=9854): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002480)=ANY=[@ANYBLOB="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", @ANYBLOB="b1e89de5f90c58874c60583a1f815b2abec3d966ed5e58647d465af5b3601e4d55c268c667c6b0f3e18586362cb39dab10369515b187615978046ec1a45f9192cb36845a6e9ec021d7c78439ae777cd0"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffb7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2e0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x3f, 0x47, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4", 0x0, 0x3}, 0x50) 1.499696985s ago: executing program 6 (id=9855): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x505880, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000001040)={0x43, 0xfffffffc, 0x3}, 0x10) writev(r2, &(0x7f0000000300)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x0, 0x0, 0x4000}, 0x10) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x143240, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f0000000040)={0x400000000000027c, &(0x7f0000000080)}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x6, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x800000100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000130000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) 1.483918314s ago: executing program 4 (id=9856): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x6c, r1, 0x1, 0x70bd2b, 0x25dfdc00, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f8ffffdf00"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="4a728547bd465b93f636ccba030104b9"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="00b636fa7305a8a2700a18e7178798710ffeda0f04225711ffc96fe2cae3e235"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}]}]}, 0x6c}}, 0x24044004) 1.282007364s ago: executing program 5 (id=9857): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x5, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xfffbfffe, 0x2, 0xb2, 0x40000a8}, 0x12}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x84}, 0xc110) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r3, 0x18}, 0x80, &(0x7f00000008c0)=[{0x0}], 0x1}, 0x4005) 1.272557544s ago: executing program 0 (id=9858): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x6, 0x9, 0x1}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r9, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 1.24185348s ago: executing program 4 (id=9859): socket$nl_crypto(0x10, 0x3, 0x15) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) syz_open_dev$vbi(0x0, 0x0, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c840, &(0x7f0000000140)={0xa, 0x4e23, 0x7, @loopback, 0xffffffff}, 0x1c) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) ioctl$SIOCX25GSUBSCRIP(r2, 0x89e0, &(0x7f0000000440)={'veth1_to_batadv\x00', 0x305d, 0x6a}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01746fd6b6218889bbc98cb2322f560018000000000000000c0000001f0000854d20e6e2481711f000020000000300000000"], 0x0, 0x26, 0x0, 0x1, 0x3}, 0x28) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"}) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x80e0) 1.191446978s ago: executing program 3 (id=9860): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000100)=r3) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 1.941126ms ago: executing program 0 (id=9861): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x1000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x6, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x100}}, 0x0) 0s ago: executing program 5 (id=9862): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040054) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x13c8, 0x11e0, 0xc8, 0x8, 0x11e0, 0x5803, 0x12f8, 0x2e8, 0x2e8, 0x12f8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1198, 0x11e0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0xfffffffffffffffc}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x82, 0x8, 0xe, 'syz0\x00', {0x1}}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x5, 0x5, 0x9, 0x1, 0x0, "f66026c5e6e4409b4fed9e7027bc4e8c6b10d1bd2e4c13b96328722f2d860d2371d0ae65ef518c01cf9b398b7099487a3f073b38f0d17df76a133ae1adcee537"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1428) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone3(0x0, 0x0) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x1}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x100) fsetxattr$system_posix_acl(r3, 0x0, &(0x7f00000003c0)={{}, {0x1, 0x4}, [{}], {}, [{0x8, 0x4}], {0x10, 0x7}}, 0x34, 0x2) kernel console output (not intermixed with test programs): ning (device nullb0): udf_load_vrs: No VRS found [ 1938.179289][ T6828] UDF-fs: Scanning with blocksize 1024 failed [ 1938.187811][ T6828] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1938.195419][ T6828] UDF-fs: Scanning with blocksize 2048 failed [ 1938.203465][ T6828] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1938.212340][ T6828] UDF-fs: Scanning with blocksize 4096 failed [ 1938.345493][ T6831] syzkaller0: entered promiscuous mode [ 1938.371321][ T6831] syzkaller0: entered allmulticast mode [ 1938.396951][ T6822] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1938.408267][ T10] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1938.423289][ T6826] f2fs: Unknown parameter '#뀎' [ 1938.517446][ T6836] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1938.526231][ T6836] UDF-fs: Scanning with blocksize 512 failed [ 1938.536001][ T6836] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1938.543583][ T6836] UDF-fs: Scanning with blocksize 1024 failed [ 1938.551119][ T6836] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1938.568202][ T6836] UDF-fs: Scanning with blocksize 2048 failed [ 1938.575606][ T6836] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1938.583269][ T6836] UDF-fs: Scanning with blocksize 4096 failed [ 1938.758782][ T10] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1938.768915][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1938.785560][ T10] usb 6-1: config 0 descriptor?? [ 1938.801885][ T10] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1938.879342][ T6822] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41780 sclass=netlink_route_socket pid=6822 comm=syz.4.9519 [ 1938.935445][ T6822] bond2: (slave dummy0): making interface the new active one [ 1938.963384][ T6833] f2fs: Unknown parameter '#뀎' [ 1938.995778][ T6822] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 1939.048819][ T6830] netlink: 'syz.4.9519': attribute type 10 has an invalid length. [ 1939.072829][ T6830] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9519'. [ 1939.124875][ T6830] dummy0: entered promiscuous mode [ 1939.138092][ T6830] bond2: (slave dummy0): Releasing active interface [ 1939.185693][ T6847] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9526'. [ 1939.302103][ T6851] geneve2: entered promiscuous mode [ 1939.310807][ T10] gspca_cpia1: usb_control_msg 03, error -32 [ 1939.312168][ T6851] geneve2: entered allmulticast mode [ 1939.382014][ T6853] syzkaller0: entered promiscuous mode [ 1939.387980][ T6853] syzkaller0: entered allmulticast mode [ 1939.423049][ T10] gspca_cpia1: usb_control_msg 03, error -71 [ 1939.445520][ T10] gspca_cpia1: usb_control_msg 01, error -71 [ 1939.467803][ T10] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 1939.485647][ T10] usb 6-1: USB disconnect, device number 91 [ 1939.552109][ T6858] syzkaller0: entered promiscuous mode [ 1939.567916][ T6858] syzkaller0: entered allmulticast mode [ 1939.622992][ T6864] FAULT_INJECTION: forcing a failure. [ 1939.622992][ T6864] name failslab, interval 1, probability 0, space 0, times 0 [ 1939.635928][ T6864] CPU: 1 UID: 0 PID: 6864 Comm: syz.0.9534 Tainted: G L syzkaller #0 PREEMPT(full) [ 1939.635959][ T6864] Tainted: [L]=SOFTLOCKUP [ 1939.635965][ T6864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1939.635975][ T6864] Call Trace: [ 1939.635981][ T6864] [ 1939.635987][ T6864] dump_stack_lvl+0x100/0x190 [ 1939.636011][ T6864] should_fail_ex.cold+0x5/0xa [ 1939.636031][ T6864] ? kmem_cache_alloc_lru_noprof+0x59/0x6e0 [ 1939.636059][ T6864] should_failslab+0xc2/0x120 [ 1939.636076][ T6864] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1939.636101][ T6864] ? __d_alloc+0x35/0xa50 [ 1939.636125][ T6864] __d_alloc+0x35/0xa50 [ 1939.636143][ T6864] d_alloc_pseudo+0x1c/0xc0 [ 1939.636163][ T6864] alloc_file_pseudo+0x118/0x290 [ 1939.636182][ T6864] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1939.636199][ T6864] ? _raw_spin_unlock+0x28/0x50 [ 1939.636222][ T6864] ? alloc_fd+0x471/0x7a0 [ 1939.636245][ T6864] __anon_inode_getfile+0xe8/0x280 [ 1939.636266][ T6864] __anon_inode_getfd+0x5c/0xe0 [ 1939.636286][ T6864] __x64_sys_fsopen+0x190/0x220 [ 1939.636307][ T6864] do_syscall_64+0x115/0x870 [ 1939.636323][ T6864] ? clear_bhb_loop+0x40/0x90 [ 1939.636342][ T6864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1939.636358][ T6864] RIP: 0033:0x7f1adbd9ce59 [ 1939.636372][ T6864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1939.636388][ T6864] RSP: 002b:00007f1adcbd6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1939.636404][ T6864] RAX: ffffffffffffffda RBX: 00007f1adc015fa0 RCX: 00007f1adbd9ce59 [ 1939.636415][ T6864] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400 [ 1939.636425][ T6864] RBP: 00007f1adcbd6090 R08: 0000000000000000 R09: 0000000000000000 [ 1939.636436][ T6864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1939.636446][ T6864] R13: 00007f1adc016038 R14: 00007f1adc015fa0 R15: 00007ffd1639a6d8 [ 1939.636463][ T6864] [ 1939.985220][ T6873] syzkaller0: entered promiscuous mode [ 1939.990904][ T6873] syzkaller0: entered allmulticast mode [ 1940.151339][ T6880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9538'. [ 1940.237352][ T6883] batman_adv: batadv1: Adding interface: veth3 [ 1940.250059][ T6883] batman_adv: batadv1: The MTU of interface veth3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1940.323124][ T6883] batman_adv: batadv1: Not using interface veth3 (retrying later): interface not active [ 1940.529245][ T6885] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1940.550427][ T6885] batman_adv: batadv1: Interface activated: veth3 [ 1940.582767][ T6891] syzkaller0: entered promiscuous mode [ 1940.597928][ T6891] syzkaller0: entered allmulticast mode [ 1940.766659][ T6898] netlink: 188 bytes leftover after parsing attributes in process `syz.0.9540'. [ 1940.972088][ T6902] syzkaller0: entered promiscuous mode [ 1940.982673][ T6902] syzkaller0: entered allmulticast mode [ 1941.066458][T32581] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1941.096675][ T30] kauditd_printk_skb: 696 callbacks suppressed [ 1941.096691][ T30] audit: type=1400 audit(2000000977.230:180443): avc: denied { ioctl } for pid=6900 comm="syz.5.9547" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1941.160476][ T30] audit: type=1400 audit(2000000977.280:180444): avc: denied { recv } for pid=29194 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1941.188331][T32583] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1941.197917][ T30] audit: type=1400 audit(2000000977.290:180445): avc: denied { ioctl } for pid=6896 comm="syz.3.9545" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1941.226796][ T30] audit: type=1400 audit(2000000977.290:180446): avc: denied { ioctl } for pid=6896 comm="syz.3.9545" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1941.264910][ T30] audit: type=1400 audit(2000000977.290:180447): avc: denied { ioctl } for pid=6896 comm="syz.3.9545" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1941.295274][ T30] audit: type=1400 audit(2000000977.290:180448): avc: denied { recv } for pid=6886 comm="syz.0.9540" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1941.296924][ T6909] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6909 comm=syz.6.9550 [ 1941.324790][ T30] audit: type=1400 audit(2000000977.290:180449): avc: denied { read write } for pid=29194 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1941.372222][ T6909] netlink: 'syz.6.9550': attribute type 10 has an invalid length. [ 1941.380158][T32581] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 1941.389759][T32581] usb 4-1: config 0 has no interface number 0 [ 1941.395880][T32581] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1941.406722][T32583] usb 6-1: Using ep0 maxpacket: 32 [ 1941.415881][ T6909] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9550'. [ 1941.428740][ T6909] ÿ: entered promiscuous mode [ 1941.433652][T32583] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 1941.441828][T32583] usb 6-1: config 0 has no interface number 0 [ 1941.448541][T32581] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1941.459807][T32583] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1941.472733][ T30] audit: type=1400 audit(2000000977.290:180450): avc: denied { read write open } for pid=29194 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1941.504268][T32583] usb 6-1: config 0 interface 85 has no altsetting 0 [ 1941.521035][T32583] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1941.532221][T32581] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1941.545985][T32583] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1941.552822][ T30] audit: type=1400 audit(2000000977.290:180451): avc: denied { ioctl } for pid=29194 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1941.562375][T32581] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1941.595891][T32583] usb 6-1: Product: syz [ 1941.606013][T32583] usb 6-1: Manufacturer: syz [ 1941.616790][ T6911] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1941.622438][T32583] usb 6-1: SerialNumber: syz [ 1941.633417][T32583] usb 6-1: config 0 descriptor?? [ 1941.648074][T32581] usb 4-1: Product: syz [ 1941.663851][T32581] usb 4-1: Manufacturer: syz [ 1941.669538][T32581] usb 4-1: SerialNumber: syz [ 