last executing test programs: 15.203976283s ago: executing program 3 (id=854): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0400000004000000e27f000001000000c3", @ANYRES32], 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@setlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x3a}]}, 0x3c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES64], 0x110}, 0x1, 0x0, 0x0, 0x4004c40}, 0x4) 13.680688896s ago: executing program 1 (id=856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000000006010100000000000000000200000a0900020073797a31000000000900030073797a31000000000500010007000000"], 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x4000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f00000006c0)={0x18}) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r4, &(0x7f0000000180)="900000001c001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215", 0x55, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) syz_io_uring_submit(0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)={[{@huge_never}, {@gid={'gid', 0x3d, 0xee01}}, {@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x33, 0x38, 0x36, 0x38]}}}}]}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a7260180", @ANYRES32], 0x26c0}}, 0x4010) socket$vsock_stream(0x28, 0x1, 0x0) 9.307592192s ago: executing program 2 (id=860): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x44}, 0x1522a9f6}, 0x1c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x1c, r3, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [""]}, 0x1c}}, 0x200008d5) preadv(r2, &(0x7f0000000640)=[{&(0x7f0000000300)=""/123, 0x7b}], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000200), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc0405668, &(0x7f0000000300)={0x7, 0x0, 0x1, {0x0, 0x4001, 0x0, 0x4}}) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0x1c}}, 0x5) setsockopt$inet_tcp_int(r7, 0x6, 0x19, 0x0, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r7, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d809e748adaab87cd498e", 0x1f}], 0x1}}], 0x1, 0x20008000) socket$vsock_stream(0x28, 0x1, 0x0) 9.299888153s ago: executing program 3 (id=861): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x8, &(0x7f0000000100)=0x147ae147ae147ad, 0x112) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newtaction={0x48, 0x32, 0xffff, 0x70bd27, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f00090582"], 0x0) 8.918169919s ago: executing program 0 (id=862): getpgid(0x0) userfaultfd(0x80000) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=@bridge_delneigh={0x1b, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa, 0x5}]}, 0x28}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) write$binfmt_script(0xffffffffffffffff, &(0x7f0000004180), 0xff77) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'default', '', @void}}}], [{@seclabel}, {@smackfstransmute={'smackfstransmute', 0x3d, '!%/'}}, {@euid_gt}]}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0xfa4a, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000}}}, 0x108) dup(0xffffffffffffffff) 8.272107796s ago: executing program 1 (id=863): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x8000400) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x80044d00, &(0x7f0000000040)) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000210000000000000000000000000a6c000000160a3f360000000000000000020000000900010073797a30000000004000038008000240000000002c0003801400010076657468305f746f5f626f6e64000000140001007665746830000000000000000000000008000140000000000900020073797a300000000014000000110001"], 0x94}}, 0x8000) mknod$loop(&(0x7f0000000000)='./file0\x00', 0xc000, 0x1) 8.264842954s ago: executing program 4 (id=864): getpgid(0x0) userfaultfd(0x80000) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=@bridge_delneigh={0x1b, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa, 0x5}]}, 0x28}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) write$binfmt_script(0xffffffffffffffff, &(0x7f0000004180), 0xff77) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'default', '', @void}}}], [{@seclabel}, {@smackfstransmute={'smackfstransmute', 0x3d, '!%/'}}, {@euid_gt}]}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0xfa4a, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000}}}, 0x108) dup(0xffffffffffffffff) 7.435411773s ago: executing program 2 (id=865): getpgid(0x0) userfaultfd(0x80000) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=@bridge_delneigh={0x1b, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa, 0x5}]}, 0x28}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) write$binfmt_script(0xffffffffffffffff, &(0x7f0000004180), 0xff77) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'default', '', @void}}}], [{@seclabel}, {@smackfstransmute={'smackfstransmute', 0x3d, '!%/'}}, {@euid_gt}]}) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0xfa4a, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000}}}, 0x108) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0xc8d8bfafaabf8d6, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) 7.302313386s ago: executing program 0 (id=866): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) openat(r2, &(0x7f0000000340)='.\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x4000000000000, 0x3}) close_range(r4, 0xffffffffffffffff, 0x0) 6.734381746s ago: executing program 1 (id=867): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0800001900030000018000000000622de4e9003d84b8138000000000000000000000000000000000003b0004086700000082785e684ae6ddf41ef0c18b9d6995e24c93c71372b536217dddab87c26bcf051bd62d0b2441dea9f05969b80cd9d2415c3eb80c"], 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@cgroup=r3, r3, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r3, r3, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r6, 0xee01, 0xee00) r7 = getpid() r8 = add_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000380)="9715829cf76b4c07e8cc05b55f9690fc7894", 0x12, r6) keyctl$clear(0x7, r8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8041) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sched_setscheduler(r7, 0x2, &(0x7f0000000100)=0x7) tkill(r7, 0x6) 6.552310397s ago: executing program 4 (id=868): iopl(0x3) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x7) r3 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x8080583a, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x53b, 0x70bd2b, 0x0, {0x9}, [{0x3c, 0x1, [@m_sample={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x50}}, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) getresgid(&(0x7f0000001200), 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=@ipv6_newnexthop={0x1c, 0x68, 0x5, 0x70bd2a, 0x0, {0x2}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000480)={0xf4, 0x21, 0x800, 0x70bd29, 0x25dfdbfc, {0xe}, [@generic="c35f34a8102fb49a62615551df49b978637f3db5", @typed={0x8, 0xde, 0x0, 0x0, @u32=0x9}, @generic, @typed={0x8, 0xfc, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="c3c05f47ebdba7f4f01fe3b42ad30ccb8f15233a7977180f927bcb68a79591c3ba10e32578319095685dc193f697bb3aa089fb778828d503b740f603c1acd7cfcd2d66f2b7a78b55fbb00cba174bd5762630f270c6ddeda154f8132a3543e83a77a9c909c9aa45f5901cbd3bf76ab1100a9dd47924af36f5239c12223fc26029b1c0ea0957e36bc5ac41c12aee8bcb617447606e6112ce990e486ea80b8e46631f4ef14ac924c3a65833ddf33452dcdaa97ac23d75ed0d0c47059265"]}, 0xf4}, 0x1, 0x0, 0x0, 0x200000a0}, 0x48000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000e8613a60d272426cd3b000000000000000"], 0x0, 0x1a, 0x0, 0x1, 0x9, 0x0, @void, @value}, 0x28) getgroups(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) 6.392948549s ago: executing program 0 (id=869): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x8000400) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d00, &(0x7f0000000040)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000210000000000000000000000000a6c000000160a3f360000000000000000020000000900010073797a30000000004000038008000240000000002c0003801400010076657468305f746f5f626f6e64000000140001007665746830000000000000000000000008000140000000000900020073797a300000000014000000110001"], 0x94}}, 0x8000) mknod$loop(&(0x7f0000000000)='./file0\x00', 0xc000, 0x1) 6.368751799s ago: executing program 2 (id=870): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) r1 = socket$unix(0x1, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) fspick(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x6, &(0x7f00000003c0)={0x0, 0x21, 0x0, @thr={&(0x7f0000000540)="44d6a104ec7a409aafd997abedb110b61bce04ab07fb7d9ad86eabee8e714bc7bf59630b3032f06c8ec729154905a2c3c2317b6282624cc334d6103e30ba85c2a1a402a2247d083cf1b5ef2f3838835f271becf3f06deeb331366c6461f7859c89e809b79e935b1ad26629f30f9cef34fdcf3425607aaf62d42eb7736389a081457d28e8c0a39ebe40d9fb134aa08c3a26bfcff9478e", &(0x7f0000000300)="08387e854f2124486b81821be39a06fbf8bd73252d933b15a5e1"}}, &(0x7f0000000600)) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet(0x2, 0x2, 0x1) sendmmsg$inet(r1, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f0000000040)}}, {{&(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001940)=[{&(0x7f0000000840)="5c02c0c7a2eaed703f43f090cc7bc036490d486d99c9d3a0c5a37f7b26e9b0c8f4ef6670043187d4f9448d40baadbcdeaf67818d86eed6bfc18ebf076def7ae3bb5bc7f0fd45e8ec8606e35844d3b7ce928aeeec38e84ad8f283e119d75012587a45963cb3e5ba682960de06d0688b3cbf5f852145c9d7987bbedec296b7ad46bdb92c2be3f3197234e6b821ff21932f8e1ffedff907acac87c1062b928acb29300276ebc64ae37c836b4d", 0xab}, {&(0x7f0000000740)="cfabe33e7116e16449986b690348d4de7b0d4c1b17cfb98afe0ec5e43eca2e379826dcafc15cec6beb3912e3b2e82a463110de906078e856bf8ee16ae457c5d3709f298815681bcdcf5e", 0x4a}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001900)="d1429662d0857138e8d16bf873752bbde361b5879380ee64e482530752c274e6e266630dcc368e76f1ac4be4ee47b76fa43470c4978907d0", 0x38}], 0x4, &(0x7f0000001d40)=[@ip_retopts={{0xe8, 0x0, 0x7, {[@generic={0x89, 0xb, "4eb565e657f2290621"}, @ssrr={0x89, 0x23, 0xcf, [@empty, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x2f}, @private=0xa010101, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty]}, @ssrr={0x89, 0xf, 0x55, [@local, @remote, @multicast1]}, @end, @timestamp_addr={0x44, 0x4c, 0xdf, 0x1, 0x8, [{@empty, 0x3ff}, {@rand_addr=0x64010102, 0xfffffff8}, {@private=0xa010101, 0x7fff}, {@multicast1, 0x1}, {@remote, 0x3}, {@multicast2, 0x81}, {@empty, 0x1}, {@local, 0x5}, {@remote, 0x7fffffff}]}, @cipso={0x86, 0x33, 0x1, [{0x0, 0xc, "1a69226276d78d92600c"}, {0x1, 0xa, "eabc927f4964e2d1"}, {0x5, 0x10, "0067bc76582441a8500512cf999d"}, {0x7, 0x5, "ac151a"}, {0x6, 0x2}]}, @rr={0x7, 0xb, 0x89, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0xf, 0xc4, [@empty, @loopback, @remote]}, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xaf9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000001}}], 0x148}}, {{&(0x7f0000001ac0)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000001c00)=[{&(0x7f0000001b00)="d7e3d7e540d8d644d061ccb85823f4534f7bc444ae04435775a9ae701eb9db9f07e9bf3480df2a23f8667df679da5ee9f9aa6f5cf47c9aabecab247b6e57a358c7a52b8d364fc56a6d325befb2099f74df09a219d573ed888b98403cbd8919a3abe971181b89272a7edc9a9dcf51667363e37aa3a787e661e53a39827d7956a1c83fe25dd62f9fcf7771daef3acc3ea5b62798470a0e517810c07f59d9bbe63e3cb336a4d859d5d1c63dc39487e8cc73e30df2211048092d81d5871e04967ebce38343efc5ff765f388d3f7cdb9f2486e072047511", 0xd5}], 0x1, &(0x7f0000001c40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7ff}}], 0x18}}], 0x3, 0x4048055) read(r3, &(0x7f0000000640)=""/125, 0x7d) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r4, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000007c0)={0x3, 0x40, 0xfa02, {{0x0, 0x4e24, 0x40003, @empty}, {0x2, 0x4e23, 0x6, @loopback, 0x5852}, r5, 0xe}}, 0x48) 4.93732389s ago: executing program 1 (id=871): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e00, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.936635074s ago: executing program 3 (id=872): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001200)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@local, 0x0, 0x3c}, @in=@empty, {}, {}, {0x0, 0xfffffffd}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) epoll_create(0x1a3f) 4.867113329s ago: executing program 0 (id=873): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x44}, 0x1522a9f6}, 0x1c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x1c, r3, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [""]}, 0x1c}}, 0x200008d5) preadv(r2, &(0x7f0000000640)=[{&(0x7f0000000300)=""/123, 0x7b}], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000200), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc0405668, &(0x7f0000000300)={0x7, 0x0, 0x1, {0x0, 0x4001, 0x0, 0x4}}) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x5) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r7, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d809e748adaab87cd498e", 0x1f}], 0x1}}], 0x1, 0x20008000) socket$vsock_stream(0x28, 0x1, 0x0) 4.802829506s ago: executing program 4 (id=874): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) getpid() socket(0x28, 0x5, 0x0) r1 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) openat(r2, &(0x7f0000000340)='.