1941.679016][T32581] usb 4-1: config 0 descriptor?? [ 1941.698374][ T6897] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1941.711249][T32581] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1941.740358][T32581] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1941.782752][ T6918] xt_policy: output policy not valid in PREROUTING and INPUT [ 1942.686482][ T6927] syzkaller0: entered promiscuous mode [ 1942.702171][ T6927] syzkaller0: entered allmulticast mode [ 1942.894829][T32583] appletouch 6-1:0.85: Geyser mode initialized. [ 1942.902114][T32583] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input208 [ 1943.012747][T32583] usb 4-1: USB disconnect, device number 31 [ 1943.109286][T32583] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1943.128090][T32583] cyberjack 4-1:0.69: device disconnected [ 1943.320860][ T6937] syzkaller0: entered promiscuous mode [ 1943.396409][ T6901] overlayfs: failed to resolve './file1': -2 [ 1943.697730][ T6937] syzkaller0: entered allmulticast mode [ 1943.783091][ T6943] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1943.790813][ T6943] UDF-fs: Scanning with blocksize 512 failed [ 1943.804091][ T6943] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1943.811740][ T6943] UDF-fs: Scanning with blocksize 1024 failed [ 1943.819383][ T6943] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1943.826950][ T6943] UDF-fs: Scanning with blocksize 2048 failed [ 1943.834828][ T6943] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1943.842393][ T6943] UDF-fs: Scanning with blocksize 4096 failed [ 1944.040052][ T6940] f2fs: Unknown parameter '#뀎' [ 1944.067134][ T6946] fuse: Unknown parameter '' [ 1944.388409][ T6949] syzkaller0: entered promiscuous mode [ 1944.418272][ T6949] syzkaller0: entered allmulticast mode [ 1944.523863][ T6954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9563'. [ 1944.803034][ T6961] netlink: 'syz.6.9566': attribute type 1 has an invalid length. [ 1945.147280][T32581] usb 6-1: USB disconnect, device number 92 [ 1945.183234][T32581] appletouch 6-1:0.85: input: appletouch disconnected [ 1945.284324][ T6961] bond9: option mode: invalid value (8) [ 1945.339104][ T6961] bond9 (unregistering): Released all slaves [ 1945.536352][ T6974] syzkaller0: entered promiscuous mode [ 1945.545492][ T6974] syzkaller0: entered allmulticast mode [ 1945.553705][ T6975] syzkaller0: entered promiscuous mode [ 1945.564657][ T6975] syzkaller0: entered allmulticast mode [ 1945.811832][ T6980] syzkaller1: entered promiscuous mode [ 1945.836987][ T6980] syzkaller1: entered allmulticast mode [ 1946.136255][ T30] kauditd_printk_skb: 475 callbacks suppressed [ 1946.136271][ T30] audit: type=1400 audit(2000000982.260:180904): avc: denied { ioctl } for pid=6979 comm="syz.6.9573" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1946.208349][ T30] audit: type=1400 audit(2000000982.300:180905): avc: denied { firmware_load } for pid=6979 comm="syz.6.9573" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1946.377606][ T30] audit: type=1400 audit(2000000982.300:180906): avc: denied { firmware_load } for pid=6979 comm="syz.6.9573" path="/lib/firmware/regulatory.db.p7s" dev="sda1" ino=449 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1946.453474][ T6992] syzkaller0: entered promiscuous mode [ 1946.482822][ T6992] syzkaller0: entered allmulticast mode [ 1946.603871][ T30] audit: type=1400 audit(2000000982.380:180907): avc: denied { create } for pid=6989 comm="syz.5.9575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1946.633209][ T30] audit: type=1400 audit(2000000982.390:180908): avc: denied { create } for pid=6985 comm="syz.3.9574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1946.703564][ T30] audit: type=1400 audit(2000000982.390:180909): avc: denied { read } for pid=6985 comm="syz.3.9574" dev="nsfs" ino=4026532833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1946.760321][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1946.766868][ C0] audit: audit_lost=3019 audit_rate_limit=0 audit_backlog_limit=64 [ 1946.774728][ C0] audit: backlog limit exceeded [ 1946.784625][ T7000] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1946.806830][ T7000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9578'. [ 1946.886435][ T7000] bridge: RTM_NEWNEIGH with invalid ether address [ 1946.948163][ T7005] syzkaller0: entered promiscuous mode [ 1947.009919][ T7005] syzkaller0: entered allmulticast mode [ 1947.019030][ T7007] netlink: 75 bytes leftover after parsing attributes in process `syz.0.9578'. [ 1947.028114][ T7007] bridge: RTM_NEWNEIGH with invalid ether address [ 1947.142956][ T7012] ubi: mtd0 is already attached to ubi16 [ 1947.513226][ T7019] syzkaller0: entered promiscuous mode [ 1947.571922][ T7019] syzkaller0: entered allmulticast mode [ 1947.695718][ T7024] syzkaller0: entered promiscuous mode [ 1947.702270][ T7024] syzkaller0: entered allmulticast mode [ 1948.194018][ T7037] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1948.478005][ T7041] syzkaller0: entered promiscuous mode [ 1948.488809][ T7041] syzkaller0: entered allmulticast mode [ 1948.502203][ T7028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9588'. [ 1948.857937][ T7053] XFS (nbd5): SB validate failed with error -5. [ 1948.951237][ T7056] syzkaller0: entered promiscuous mode [ 1948.967516][ T7056] syzkaller0: entered allmulticast mode [ 1949.161756][ T7064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9596'. [ 1949.179735][ T7064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9596'. [ 1949.193546][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9596'. [ 1949.203524][ T7064] netlink: 'syz.4.9596': attribute type 6 has an invalid length. [ 1949.313063][ T7066] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9596'. [ 1949.326823][T23104] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1949.327377][ T7064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9596'. [ 1949.346135][ T7066] netlink: 'syz.4.9596': attribute type 6 has an invalid length. [ 1949.353402][T23104] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1949.376128][ T7064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9596'. [ 1949.411285][ T7064] netlink: 'syz.4.9596': attribute type 6 has an invalid length. [ 1949.414798][T23104] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1949.430246][ T7066] netlink: 'syz.4.9596': attribute type 6 has an invalid length. [ 1949.443192][T23104] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1949.468470][ T7068] syzkaller0: entered promiscuous mode [ 1949.480315][ T7068] syzkaller0: entered allmulticast mode [ 1949.622887][ T7073] syzkaller0: entered promiscuous mode [ 1949.644478][ T7073] syzkaller0: entered allmulticast mode [ 1949.679416][ T7078] __nla_validate_parse: 2 callbacks suppressed [ 1949.679433][ T7078] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9601'. [ 1949.763531][ T5612] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1949.773553][ T5612] CPU: 1 UID: 0 PID: 5612 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1949.773584][ T5612] Tainted: [L]=SOFTLOCKUP [ 1949.773591][ T5612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1949.773604][ T5612] Workqueue: hci0 hci_rx_work [ 1949.773626][ T5612] Call Trace: [ 1949.773632][ T5612] [ 1949.773638][ T5612] dump_stack_lvl+0x100/0x190 [ 1949.773661][ T5612] sysfs_warn_dup.cold+0x1c/0x28 [ 1949.773687][ T5612] sysfs_create_dir_ns+0x24b/0x2b0 [ 1949.773709][ T5612] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1949.773730][ T5612] ? kobject_add_internal+0x25f/0x930 [ 1949.773753][ T5612] ? lock_release+0x24d/0x310 [ 1949.773771][ T5612] ? do_raw_spin_unlock+0x145/0x1e0 [ 1949.773793][ T5612] kobject_add_internal+0x2c8/0x930 [ 1949.773815][ T5612] kobject_add+0x16a/0x1e0 [ 1949.773836][ T5612] ? __pfx_kobject_add+0x10/0x10 [ 1949.773858][ T5612] ? kobject_put+0xb9/0x640 [ 1949.773878][ T5612] ? _raw_spin_unlock+0x28/0x50 [ 1949.773904][ T5612] device_add+0x294/0x1970 [ 1949.773930][ T5612] ? __pfx_dev_set_name+0x10/0x10 [ 1949.773958][ T5612] ? __pfx_device_add+0x10/0x10 [ 1949.773983][ T5612] ? mgmt_send_event_skb+0x2fb/0x460 [ 1949.774003][ T5612] hci_conn_add_sysfs+0x1a3/0x260 [ 1949.774023][ T5612] le_conn_complete_evt+0x11eb/0x1f60 [ 1949.774044][ T5612] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1949.774060][ T5612] ? rcu_is_watching+0x12/0xc0 [ 1949.774083][ T5612] ? hci_event_packet+0x186/0xcd0 [ 1949.774099][ T5612] ? lock_release+0x24d/0x310 [ 1949.774119][ T5612] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1949.774137][ T5612] ? skb_pull_data+0x15f/0x1e0 [ 1949.774174][ T5612] hci_le_meta_evt+0x34a/0x5f0 [ 1949.774195][ T5612] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1949.774215][ T5612] hci_event_packet+0x51c/0xcd0 [ 1949.774233][ T5612] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1949.774252][ T5612] ? __pfx_hci_event_packet+0x10/0x10 [ 1949.774269][ T5612] ? rcu_is_cpu_rrupt_from_idle+0x250/0x270 [ 1949.774296][ T5612] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1949.774322][ T5612] hci_rx_work+0x451/0xfc0 [ 1949.774341][ T5612] process_one_work+0xa23/0x1940 [ 1949.774363][ T5612] ? __pfx_process_one_work+0x10/0x10 [ 1949.774382][ T5612] ? __pfx_hci_rx_work+0x10/0x10 [ 1949.774399][ T5612] worker_thread+0x5ef/0xe50 [ 1949.774417][ T5612] ? kthread+0x13a/0x450 [ 1949.774442][ T5612] ? __pfx_worker_thread+0x10/0x10 [ 1949.774457][ T5612] kthread+0x370/0x450 [ 1949.774485][ T5612] ? __pfx_kthread+0x10/0x10 [ 1949.774511][ T5612] ret_from_fork+0x72b/0xd50 [ 1949.774533][ T5612] ? __pfx_ret_from_fork+0x10/0x10 [ 1949.774555][ T5612] ? rcu_is_watching+0x12/0xc0 [ 1949.774579][ T5612] ? __switch_to+0x800/0x10f0 [ 1949.774607][ T5612] ? __pfx_kthread+0x10/0x10 [ 1949.774633][ T5612] ret_from_fork_asm+0x1a/0x30 [ 1949.774662][ T5612] [ 1949.774974][ T5612] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1950.062844][ T5612] Bluetooth: hci0: failed to register connection device [ 1950.191183][ T7089] syzkaller0: entered promiscuous mode [ 1950.197055][ T7089] syzkaller0: entered allmulticast mode [ 1950.355058][ T7094] syzkaller0: entered promiscuous mode [ 1950.427075][ T7094] syzkaller0: entered allmulticast mode [ 1950.519889][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1950.535157][T21184] usb 1-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1950.569441][T21184] dvb_usb_ec168 1-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 1950.585457][T21184] usb 1-1: USB disconnect, device number 70 [ 1950.795274][ T7112] vhci_hcd vhci_hcd.0: port 0 already used [ 1950.817792][ T7103] Bluetooth: hci4: unexpected event for opcode 0x1004 [ 1951.098488][ T7126] netlink: 'syz.6.9619': attribute type 1 has an invalid length. [ 1951.154465][ T30] kauditd_printk_skb: 723 callbacks suppressed [ 1951.154482][ T30] audit: type=1400 audit(2000000987.280:181629): avc: denied { recv } for pid=7128 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1951.197888][ T30] audit: type=1400 audit(2000000987.280:181630): avc: denied { read } for pid=7125 comm="syz.6.9619" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1951.208132][ T7126] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9619'. [ 1951.221593][ T30] audit: type=1400 audit(2000000987.280:181631): avc: denied { read open } for pid=7125 comm="syz.6.9619" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1951.261873][ T30] audit: type=1400 audit(2000000987.300:181632): avc: denied { read write } for pid=6179 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1951.296010][ T30] audit: type=1400 audit(2000000987.300:181633): avc: denied { read write open } for pid=6179 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1951.324231][ T30] audit: type=1400 audit(2000000987.300:181634): avc: denied { create } for pid=7125 comm="syz.6.9619" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1951.331553][ T7129] syzkaller0: entered promiscuous mode [ 1951.393883][ T7129] syzkaller0: entered allmulticast mode [ 1951.411837][ T30] audit: type=1400 audit(2000000987.300:181635): avc: denied { ioctl } for pid=6179 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1951.440707][ T30] audit: type=1400 audit(2000000987.300:181636): avc: denied { ioctl } for pid=7125 comm="syz.6.9619" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=180940 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1951.458833][ T7126] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1951.505544][ T30] audit: type=1400 audit(2000000987.330:181637): avc: denied { recv } for pid=30 comm="kauditd" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1951.542963][ T30] audit: type=1400 audit(2000000987.330:181638): avc: denied { recv } for pid=30 comm="kauditd" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1951.563809][ T7139] netlink: 120 bytes leftover after parsing attributes in process `syz.3.9624'. [ 1952.089544][ T7153] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1952.215346][ T1234] Bluetooth: hci0: command 0x2016 tx timeout [ 1952.811556][ T7168] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9630'. [ 1953.191564][ T7174] syzkaller0: entered promiscuous mode [ 1953.397590][ T7174] syzkaller0: entered allmulticast mode [ 1953.524500][ T7183] syzkaller0: entered promiscuous mode [ 1953.537711][ T7183] syzkaller0: entered allmulticast mode [ 1953.626468][ T7193] syzkaller0: entered promiscuous mode [ 1953.632600][ T7193] syzkaller0: entered allmulticast mode [ 1954.316070][ T1234] Bluetooth: hci0: command 0x2016 tx timeout [ 1954.836048][ T5612] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1954.844355][ T5612] Bluetooth: hci4: Injecting HCI hardware error event [ 1954.851245][ T1234] Bluetooth: hci4: hardware error 0x00 [ 1954.920295][ T7209] bridge0: port 3(syz_tun) entered disabled state [ 1954.957626][ T7209] bridge0: port 2(bridge_slave_1) entered