\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x4000000000000, 0x3}) close_range(r4, 0xffffffffffffffff, 0x0) 4.368348252s ago: executing program 4 (id=875): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r1, @ANYBLOB=',wfdno=']) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) 4.219169166s ago: executing program 2 (id=876): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x44}, 0x1522a9f6}, 0x1c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x1c, r3, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [""]}, 0x1c}}, 0x200008d5) preadv(r2, &(0x7f0000000640)=[{&(0x7f0000000300)=""/123, 0x7b}], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000200), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc0405668, &(0x7f0000000300)={0x7, 0x0, 0x1, {0x0, 0x4001, 0x0, 0x4}}) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x5) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r7, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d809e748adaab87cd498e", 0x1f}], 0x1}}], 0x1, 0x20008000) socket$vsock_stream(0x28, 0x1, 0x0) 3.802894129s ago: executing program 0 (id=877): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_procfs(0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000", @ANYRES32=0x0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r6], 0x74}}, 0x40880) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, 0x0) r10 = dup3(r9, r7, 0x0) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r11, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.645788723s ago: executing program 3 (id=878): openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="010000000000060000071a80010061cc", 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSBRK(r1, 0x5427) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) io_uring_setup(0x5f6f, &(0x7f0000000000)={0x0, 0x84bf, 0x40, 0x20, 0xfffffffc}) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) syz_create_resource$binfmt(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000100)=0x3) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e0bc00000000000000000000110000e5ff000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r8, 0x0, 0x0, 0x4890, &(0x7f0000000040)={0xa, 0x0, 0xfffffffd, @mcast1, 0x6, 0x4}, 0x20) sendto$inet6(r5, &(0x7f0000000180)="31026f88a51b2fc127688b7ab910aa12651cfdfbcef09145e25c590ebf27682fa5a6af53e8079a73b23eed33c1ef0e", 0x2f, 0x240400d0, &(0x7f00000001c0)={0xa, 0x2, 0x4, @empty, 0x2}, 0x1c) 2.64233271s ago: executing program 2 (id=879): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$vim2m(0x0, 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, 0x0) kexec_load(0xff0f, 0x1, &(0x7f0000000480)=[{0x0, 0x0, 0x7ffe0000, 0x3e0000}], 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) r4 = syz_open_procfs(0x0, &(0x7f0000001840)='net/unix\x00') read$FUSE(r4, &(0x7f0000001880)={0x2020}, 0x38) 2.613845225s ago: executing program 4 (id=880): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e00, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.474913912s ago: executing program 1 (id=881): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000180)='4\x00', 0x2) msgsnd(0x0, &(0x7f0000000580)=ANY=[], 0x8, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r2, 0x6, 0xd, 0x0, &(0x7f0000000b00)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) open_tree(0xffffffffffffff9c, 0x0, 0x88100) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008d010000010400000800000000000000", @ANYRES32, @ANYBLOB="05000000000000000000000000000000000000007b3b96297f3ab24e15bf582040be46a83a1d0ebef926c2533845a53f33542709ec3eb3aff8cb115341aec803db0716fb1634f3cfd186dbca0b8be52d0901e6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000100"/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x10, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x56) r5 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0xffffffff, @loopback}, 0x1c) syz_open_dev$video4linux(0x0, 0x6f8, 0x240940) add_key(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r4, 0x55fa3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket(0x28, 0x5, 0x0) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r6, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x3fffc, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 2.408738397s ago: executing program 0 (id=882): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x8, &(0x7f0000000100)=0x147ae147ae147ad, 0x112) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newtaction={0x48, 0x32, 0xffff, 0x70bd27, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f00090582"], 0x0) 1.626549695s ago: executing program 4 (id=883): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x44}, 0x1522a9f6}, 0x1c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x1c, r3, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [""]}, 0x1c}}, 0x200008d5) preadv(r2, &(0x7f0000000640)=[{&(0x7f0000000300)=""/123, 0x7b}], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000200), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc0405668, &(0x7f0000000300)={0x7, 0x0, 0x1, {0x0, 0x4001, 0x0, 0x4}}) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x5) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r7, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d809e748adaab87cd498e", 0x1f}], 0x1}}], 0x1, 0x20008000) socket$vsock_stream(0x28, 0x1, 0x0) 1.034891612s ago: executing program 3 (id=884): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0400000004000000e27f000001000000c3", @ANYRES32], 0x50) syz_emit_ethernet(0x1e, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000a7a3000005000000886411"], 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@setlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x3a}]}, 0x3c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000218c0000000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c00014000000000000000002c0001800a0001006c696d69740000001c0002800c00024000000000000000000c0001400000000000000003140000001000010000000000000000000084000a0142ffc0679d5b709bb2cb926ff0952917d416e32c0904ea4f9281cc8afa0581be6f43b12873ae477c33e0ed74214d0e", @ANYRES64], 0x110}, 0x1, 0x0, 0x0, 0x4004c40}, 0x4) 35.709434ms ago: executing program 2 (id=885): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x0, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0xc000) syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x808002) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x11, 0x4, 0x4, 0x1, 0x0, r3, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x880) connect$inet(r7, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xa8202, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000000c0)='veno\x00', 0x5) 35.329043ms ago: executing program 3 (id=886): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) r5 = socket$inet(0x2, 0x1, 0x100) ioctl$BTRFS_IOC_SYNC(r5, 0x9408, 0x0) write$P9_RVERSION(r0, &(0x7f00000000c0)={0x15, 0x65, 0xffff, 0x6, 0x8, '9P2000.u'}, 0x15) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r8, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x119966ec, 0x69cf39a9dadd5612, 0x3e9, 0x0, 0xffffffff, 0x2}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) 0s ago: executing program 1 (id=887): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r1, @ANYRESOCT=r0]) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) kernel console output (not intermixed with test programs): 903:6906 ioctl 4018620d 200000000040 returned -16 [ 178.974276][ T5867] IPVS: starting estimator thread 0... [ 179.353658][ T6918] IPVS: using max 31 ests per chain, 74400 per kthread [ 179.564665][ T6926] siw: device registration error -23 [ 179.803604][ T6922] fuse: Bad value for 'fd' [ 179.808556][ T6922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.264'. [ 180.110267][ T5899] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 180.229606][ T30] audit: type=1400 audit(1747263003.575:330): avc: denied { shutdown } for pid=6934 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 180.335381][ T30] audit: type=1400 audit(1747263003.575:331): avc: denied { name_connect } for pid=6934 comm="syz.1.266" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 180.357944][ T30] audit: type=1400 audit(1747263003.635:332): avc: denied { listen } for pid=6934 comm="syz.1.266" lport=36768 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 180.382050][ T5899] usb 4-1: Using ep0 maxpacket: 8 [ 180.394905][ T5899] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 180.405054][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.886134][ T5899] usb 4-1: Product: syz [ 180.890379][ T5899] usb 4-1: Manufacturer: syz [ 180.892407][ T5124] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 180.894959][ T5899] usb 4-1: SerialNumber: syz [ 180.931091][ T5899] usb 4-1: config 0 descriptor?? [ 180.935769][ T6916] sp0: Synchronizing with TNC [ 181.160151][ T30] audit: type=1400 audit(1747263004.505:333): avc: denied { mount } for pid=6945 comm="syz.1.272" name="/" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 181.160306][ T5899] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 181.345363][ T30] audit: type=1400 audit(1747263004.635:334): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 182.569860][ T5826] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 182.589192][ T6939] sp0: Synchronizing with TNC [ 182.880237][ T5899] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 182.904892][ T5899] usb 4-1: USB disconnect, device number 6 [ 183.181417][ T6968] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 183.859760][ T30] audit: type=1400 audit(1747263007.205:335): avc: denied { listen } for pid=6983 comm="syz.3.280" lport=39113 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 183.914043][ T30] audit: type=1400 audit(1747263007.265:336): avc: denied { accept } for pid=6983 comm="syz.3.280" lport=39113 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 183.969477][ T6988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 183.997922][ T6990] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 184.224535][ T30] audit: type=1400 audit(1747263007.575:337): avc: denied { mounton } for pid=6983 comm="syz.3.280" path="/proc/222/cgroup" dev="proc" ino=11737 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 184.232814][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 184.369330][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 184.450397][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 184.512107][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 184.521134][ T5864] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 184.552513][ T7000] siw: device registration error -23 [ 184.679587][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 184.709761][ T5864] usb 4-1: Using ep0 maxpacket: 16 [ 184.751638][ T5864] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.810602][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 184.836886][ T5864] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 184.871138][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 184.928707][ T5864] usb 4-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 184.962562][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 184.972440][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.002896][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 185.004056][ T5864] usb 4-1: Product: syz [ 185.014274][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 185.030858][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 185.037455][ T5864] usb 4-1: Manufacturer: syz [ 185.045230][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.057155][ T5864] usb 4-1: SerialNumber: syz [ 185.063444][ T10] usb 3-1: Product: syz [ 185.067717][ T10] usb 3-1: Manufacturer: syz [ 185.072759][ T10] usb 3-1: SerialNumber: syz [ 185.074261][ T5864] usb 4-1: config 0 descriptor?? [ 185.085831][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 185.104674][ T10] usb 3-1: config 0 descriptor?? [ 185.229718][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 185.246442][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 185.255448][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 185.264919][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 185.273916][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 185.283585][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 185.642568][ T7006] lo speed is unknown, defaulting to 1000 [ 186.138399][ T10] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 186.466351][ T10] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 187.455243][ T10] usb 4-1: USB disconnect, device number 7 [ 187.525429][ T5864] usb 3-1: USB disconnect, device number 5 [ 187.834063][ T30] audit: type=1400 audit(1747263011.185:338): avc: denied { getopt } for pid=7035 comm="syz.2.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 188.122110][ T7029] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 188.140244][ T7029] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 188.148484][ T7029] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 188.196891][ T7044] tmpfs: Unknown parameter 'smackfstransmute' [ 188.271866][ T7029] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 188.309492][ T7029] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 188.801551][ T7057] netlink: 'syz.1.296': attribute type 10 has an invalid length. [ 189.442371][ T5826] Bluetooth: hci1: command 0x0c1a tx timeout [ 190.160412][ T5826] Bluetooth: hci2: command 0x0c1a tx timeout [ 190.179694][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 190.319747][ T5826] Bluetooth: hci4: command 0x0c1a tx timeout [ 190.349683][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout [ 191.079272][ T30] audit: type=1400 audit(1747263014.425:339): avc: denied { read write } for pid=7083 comm="syz.3.306" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 191.424336][ T30] audit: type=1400 audit(1747263014.425:340): avc: denied { open } for pid=7083 comm="syz.3.306" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 191.508680][ T30] audit: type=1400 audit(1747263014.855:341): avc: denied { mount } for pid=7083 comm="syz.3.306" name="/" dev="gadgetfs" ino=6520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 191.559196][ T30] audit: type=1400 audit(1747263014.865:342): avc: denied { mounton } for pid=7083 comm="syz.3.306" path="/66/file0" dev="gadgetfs" ino=6520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 191.596469][ T30] audit: type=1400 audit(1747263014.945:343): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 191.842522][ T7082] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 191.850511][ T7082] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 191.858446][ T7082] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 191.866410][ T7082] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 191.873643][ T7082] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 192.190726][ T5866] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 192.699730][ T7109] warning: `syz.0.313' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 192.826284][ T7105] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 192.870561][ T5864] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 193.119778][ T5124] Bluetooth: hci1: command 0x0c1a tx timeout [ 193.310839][ T7113] xt_cgroup: invalid path, errno=-2 [ 193.889104][ T5866] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 193.919781][ T5124] Bluetooth: hci4: command 0x0c1a tx timeout [ 193.919821][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout [ 193.925776][ T5124] Bluetooth: hci2: command 0x0c1a tx timeout [ 193.925807][ T5124] Bluetooth: hci0: command 0x0c1a tx timeout [ 193.972226][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.028423][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.069058][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.331012][ T5864] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 194.339494][ T5866] usb 2-1: Product: syz [ 194.344136][ T5866] usb 2-1: Manufacturer: syz [ 194.349494][ T5864] usb 4-1: config 0 has no interface number 0 [ 194.364612][ T5866] usb 2-1: SerialNumber: syz [ 194.380577][ T5864] usb 4-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 195.294258][ T7122] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 195.296676][ T5866] usb 2-1: can't set config #1, error -71 [ 195.330741][ T5864] usb 4-1: string descriptor 0 read error: -71 [ 195.403290][ T30] audit: type=1400 audit(1747263018.755:344): avc: denied { ioctl } for pid=7117 comm="syz.0.315" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf71 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 195.496251][ T5864] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 195.528143][ T5866] usb 2-1: USB disconnect, device number 6 [ 195.539248][ T7124] __nla_validate_parse: 20 callbacks suppressed [ 195.539273][ T7124] netlink: 40 bytes leftover after parsing attributes in process `syz.0.315'. [ 195.570889][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.104607][ T5864] usb 4-1: config 0 descriptor?? [ 196.196514][ T7135] netlink: 'syz.3.317': attribute type 10 has an invalid length. [ 196.208131][ T7135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.317'. [ 196.216873][ T5864] usb 4-1: can't set config #0, error -71 [ 196.408004][ T5864] usb 4-1: USB disconnect, device number 8 [ 196.522446][ T7139] FAULT_INJECTION: forcing a failure. [ 196.522446][ T7139] name failslab, interval 1, probability 0, space 0, times 0 [ 196.535202][ T7139] CPU: 0 UID: 0 PID: 7139 Comm: syz.4.320 Not tainted 6.15.0-rc6-syzkaller-00080-g1a80a098c606 #0 PREEMPT(full) [ 196.535228][ T7139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 196.535240][ T7139] Call Trace: [ 196.535247][ T7139] [ 196.535255][ T7139] dump_stack_lvl+0x16c/0x1f0 [ 196.535286][ T7139] should_fail_ex+0x512/0x640 [ 196.535312][ T7139] ? fs_reclaim_acquire+0xae/0x150 [ 196.535340][ T7139] ? tomoyo_encode2+0x100/0x3e0 [ 196.535367][ T7139] should_failslab+0xc2/0x120 [ 196.535389][ T7139] __kmalloc_noprof+0xd2/0x510 [ 196.535419][ T7139] ? d_absolute_path+0x136/0x1a0 [ 196.535448][ T7139] tomoyo_encode2+0x100/0x3e0 [ 196.535480][ T7139] tomoyo_encode+0x29/0x50 [ 196.535506][ T7139] tomoyo_realpath_from_path+0x18f/0x6e0 [ 196.535549][ T7139] tomoyo_check_open_permission+0x2ab/0x3c0 [ 196.535576][ T7139] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 196.535633][ T7139] ? preempt_schedule_thunk+0x16/0x30 [ 196.535663][ T7139] tomoyo_file_open+0x6b/0x90 [ 196.535684][ T7139] security_file_open+0x84/0x1e0 [ 196.535714][ T7139] do_dentry_open+0x596/0x1c10 [ 196.535746][ T7139] ? lockdep_init_map_type+0x5c/0x280 [ 196.535769][ T7139] vfs_open+0x82/0x3f0 [ 196.535796][ T7139] dentry_open+0x71/0xd0 [ 196.535819][ T7139] ovl_security_fileattr+0x5b/0x170 [ 196.535850][ T7139] ovl_fileattr_get+0xe1/0x300 [ 196.535880][ T7139] ? __pfx_ovl_fileattr_get+0x10/0x10 [ 196.535909][ T7139] ? lockdep_hardirqs_on+0x7c/0x110 [ 196.535937][ T7139] ? __pfx_ovl_fileattr_get+0x10/0x10 [ 196.535967][ T7139] vfs_fileattr_set+0x1d1/0xc00 [ 196.535996][ T7139] ? __pfx_vfs_fileattr_set+0x10/0x10 [ 196.536028][ T7139] ? __asan_memset+0x23/0x50 [ 196.536057][ T7139] do_vfs_ioctl+0x24a/0x1990 [ 196.536084][ T7139] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 196.536121][ T7139] ? inode_has_perm+0x16f/0x1d0 [ 196.536144][ T7139] ? file_has_perm+0x27d/0x350 [ 196.536169][ T7139] ? __pfx_file_has_perm+0x10/0x10 [ 196.536188][ T7139] ? find_held_lock+0x2b/0x80 [ 196.536224][ T7139] ? selinux_file_ioctl+0xb4/0x270 [ 196.536259][ T7139] __x64_sys_ioctl+0x11d/0x200 [ 196.536287][ T7139] do_syscall_64+0xcd/0x260 [ 196.536317][ T7139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.536336][ T7139] RIP: 0033:0x7f740fd8e969 [ 196.536352][ T7139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.536371][ T7139] RSP: 002b:00007f7410bc0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 196.536389][ T7139] RAX: ffffffffffffffda RBX: 00007f740ffb6160 RCX: 00007f740fd8e969 [ 196.536403][ T7139] RDX: 0000200000000040 RSI: 0000000040086602 RDI: 0000000000000007 [ 196.536415][ T7139] RBP: 00007f7410bc0090 R08: 0000000000000000 R09: 0000000000000000 [ 196.536427][ T7139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.536438][ T7139] R13: 0000000000000000 R14: 00007f740ffb6160 R15: 00007ffed05fddc8 [ 196.536467][ T7139] [ 196.536600][ T7139] ERROR: Out of memory at tomoyo_realpath_from_path. [ 196.838488][ T5866] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 196.899924][ T7141] net_ratelimit: 1052 callbacks suppressed [ 196.899935][ T7141] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 196.912252][ T7141] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 196.924590][ T7141] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 196.931041][ T7141] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 196.939465][ T7141] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 196.945922][ T7141] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 196.961628][ T7141] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 196.968003][ T7141] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 196.974802][ T7141] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 196.981209][ T7141] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 197.015685][ T30] audit: type=1400 audit(1747263020.365:345): avc: denied { bind } for pid=7127 comm="syz.1.