disabled state [ 1954.957813][ T7210] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9643'. [ 1954.964949][ T7209] bridge0: port 1(bridge_slave_0) entered disabled state [ 1955.027033][ T7210] netlink: 212 bytes leftover after parsing attributes in process `syz.0.9643'. [ 1955.055061][ T7210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9643'. [ 1955.946050][ T10] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1956.086207][ T10] usb 5-1: device descriptor read/64, error -71 [ 1956.203543][ T30] kauditd_printk_skb: 573 callbacks suppressed [ 1956.203558][ T30] audit: type=1400 audit(2000000992.330:182212): avc: denied { sys_module } for pid=7257 comm="syz.6.9652" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1956.280480][ T30] audit: type=1400 audit(2000000992.330:182213): avc: denied { module_request } for pid=7257 comm="syz.6.9652" kmod="syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1956.336168][ T10] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1956.345040][ T7209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1956.381694][ T30] audit: type=1400 audit(2000000992.350:182214): avc: denied { ioctl } for pid=7231 comm="syz.4.9649" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1956.457756][ T30] audit: type=1400 audit(2000000992.350:182215): avc: denied { ioctl } for pid=7231 comm="syz.4.9649" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1956.505999][ T10] usb 5-1: device descriptor read/64, error -71 [ 1956.508577][ T30] audit: type=1400 audit(2000000992.370:182216): avc: denied { create } for pid=7260 comm="syz.5.9653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1956.533163][ T30] audit: type=1400 audit(2000000992.370:182217): avc: denied { ioctl } for pid=7260 comm="syz.5.9653" path="socket:[182276]" dev="sockfs" ino=182276 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1956.539433][ T7209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1956.561669][ T30] audit: type=1400 audit(2000000992.370:182218): avc: denied { module_request } for pid=7260 comm="syz.5.9653" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1956.592992][ T30] audit: type=1400 audit(2000000992.370:182219): avc: denied { sys_module } for pid=7260 comm="syz.5.9653" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1956.616251][ T30] audit: type=1400 audit(2000000992.370:182220): avc: denied { module_request } for pid=7260 comm="syz.5.9653" kmod="syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1956.639291][ T30] audit: type=1400 audit(2000000992.410:182221): avc: denied { ioctl } for pid=7231 comm="syz.4.9649" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1956.646684][ T10] usb usb5-port1: attempt power cycle [ 1956.916705][ T1234] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1956.981259][ T7203] netlink: 'syz.0.9643': attribute type 1 has an invalid length. [ 1956.989046][ T7203] netlink: 'syz.0.9643': attribute type 27 has an invalid length. [ 1956.996872][ T7203] netlink: 252 bytes leftover after parsing attributes in process `syz.0.9643'. [ 1957.013013][ T10] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1957.047280][T23104] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1957.057898][T23104] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1957.067428][ T10] usb 5-1: device descriptor read/8, error -71 [ 1957.078034][T23104] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1957.090988][T23104] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1957.316000][ T10] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1957.367140][ T10] usb 5-1: device descriptor read/8, error -71 [ 1957.606058][ T10] usb usb5-port1: unable to enumerate USB device [ 1957.912860][ T10] IPVS: starting estimator thread 0... [ 1958.026410][ T7314] IPVS: using max 63 ests per chain, 151200 per kthread [ 1958.043264][ T7313] 9p: Bad value for 'wfdno' [ 1958.593775][ T7322] syzkaller0: entered promiscuous mode [ 1958.614081][ T7322] syzkaller0: entered allmulticast mode [ 1959.363709][ T7353] fuse: Bad value for 'fd' [ 1959.682612][ T7368] syzkaller0: entered promiscuous mode [ 1959.698341][ T7368] syzkaller0: entered allmulticast mode [ 1959.878512][ T7376] syzkaller0: entered promiscuous mode [ 1959.905369][ T7376] syzkaller0: entered allmulticast mode [ 1960.016084][ T6066] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1960.097950][ T7387] MPI: mpi too large (113288 bits) [ 1960.323937][ T6066] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1960.433548][ T6066] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1960.557295][ T6066] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1960.791991][ T6066] usb 4-1: config 0 descriptor?? [ 1961.124282][ T6066] usbhid 4-1:0.0: can't add hid device: -71 [ 1961.143699][ T6066] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1961.175333][ T6066] usb 4-1: USB disconnect, device number 32 [ 1961.207197][ T30] kauditd_printk_skb: 622 callbacks suppressed [ 1961.207249][ T30] audit: type=1400 audit(2000000997.340:182842): avc: denied { read } for pid=7397 comm="syz.0.9695" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1961.492574][ T30] audit: type=1400 audit(2000000997.340:182843): avc: denied { read open } for pid=7397 comm="syz.0.9695" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1961.531476][ T30] audit: type=1400 audit(2000000997.430:182844): avc: denied { prog_load } for pid=7397 comm="syz.0.9695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1961.626051][ T30] audit: type=1400 audit(2000000997.440:182845): avc: denied { bpf } for pid=7397 comm="syz.0.9695" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1961.673406][ T30] audit: type=1400 audit(2000000997.450:182846): avc: denied { prog_load } for pid=7397 comm="syz.0.9695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1961.720978][ T30] audit: type=1400 audit(2000000997.460:182847): avc: denied { perfmon } for pid=7397 comm="syz.0.9695" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1961.775098][ T30] audit: type=1400 audit(2000000997.470:182848): avc: denied { perfmon } for pid=7397 comm="syz.0.9695" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1961.809630][T21184] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1961.825456][ T7411] syzkaller0: entered promiscuous mode [ 1961.832218][ T7411] syzkaller0: entered allmulticast mode [ 1961.836270][ T30] audit: type=1400 audit(2000000997.480:182849): avc: denied { perfmon } for pid=7397 comm="syz.0.9695" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1961.859888][ T30] audit: type=1400 audit(2000000997.480:182850): avc: denied { perfmon } for pid=7397 comm="syz.0.9695" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1961.882353][ T30] audit: type=1400 audit(2000000997.490:182851): avc: denied { bpf } for pid=7397 comm="syz.0.9695" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1961.986002][ T6066] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1961.997819][T21184] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1962.014196][T21184] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1962.035801][T21184] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1962.051847][T21184] usb 4-1: config 0 descriptor?? [ 1962.053210][ T7418] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9701'. [ 1962.095634][ T7418] xt_ecn: cannot match TCP bits for non-tcp packets [ 1962.146020][ T6066] usb 6-1: Using ep0 maxpacket: 8 [ 1962.154165][ T6066] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1962.182138][ T6066] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1962.221657][ T6066] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1962.242418][ T6066] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1962.266189][ T6066] usb 6-1: Product: syz [ 1962.276738][ T6066] usb 6-1: Manufacturer: syz [ 1962.291534][ T6066] usb 6-1: SerialNumber: syz [ 1962.304022][ T6066] usb 6-1: config 0 descriptor?? [ 1962.318738][ T7422] syzkaller0: entered promiscuous mode [ 1962.324227][ T7422] syzkaller0: entered allmulticast mode [ 1962.336446][ T6066] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 1962.593587][ T7427] MPI: mpi too large (113288 bits) [ 1963.185379][ T6066] snd_usb_toneport 6-1:0.0: cannot get proper max packet size [ 1963.293635][ T6066] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 1963.484007][ T6066] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1963.628129][ T7429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1963.637478][ T7429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1964.445026][T21184] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 1964.452782][T21184] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input209 [ 1964.865504][T21184] usb 4-1: USB disconnect, device number 33 [ 1964.871502][ C0] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1964.979455][ T6066] usb 6-1: USB disconnect, device number 93 [ 1965.221235][ T7443] FAULT_INJECTION: forcing a failure. [ 1965.221235][ T7443] name failslab, interval 1, probability 0, space 0, times 0 [ 1965.249371][ T7443] CPU: 1 UID: 0 PID: 7443 Comm: syz.0.9710 Tainted: G L syzkaller #0 PREEMPT(full) [ 1965.249401][ T7443] Tainted: [L]=SOFTLOCKUP [ 1965.249407][ T7443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1965.249418][ T7443] Call Trace: [ 1965.249423][ T7443] [ 1965.249430][ T7443] dump_stack_lvl+0x100/0x190 [ 1965.249455][ T7443] should_fail_ex.cold+0x5/0xa [ 1965.249484][ T7443] ? kmem_cache_alloc_node_noprof+0x5b/0x6f0 [ 1965.249514][ T7443] should_failslab+0xc2/0x120 [ 1965.249537][ T7443] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1965.249570][ T7443] ? __alloc_skb+0x140/0x710 [ 1965.249589][ T7443] ? __alloc_skb+0x5b7/0x710 [ 1965.249606][ T7443] __alloc_skb+0x140/0x710 [ 1965.249623][ T7443] ? __alloc_skb+0x5b7/0x710 [ 1965.249641][ T7443] ? __pfx___alloc_skb+0x10/0x10 [ 1965.249658][ T7443] ? netlink_autobind.isra.0+0x160/0x370 [ 1965.249686][ T7443] netlink_alloc_large_skb+0x69/0x150 [ 1965.249703][ T7443] netlink_sendmsg+0x680/0xda0 [ 1965.249721][ T7443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1965.249749][ T7443] ____sys_sendmsg+0xa4d/0xbe0 [ 1965.249776][ T7443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1965.249793][ T7443] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1965.249819][ T7443] ? kstrtouint_from_user+0x13c/0x1d0 [ 1965.249837][ T7443] ___sys_sendmsg+0x190/0x1e0 [ 1965.249853][ T7443] ? __pfx____sys_sendmsg+0x10/0x10 [ 1965.249870][ T7443] ? get_pid_task+0x106/0x250 [ 1965.249896][ T7443] ? rcu_is_watching+0x12/0xc0 [ 1965.249923][ T7443] __sys_sendmsg+0x160/0x210 [ 1965.249945][ T7443] ? __pfx___sys_sendmsg+0x10/0x10 [ 1965.249968][ T7443] ? rcu_is_watching+0x12/0xc0 [ 1965.249991][ T7443] do_syscall_64+0x115/0x870 [ 1965.250008][ T7443] ? clear_bhb_loop+0x40/0x90 [ 1965.250027][ T7443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1965.250044][ T7443] RIP: 0033:0x7f1adbd9ce59 [ 1965.250059][ T7443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1965.250079][ T7443] RSP: 002b:00007f1adcbd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1965.250096][ T7443] RAX: ffffffffffffffda RBX: 00007f1adc015fa0 RCX: 00007f1adbd9ce59 [ 1965.250107][ T7443] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1965.250118][ T7443] RBP: 00007f1adcbd6090 R08: 0000000000000000 R09: 0000000000000000 [ 1965.250128][ T7443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1965.250137][ T7443] R13: 00007f1adc016038 R14: 00007f1adc015fa0 R15: 00007ffd1639a6d8 [ 1965.250153][ T7443] [ 1965.634541][ T7449] syzkaller0: entered promiscuous mode [ 1965.640270][ T7449] syzkaller0: entered allmulticast mode [ 1965.781549][ T7452] syzkaller0: entered promiscuous mode [ 1965.803482][ T7452] syzkaller0: entered allmulticast mode [ 1965.916518][T21184] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 1965.925393][ T7459] FAULT_INJECTION: forcing a failure. [ 1965.925393][ T7459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1965.952930][ T7459] CPU: 1 UID: 0 PID: 7459 Comm: syz.5.9715 Tainted: G L syzkaller #0 PREEMPT(full) [ 1965.952961][ T7459] Tainted: [L]=SOFTLOCKUP [ 1965.952967][ T7459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1965.952976][ T7459] Call Trace: [ 1965.952982][ T7459] [ 1965.952988][ T7459] dump_stack_lvl+0x100/0x190 [ 1965.953014][ T7459] should_fail_ex.cold+0x5/0xa [ 1965.953038][ T7459] _copy_from_user+0x2e/0xd0 [ 1965.953066][ T7459] copy_msghdr_from_user+0x9f/0x4c0 [ 1965.953087][ T7459] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1965.953104][ T7459] ? kstrtouint_from_user+0x13c/0x1d0 [ 1965.953122][ T7459] ___sys_sendmsg+0x106/0x1e0 [ 1965.953136][ T7459] ? __pfx____sys_sendmsg+0x10/0x10 [ 1965.953150][ T7459] ? get_pid_task+0x106/0x250 [ 1965.953184][ T7459] ? rcu_is_watching+0x12/0xc0 [ 1965.953212][ T7459] __sys_sendmsg+0x160/0x210 [ 1965.953236][ T7459] ? __pfx___sys_sendmsg+0x10/0x10 [ 1965.953259][ T7459] ? rcu_is_watching+0x12/0xc0 [ 1965.953280][ T7459] do_syscall_64+0x115/0x870 [ 1965.953297][ T7459] ? clear_bhb_loop+0x40/0x90 [ 1965.953317][ T7459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1965.953334][ T7459] RIP: 0033:0x7f9f85b9ce59 [ 1965.953348][ T7459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1965.953365][ T7459] RSP: 002b:00007f9f86af8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1965.953385][ T7459] RAX: ffffffffffffffda RBX: 00007f9f85e16090 RCX: 00007f9f85b9ce59 [ 1965.953397][ T7459] RDX: 0000000004041080 RSI: 0000200000006040 RDI: 0000000000000004 [ 1965.953408][ T7459] RBP: 00007f9f86af8090 R08: 0000000000000000 R09: 0000000000000000 [ 1965.953420][ T7459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1965.953431][ T7459] R13: 00007f9f85e16128 R14: 00007f9f85e16090 R15: 00007ffc3a823278 [ 1965.953449][ T7459] [ 1966.217875][ T30] kauditd_printk_skb: 422 callbacks suppressed [ 1966.217892][ T30] audit: type=1400 audit(2000001002.350:183265): avc: denied { prog_load } for pid=7460 comm="syz.3.9718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1966.253442][T21184] usb 1-1: config 9 has an invalid interface number: 245 but max is 0 [ 1966.262827][ T30] audit: type=1400 audit(2000001002.380:183266): avc: denied { ioctl } for pid=7451 comm="syz.0.9713" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1966.288373][ T30] audit: type=1400 audit(2000001002.380:183267): avc: denied { bpf } for pid=7460 comm="syz.3.9718" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1966.310578][ T30] audit: type=1400 audit(2000001002.380:183268): avc: denied { ioctl } for pid=7451 comm="syz.0.9713" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1966.326370][T21184] usb 1-1: config 9 has no interface number 0 [ 1966.335823][ T30] audit: type=1400 audit(2000001002.380:183269): avc: denied { ioctl } for pid=7451 comm="syz.0.9713" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1966.385588][T21184] usb 1-1: New USB device found, idVendor=8086, idProduct=1155, bcdDevice=a0.72 [ 1966.405506][ T30] audit: type=1400 audit(2000001002.380:183270): avc: denied { create } for pid=7460 comm="syz.3.9718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1966.416792][T21184] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1966.461436][T21184] usb 1-1: Product: syz [ 1966.483208][ T30] audit: type=1400 audit(2000001002.380:183271): avc: denied { setopt } for pid=7460 comm="syz.3.9718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1966.487812][T21184] usb 1-1: Manufacturer: syz [ 1966.563499][T21184] usb 1-1: SerialNumber: syz [ 1966.570776][ T7472] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1966.574153][ T3433] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1966.584856][ T7453] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1966.718846][ T7476] syzkaller1: entered promiscuous mode [ 1966.736076][ T7476] syzkaller1: entered allmulticast mode [ 1966.784718][ T7481] FAULT_INJECTION: forcing a failure. [ 1966.784718][ T7481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1966.798164][ T7481] CPU: 1 UID: 0 PID: 7481 Comm: syz.6.9725 Tainted: G L syzkaller #0 PREEMPT(full) [ 1966.798193][ T7481] Tainted: [L]=SOFTLOCKUP [ 1966.798200][ T7481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1966.798211][ T7481] Call Trace: [ 1966.798217][ T7481] [ 1966.798223][ T7481] dump_stack_lvl+0x100/0x190 [ 1966.798248][ T7481] should_fail_ex.cold+0x5/0xa [ 1966.798273][ T7481] _copy_from_iter+0x1f4/0x1690 [ 1966.798299][ T7481] ? __pfx__copy_from_iter+0x10/0x10 [ 1966.798325][ T7481] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1966.798347][ T7481] skb_copy_datagram_from_iter+0x11f/0x720 [ 1966.798365][ T7481] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1966.798388][ T7481] tun_get_user+0x1889/0x3c20 [ 1966.798418][ T7481] ? inode_has_perm+0x16d/0x1d0 [ 1966.798440][ T7481] ? __pfx_tun_get_user+0x10/0x10 [ 1966.798465][ T7481] ? __file_has_perm+0x336/0x460 [ 1966.798489][ T7481] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1966.798517][ T7481] ? tun_get+0x191/0x370 [ 1966.798539][ T7481] ? rcu_is_watching+0x12/0xc0 [ 1966.798562][ T7481] ? tun_get+0x191/0x370 [ 1966.798591][ T7481] ? lock_release+0x24d/0x310 [ 1966.798611][ T7481] tun_chr_write_iter+0xdc/0x200 [ 1966.798638][ T7481] vfs_write+0x6ac/0x1050 [ 1966.798660][ T7481] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1966.798687][ T7481] ? __pfx_vfs_write+0x10/0x10 [ 1966.798709][ T7481] ? lock_release+0x24d/0x310 [ 1966.798732][ T7481] ksys_write+0x12a/0x250 [ 1966.798753][ T7481] ? __pfx_ksys_write+0x10/0x10 [ 1966.798775][ T7481] ? rcu_is_watching+0x12/0xc0 [ 1966.798802][ T7481] do_syscall_64+0x115/0x870 [ 1966.798820][ T7481] ? clear_bhb_loop+0x40/0x90 [ 1966.798839][ T7481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1966.798856][ T7481] RIP: 0033:0x7f8f3575d68e [ 1966.798871][ T7481] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1966.798888][ T7481] RSP: 002b:00007f8f3660efb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1966.798905][ T7481] RAX: ffffffffffffffda RBX: 00007f8f3660f6c0 RCX: 00007f8f3575d68e [ 1966.798916][ T7481] RDX: 0000000000000d81 RSI: 00002000000009c0 RDI: 00000000000000c8 [ 1966.798927][ T7481] RBP: 00007f8f3660f090 R08: 0000000000000000 R09: 0000000000000000 [ 1966.798937][ T7481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1966.798947][ T7481] R13: 00007f8f35a16038 R14: 00007f8f35a15fa0 R15: 00007ffe2f3a86c8 [ 1966.798964][ T7481] [ 1967.136203][ T7483] syzkaller0: entered promiscuous mode [ 1967.149861][ T7483] syzkaller0: entered allmulticast mode [ 1967.341862][ T7486] netlink: 'syz.5.9728': attribute type 1 has an invalid length. [ 1967.405768][ T7486] bond2: entered promiscuous mode [ 1967.425110][ T7493] netlink: 'syz.4.9729': attribute type 1 has an invalid length. [ 1967.426497][ T7486] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1967.442346][ T7489] tipc: Enabling of bearer rejected, failed to enable media [ 1967.488593][ T7493] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1967.550658][ T7497] bond3: (slave veth3): Enslaving as an active interface with an up link [ 1967.578840][ T7486] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1967.597831][ T7486] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1967.625720][ T7486] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1967.684584][ T7486] bond2: (slave ip6gre1): making interface the new active one [ 1967.692232][ T7486] ip6gre1: entered promiscuous mode [ 1967.723811][ T7486] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 1968.010280][ T7493] dummy0: left promiscuous mode [ 1968.150250][ T7497] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1968.198891][ T7497] bond3: (slave batadv2): Enslaving as an active interface with an up link [ 1968.452896][ T7502] syzkaller0: entered promiscuous mode [ 1968.470257][ T7502] syzkaller0: entered allmulticast mode [ 1968.702556][T21184] uvcvideo 1-1:9.245: Found UVC 0.06 device syz (8086:1155) [ 1968.757760][T21184] uvcvideo 1-1:9.245: No valid video chain found. [ 1968.794405][T21184] usb 1-1: USB disconnect, device number 71 [ 1968.920554][ T7517] syzkaller0: entered promiscuous mode [ 1968.951726][ T7517] syzkaller0: entered allmulticast mode [ 1968.978521][ T7519] syzkaller0: entered promiscuous mode [ 1968.997407][ T7519] syzkaller0: entered allmulticast mode [ 1969.402261][ T7529] syzkaller0: entered promiscuous mode [ 1969.432194][ T7529] syzkaller0: entered allmulticast mode [ 1970.084616][ T7546] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9745'. [ 1970.592075][ T7548] bond2: left promiscuous mode [ 1970.617082][ T7548] ip6gre1: left promiscuous mode [ 1971.010636][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1971.239142][ T30] kauditd_printk_skb: 496 callbacks suppressed [ 1971.239158][ T30] audit: type=1400 audit(2000001007.370:183762): avc: denied { recv } for pid=29194 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1971.276914][ T30] audit: type=1400 audit(2000001007.370:183763): avc: denied { recv } for pid=29194 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1971.303283][ T30] audit: type=1400 audit(2000001007.370:183764): avc: denied { recv } for pid=29194 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1971.331292][ T30] audit: type=1400 audit(2000001007.370:183765): avc: denied { read write } for pid=3433 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1971.444703][ T7562] syzkaller0: entered promiscuous mode [ 1971.447974][ T30] audit: type=1400 audit(2000001007.370:183766): avc: denied { read write open } for pid=3433 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1971.504897][ T30] audit: type=1400 audit(2000001007.370:183767): avc: denied { ioctl } for pid=3433 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1971.537320][ T30] audit: type=1400 audit(2000001007.510:183768): avc: denied { prog_load } for pid=7559 comm="syz.4.9750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1971.563045][ T30] audit: type=1400 audit(2000001007.510:183769): avc: denied { bpf } for pid=7559 comm="syz.4.9750" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1971.565563][ T7562] syzkaller0: entered allmulticast mode [ 1971.602460][ T30] audit: type=1400 audit(2000001007.550:183770): avc: denied { prog_load } for pid=7559 comm="syz.4.9750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1971.629065][ T30] audit: type=1400 audit(2000001007.550:183771): avc: denied { create } for pid=7560 comm="syz.3.9748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1971.672948][ T7575] syzkaller0: entered promiscuous mode [ 1971.681857][ T7575] syzkaller0: entered allmulticast mode [ 1971.878909][ T7582] syzkaller0: entered promiscuous mode [ 1971.887391][ T7582] syzkaller0: entered allmulticast mode [ 1971.903709][ T7584] FAULT_INJECTION: forcing a failure. [ 1971.903709][ T7584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1971.954072][ T7584] CPU: 0 UID: 0 PID: 7584 Comm: syz.4.9753 Tainted: G L syzkaller #0 PREEMPT(full) [ 1971.954103][ T7584] Tainted: [L]=SOFTLOCKUP [ 1971.954109][ T7584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1971.954119][ T7584] Call Trace: [ 1971.954125][ T7584] [ 1971.954131][ T7584] dump_stack_lvl+0x100/0x190 [ 1971.954156][ T7584] should_fail_ex.cold+0x5/0xa [ 1971.954179][ T7584] _copy_from_user+0x2e/0xd0 [ 1971.954203][ T7584] kstrtouint_from_user+0xd6/0x1d0 [ 1971.954220][ T7584] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1971.954239][ T7584] ? __traceiter_nilfs2_transaction_transition+0x40/0xe0 [ 1971.954262][ T7584] ? rcu_is_watching+0x12/0xc0 [ 1971.954287][ T7584] proc_fail_nth_write+0x83/0x220 [ 1971.954309][ T7584] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1971.954331][ T7584] ? __pfx___might_resched+0x10/0x10 [ 1971.954351][ T7584] vfs_write+0x2aa/0x1050 [ 1971.954374][ T7584] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1971.954395][ T7584] ? __pfx_vfs_write+0x10/0x10 [ 1971.954416][ T7584] ? rcu_is_watching+0x12/0xc0 [ 1971.954440][ T7584] ? __fget_files+0x21f/0x3d0 [ 1971.954468][ T7584] ksys_write+0x12a/0x250 [ 1971.954489][ T7584] ? __pfx_ksys_write+0x10/0x10 [ 1971.954515][ T7584] ? rcu_is_watching+0x12/0xc0 [ 1971.954538][ T7584] do_syscall_64+0x115/0x870 [ 1971.954556][ T7584] ? clear_bhb_loop+0x40/0x90 [ 1971.954581][ T7584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1971.954598][ T7584] RIP: 0033:0x7f74a0b5d68e [ 1971.954612][ T7584] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1971.954629][ T7584] RSP: 002b:00007f74a19a0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1971.954647][ T7584] RAX: ffffffffffffffda RBX: 00007f74a19a16c0 RCX: 00007f74a0b5d68e [ 1971.954659][ T7584] RDX: 0000000000000001 RSI: 00007f74a19a10a0 RDI: 0000000000000006 [ 1971.954670][ T7584] RBP: 00007f74a19a1090 R08: 0000000000000000 R09: 0000000000000000 [ 1971.954679][ T7584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1971.954689][ T7584] R13: 00007f74a0e16038 R14: 00007f74a0e15fa0 R15: 00007fff004dfb28 [ 1971.954706][ T7584] [ 1972.359841][ T7591] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1972.367526][ T7591] UDF-fs: Scanning with blocksize 512 failed [ 1972.376906][ T7591] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1972.384581][ T7591] UDF-fs: Scanning with blocksize 1024 failed [ 1972.391199][ T7591] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1972.398773][ T7591] UDF-fs: Scanning with blocksize 2048 failed [ 1972.406311][ T7591] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1972.414940][ T7591] UDF-fs: Scanning with blocksize 4096 failed [ 1972.466004][ T7591] f2fs: Unknown parameter '#뀎' [ 1972.678043][ T7592] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1972.685639][ T7592] UDF-fs: Scanning with blocksize 512 failed [ 1972.693128][ T7592] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1972.700741][ T7592] UDF-fs: Scanning with blocksize 1024 failed [ 1972.709933][ T7592] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1972.717645][ T7592] UDF-fs: Scanning with blocksize 2048 failed [ 1972.726121][ T7592] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1972.733682][ T7592] UDF-fs: Scanning with blocksize 4096 failed [ 1973.085035][ T7604] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9759'. [ 1973.152728][ T7586] f2fs: Unknown parameter '#뀎' [ 1973.333142][ T7599] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9759'. [ 1973.363370][ T7599] netlink: 7 bytes leftover after parsing attributes in process `syz.4.9759'. [ 1973.493244][ T7599] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9759'. [ 1973.547377][ T7599] netlink: 7 bytes leftover after parsing attributes in process `syz.4.9759'. [ 1973.553250][ T7610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9761'. [ 1973.678014][ T7599] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9759'. [ 1973.993006][ T7615] syzkaller0: entered promiscuous mode [ 1974.028383][ T7615] syzkaller0: entered allmulticast mode [ 1974.211741][ T7625] syzkaller0: entered promiscuous mode [ 1974.229641][ T7625] syzkaller0: entered allmulticast mode [ 1975.046410][ T7643] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1975.054055][ T7643] UDF-fs: Scanning with blocksize 512 failed [ 1975.063258][ T7643] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1975.070999][ T7643] UDF-fs: Scanning with blocksize 1024 failed [ 1975.081610][ T7643] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1975.089487][ T7643] UDF-fs: Scanning with blocksize 2048 failed [ 1975.101764][ T7643] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1975.109384][ T7643] UDF-fs: Scanning with blocksize 4096 failed [ 1975.360516][ T7642] f2fs: Unknown parameter '#뀎' [ 1976.334803][ T30] kauditd_printk_skb: 342 callbacks suppressed [ 