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 197.042920][ T5866] usb 2-1: unable to get BOS descriptor or descriptor too short [ 197.064057][ T5866] usb 2-1: too many configurations: 188, using maximum allowed: 8 [ 197.069276][ T30] audit: type=1400 audit(1747263020.375:346): avc: denied { write } for pid=7127 comm="syz.1.319" path="socket:[11252]" dev="sockfs" ino=11252 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 197.101330][ T5866] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 197.108902][ T5866] usb 2-1: can't read configurations, error -71 [ 197.690144][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.321'. [ 198.315757][ T7144] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 198.339982][ T7144] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 198.345978][ T7144] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 198.354392][ T7144] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 198.364071][ T7144] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 199.128042][ T5124] Bluetooth: hci1: command 0x0c1a tx timeout [ 199.524636][ T7171] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 200.569363][ T7179] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 200.610432][ T5124] Bluetooth: hci4: command 0x0c1a tx timeout [ 200.734741][ T5124] Bluetooth: hci3: command 0x0c1a tx timeout [ 200.741328][ T5124] Bluetooth: hci2: command 0x0c1a tx timeout [ 200.747393][ T5124] Bluetooth: hci0: command 0x0c1a tx timeout [ 201.525708][ T7192] binder: BINDER_SET_CONTEXT_MGR already set [ 201.531910][ T7192] binder: 7180:7192 ioctl 4018620d 200000000040 returned -16 [ 202.999818][ T7194] netlink: 'syz.4.332': attribute type 10 has an invalid length. [ 203.174353][ T7194] netlink: 12 bytes leftover after parsing attributes in process `syz.4.332'. [ 203.203786][ T30] audit: type=1400 audit(1747263026.535:347): avc: denied { write } for pid=7197 comm="syz.1.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 203.791815][ T30] audit: type=1400 audit(1747263027.145:348): avc: denied { create } for pid=7206 comm="syz.0.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 203.849671][ T7212] net_ratelimit: 1052 callbacks suppressed [ 203.849687][ T7212] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 203.862005][ T7212] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 203.873455][ T7212] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 203.879898][ T7212] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 203.888231][ T7212] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 203.894644][ T7212] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 203.904597][ T7212] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 203.911021][ T7212] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 203.917686][ T7212] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 203.924105][ T7212] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 204.027931][ T7203] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 204.037389][ T7203] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 204.049944][ T7203] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 204.078794][ T7203] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 204.208788][ T7203] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 205.091790][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.339'. [ 205.430187][ T7232] netlink: 108 bytes leftover after parsing attributes in process `syz.0.343'. [ 205.574531][ T7238] siw: device registration error -23 [ 205.615936][ T5867] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 205.789873][ T5867] usb 3-1: Using ep0 maxpacket: 32 [ 205.830449][ T5867] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 205.884688][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 205.916054][ T5867] usb 3-1: config 0 has no interface number 0 [ 205.930471][ T5867] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 205.955411][ T7239] netlink: 'syz.3.345': attribute type 10 has an invalid length. [ 205.956815][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.971503][ T5867] usb 3-1: Product: syz [ 205.978601][ T5867] usb 3-1: Manufacturer: syz [ 205.984956][ T5867] usb 3-1: SerialNumber: syz [ 206.009877][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 206.029368][ T7240] netlink: 'syz.3.345': attribute type 72 has an invalid length. [ 206.083588][ T5867] usb 3-1: config 0 descriptor?? [ 206.088608][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 206.088688][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 206.088693][ T5124] Bluetooth: hci2: command 0x0c1a tx timeout [ 206.127942][ T7240] netlink: 52 bytes leftover after parsing attributes in process `syz.3.345'. [ 206.151622][ T5867] smsc95xx v2.0.0 [ 206.244379][ T7246] binder: BINDER_SET_CONTEXT_MGR already set [ 206.250503][ T7246] binder: 7244:7246 ioctl 4018620d 200000000040 returned -16 [ 206.279696][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 206.386881][ T7235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.405998][ T55] Bluetooth: hci4: command 0x0c1a tx timeout [ 207.288236][ T7243] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 207.300384][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 207.337040][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.356552][ T10] usb 2-1: Product: syz [ 207.414328][ T10] usb 2-1: Manufacturer: syz [ 207.418920][ T10] usb 2-1: SerialNumber: syz [ 207.439206][ T10] usb 2-1: config 0 descriptor?? [ 207.555599][ T7251] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 207.644349][ T7259] netlink: 'syz.0.349': attribute type 10 has an invalid length. [ 207.709925][ T10] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 207.720612][ T7260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.349'. [ 207.723417][ T7259] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 207.775837][ T5867] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 207.786773][ T5867] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 207.820476][ T5867] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 207.858399][ T5867] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 207.927919][ T5867] usb 3-1: USB disconnect, device number 6 [ 209.122075][ T10] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 209.152530][ T10] usb 2-1: USB disconnect, device number 9 [ 211.579912][ T30] audit: type=1800 audit(1747263033.425:349): pid=7286 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.356" name="bus" dev="overlay" ino=411 res=0 errno=0 [ 211.765194][ T30] audit: type=1400 audit(1747263035.115:350): avc: denied { read write } for pid=7287 comm="syz.1.357" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 211.855263][ T30] audit: type=1400 audit(1747263035.115:351): avc: denied { open } for pid=7287 comm="syz.1.357" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 212.760148][ T7296] syz.0.358 uses obsolete (PF_INET,SOCK_PACKET) [ 212.970316][ T30] audit: type=1400 audit(1747263035.435:352): avc: denied { ioctl } for pid=7287 comm="syz.1.357" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 214.742567][ T30] audit: type=1400 audit(1747263036.505:353): avc: denied { bind } for pid=7298 comm="syz.2.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 215.768702][ T7299] tipc: Failed to clone mcast rcv buffer [ 216.035804][ T7308] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 216.189687][ T5864] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 216.810968][ T5864] usb 5-1: Using ep0 maxpacket: 8 [ 216.850182][ T5864] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 216.867552][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.877076][ T5864] usb 5-1: Product: syz [ 216.883019][ T5864] usb 5-1: Manufacturer: syz [ 216.887625][ T5864] usb 5-1: SerialNumber: syz [ 217.010566][ T5864] usb 5-1: config 0 descriptor?? [ 217.025560][ T5864] gspca_main: se401-2.14.0 probing 047d:5003 [ 217.075561][ T7326] FAULT_INJECTION: forcing a failure. [ 217.075561][ T7326] name failslab, interval 1, probability 0, space 0, times 0 [ 217.091011][ T7326] CPU: 0 UID: 0 PID: 7326 Comm: syz.0.367 Not tainted 6.15.0-rc6-syzkaller-00080-g1a80a098c606 #0 PREEMPT(full) [ 217.091038][ T7326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 217.091049][ T7326] Call Trace: [ 217.091056][ T7326] [ 217.091064][ T7326] dump_stack_lvl+0x16c/0x1f0 [ 217.091094][ T7326] should_fail_ex+0x512/0x640 [ 217.091121][ T7326] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 217.091150][ T7326] should_failslab+0xc2/0x120 [ 217.091170][ T7326] __kmalloc_cache_noprof+0x6a/0x3e0 [ 217.091197][ T7326] ? nfnl_err_add+0x4e/0x2d0 [ 217.091226][ T7326] nfnl_err_add+0x4e/0x2d0 [ 217.091253][ T7326] nfnetlink_rcv_batch+0x12f8/0x2350 [ 217.091294][ T7326] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 217.091323][ T7326] ? find_held_lock+0x2b/0x80 [ 217.091346][ T7326] ? __dev_queue_xmit+0x896/0x43e0 [ 217.091394][ T7326] ? avc_has_perm_noaudit+0x149/0x3b0 [ 217.091418][ T7326] ? __asan_memset+0x23/0x50 [ 217.091451][ T7326] ? __nla_validate_parse+0x600/0x2880 [ 217.091478][ T7326] ? __pfx___nla_validate_parse+0x10/0x10 [ 217.091500][ T7326] ? cap_capable+0xb3/0x250 [ 217.091530][ T7326] ? __nla_parse+0x40/0x60 [ 217.091552][ T7326] nfnetlink_rcv+0x3c1/0x430 [ 217.091577][ T7326] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 217.091611][ T7326] netlink_unicast+0x53d/0x7f0 [ 217.091638][ T7326] ? __pfx_netlink_unicast+0x10/0x10 [ 217.091671][ T7326] netlink_sendmsg+0x8d1/0xdd0 [ 217.091700][ T7326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.091736][ T7326] ____sys_sendmsg+0xa98/0xc70 [ 217.091763][ T7326] ? copy_msghdr_from_user+0x10a/0x160 [ 217.091784][ T7326] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.091825][ T7326] ___sys_sendmsg+0x134/0x1d0 [ 217.091848][ T7326] ? __pfx____sys_sendmsg+0x10/0x10 [ 217.091907][ T7326] __sys_sendmsg+0x16d/0x220 [ 217.091929][ T7326] ? __pfx___sys_sendmsg+0x10/0x10 [ 217.091960][ T7326] ? rcu_is_watching+0x12/0xc0 [ 217.091991][ T7326] do_syscall_64+0xcd/0x260 [ 217.092020][ T7326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.092039][ T7326] RIP: 0033:0x7fce7bb8e969 [ 217.092056][ T7326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.092074][ T7326] RSP: 002b:00007fce7cac2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.092093][ T7326] RAX: ffffffffffffffda RBX: 00007fce7bdb5fa0 RCX: 00007fce7bb8e969 [ 217.092106][ T7326] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 217.092118][ T7326] RBP: 00007fce7cac2090 R08: 0000000000000000 R09: 0000000000000000 [ 217.092130][ T7326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.092141][ T7326] R13: 0000000000000000 R14: 00007fce7bdb5fa0 R15: 00007ffcf675dd08 [ 217.092169][ T7326] [ 217.363814][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 217.413597][ T7328] siw: device registration error -23 [ 217.519993][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 217.556437][ T10] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 217.569826][ T10] usb 3-1: config 0 has no interface number 0 [ 217.605432][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 217.612593][ T5864] gspca_se401: Bayer format not supported! [ 217.620745][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.638074][ T10] usb 3-1: Product: syz [ 217.649893][ T10] usb 3-1: Manufacturer: syz [ 217.658750][ T10] usb 3-1: SerialNumber: syz [ 217.762089][ T91] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 217.870869][ T10] usb 3-1: config 0 descriptor?? [ 217.892950][ T10] smsc95xx v2.0.0 [ 217.950980][ T5868] usb 5-1: USB disconnect, device number 5 [ 217.959565][ T91] usb 2-1: Using ep0 maxpacket: 8 [ 217.971070][ T91] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 