1976.349354][ T30] audit: type=1400 audit(2000001012.460:184114): avc: denied { recv } for pid=7645 comm="syz.3.9770" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1976.384795][ T7650] Set syz1 is full, maxelem 65536 reached [ 1976.422550][ T30] audit: type=1400 audit(2000001012.550:184115): avc: denied { read } for pid=7653 comm="syz.5.9772" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1976.447596][ T30] audit: type=1400 audit(2000001012.580:184116): avc: denied { create } for pid=7648 comm="syz.4.9771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1976.484081][ T7652] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 1976.495569][ T30] audit: type=1400 audit(2000001012.580:184117): avc: denied { read open } for pid=7653 comm="syz.5.9772" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1976.526267][ T30] audit: type=1400 audit(2000001012.620:184118): avc: denied { allowed } for pid=7653 comm="syz.5.9772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1976.548542][ T7656] syzkaller0: entered promiscuous mode [ 1976.555557][ T7656] syzkaller0: entered allmulticast mode [ 1976.575287][ T30] audit: type=1400 audit(2000001012.660:184119): avc: denied { recv } for pid=29194 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1976.652271][ T30] audit: type=1400 audit(2000001012.660:184120): avc: denied { recv } for pid=29194 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1976.695730][ T30] audit: type=1400 audit(2000001012.660:184121): avc: denied { recv } for pid=29194 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1976.724046][ T30] audit: type=1400 audit(2000001012.660:184122): avc: denied { recv } for pid=29194 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1976.751714][ T30] audit: type=1400 audit(2000001012.660:184123): avc: denied { recv } for pid=29194 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1976.891113][ T7661] FAULT_INJECTION: forcing a failure. [ 1976.891113][ T7661] name failslab, interval 1, probability 0, space 0, times 0 [ 1976.904206][ T7661] CPU: 1 UID: 0 PID: 7661 Comm: syz.6.9773 Tainted: G L syzkaller #0 PREEMPT(full) [ 1976.904232][ T7661] Tainted: [L]=SOFTLOCKUP [ 1976.904237][ T7661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1976.904246][ T7661] Call Trace: [ 1976.904252][ T7661] [ 1976.904258][ T7661] dump_stack_lvl+0x100/0x190 [ 1976.904280][ T7661] should_fail_ex.cold+0x5/0xa [ 1976.904298][ T7661] ? fs_reclaim_acquire+0x70/0x100 [ 1976.904317][ T7661] ? tomoyo_encode2+0xfb/0x3c0 [ 1976.904332][ T7661] should_failslab+0xc2/0x120 [ 1976.904349][ T7661] __kmalloc_noprof+0xe0/0x840 [ 1976.904369][ T7661] ? d_absolute_path+0x136/0x1b0 [ 1976.904391][ T7661] tomoyo_encode2+0xfb/0x3c0 [ 1976.904406][ T7661] tomoyo_encode+0x29/0x50 [ 1976.904421][ T7661] tomoyo_realpath_from_path+0x18c/0x690 [ 1976.904439][ T7661] tomoyo_path_number_perm+0x23c/0x580 [ 1976.904460][ T7661] ? tomoyo_path_number_perm+0x22e/0x580 [ 1976.904482][ T7661] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1976.904506][ T7661] ? preempt_count_add+0x76/0x150 [ 1976.904528][ T7661] ? rcu_is_watching+0x12/0xc0 [ 1976.904549][ T7661] ? __fget_files+0x215/0x3d0 [ 1976.904570][ T7661] ? hook_file_ioctl_common+0x140/0x440 [ 1976.904588][ T7661] ? lock_release+0x24d/0x310 [ 1976.904605][ T7661] ? __fget_files+0x21f/0x3d0 [ 1976.904628][ T7661] security_file_ioctl+0xd3/0x230 [ 1976.904651][ T7661] __x64_sys_ioctl+0xb7/0x210 [ 1976.904670][ T7661] do_syscall_64+0x115/0x870 [ 1976.904686][ T7661] ? clear_bhb_loop+0x40/0x90 [ 1976.904703][ T7661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1976.904719][ T7661] RIP: 0033:0x7f8f3579ce59 [ 1976.904733][ T7661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1976.904747][ T7661] RSP: 002b:00007f8f365ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1976.904763][ T7661] RAX: ffffffffffffffda RBX: 00007f8f35a16090 RCX: 00007f8f3579ce59 [ 1976.904774][ T7661] RDX: 0000200000000140 RSI: 00000000000007a6 RDI: 0000000000000003 [ 1976.904784][ T7661] RBP: 00007f8f365ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1976.904794][ T7661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1976.904803][ T7661] R13: 00007f8f35a16128 R14: 00007f8f35a16090 R15: 00007ffe2f3a86c8 [ 1976.904818][ T7661] [ 1976.904831][ T7661] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1977.153386][T21184] usb 6-1: new full-speed USB device number 94 using dummy_hcd [ 1977.560392][ T7673] loop3: detected capacity change from 0 to 7 [ 1977.567127][ T7673] Dev loop3: unable to read RDB block 7 [ 1977.572837][ T7673] loop3: unable to read partition table [ 1977.578743][ T7673] loop3: partition table beyond EOD, truncated [ 1977.584989][ T7673] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1977.615200][T21184] usb 6-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1977.639929][T21184] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1977.704722][T21184] usb 6-1: config 0 descriptor?? [ 1977.720098][T21184] pwc: Samsung MPC-C10 USB webcam detected. [ 1977.764705][ T7676] syzkaller0: entered promiscuous mode [ 1977.777540][ T7676] syzkaller0: entered allmulticast mode [ 1977.922350][T21184] pwc: send_video_command error -71 [ 1977.931973][T21184] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1977.942605][T21184] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 1977.959710][ T7683] syzkaller0: entered promiscuous mode [ 1977.966170][T21184] usb 6-1: USB disconnect, device number 94 [ 1977.972158][ T7683] syzkaller0: entered allmulticast mode [ 1977.983076][ T7684] syzkaller0: entered promiscuous mode [ 1977.991581][ T7684] syzkaller0: entered allmulticast mode [ 1978.170772][ T7686] syzkaller0: entered promiscuous mode [ 1978.176570][ T7686] syzkaller0: entered allmulticast mode [ 1978.364027][ T7668] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1978.437298][T21184] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1978.599170][T21184] usb 6-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1978.608271][T21184] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1978.618763][T21184] usb 6-1: config 0 descriptor?? [ 1978.627388][T21184] pwc: Samsung MPC-C10 USB webcam detected. [ 1979.234899][ T7660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1979.243537][ T7660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1979.261013][T21184] pwc: recv_control_msg error -71 req 02 val 2700 [ 1979.269208][T21184] pwc: recv_control_msg error -71 req 04 val 1700 [ 1979.277767][T21184] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1979.284411][T21184] pwc: recv_control_msg error -71 req 04 val 1000 [ 1979.291163][T21184] pwc: recv_control_msg error -71 req 04 val 1300 [ 1979.297825][T21184] pwc: recv_control_msg error -71 req 04 val 1400 [ 1979.304402][T21184] pwc: recv_control_msg error -71 req 02 val 2000 [ 1979.311089][T21184] pwc: recv_control_msg error -71 req 02 val 2100 [ 1979.319260][T21184] pwc: recv_control_msg error -71 req 02 val 2200 [ 1979.326711][T21184] pwc: recv_control_msg error -71 req 06 val 0600 [ 1979.333349][T21184] pwc: recv_control_msg error -71 req 04 val 1500 [ 1979.341054][T21184] pwc: recv_control_msg error -71 req 02 val 2500 [ 1979.347796][T21184] pwc: recv_control_msg error -71 req 02 val 2400 [ 1979.354381][T21184] pwc: recv_control_msg error -71 req 02 val 2600 [ 1979.361135][T21184] pwc: recv_control_msg error -71 req 02 val 2900 [ 1979.367768][T21184] pwc: recv_control_msg error -71 req 02 val 2800 [ 1979.374373][T21184] pwc: recv_control_msg error -71 req 04 val 1100 [ 1979.382086][T21184] pwc: recv_control_msg error -71 req 04 val 1200 [ 1979.390175][T21184] pwc: Registered as video103. [ 1979.397316][T21184] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input210 [ 1979.415867][T21184] usb 6-1: USB disconnect, device number 95 [ 1981.342213][ T30] kauditd_printk_skb: 227 callbacks suppressed [ 1981.342278][ T30] audit: type=1400 audit(2000001017.470:184351): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1981.842707][ T30] audit: type=1400 audit(2000001017.970:184352): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1982.845096][ T30] audit: type=1400 audit(2000001018.970:184353): avc: denied { recv } for pid=5631 comm="udevd" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1983.845500][ T30] audit: type=1400 audit(2000001019.970:184354): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1984.346097][ T30] audit: type=1400 audit(2000001020.470:184355): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1984.846443][ T30] audit: type=1400 audit(2000001020.980:184356): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1985.346894][ T30] audit: type=1400 audit(2000001021.480:184357): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1985.846923][ T30] audit: type=1400 audit(2000001021.980:184358): avc: denied { recv } for pid=32395 comm="kworker/u8:7" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1986.347902][ T30] audit: type=1400 audit(2000001022.480:184359): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1986.849066][ T30] audit: type=1400 audit(2000001022.980:184360): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1987.349678][ T30] audit: type=1400 audit(2000001023.480:184361): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1987.638329][ T30] audit: type=1400 audit(2000001023.770:184362): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1987.661922][ T30] audit: type=1400 audit(2000001023.770:184363): avc: denied { sendto } for pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1987.849979][ T30] audit: type=1400 audit(2000001023.980:184364): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1988.278974][ T30] audit: type=1400 audit(2000001024.410:184365): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1988.302958][ T30] audit: type=1400 audit(2000001024.410:184366): avc: denied { sendto } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1988.351371][ T30] audit: type=1400 audit(2000001024.480:184367): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1988.851298][ T30] audit: type=1400 audit(2000001024.980:184368): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1991.855133][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1991.855148][ T30] audit: type=1400 audit(2000001027.980:184371): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1992.355316][ T30] audit: type=1400 audit(2000001028.480:184372): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1992.855823][ T30] audit: type=1400 audit(2000001028.980:184373): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1993.356105][ T30] audit: type=1400 audit(2000001029.480:184374): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1994.357193][ T30] audit: type=1400 audit(2000001030.490:184375): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1994.858038][ T30] audit: type=1400 audit(2000001030.990:184376): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1995.358127][ T30] audit: type=1400 audit(2000001031.490:184377): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1996.360444][ T30] audit: type=1400 audit(2000001032.490:184378): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1996.861058][ T30] audit: type=1400 audit(2000001032.990:184379): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1997.361961][ T30] audit: type=1400 audit(2000001033.490:184380): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1998.363463][ T30] audit: type=1400 audit(2000001034.490:184381): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1998.863804][ T30] audit: type=1400 audit(2000001034.990:184382): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1999.364247][ T30] audit: type=1400 audit(2000001035.490:184383): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1999.864888][ T30] audit: type=1400 audit(2000001035.990:184384): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2000.365341][ T30] audit: type=1400 audit(2000001036.490:184385): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2000.866256][ T30] audit: type=1400 audit(2000001036.990:184386): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2001.366554][ T30] audit: type=1400 audit(2000001037.490:184387): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2001.721285][ T30] audit: type=1400 audit(2000001037.850:184388): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 2002.367848][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 2002.367864][ T30] audit: type=1400 audit(2000001038.500:184390): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2002.868149][ T30] audit: type=1400 audit(2000001039.000:184391): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2003.368896][ T30] audit: type=1400 audit(2000001039.500:184392): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2003.869149][ T30] audit: type=1400 audit(2000001040.000:184393): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2004.870367][ T30] audit: type=1400 audit(2000001041.000:184394): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2005.871615][ T30] audit: type=1400 audit(2000001042.000:184395): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2007.373582][ T30] audit: type=1400 audit(2000001043.500:184396): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2009.374572][ T30] audit: type=1400 audit(2000001045.500:184397): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2010.376115][ T30] audit: type=1400 audit(2000001046.510:184398): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2011.377769][ T30] audit: type=1400 audit(2000001047.510:184399): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2011.877987][ T30] audit: type=1400 audit(2000001048.010:184400): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2012.378353][ T30] audit: type=1400 audit(2000001048.510:184401): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2013.880285][ T30] audit: type=1400 