217.992220][ T91] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.020833][ T91] usb 2-1: Product: syz [ 218.025911][ T91] usb 2-1: Manufacturer: syz [ 218.045731][ T91] usb 2-1: SerialNumber: syz [ 218.078044][ T91] usb 2-1: config 0 descriptor?? [ 218.889684][ T5859] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 218.966313][ T91] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 219.151792][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.162876][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.174226][ T5859] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 219.183850][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.194421][ T5859] usb 4-1: config 0 descriptor?? [ 219.266856][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 219.277608][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 219.288212][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 219.299305][ T10] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 219.311387][ T10] usb 3-1: USB disconnect, device number 7 [ 219.660532][ T30] audit: type=1400 audit(1747263043.015:354): avc: denied { block_suspend } for pid=7331 comm="syz.3.369" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 219.715691][ T5859] usbhid 4-1:0.0: can't add hid device: -71 [ 219.722931][ T5859] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 219.735576][ T5859] usb 4-1: USB disconnect, device number 9 [ 219.994036][ T7352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.373'. [ 220.011255][ T7352] net_ratelimit: 1052 callbacks suppressed [ 220.011269][ T7352] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 220.036455][ T7352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.196200][ T91] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 220.211794][ T91] usb 2-1: USB disconnect, device number 10 [ 220.299716][ T5859] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 220.916328][ T30] audit: type=1400 audit(1747263044.265:355): avc: denied { create } for pid=7360 comm="syz.3.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 220.953232][ T30] audit: type=1400 audit(1747263044.295:356): avc: denied { connect } for pid=7360 comm="syz.3.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 220.973239][ T5859] usb 5-1: Using ep0 maxpacket: 32 [ 221.012028][ T5859] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 221.030183][ T5859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.046583][ T5859] usb 5-1: config 0 descriptor?? [ 221.073384][ T5859] gspca_main: sunplus-2.14.0 probing 041e:400b [ 221.612132][ T7376] netlink: 'syz.1.379': attribute type 10 has an invalid length. [ 221.631068][ T7376] netlink: 52 bytes leftover after parsing attributes in process `syz.1.379'. [ 222.258893][ T7369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.770580][ T5859] gspca_sunplus: reg_w_riv err -71 [ 222.775871][ T5859] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 222.797385][ T5859] usb 5-1: USB disconnect, device number 6 [ 223.795031][ T30] audit: type=1400 audit(1747263047.135:357): avc: denied { getopt } for pid=7392 comm="syz.2.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 223.833123][ T30] audit: type=1400 audit(1747263047.135:358): avc: denied { mount } for pid=7392 comm="syz.2.382" name="/" dev="configfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 223.920782][ T30] audit: type=1400 audit(1747263047.135:359): avc: denied { search } for pid=7392 comm="syz.2.382" name="/" dev="configfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 223.942878][ T30] audit: type=1400 audit(1747263047.135:360): avc: denied { read } for pid=7392 comm="syz.2.382" name="/" dev="configfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 223.970149][ T30] audit: type=1400 audit(1747263047.135:361): avc: denied { open } for pid=7392 comm="syz.2.382" path="/" dev="configfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 223.998343][ T30] audit: type=1400 audit(1747263047.175:362): avc: denied { ioctl } for pid=7392 comm="syz.2.382" path="/" dev="configfs" ino=216 ioctlcmd=0x48d5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 224.106999][ T30] audit: type=1400 audit(1747263047.235:363): avc: denied { write } for pid=7392 comm="syz.2.382" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 224.504390][ T7399] Driver unsupported XDP return value 0 on prog (id 73) dev N/A, expect packet loss! [ 224.533524][ T7406] netlink: 'syz.2.385': attribute type 10 has an invalid length. [ 224.594961][ T7411] FAULT_INJECTION: forcing a failure. [ 224.594961][ T7411] name failslab, interval 1, probability 0, space 0, times 0 [ 224.609725][ T7411] CPU: 1 UID: 0 PID: 7411 Comm: syz.0.388 Not tainted 6.15.0-rc6-syzkaller-00080-g1a80a098c606 #0 PREEMPT(full) [ 224.609751][ T7411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 224.609762][ T7411] Call Trace: [ 224.609769][ T7411] [ 224.609776][ T7411] dump_stack_lvl+0x16c/0x1f0 [ 224.609813][ T7411] should_fail_ex+0x512/0x640 [ 224.609836][ T7411] ? fs_reclaim_acquire+0xae/0x150 [ 224.609863][ T7411] ? tomoyo_encode2+0x100/0x3e0 [ 224.609889][ T7411] should_failslab+0xc2/0x120 [ 224.609910][ T7411] __kmalloc_noprof+0xd2/0x510 [ 224.609922][ T7411] ? d_absolute_path+0x136/0x1a0 [ 224.609940][ T7411] tomoyo_encode2+0x100/0x3e0 [ 224.609959][ T7411] tomoyo_encode+0x29/0x50 [ 224.609974][ T7411] tomoyo_realpath_from_path+0x18f/0x6e0 [ 224.609996][ T7411] tomoyo_path_number_perm+0x245/0x580 [ 224.610010][ T7411] ? tomoyo_path_number_perm+0x237/0x580 [ 224.610026][ T7411] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 224.610041][ T7411] ? find_held_lock+0x2b/0x80 [ 224.610071][ T7411] ? find_held_lock+0x2b/0x80 [ 224.610084][ T7411] ? hook_file_ioctl_common+0x145/0x410 [ 224.610099][ T7411] ? __fget_files+0x20e/0x3c0 [ 224.610113][ T7411] security_file_ioctl+0x9b/0x240 [ 224.610131][ T7411] __x64_sys_ioctl+0xb7/0x200 [ 224.610148][ T7411] do_syscall_64+0xcd/0x260 [ 224.610166][ T7411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.610178][ T7411] RIP: 0033:0x7fce7bb8e969 [ 224.610188][ T7411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.610199][ T7411] RSP: 002b:00007fce7cac2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 224.610210][ T7411] RAX: ffffffffffffffda RBX: 00007fce7bdb5fa0 RCX: 00007fce7bb8e969 [ 224.610218][ T7411] RDX: 0000200000000040 RSI: 00000000c0109207 RDI: 0000000000000003 [ 224.610225][ T7411] RBP: 00007fce7cac2090 R08: 0000000000000000 R09: 0000000000000000 [ 224.610232][ T7411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.610239][ T7411] R13: 0000000000000000 R14: 00007fce7bdb5fa0 R15: 00007ffcf675dd08 [ 224.610254][ T7411] [ 224.610267][ T7411] ERROR: Out of memory at tomoyo_realpath_from_path. [ 224.833100][ T7406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.385'. [ 224.939682][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 224.939696][ T30] audit: type=1400 audit(1747263048.265:366): avc: denied { ioctl } for pid=7410 comm="syz.0.388" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 224.970690][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.079707][ T30] audit: type=1400 audit(1747263048.425:367): avc: denied { ioctl } for pid=7410 comm="syz.0.388" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 225.104049][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.131251][ T7411] netlink: 44 bytes leftover after parsing attributes in process `syz.0.388'. [ 225.148097][ T7420] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 225.154529][ T7420] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 225.169597][ T7411] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 225.189414][ T7411] overlayfs: missing 'lowerdir' [ 225.228086][ T7420] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 225.234560][ T7420] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 225.254607][ T7420] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 225.261081][ T7420] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 225.417802][ T7422] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 225.474299][ T7420] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 225.480721][ T7420] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 225.710116][ T7420] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 225.716572][ T7420] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 225.975720][ T7434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.390'. [ 226.656824][ T7438] FAULT_INJECTION: forcing a failure. [ 226.656824][ T7438] name failslab, interval 1, probability 0, space 0, times 0 [ 226.695992][ T7438] CPU: 0 UID: 0 PID: 7438 Comm: syz.1.394 Not tainted 6.15.0-rc6-syzkaller-00080-g1a80a098c606 #0 PREEMPT(full) [ 226.696018][ T7438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 226.696030][ T7438] Call Trace: [ 226.696036][ T7438] [ 226.696043][ T7438] dump_stack_lvl+0x16c/0x1f0 [ 226.696074][ T7438] should_fail_ex+0x512/0x640 [ 226.696100][ T7438] ? fs_reclaim_acquire+0xae/0x150 [ 226.696127][ T7438] ? tomoyo_encode2+0x100/0x3e0 [ 226.696153][ T7438] should_failslab+0xc2/0x120 [ 226.696174][ T7438] __kmalloc_noprof+0xd2/0x510 [ 226.696191][ T7438] ? d_absolute_path+0x136/0x1a0 [ 226.696219][ T7438] tomoyo_encode2+0x100/0x3e0 [ 226.696248][ T7438] tomoyo_encode+0x29/0x50 [ 226.696273][ T7438] tomoyo_realpath_from_path+0x18f/0x6e0 [ 226.696308][ T7438] tomoyo_path_number_perm+0x245/0x580 [ 226.696331][ T7438] ? tomoyo_path_number_perm+0x237/0x580 [ 226.696357][ T7438] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 226.696390][ T7438] ? find_held_lock+0x2b/0x80 [ 226.696441][ T7438] ? find_held_lock+0x2b/0x80 [ 226.696462][ T7438] ? hook_file_ioctl_common+0x145/0x410 [ 226.696488][ T7438] ? __fget_files+0x20e/0x3c0 [ 226.696510][ T7438] security_file_ioctl+0x9b/0x240 [ 226.696538][ T7438] __x64_sys_ioctl+0xb7/0x200 [ 226.696566][ T7438] do_syscall_64+0xcd/0x260 [ 226.696595][ T7438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.696615][ T7438] RIP: 0033:0x7f7566f8e969 [ 226.696629][ T7438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.696647][ T7438] RSP: 002b:00007f7567e6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 226.696666][ T7438] RAX: ffffffffffffffda RBX: 00007f75671b5fa0 RCX: 00007f7566f8e969 [ 226.696679][ T7438] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 226.696690][ T7438] RBP: 00007f7567e6f090 R08: 0000000000000000 R09: 0000000000000000 [ 226.696702][ T7438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.696713][ T7438] R13: 0000000000000000 R14: 00007f75671b5fa0 R15: 00007ffcc241f5f8 [ 226.696741][ T7438] [ 226.696759][ T7438] ERROR: Out of memory at tomoyo_realpath_from_path. [ 226.782669][ T30] audit: type=1400 audit(1747263050.045:368): avc: denied { read } for pid=7439 comm="syz.3.395" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 226.787340][ T7438] loop8: detected capacity change from 0 to 7 [ 226.819355][ T30] audit: type=1400 audit(1747263050.045:369): avc: denied { open } for pid=7439 comm="syz.3.395" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 226.865187][ T7438] Dev loop8: unable to read RDB block 7 [ 226.981006][ T30] audit: type=1400 audit(1747263050.045:370): avc: denied { ioctl } for pid=7439 comm="syz.3.395" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 227.005943][ T5866] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 227.037528][ T7438] loop8: unable to read partition table [ 227.043690][ T7438] loop8: partition table beyond EOD, truncated [ 227.080397][ T7438] loop_reread_partitions: partition scan of loop8 (₫被xü^>à– ) failed (rc=-5) [ 227.082230][ T7446] netlink: 'syz.0.396': attribute type 10 has an invalid length. [ 227.140827][ T7448] netlink: 52 bytes leftover after parsing attributes in process `syz.0.396'. [ 227.192966][ T5866] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 227.209359][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.227103][ T5866] usb 4-1: Product: syz [ 227.246542][ T5866] usb 4-1: Manufacturer: syz [ 227.256685][ T5866] usb 4-1: SerialNumber: syz [ 227.466479][ T5866] usb 4-1: config 0 descriptor?? [ 227.507262][ T7451] vlan2: entered allmulticast mode [ 227.518389][ T7451] erspan0: entered allmulticast mode [ 227.596410][ T7452] bond1: entered allmulticast mode [ 227.643304][ T7459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.399'. [ 227.645086][ T7441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.717242][ T30] audit: type=1400 audit(1747263051.065:371): avc: denied { write } for pid=7439 comm="syz.3.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 227.931103][ T5866] mos7840 4-1:0.0: required endpoints missing [ 228.022813][ T10] usb 4-1: USB disconnect, device number 10 [ 228.665543][ T7464] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 228.676647][ T7464] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 228.683240][ T7464] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 228.689440][ T7464] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 228.722591][ T7464] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 229.393668][ T7477] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 230.421489][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 230.739733][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 230.745801][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 230.751911][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 230.799693][ T5826] Bluetooth: hci4: command 0x0c1a tx timeout [ 230.957264][ T7501] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 230.982370][ T7501] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 231.680046][ T30] audit: type=1400 audit(1747263054.335:372): avc: denied { firmware_load } for pid=7495 comm="syz.4.409" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 231.898282][ T7510] overlayfs: missing 'lowerdir' [ 231.953692][ T7512] net_ratelimit: 2114 callbacks suppressed [ 231.953707][ T7512] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 231.965942][ T7512] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 231.974263][ T7512] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 231.980706][ T7512] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 232.079029][ T7512] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 232.085422][ T7512] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 232.153966][ T7512] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 232.160348][ T7512] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 232.181158][ T5866] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 232.289372][ T7513] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 232.447101][ T5866] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 232.467888][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.482076][ T7512] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 232.488464][ T7512] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 232.499374][ T5866] usb 5-1: Product: syz [ 232.531693][ T5866] usb 5-1: Manufacturer: syz [ 232.648570][ T5866] usb 5-1: SerialNumber: syz [ 233.451864][ T7521] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 233.460558][ T5866] usb 5-1: config 0 descriptor?? [ 233.614392][ T7525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.414'. [ 233.739403][ T30] audit: type=1400 audit(1747263057.085:373): avc: denied { getopt } for pid=7509 comm="syz.4.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 233.760007][ T5866] usb 5-1: f81604_read: reg: 105 failed: -EPIPE [ 233.766284][ T5866] f81604 5-1:0.0: Setting termination of CH#0 failed: -EPIPE [ 233.809728][ T5866] f81604 5-1:0.0: probe with driver f81604 failed with error -32 [ 233.872578][ T5866] usb 5-1: USB disconnect, device number 7 [ 234.824378][ T7536] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 234.854446][ T7536] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 234.881290][ T7536] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 234.891834][ T7536] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 234.897912][ T7536] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 235.084892][ T7544] input: syz0 as /devices/virtual/input/input18 [ 236.739885][ T5826] Bluetooth: hci1: command 0x0c1a tx timeout [ 236.799082][ T30] audit: type=1400 audit(1747263060.145:374): avc: denied { create } for pid=7554 comm="syz.4.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 236.935412][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 236.959845][ T5124] Bluetooth: hci2: command 0x0c1a tx timeout [ 236.966034][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 236.972336][ T5826] Bluetooth: hci4: command 0x0c1a tx timeout [ 237.204100][ T30] audit: type=1400 audit(1747263060.545:375): avc: denied { bind } for pid=7554 comm="syz.4.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 237.251449][ T30] audit: type=1400 audit(1747263060.595:376): avc: denied { write } for pid=7554 comm="syz.4.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 237.314280][ T7561] net_ratelimit: 1052 callbacks suppressed [ 237.314290][ T7561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.331329][ T7561] syz_tun: entered allmulticast mode [ 237.337911][ T30] audit: type=1400 audit(1747263060.665:377): avc: denied { setopt } for pid=7554 comm="syz.4.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 237.358093][ T30] audit: type=1400 audit(1747263060.665:378): avc: denied { bind } for pid=7554 comm="syz.4.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 237.381255][ T7562] binder: BINDER_SET_CONTEXT_MGR already set [ 237.387227][ T7562] binder: 7559:7562 ioctl 4018620d 200000000040 returned -16 [ 237.616335][ T7554] syz_tun: left allmulticast mode [ 238.375204][ T7577] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 238.381692][ T7577] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 238.480603][ T7577] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 238.487017][ T7577] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 238.703838][ T7583] tmpfs: Unknown parameter 'smackfstransmute' [ 238.962411][ T7577] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 238.968834][ T7577] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 239.006285][ T7577] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 239.012716][ T7577] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 239.029781][ T7577] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 239.155411][ T7591] netlink: 'syz.0.432': attribute type 10 has an invalid length. [ 239.199023][ T7591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.432'. [ 239.228788][ T7595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.430'. [ 239.981568][ T5866] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 240.169858][ T5866] usb 3-1: Using ep0 maxpacket: 16 [ 240.417788][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 240.433842][ T5866] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 240.448549][ T5866] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 240.462214][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.502920][ T5866] usb 3-1: config 0 descriptor?? [ 240.567779][ T7618] siw: device registration error -23 [ 240.915914][ T5868] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 241.325695][ T5866] lua 0003:1E7D:2C2E.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.2-1/input0 [ 241.410568][ T30] audit: type=1400 audit(1747263064.755:379): avc: denied { connect } for pid=7617 comm="syz.3.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 241.489686][ T5868] usb 2-1: Using ep0 maxpacket: 8 [ 241.549790][ T30] audit: type=1400 audit(1747263064.875:380): avc: denied { mount } for pid=7626 comm="syz.0.443" name="/" dev="mqueue" ino=4491 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 241.883634][ T5868] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 241.885886][ T30] audit: type=1400 audit(1747263065.205:381): avc: denied { lock } for pid=7626 comm="syz.0.443" path="socket:[13890]" dev="sockfs" ino=13890 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 241.916787][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.037782][ T30] audit: type=1400 audit(1747263065.385:382): avc: denied { ioctl } for pid=7605 comm="syz.2.436" path="socket:[14668]" dev="sockfs" ino=14668 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 242.047451][ T5868] usb 2-1: Product: syz [ 242.449818][ T30] audit: type=1400 audit(1747263065.435:383): avc: denied { setopt } for pid=7633 comm="syz.3.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 242.503598][ T7634] tmpfs: Unknown parameter 'smackfstransmute' [ 242.503639][ T5868] usb 2-1: Manufacturer: syz [ 242.514548][ T5868] usb 2-1: SerialNumber: syz [ 242.522237][ T5868] usb 2-1: config 0 descriptor?? [ 243.560136][ T30] audit: type=1400 audit(1747263066.325:384): avc: denied { ioctl } for pid=7638 comm="syz.3.446" path="mnt:[4026533047]" dev="nsfs" ino=4026533047 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 243.584652][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.683956][ T5868] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -110 [ 243.714979][ T7643] netlink: 'syz.4.447': attribute type 10 has an invalid length. [ 243.730098][ T5868] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 243.730944][ T7643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.447'. [ 243.778004][ T5864] usb 3-1: USB disconnect, device number 8 [ 243.964757][ T7648] binder: BINDER_SET_CONTEXT_MGR already set [ 243.970791][ T7648] binder: 7647:7648 ioctl 4018620d 200000000040 returned -16 [ 244.117674][ T30] audit: type=1400 audit(1747263067.405:385): avc: denied { setopt } for pid=7644 comm="syz.3.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 244.474459][ T30] audit: type=1400 audit(1747263067.405:386): avc: denied { connect } for pid=7644 comm="syz.3.