audit(2000001050.010:184402): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2014.381309][ T30] audit: type=1400 audit(2000001050.510:184403): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2014.881969][ T30] audit: type=1400 audit(2000001051.010:184404): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2015.882746][ T30] audit: type=1400 audit(2000001052.010:184405): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2016.883211][ T30] audit: type=1400 audit(2000001053.010:184406): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2018.886164][ T30] audit: type=1400 audit(2000001055.020:184407): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2019.386469][ T30] audit: type=1400 audit(2000001055.520:184408): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2020.388038][ T30] audit: type=1400 audit(2000001056.520:184409): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2020.888294][ T30] audit: type=1400 audit(2000001057.020:184410): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2021.388670][ T30] audit: type=1400 audit(2000001057.520:184411): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2022.201815][ T30] audit: type=1400 audit(2000001058.330:184412): avc: denied { egress } for pid=23 comm="ksoftirqd/1" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 2022.227632][ T30] audit: type=1400 audit(2000001058.330:184413): avc: denied { sendto } for pid=23 comm="ksoftirqd/1" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 2022.389802][ T30] audit: type=1400 audit(2000001058.520:184414): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2023.892101][ T30] audit: type=1400 audit(2000001060.020:184415): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2024.392528][ T30] audit: type=1400 audit(2000001060.520:184416): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2025.393600][ T30] audit: type=1400 audit(2000001061.520:184417): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2025.893921][ T30] audit: type=1400 audit(2000001062.020:184418): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2026.394971][ T30] audit: type=1400 audit(2000001062.520:184419): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2026.877552][ T30] audit: type=1400 audit(2000001063.010:184420): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2026.903219][ T30] audit: type=1400 audit(2000001063.010:184421): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2026.971099][ T30] audit: type=1400 audit(2000001063.010:184422): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2027.007302][ T7696] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 2027.028740][ T30] audit: type=1400 audit(2000001063.010:184423): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2027.072162][ T7696] syzkaller0: entered promiscuous mode [ 2027.099931][ T7696] syzkaller0: entered allmulticast mode [ 2027.117412][ T30] audit: type=1400 audit(2000001063.010:184424): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2027.209096][ T7708] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2027.210554][ T7711] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2027.449340][ T7723] syzkaller0: entered promiscuous mode [ 2027.455218][ T7723] syzkaller0: entered allmulticast mode [ 2027.583652][ T7724] syzkaller0: entered promiscuous mode [ 2027.589350][ T7724] syzkaller0: entered allmulticast mode [ 2027.602679][ T7731] syzkaller0: entered promiscuous mode [ 2027.608560][ T7731] syzkaller0: entered allmulticast mode [ 2027.656003][T32583] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 2027.816348][T32583] usb 5-1: Using ep0 maxpacket: 16 [ 2027.845033][ T7739] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 2027.854398][T32583] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 2027.866740][ T7739] UDF-fs: Scanning with blocksize 512 failed [ 2027.866771][T32583] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2027.894937][ T7739] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 2027.904767][T32583] usb 5-1: Product: syz [ 2027.909080][T32583] usb 5-1: Manufacturer: syz [ 2027.914145][ T7739] UDF-fs: Scanning with blocksize 1024 failed [ 2027.921558][T32583] usb 5-1: SerialNumber: syz [ 2027.930543][T32583] usb 5-1: config 0 descriptor?? [ 2027.943265][ T7739] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 2027.951773][T32583] hub 5-1:0.0: bad descriptor, ignoring hub [ 2027.960040][T32583] hub 5-1:0.0: probe with driver hub failed with error -5 [ 2027.968869][ T7739] UDF-fs: Scanning with blocksize 2048 failed [ 2027.968963][ T7740] f2fs: Unknown parameter '#뀎' [ 2028.021344][ T7739] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 2028.029868][T32583] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2028.040712][ T7739] UDF-fs: Scanning with blocksize 4096 failed [ 2028.048036][T32395] usb 5-1: Failed to submit usb control message: -71 [ 2028.054876][T32395] usb 5-1: unable to send the bmi data to the device: -71 [ 2028.062095][T32395] usb 5-1: unable to get target info from device [ 2028.069007][T32395] usb 5-1: could not get target info (-71) [ 2028.077740][T32395] usb 5-1: could not probe fw (-71) [ 2028.160636][ T7721] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9792'. [ 2028.169927][ T7721] team_slave_1: entered promiscuous mode [ 2028.279088][ T7726] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2028.316117][T32583] usb 5-1: USB disconnect, device number 107 [ 2028.367378][ T7753] netlink: 64 bytes leftover after parsing attributes in process `syz.5.9800'. [ 2028.421141][ T7753] netlink: 'syz.5.9800': attribute type 49 has an invalid length. [ 2028.459668][ T7755] netlink: 'syz.6.9801': attribute type 1 has an invalid length. [ 2028.460088][ T7753] bond0: (slave bond_slave_0): Releasing backup interface [ 2028.508775][ T7753] bond_slave_0: entered promiscuous mode [ 2028.514949][ T7753] bond_slave_0: entered allmulticast mode [ 2028.570737][ T7755] 8021q: adding VLAN 0 to HW filter on device bond10 [ 2028.618665][ T7756] ÿ: left promiscuous mode [ 2028.767928][T32584] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2028.786572][ T7755] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 2028.834125][ T7755] bond10: (slave batadv4): making interface the new active one [ 2028.906655][ T7755] bond10: (slave batadv4): Enslaving as an active interface with an up link [ 2029.032642][ T7761] syzkaller1: entered promiscuous mode [ 2029.038521][ T7761] syzkaller1: entered allmulticast mode [ 2029.079202][ T7768] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 2029.109803][ T7768] syzkaller0: entered promiscuous mode [ 2029.134376][ T7768] syzkaller0: entered allmulticast mode [ 2029.246841][T32583] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2029.472003][ T7776] MPI: mpi too large (113288 bits) [ 2029.619234][ T7774] syzkaller0: entered promiscuous mode [ 2029.689117][ T7774] syzkaller0: entered allmulticast mode [ 2030.406730][ T30] kauditd_printk_skb: 458 callbacks suppressed [ 2030.406765][ T30] audit: type=1400 audit(2000001066.530:184879): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2030.594469][ T30] audit: type=1400 audit(2000001066.630:184880): avc: denied { read write } for pid=3433 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2030.640613][ T30] audit: type=1400 audit(2000001066.650:184881): avc: denied { read write open } for pid=3433 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2030.688824][ T30] audit: type=1400 audit(2000001066.660:184882): avc: denied { ioctl } for pid=3433 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2030.818404][ T30] audit: type=1400 audit(2000001066.750:184883): avc: denied { module_request } for pid=7783 comm="syz.4.9809" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 2030.829766][ T7784] syzkaller0: entered promiscuous mode [ 2030.860718][ T7784] syzkaller0: entered allmulticast mode [ 2030.915787][ T7800] netlink: 'syz.5.9811': attribute type 1 has an invalid length. [ 2030.927215][ T30] audit: type=1400 audit(2000001066.770:184884): avc: denied { search } for pid=5270 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2031.029712][ T30] audit: type=1400 audit(2000001066.770:184885): avc: denied { search } for pid=5270 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2031.038668][ T7805] bond3: (slave bridge1): Enslaving as a backup interface with an up link [ 2031.098984][ T30] audit: type=1400 audit(2000001066.770:184886): avc: denied { search } for pid=5270 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2031.136086][ T30] audit: type=1400 audit(2000001066.770:184887): avc: denied { read } for pid=5270 comm="dhcpcd" name="n134" dev="tmpfs" ino=36822 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2031.208831][ T30] audit: type=1400 audit(2000001066.770:184888): avc: denied { read open } for pid=5270 comm="dhcpcd" path="/run/udev/data/n134" dev="tmpfs" ino=36822 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2031.377873][ T7800] macvlan2: entered promiscuous mode [ 2031.406080][ T7800] macvlan2: entered allmulticast mode [ 2031.415968][ T7800] bond3: entered promiscuous mode [ 2031.501622][ T7800] bridge1: entered promiscuous mode [ 2031.624095][ T7800] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2031.682564][ T7800] bond3: left promiscuous mode [ 2031.718714][ T7800] bridge1: left promiscuous mode [ 2031.753402][ T7823] netlink: 'syz.3.9815': attribute type 1 has an invalid length. [ 2031.810550][ T7823] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2031.945223][ T7823] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 2031.985275][ T7823] bond1: (slave batadv2): making interface the new active one [ 2032.004395][ T7823] bond1: (slave batadv2): Enslaving as an active interface with an up link [ 2032.437191][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 2033.886079][T32583] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 2033.900165][ T7803] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2033.998724][ T7855] syzkaller0: entered promiscuous mode [ 2034.004263][ T7855] syzkaller0: entered allmulticast mode [ 2034.062327][T32583] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2034.079499][T32583] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2034.377583][T32583] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2034.405823][ T7863] MPI: mpi too large (113288 bits) [ 2034.548088][T32583] usb 4-1: string descriptor 0 read error: -22 [ 2034.554335][T32583] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 2034.563527][T32583] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2034.592504][T32583] usb 4-1: selecting invalid altsetting 1 [ 2034.615349][T32583] usb 4-1: unit 6 not found! [ 2034.798570][ T7872] syzkaller0: entered promiscuous mode [ 2034.804171][ T7872] syzkaller0: entered allmulticast mode [ 2034.976303][T21184] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 2035.080918][T32583] usb 4-1: 2:0: cannot get min/max values for control 1 (id 2) [ 2035.146911][T21184] usb 1-1: Using ep0 maxpacket: 32 [ 2035.158284][ T7879] syzkaller0: entered promiscuous mode [ 2035.170688][ T7879] syzkaller0: entered allmulticast mode [ 2035.183444][T21184] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 2035.211854][T21184] usb 1-1: config 0 has no interface number 0 [ 2035.233245][T21184] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 2035.247825][T21184] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid maxpacket 24929, setting to 1024 [ 2035.271381][T21184] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 2035.284663][T21184] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2035.296221][T21184] usb 1-1: Product: syz [ 2035.300442][T21184] usb 1-1: Manufacturer: syz [ 2035.309622][T21184] usb 1-1: SerialNumber: syz [ 2035.322886][T21184] usb 1-1: config 0 descriptor?? [ 2035.341932][T21184] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 2035.353257][T21184] em28xx 1-1:0.132: Video interface 132 found: isoc [ 2035.453246][ T30] kauditd_printk_skb: 1235 callbacks suppressed [ 2035.453263][ T30] audit: type=1400 audit(2000001071.580:185620): avc: denied { map_create } for pid=7885 comm="syz.4.9831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2035.484422][ T30] audit: type=1400 audit(2000001071.580:185621): avc: denied { map_create } for pid=7885 comm="syz.4.9831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2035.514765][ T30] audit: type=1400 audit(2000001071.590:185622): avc: denied { map_read map_write } for pid=7885 comm="syz.4.9831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2035.576769][ T7887] FAULT_INJECTION: forcing a failure. [ 2035.576769][ T7887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2035.576844][ T30] audit: type=1400 audit(2000001071.610:185623): avc: denied { create } for pid=7886 comm="syz.6.9830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2035.654041][ T30] audit: type=1400 audit(2000001071.620:185624): avc: denied { map_create } for pid=7885 comm="syz.4.9831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2035.676671][ T30] audit: type=1400 audit(2000001071.620:185625): avc: denied { perfmon } for pid=7885 comm="syz.4.9831" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2035.699649][ T30] audit: type=1400 audit(2000001071.620:185626): avc: denied { map_create } for pid=7885 comm="syz.4.9831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2035.704235][ T7887] CPU: 0 UID: 0 PID: 7887 Comm: syz.4.9831 Tainted: G L syzkaller #0 PREEMPT(full) [ 2035.704264][ T7887] Tainted: [L]=SOFTLOCKUP [ 2035.704271][ T7887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2035.704280][ T7887] Call Trace: [ 2035.704287][ T7887] [ 2035.704293][ T7887] dump_stack_lvl+0x100/0x190 [ 2035.704318][ T7887] should_fail_ex.cold+0x5/0xa [ 2035.704339][ T7887] _copy_to_user+0x32/0xd0 [ 2035.704360][ T7887] simple_read_from_buffer+0xcb/0x170 [ 2035.704382][ T7887] proc_fail_nth_read+0x1af/0x230 [ 2035.704401][ T7887] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2035.704419][ T7887] ? security_file_permission+0x76/0x210 [ 2035.704435][ T7887] ? rw_verify_area+0xce/0x6d0 [ 2035.704452][ T7887] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2035.704470][ T7887] vfs_read+0x1e4/0xb40 [ 2035.704489][ T7887] ? __pfx_vfs_read+0x10/0x10 [ 2035.704507][ T7887] ? rcu_is_watching+0x12/0xc0 [ 2035.704531][ T7887] ? __fget_files+0x21f/0x3d0 [ 2035.704554][ T7887] ksys_read+0x12a/0x250 [ 2035.704572][ T7887] ? __pfx_ksys_read+0x10/0x10 [ 2035.704591][ T7887] ? rcu_is_watching+0x12/0xc0 [ 2035.704616][ T7887] do_syscall_64+0x115/0x870 [ 2035.704632][ T7887] ? clear_bhb_loop+0x40/0x90 [ 2035.704650][ T7887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2035.704667][ T7887] RIP: 0033:0x7f74a0b5d68e [ 2035.704680][ T7887] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2035.704694][ T7887] RSP: 002b:00007f74a19a0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2035.704711][ T7887] RAX: ffffffffffffffda RBX: 00007f74a19a16c0 RCX: 00007f74a0b5d68e [ 2035.704722][ T7887] RDX: 000000000000000f RSI: 00007f74a19a10a0 RDI: 0000000000000005 [ 2035.704731][ T7887] RBP: 00007f74a19a1090 R08: 0000000000000000 R09: 0000000000000000 [ 2035.704740][ T7887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2035.704749][ T7887] R13: 00007f74a0e16038 R14: 00007f74a0e15fa0 R15: 00007fff004dfb28 [ 2035.704765][ T7887] [ 2035.846171][ T7869] tun0: tun_chr_ioctl cmd 1074025675 [ 2035.964728][ T7869] tun0: persist enabled [ 2035.976613][ T7893] tun0: tun_chr_ioctl cmd 1074025675 [ 2035.983148][ T7893] tun0: persist disabled [ 2036.125181][ T30] audit: type=1400 audit(2000001071.640:185627): avc: denied { bind } for pid=7886 comm="syz.6.9830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2036.189565][ T30] audit: type=1400 audit(2000001071.640:185628): avc: denied { node_bind } for pid=7886 comm="syz.6.9830" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 2036.261030][ T30] audit: type=1400 audit(2000001071.650:185629): avc: denied { map_read map_write } for pid=7885 comm="syz.4.9831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2036.305888][T21184] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 2036.351807][ T7903] syzkaller0: entered promiscuous mode [ 2036.358289][ T7903] syzkaller0: entered allmulticast mode [ 2036.380468][T21184] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 2036.390682][T21184] em28xx 1-1:0.132: board has no eeprom [ 2036.465973][T21184] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 2036.473968][T21184] em28xx 1-1:0.132: analog set to isoc mode. [ 2036.481834][T24447] em28xx 1-1:0.132: Registering V4L2 extension [ 2036.507923][T21184] usb 1-1: USB disconnect, device number 72 [ 2036.539605][T21184] em28xx 1-1:0.132: Disconnecting em28xx [ 2036.784704][T32583] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2036.801152][ T7750] udevd[7750]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2036.843620][T32583] usb 4-1: USB disconnect, device number 34 [ 2037.076693][ T7896] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2037.209098][ T7915] MPI: mpi too large (113288 bits) [ 2037.863883][T24447] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 2037.871131][T24447] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 2037.880265][T24447] em28xx 1-1:0.132: No AC97 audio processor [ 2037.888373][T24447] usb 1-1: Decoder not found [ 2037.893008][T24447] em28xx 1-1:0.132: failed to create media graph [ 2037.900940][T24447] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 2037.915442][T24447] em28xx 1-1:0.132: Remote control support is not available for this card. [ 2037.930414][T21184] em28xx 1-1:0.132: Closing input extension [ 2037.939259][T21184] em28xx 1-1:0.132: Freeing device [ 2037.993851][ T7917] syzkaller0: entered promiscuous mode [ 2038.042002][ T7917] syzkaller0: entered allmulticast mode [ 2038.231630][ T7921] syzkaller0: entered promiscuous mode [ 2038.247448][ T7921] syzkaller0: entered allmulticast mode [ 2039.055385][ T7949] syzkaller0: entered promiscuous mode [ 2039.061443][ T7949] syzkaller0: entered allmulticast mode [ 2039.178677][ T7949] tipc: Started in network mode [ 2039.185529][ T7949] tipc: Node identity 26cba34d2662, cluster identity 4711 [ 2039.192963][ T7949] tipc: Enabled bearer , priority 0 [ 2039.215048][ T7948] tipc: Resetting bearer [ 2039.517657][ T7948] tipc: Disabling bearer [ 2039.637961][ T5612] Bluetooth: hci0: command 0x2016 tx timeout [ 2039.955865][ T7974] MPI: mpi too large (113288 bits) [ 2040.493450][ T30] kauditd_printk_skb: 370 callbacks suppressed [ 2040.493473][ T30] audit: type=1400 audit(2000001076.620:185982): avc: denied { map_create } for pid=7975 comm="syz.5.9853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2040.561966][ T7965] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2040.613794][ T7976] sch_tbf: burst 14 is lower than device syzkaller0 mtu (1500) ! [ 2040.642259][ T30] audit: type=1400 audit(2000001076.690:185983): avc: denied { map_read map_write } for pid=7975 comm="syz.5.9853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2040.686581][ T30] audit: type=1400 audit(2000001076.720:185984): avc: denied { prog_load } for pid=7975 comm="syz.5.9853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2040.706302][ T30] audit: type=1400 audit(2000001076.720:185985): avc: denied { bpf } for pid=7975 comm="syz.5.9853" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2040.727768][ T30] audit: type=1400 audit(2000001076.720:185986): avc: denied { prog_load } for pid=7975 comm="syz.5.9853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2040.755307][ T30] audit: type=1400 audit(2000001076.720:185987): avc: denied { perfmon } for pid=7975 comm="syz.5.9853" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2040.779028][ T30] audit: type=1400 audit(2000001076.720:185988): avc: denied { perfmon } for pid=7975 comm="syz.5.9853" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2040.822370][ T30] audit: type=1400 audit(2000001076.720:185989): avc: denied { perfmon } for pid=7975 comm="syz.5.9853" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2040.863732][ T30] audit: type=1400 audit(2000001076.720:185990): avc: denied { perfmon } for pid=7975 comm="syz.5.9853" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2040.900245][ T7987] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2041.002981][ T7988] loop6: detected capacity change from 0 to 2640 [ 2041.026118][ T7988] buffer_io_error: 11 callbacks suppressed [ 2041.026135][ T7988] Buffer I/O error on dev loop6, logical block 0, async page read [ 2041.055690][ T7988] Buffer I/O error on dev loop6, logical block 0, async page read [ 2041.074252][ T7988] Buffer I/O error on dev loop6, logical block 0, async page read [ 2041.103605][ T7996] syzkaller0: entered promiscuous mode [ 2041.109755][ T7988] Buffer I/O error on dev loop6, logical block 0, async page read [ 2041.120144][ T7996] syzkaller0: entered allmulticast mode [ 2041.134063][ T7988] Buffer I/O error on dev loop6, logical block 0, async page read [ 2041.150788][ T7988] Buffer I/O error on dev loop6, logical block 0, async page read [ 2041.202013][ T7990] syzkaller0: entered promiscuous mode [ 2041.241095][ T7990] syzkaller0: entered allmulticast mode [ 2041.256478][ T7988] Buffer I/O error on dev loop6, logical block 0, async page read [ 2041.361265][ T7988] Buffer I/O error on dev loop6, logical block 0, async page read [ 2041.370259][ T7988] ldm_validate_partition_table(): Disk read failed. [ 2041.396160][ T7988] Buffer I/O error on dev loop6, logical block 0, async page read [ 2041.471117][ T7988] Buffer I/O error on dev loop6, logical block 0, async page read [ 2041.493559][ T7988] Dev loop6: unable to read RDB block 0 [ 2041.655635][ T7988] loop6: unable to read partition table [ 2041.905172][ T7988] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2042.319621][ T8008] lo speed is unknown, defaulting to 1000 [ 2042.325658][ T8008] lo speed is unknown, defaulting to 1000 [ 2042.810889][ T8008] lo speed is unknown, defaulting to 1000 [ 2042.853494][ T8008] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 2042.931424][ T8008] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 2043.036266][ T8008] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 2043.225259][ T8008] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 2043.239380][ T8026] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 2043.316187][ T6907] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 2043.338179][ T8008] lo speed is unknown, defaulting to 1000 [ 2043.359557][ T8008] lo speed is unknown, defaulting to 1000 [ 2043.380859][ T8008] lo speed is unknown, defaulting to 1000 [ 2043.398628][ T8008] lo speed is unknown, defaulting to 1000 [ 2043.406070][ T6066] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 2043.414362][ T8008] lo speed is unknown, defaulting to 1000 [ 2043.434737][ T8008] lo speed is unknown, defaulting to 1000 [ 2043.505995][ T6907] usb 5-1: Using ep0 maxpacket: 32 [ 2043.542434][ T6907] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 2043.551715][ T7550] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 2043.578092][ T6907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2043.585789][ T6066] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2043.598156][ T6907] usb 5-1: Product: syz [ 2043.613880][ T6907] usb 5-1: Manufacturer: syz [ 2043.619295][ T6066] usb 4-1: not running at top speed; connect to a high speed hub [ 2043.626289][ T6907] usb 5-1: SerialNumber: syz [ 2043.642360][ T6066] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 2043.660621][ T6066] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 2043.663590][ T6907] usb 5-1: config 0 descriptor?? [ 2043.686759][ T6066] usb 4-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 2043.712452][ T6066] usb 4-1: config 14 has no interface number 0 [ 2043.726653][ T7550] usb 6-1: Using ep0 maxpacket: 32 [ 2043.729674][ T6066] usb 4-1: config 14 has no interface number 1 [ 2043.738602][ T7550] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2043.745981][ T6066] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 2043.763117][ T6066] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 2043.806828][ T6066] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2043.809435][ T7550] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 2043.831297][ T7550] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2043.844740][ T7550] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2043.847256][ T6066] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 2043.866357][ T7550] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2043.876426][ T7550] usb 6-1: Product: syz [ 2043.881977][ T7550] usb 6-1: Manufacturer: syz [ 2043.892310][ T6066] usb 4-1: config 14 interface 57 has no altsetting 0 [ 2043.911991][ T6066] usb 4-1: config 14 interface 228 has no altsetting 0 [ 2043.942714][ T7550] usb 6-1: SerialNumber: syz [ 2043.958538][ T6066] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 2043.978139][ T7550] usb 6-1: config 0 descriptor?? [ 2043.983202][ T6066] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2044.010810][ T6066] usb 4-1: Product: syz [ 2044.039520][ T6066] usb 4-1: Manufacturer: syz [ 2044.051374][ T6066] usb 4-1: SerialNumber: syz [ 2044.108411][ T8039] sch_tbf: burst 14 is lower than device syzkaller0 mtu (1500) ! [ 2044.137809][ T8039] syzkaller0: entered promiscuous mode [ 2044.153558][ T8039] syzkaller0: entered allmulticast mode [ 2044.242037][ T8042] syzkaller0: entered promiscuous mode [ 2044.247647][ T8042] syzkaller0: entered allmulticast mode [ 2044.353477][ T6907] peak_usb 5-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 2044.382222][ T6907] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 2044.401275][ T6907] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 2044.435672][ T7550] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 2044.437747][ T8047] syzkaller0: entered promiscuous mode [ 2044.447651][ T8047] syzkaller0: entered allmulticast mode [ 2044.466755][ T6907] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 2044.492465][ T6066] legousbtower 4-1:14.57: interrupt endpoints not found [ 2044.677243][ T8022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2044.693222][ T8022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2044.708990][ T8022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9864'. [ 2044.718164][ T8022] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9864'. [ 2044.728787][ T8022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9864'. [ 2044.737692][ T8022] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9864'. [ 2044.754390][ T8022] netlink: 'syz.4.9864': attribute type 1 has an invalid length. [ 2044.768048][T21184] usb 5-1: USB disconnect, device number 108 [ 2044.848348][ T7550] gs_usb 6-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 2044.857773][ T7550] gs_usb 6-1:0.0: Couldn't get extended bit timing const for channel 0 (-EREMOTEIO) [ 2044.867510][ T7550] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -121 [ 2044.895398][ T6066] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 2044.905763][ T6066] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 2045.065231][ T7550] usb 6-1: USB disconnect, device number 96 [ 2045.520659][ T6066] usb 4-1: USB disconnect, device number 35 [ 2045.520778][ C1] usb 4-1: tower_interrupt_in_callback: usb_submit_urb failed (-19) [ 2045.570170][ T6066] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 2045.603379][ T30] kauditd_printk_skb: 848 callbacks suppressed [ 2045.603396][ T30] audit: type=1400 audit(2000001081.730:186831): avc: denied { read write } for pid=6179 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2045.667994][ T30] audit: type=1400 audit(2000001081.730:186832): avc: denied { read write open } for pid=6179 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2045.694412][ T30] audit: type=1400 audit(2000001081.730:186833): avc: denied { ioctl } for pid=6179 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2045.720710][ T30] audit: type=1400 audit(2000001081.780:186834): avc: denied { read write } for pid=3433 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2045.745288][ T30] audit: type=1400 audit(2000001081.780:186835): avc: denied { read write open } for pid=3433 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2045.770544][ T30] audit: type=1400 audit(2000001081.790:186836): avc: denied { ioctl } for pid=3433 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2046.012166][ T30] audit: type=1400 audit(2000001082.140:186837): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2046.657659][ T30] audit: type=1400 audit(2000001082.790:186838): avc: denied { search } for pid=8053 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2046.680975][ T30] audit: type=1400 audit(2000001082.790:186839): avc: denied { search } for pid=8053 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2046.686253][ T8054] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2052.921424][ T30] kauditd_printk_skb: 482 callbacks suppressed [ 2052.921440][ T30] audit: type=1400 audit(2000001089.050:187320): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 2052.951201][ T30] audit: type=1400 audit(2000001089.050:187321): avc: denied { sendto } for pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 2056.924828][ T30] audit: type=1400 audit(2000001093.050:187322): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2063.161751][ T30] audit: type=1400 audit(2000001099.290:187323): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 2063.185494][ T30] audit: type=1400 audit(2000001099.290:187324): avc: denied { sendto } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 2068.279703][ T30] audit: type=1400 audit(2000001104.410:187325): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 2068.303296][ T30] audit: type=1400 audit(2000001104.410:187326): avc: denied { sendto } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 2071.260617][ T30] audit: type=1400 audit(2000001107.390:187327): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2078.520436][ T30] audit: type=1400 audit(2000001114.650:187328): avc: denied { egress } for pid=31159 comm="kworker/u8:0" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 2078.544393][ T30] audit: type=1400 audit(2000001114.650:187329): avc: denied { sendto } for pid=31159 comm="kworker/u8:0" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 2093.878143][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 2098.999175][ T30] audit: type=1400 audit(2000001135.130:187330): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 2099.022875][ T30] audit: type=1400 audit(2000001135.130:187331): avc: denied { sendto } for pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 2100.444953][ T30] audit: type=1400 audit(2000001136.570:187332): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2104.116484][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2104.125819][ T30] audit: type=1400 audit(2000001140.250:187333): avc: denied { egress } for pid=23 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 2104.150007][ T30] audit: type=1400 audit(2000001140.250:187334): avc: denied { sendto } for pid=23 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 2119.479071][ T30] audit: type=1400 audit(2000001155.610:187335): avc: denied { egress } for pid=17736 comm="kworker/u8:9" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 2119.504484][ T30] audit: type=1400 audit(2000001155.610:187336): avc: denied { sendto } for pid=17736 comm="kworker/u8:9" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 2154.056846][ T30] audit: type=1400 audit(2000001190.190:187337): avc: denied { recv } for pid=23 comm="ksoftirqd/1" saddr=10.128.0.169 src=45016 daddr=10.128.0.186 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2154.267494][ T30] audit: type=1400 audit(2000001190.400:187338): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=45016 daddr=10.128.0.186 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2154.479965][ T30] audit: type=1400 audit(2000001190.610:187339): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=45016 daddr=10.128.0.186 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2154.907491][ T30] audit: type=1400 audit(2000001191.040:187340): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=45016 daddr=10.128.0.186 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2155.319194][ T30] audit: type=1400 audit(2000001191.450:187341): avc: denied { egress } for pid=23 comm="ksoftirqd/1" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 2155.319959][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 2155.345375][ T30] audit: type=1400 audit(2000001191.450:187342): avc: denied { sendto } for pid=23 comm="ksoftirqd/1" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 2155.775523][ T30] audit: type=1400 audit(2000001191.900:187343): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=45016 daddr=10.128.0.186 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2157.471510][ T30] audit: type=1400 audit(2000001193.600:187344): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=45016 daddr=10.128.0.186 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2157.787862][ T30] audit: type=1400 audit(2000001193.920:187345): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.186 dest=55424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2160.859483][ T30] audit: type=1400 audit(2000001196.990:187346): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=45016 daddr=10.128.0.186 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2167.772489][ T30] audit: type=1400 audit(2000001203.900:187347): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=45016 daddr=10.128.0.186 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2180.919971][ T30] audit: type=1400 audit(2000001217.050:187348): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 2180.943595][ T30] audit: type=1400 audit(2000001217.050:187349): avc: denied { sendto } for pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 2181.340482][ T30] audit: type=1400 audit(2000001217.470:187350): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=45016 daddr=10.128.0.186 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2203.956199][ T31] INFO: task kworker/1:5:22998 blocked for more than 143 seconds. [ 2203.964084][ T31] Tainted: G L syzkaller #0 [ 2203.970688][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2203.979399][ T31] task:kworker/1:5 state:D stack:22328 pid:22998 tgid:22998 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2203.991469][ T31] Workqueue: usb_hub_wq hub_event [ 2203.996669][ T31] Call Trace: [ 2203.999962][ T31] [ 2204.002884][ T31] __schedule+0x125c/0x6730 [ 2204.007424][ T31] ? vhci_urb_dequeue+0x348/0x780 [ 2204.012453][ T31] ? rcu_is_watching+0x12/0xc0 [ 2204.017299][ T31] ? do_raw_spin_lock+0x128/0x260 [ 2204.022319][ T31] ? __pfx___schedule+0x10/0x10 [ 2204.027184][ T31] ? rcu_is_watching+0x12/0xc0 [ 2204.031942][ T31] ? schedule+0x2bf/0x390 [ 2204.036285][ T31] ? lock_release+0x24d/0x310 [ 2204.040986][ T31] schedule+0xdd/0x390 [ 2204.045241][ T31] usb_kill_urb+0x253/0x320 [ 2204.049796][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 2204.054821][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2204.060954][ T31] usb_start_wait_urb+0x2c3/0x580 [ 2204.066013][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2204.071549][ T31] ? __asan_memset+0x23/0x50 [ 2204.076166][ T31] usb_control_msg+0x328/0x4b0 [ 2204.080933][ T31] ? __pfx_usb_control_msg+0x10/0x10 [ 2204.086233][ T31] get_bMaxPacketSize0.constprop.0+0xd0/0x1f0 [ 2204.092298][ T31] hub_port_init+0x642/0x37f0 [ 2204.096999][ T31] hub_event+0x2f27/0x4af0 [ 2204.101420][ T31] ? __pfx_hub_event+0x10/0x10 [ 2204.106308][ T31] ? debug_object_deactivate+0x2e4/0x3b0 [ 2204.111949][ T31] ? lookup_object_or_alloc.part.0+0x190/0x4f0 [ 2204.118731][ T31] ? rcu_is_watching+0x12/0xc0 [ 2204.123509][ T31] ? lock_acquire+0x301/0x370 [ 2204.128188][ T31] ? rcu_is_watching+0x12/0xc0 [ 2204.132942][ T31] ? rcu_is_watching+0x12/0xc0 [ 2204.137723][ T31] process_one_work+0xa23/0x1940 [ 2204.142650][ T31] ? __pfx_process_one_work+0x10/0x10 [ 2204.148362][ T31] ? __pfx_hub_event+0x10/0x10 [ 2204.153135][ T31] worker_thread+0x5ef/0xe50 [ 2204.157737][ T31] ? kthread+0x13a/0x450 [ 2204.161973][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2204.167097][ T31] kthread+0x370/0x450 [ 2204.171181][ T31] ? __pfx_kthread+0x10/0x10 [ 2204.175761][ T31] ret_from_fork+0x72b/0xd50 [ 2204.180358][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2204.185462][ T31] ? __switch_to+0x800/0x10f0 [ 2204.190181][ T31] ? __pfx_kthread+0x10/0x10 [ 2204.194778][ T31] ret_from_fork_asm+0x1a/0x30 [ 2204.199619][ T31] [ 2204.202684][ T31] INFO: lockdep is turned off. [ 2204.207454][ T31] NMI backtrace for cpu 1 [ 2204.207470][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2204.207491][ T31] Tainted: [L]=SOFTLOCKUP [ 2204.207497][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2204.207508][ T31] Call Trace: [ 2204.207513][ T31] [ 2204.207520][ T31] dump_stack_lvl+0x100/0x190 [ 2204.207544][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 2204.207571][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2204.207594][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 2204.207621][ T31] sys_info+0x141/0x190 [ 2204.207641][ T31] watchdog+0xcb1/0x1030 [ 2204.207660][ T31] ? trace_irq_enable.constprop.0+0x122/0x160 [ 2204.207680][ T31] ? __pfx_watchdog+0x10/0x10 [ 2204.207696][ T31] ? __kthread_parkme+0x18c/0x230 [ 2204.207719][ T31] ? kthread+0x13a/0x450 [ 2204.207743][ T31] ? __pfx_watchdog+0x10/0x10 [ 2204.207759][ T31] kthread+0x370/0x450 [ 2204.207783][ T31] ? __pfx_kthread+0x10/0x10 [ 2204.207808][ T31] ret_from_fork+0x72b/0xd50 [ 2204.207829][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2204.207851][ T31] ? __switch_to+0x800/0x10f0 [ 2204.207876][ T31] ? __pfx_kthread+0x10/0x10 [ 2204.207899][ T31] ret_from_fork_asm+0x1a/0x30 [ 2204.207925][ T31] [ 2204.207931][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2204.338813][ C0] NMI backtrace for cpu 0 [ 2204.338829][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 2204.338849][ C0] Tainted: [L]=SOFTLOCKUP [ 2204.338854][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2204.338862][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2204.338889][ C0] Code: 96 88 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 d8 14 00 fb f4 fc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 2204.338902][ C0] RSP: 0018:ffffffff8e407e10 EFLAGS: 00000246 [ 2204.338915][ C0] RAX: 000000000aaea1b4 RBX: ffffffff8e491480 RCX: ffffffff8b96c2d5 [ 2204.338925][ C0] RDX: 0000000000000001 RSI: ffffffff8c1d2780 RDI: ffffffff81de2aa7 [ 2204.338934][ C0] RBP: fffffbfff1c92290 R08: 0000000000000000 R09: ffffed101708678d [ 2204.338942][ C0] R10: ffff8880b8433c6b R11: ffffffff81d4ff9c R12: 0000000000000000 [ 2204.338951][ C0] R13: 0000000000000000 R14: 1ffffffff1c80fc6 R15: dffffc0000000000 [ 2204.338961][ C0] FS: 0000000000000000(0000) GS:ffff888124318000(0000) knlGS:0000000000000000 [ 2204.338975][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2204.338985][ C0] CR2: 0000561011ec5660 CR3: 000000000e592000 CR4: 00000000003526f0 [ 2204.338995][ C0] Call Trace: [ 2204.339000][ C0] [ 2204.339005][ C0] default_idle+0x9/0x10 [ 2204.339019][ C0] default_idle_call+0x6c/0xb0 [ 2204.339033][ C0] do_idle+0x3a7/0x5b0 [ 2204.339057][ C0] ? __pfx_do_idle+0x10/0x10 [ 2204.339073][ C0] ? finish_task_switch.isra.0+0x14c/0x1010 [ 2204.339092][ C0] cpu_startup_entry+0x4f/0x60 [ 2204.339109][ C0] rest_init+0x251/0x260 [ 2204.339124][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 2204.339146][ C0] start_kernel+0x484/0x490 [ 2204.339164][ C0] x86_64_start_reservations+0x24/0x30 [ 2204.339184][ C0] x86_64_start_kernel+0x12b/0x130 [ 2204.339203][ C0] common_startup_64+0x13e/0x158 [ 2204.339228][ C0] [ 2204.531092][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2204.537952][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2204.548596][ T31] Tainted: [L]=SOFTLOCKUP [ 2204.552889][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2204.562915][ T31] Call Trace: [ 2204.566170][ T31] [ 2204.569086][ T31] dump_stack_lvl+0x100/0x190 [ 2204.573738][ T31] vpanic+0x552/0x970 [ 2204.577688][ T31] ? __pfx_vpanic+0x10/0x10 [ 2204.582161][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 2204.588290][ T31] panic+0xd1/0xe0 [ 2204.591979][ T31] ? __pfx_panic+0x10/0x10 [ 2204.596363][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 2204.602501][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 2204.608632][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 2204.614764][ T31] ? watchdog.cold+0x1ec/0x234 [ 2204.619497][ T31] ? watchdog+0xcc1/0x1030 [ 2204.623889][ T31] watchdog.cold+0x1fd/0x234 [ 2204.628453][ T31] ? trace_irq_enable.constprop.0+0x122/0x160 [ 2204.634493][ T31] ? __pfx_watchdog+0x10/0x10 [ 2204.639147][ T31] ? __kthread_parkme+0x18c/0x230 [ 2204.644145][ T31] ? kthread+0x13a/0x450 [ 2204.648369][ T31] ? __pfx_watchdog+0x10/0x10 [ 2204.653022][ T31] kthread+0x370/0x450 [ 2204.657066][ T31] ? __pfx_kthread+0x10/0x10 [ 2204.661632][ T31] ret_from_fork+0x72b/0xd50 [ 2204.666197][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2204.671283][ T31] ? __switch_to+0x800/0x10f0 [ 2204.675941][ T31] ? __pfx_kthread+0x10/0x10 [ 2204.680521][ T31] ret_from_fork_asm+0x1a/0x30 [ 2204.685272][ T31] [ 2204.688473][ T31] Kernel Offset: disabled [ 2204.692778][ T31] Rebooting in 86400 seconds..