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 245.693994][ T10] usb 2-1: USB disconnect, device number 11 [ 246.239030][ T30] audit: type=1400 audit(1747263069.585:387): avc: denied { read write } for pid=7670 comm="syz.1.455" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 246.261699][ T30] audit: type=1400 audit(1747263069.585:388): avc: denied { open } for pid=7670 comm="syz.1.455" path="/89/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 246.296654][ T7672] netfs: Couldn't get user pages (rc=-14) [ 246.303991][ T30] audit: type=1800 audit(1747263069.635:389): pid=7672 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.455" name="/" dev="9p" ino=2 res=0 errno=0 [ 246.325299][ T30] audit: type=1400 audit(1747263069.635:390): avc: denied { map } for pid=7670 comm="syz.1.455" path="/89/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 246.759732][ T5868] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 246.811783][ T7677] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 246.820237][ T7677] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 246.845935][ T7677] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 246.857204][ T7677] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 246.864743][ T7677] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 246.910372][ T7679] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 246.928969][ T7679] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 247.031629][ T7679] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 247.032725][ T5868] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 247.051493][ T7686] siw: device registration error -23 [ 247.130433][ T55] Bluetooth: hci5: command 0xfc11 tx timeout [ 247.136764][ T5826] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 247.167204][ T7679] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 247.269135][ T7679] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 247.278977][ T5868] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 247.294817][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 247.297165][ T7660] sp0: Synchronizing with TNC [ 247.306372][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 247.324417][ T5868] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 247.346384][ T5868] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 247.358415][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.376473][ T5868] usb 4-1: Product: syz [ 247.381321][ T5868] usb 4-1: Manufacturer: syz [ 247.385942][ T5868] usb 4-1: SerialNumber: syz [ 247.400229][ T5868] usb 4-1: config 0 descriptor?? [ 247.424006][ T5868] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input19 [ 247.579666][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 247.974072][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 247.974087][ T30] audit: type=1800 audit(1747263071.055:392): pid=7692 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.460" name="bus" dev="overlay" ino=541 res=0 errno=0 [ 248.001631][ C0] vkms_vblank_simulate: vblank timer overrun [ 248.028371][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 248.237281][ T7690] netlink: 'syz.0.461': attribute type 10 has an invalid length. [ 248.248240][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 248.312029][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.346736][ T7690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.461'. [ 248.391721][ T10] usb 2-1: Product: syz [ 248.443476][ T10] usb 2-1: Manufacturer: syz [ 248.485581][ T10] usb 2-1: SerialNumber: syz [ 248.661838][ T10] usb 2-1: config 0 descriptor?? [ 248.683040][ T30] audit: type=1400 audit(1747263072.035:393): avc: denied { read } for pid=7674 comm="syz.3.458" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 248.765480][ T30] audit: type=1400 audit(1747263072.035:394): avc: denied { open } for pid=7674 comm="syz.3.458" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 248.821317][ T7695] binder: BINDER_SET_CONTEXT_MGR already set [ 248.862348][ T5867] usb 4-1: USB disconnect, device number 11 [ 249.259868][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 249.265949][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 249.272197][ T5818] Bluetooth: hci2: command 0x0c1a tx timeout [ 249.278284][ T5124] Bluetooth: hci3: command 0x0c1a tx timeout [ 249.284534][ T5821] Bluetooth: hci4: command 0x0c1a tx timeout [ 249.364278][ T10] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 249.999872][ T7695] binder: 7694:7695 ioctl 4018620d 200000000040 returned -16 [ 250.380166][ T5929] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 250.610064][ T5929] usb 3-1: device descriptor read/64, error -71 [ 250.719765][ T5859] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 251.072015][ T10] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 251.235263][ T5929] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 251.515231][ T10] usb 2-1: USB disconnect, device number 12 [ 251.525001][ T7712] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7712 comm=syz.3.467 [ 251.564499][ T7711] binder: BINDER_SET_CONTEXT_MGR already set [ 251.579715][ T7711] binder: 7710:7711 ioctl 4018620d 200000000040 returned -16 [ 251.650145][ T5929] usb 3-1: device descriptor read/64, error -71 [ 251.661021][ T5859] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 251.669372][ T5859] usb 5-1: config 0 has no interface number 0 [ 251.682634][ T5859] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 251.701352][ T5859] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 251.740150][ T5859] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 251.752316][ T5859] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 251.764330][ T5859] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 251.770498][ T5929] usb usb3-port1: attempt power cycle [ 251.776071][ T5859] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 251.801010][ T5859] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 251.929856][ T5859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.941355][ T5859] usb 5-1: config 0 descriptor?? [ 251.954480][ T7710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.956232][ T7705] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 252.021740][ T7705] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 252.172493][ T7721] tmpfs: Unknown parameter 'smackfstransmute' [ 252.554585][ T5859] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 253.456868][ T7732] sp0: Synchronizing with TNC [ 253.576607][ T30] audit: type=1400 audit(1747263076.915:395): avc: denied { search } for pid=5479 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.649367][ T30] audit: type=1400 audit(1747263076.915:396): avc: denied { read } for pid=5479 comm="dhcpcd" name="n108" dev="tmpfs" ino=3902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 253.676822][ T7736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.694074][ T7736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.834137][ T7739] netlink: 'syz.2.473': attribute type 10 has an invalid length. [ 253.840794][ T30] audit: type=1400 audit(1747263076.915:397): avc: denied { open } for pid=5479 comm="dhcpcd" path="/run/udev/data/n108" dev="tmpfs" ino=3902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 253.894901][ T7705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.464'. [ 253.918637][ T7742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.473'. [ 253.952070][ T30] audit: type=1400 audit(1747263076.915:398): avc: denied { getattr } for pid=5479 comm="dhcpcd" path="/run/udev/data/n108" dev="tmpfs" ino=3902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 253.982987][ T7736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.993993][ T7736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.020587][ T7705] bridge0: port 2(bridge_slave_1) entered learning state [ 254.453461][ T7705] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.636466][ T30] audit: type=1800 audit(1747263078.295:399): pid=7750 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.475" name="bus" dev="overlay" ino=567 res=0 errno=0 [ 256.697529][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.704339][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.833785][ T5868] usb 5-1: USB disconnect, device number 8 [ 256.842580][ T7752] binder: BINDER_SET_CONTEXT_MGR already set [ 256.848544][ T7752] binder: 7751:7752 ioctl 4018620d 200000000040 returned -16 [ 256.889669][ T5868] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 258.389988][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 258.604844][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.623217][ T10] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 258.669449][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.688496][ T10] usb 4-1: config 0 descriptor?? [ 258.818297][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 259.072255][ T30] audit: type=1400 audit(1747263082.215:400): avc: denied { append } for pid=7773 comm="syz.2.483" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 259.072318][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 259.130320][ T7759] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 259.136931][ T7759] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 259.162624][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 259.176668][ T10] pwc: recv_control_msg error -71 req 02 val 2c00 [ 259.189844][ T7759] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 259.195809][ T7759] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 259.230009][ T10] pwc: recv_control_msg error -71 req 04 val 1000 [ 259.237693][ T7759] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 259.250499][ T7791] netlink: 'syz.3.486': attribute type 10 has an invalid length. [ 259.275749][ T10] pwc: recv_control_msg error -71 req 04 val 1300 [ 259.327197][ T10] pwc: recv_control_msg error -71 req 04 val 1400 [ 259.343138][ T7791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.486'. [ 259.366813][ T10] pwc: recv_control_msg error -71 req 02 val 2000 [ 259.420174][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 259.449140][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 259.470229][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 259.511564][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 259.638015][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 259.648134][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 259.658337][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 259.670144][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 260.582521][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 260.622710][ T10] pwc: Registered as video103. [ 260.701446][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input20 [ 260.802974][ T10] usb 4-1: USB disconnect, device number 12 [ 260.892636][ T7813] FAULT_INJECTION: forcing a failure. [ 260.892636][ T7813] name failslab, interval 1, probability 0, space 0, times 0 [ 260.928070][ T7811] binder: BINDER_SET_CONTEXT_MGR already set [ 260.934090][ T7811] binder: 7810:7811 ioctl 4018620d 200000000040 returned -16 [ 260.993393][ T7813] CPU: 1 UID: 0 PID: 7813 Comm: syz.3.489 Not tainted 6.15.0-rc6-syzkaller-00080-g1a80a098c606 #0 PREEMPT(full) [ 260.993409][ T7813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 260.993417][ T7813] Call Trace: [ 260.993421][ T7813] [ 260.993428][ T7813] dump_stack_lvl+0x16c/0x1f0 [ 260.993450][ T7813] should_fail_ex+0x512/0x640 [ 260.993467][ T7813] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 260.993486][ T7813] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 260.993497][ T7813] should_failslab+0xc2/0x120 [ 260.993510][ T7813] __kmalloc_cache_noprof+0x6a/0x3e0 [ 260.993526][ T7813] ? lockdep_init_map_type+0x5c/0x280 [ 260.993537][ T7813] ? __kthread_create_on_node+0xce/0x3f0 [ 260.993556][ T7813] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 260.993567][ T7813] __kthread_create_on_node+0xce/0x3f0 [ 260.993584][ T7813] ? __pfx___kthread_create_on_node+0x10/0x10 [ 260.993606][ T7813] ? lockdep_hardirqs_on+0x7c/0x110 [ 260.993625][ T7813] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 260.993636][ T7813] kthread_create_on_node+0xc7/0x100 [ 260.993653][ T7813] ? __pfx_kthread_create_on_node+0x10/0x10 [ 260.993676][ T7813] ? cpus_read_unlock+0x83/0x150 [ 260.993693][ T7813] rxrpc_open_socket+0x3db/0x6b0 [ 260.993706][ T7813] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 260.993720][ T7813] ? __pfx_rxrpc_encap_rcv+0x10/0x10 [ 260.993730][ T7813] ? __pfx_rxrpc_encap_err_rcv+0x10/0x10 [ 260.993747][ T7813] ? __pfx_rxrpc_client_conn_reap_timeout+0x10/0x10 [ 260.993761][ T7813] ? rcu_is_watching+0x12/0xc0 [ 260.993777][ T7813] rxrpc_lookup_local+0xa01/0x1220 [ 260.993793][ T7813] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 260.993808][ T7813] ? __local_bh_enable_ip+0xa4/0x120 [ 260.993825][ T7813] rxrpc_sendmsg+0x375/0x5f0 [ 260.993842][ T7813] ____sys_sendmsg+0xa98/0xc70 [ 260.993859][ T7813] ? copy_msghdr_from_user+0x10a/0x160 [ 260.993872][ T7813] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.993895][ T7813] ___sys_sendmsg+0x134/0x1d0 [ 260.993908][ T7813] ? __pfx____sys_sendmsg+0x10/0x10 [ 260.993946][ T7813] __sys_sendmsg+0x16d/0x220 [ 260.993959][ T7813] ? __pfx___sys_sendmsg+0x10/0x10 [ 260.993977][ T7813] ? rcu_is_watching+0x12/0xc0 [ 260.993995][ T7813] do_syscall_64+0xcd/0x260 [ 260.994012][ T7813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.994024][ T7813] RIP: 0033:0x7f7f1a78e969 [ 260.994034][ T7813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.994045][ T7813] RSP: 002b:00007f7f1b65d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.994055][ T7813] RAX: ffffffffffffffda RBX: 00007f7f1a9b6080 RCX: 00007f7f1a78e969 [ 260.994063][ T7813] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 260.994070][ T7813] RBP: 00007f7f1b65d090 R08: 0000000000000000 R09: 0000000000000000 [ 260.994077][ T7813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.994083][ T7813] R13: 0000000000000000 R14: 00007f7f1a9b6080 R15: 00007ffd286cc3c8 [ 260.994099][ T7813] [ 261.436448][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 261.442685][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 261.448727][ T55] Bluetooth: hci4: command 0x0c1a tx timeout [ 261.468924][ T5124] Bluetooth: hci3: command 0x0c1a tx timeout [ 261.468949][ T5818] Bluetooth: hci2: command 0x0c1a tx timeout [ 261.538544][ T30] audit: type=1400 audit(1747263084.885:401): avc: denied { write } for pid=7816 comm="syz.2.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 262.950856][ T30] audit: type=1400 audit(1747263086.305:402): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 263.039257][ T30] audit: type=1800 audit(1747263086.345:403): pid=7821 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.495" name="bus" dev="overlay" ino=549 res=0 errno=0 [ 263.115843][ T30] audit: type=1400 audit(1747263086.385:404): avc: denied { open } for pid=7830 comm="syz.0.496" path="/dev/ptyq4" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 263.258396][ T30] audit: type=1400 audit(1747263086.385:405): avc: denied { ioctl } for pid=7830 comm="syz.0.496" path="/dev/ptyq4" dev="devtmpfs" ino=123 ioctlcmd=0x5430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 263.349700][ T5866] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 263.419151][ T7839] netlink: 'syz.4.500': attribute type 10 has an invalid length. [ 263.557136][ T7844] 9pnet_fd: Insufficient options for proto=fd [ 263.573232][ T30] audit: type=1400 audit(1747263086.865:406): avc: denied { name_connect } for pid=7836 comm="syz.0.499" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 263.892793][ T7839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.500'. [ 263.911563][ T5866] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 263.935280][ T5866] usb 4-1: config 0 has no interface number 0 [ 263.962192][ T5866] usb 4-1: New USB device found, idVendor=06e0, idProduct=f112, bcdDevice=89.55 [ 263.983039][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.014221][ T5866] usb 4-1: Product: syz [ 264.020760][ T5866] usb 4-1: Manufacturer: syz [ 264.025563][ T5866] usb 4-1: SerialNumber: syz [ 264.052650][ T5866] usb 4-1: config 0 descriptor?? [ 264.068926][ T5866] ti_usb_3410_5052 4-1:0.34: required endpoints missing [ 264.199713][ T5867] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 264.347420][ T10] usb 4-1: USB disconnect, device number 13 [ 264.951906][ T5867] usb 3-1: unable to get BOS descriptor or descriptor too short [ 264.963831][ T5867] usb 3-1: not running at top speed; connect to a high speed hub [ 264.973400][ T5867] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 264.985429][ T5867] usb 3-1: config 1 has no interface number 1 [ 264.991855][ T5867] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 265.007879][ T5867] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 4 [ 265.071689][ T5867] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 265.103798][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.109947][ T7852] netlink: 'syz.0.503': attribute type 10 has an invalid length. [ 265.124089][ T5867] usb 3-1: Product: syz [ 265.128258][ T5867] usb 3-1: Manufacturer: syz [ 265.152061][ T5867] usb 3-1: SerialNumber: syz [ 265.328823][ T30] audit: type=1400 audit(1747263088.675:407): avc: denied { allowed } for pid=7854 comm="syz.1.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 265.872117][ T30] audit: type=1400 audit(1747263089.225:408): avc: denied { bind } for pid=7842 comm="syz.2.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 265.896625][ T7859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.506'. [ 266.019252][ T7846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.093109][ T30] audit: type=1400 audit(1747263089.245:409): avc: denied { name_bind } for pid=7842 comm="syz.2.501" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 266.524801][ T30] audit: type=1400 audit(1747263089.245:410): avc: denied { node_bind } for pid=7842 comm="syz.2.501" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 266.524849][ T30] audit: type=1804 audit(1747263089.575:411): pid=7866 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.506" name="/newroot/98/file0" dev="tmpfs" ino=589 res=1 errno=0 [ 266.810082][ T7863] sctp: [Deprecated]: syz.2.501 (pid 7863) Use of struct sctp_assoc_value in delayed_ack socket option. [ 266.810082][ T7863] Use struct sctp_sack_info instead [ 267.789421][ T30] audit: type=1400 audit(1747263091.135:412): avc: denied { write } for pid=7875 comm="syz.1.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 267.827301][ T30] audit: type=1400 audit(1747263091.135:413): avc: denied { create } for pid=7875 comm="syz.1.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 267.873487][ T5867] usb 3-1: 2:1 : unknown format tag 0x2 is detected. processed as MPEG. [ 267.895313][ T5867] usb 3-1: found format II with max.bitrate = 6, frame size=6 [ 267.933193][ T5867] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 268.026428][ T5867] usb 3-1: USB disconnect, device number 12 [ 268.040600][ T7879] block nbd3: shutting down sockets [ 268.083794][ T30] audit: type=1400 audit(1747263091.425:414): avc: denied { append } for pid=7877 comm="syz.3.510" name="pfkey" dev="proc" ino=4026533484 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 268.107571][ T7883] netlink: 'syz.1.512': attribute type 10 has an invalid length. [ 268.162202][ T7883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.512'. [ 268.907041][ T6476] udevd[6476]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 269.067898][ T7891] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 270.395528][ T30] audit: type=1400 audit(1747263093.585:415): avc: denied { connect } for pid=7903 comm="syz.1.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 270.991636][ T7914] ptrace attach of "./syz-executor exec"[5808] was attempted by "./syz-executor exec"[7914] [ 271.070626][ T7914] syz.1.516 (7914): /proc/7914/oom_adj is deprecated, please use /proc/7914/oom_score_adj instead. [ 272.863879][ T7934] vlan2: entered allmulticast mode [ 272.882921][ T7934] erspan0: entered allmulticast mode [ 272.889784][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 273.089592][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 273.108383][ T10] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 273.117527][ T10] usb 5-1: config 0 has no interface number 0 [ 273.124112][ T10] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 273.127172][ T7937] bond1: entered allmulticast mode [ 273.138493][ T10] usb 5-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 273.150311][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.158408][ T10] usb 5-1: Product: syz [ 273.164107][ T10] usb 5-1: Manufacturer: syz [ 273.169105][ T10] usb 5-1: SerialNumber: syz [ 273.193670][ T10] usb 5-1: config 0 descriptor?? [ 273.213199][ T7943] netlink: 'syz.2.527': attribute type 10 has an invalid length. [ 273.287077][ T7944] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 274.072413][ T10] usb 5-1: USB disconnect, device number 9 [ 274.083955][ T7945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.527'. [ 274.114189][ T6476] udevd[6476]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 274.814433][ T7955] vlan2: entered allmulticast mode [ 274.830360][ T7955] erspan0: entered allmulticast mode [ 275.299992][ T7962] tmpfs: Unknown parameter 'smackfstransmute' [ 276.968652][ T7968] tipc: Started in network mode [ 277.001515][ T7968] tipc: Node identity 080211000001, cluster identity 4711 [ 277.013903][ T7968] tipc: Enabled bearer , priority 0 [ 277.361171][ T7974] tmpfs: Unknown parameter 'smackfstransmute' [ 278.015297][ T91] tipc: Node number set to 134418688 [ 279.306642][ T7978] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 279.312868][ T7978] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 279.313021][ T30] audit: type=1800 audit(1747263101.175:416): pid=7981 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.537" name="bus" dev="overlay" ino=634 res=0 errno=0 [ 279.323048][ T7978] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 279.348269][ T7978] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 279.387448][ T7978] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 279.393782][ T7978] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 279.402421][ T7978] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 279.408327][ T7978] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 279.417376][ T7978] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 279.423328][ T7978] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 279.642182][ T7987] netlink: 'syz.2.540': attribute type 10 has an invalid length. [ 280.221247][ T7987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.540'. [ 280.243758][ T30] audit: type=1800 audit(1747263103.085:417): pid=7994 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.539" name="bus" dev="overlay" ino=588 res=0 errno=0 [ 280.862603][ T30] audit: type=1400 audit(1747263103.735:418): avc: denied { wake_alarm } for pid=7983 comm="syz.1.538" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 281.129926][ T52] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 281.299991][ T52] usb 5-1: Using ep0 maxpacket: 8 [ 281.395739][ T52] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.531826][ T30] audit: type=1400 audit(1747263104.885:419): avc: denied { ioctl } for pid=8004 comm="syz.0.544" path="socket:[15972]" dev="sockfs" ino=15972 ioctlcmd=0x89f9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 281.559414][ T52] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 281.573264][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.597916][ T52] usb 5-1: config 0 descriptor?? [ 281.612210][ T52] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 281.878081][ T7997] Bluetooth: MGMT ver 1.23 [ 282.010191][ T30] audit: type=1400 audit(1747263105.295:420): avc: denied { setopt } for pid=8006 comm="syz.0.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 282.340105][ T30] audit: type=1400 audit(1747263105.695:421): avc: denied { setopt } for pid=8011 comm="syz.2.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 282.559575][ T8012] netlink: 'syz.2.546': attribute type 1 has an invalid length. [ 283.698078][ T10] usb 5-1: USB disconnect, device number 10 [ 283.921712][ T8026] netlink: 20 bytes leftover after parsing attributes in process `syz.1.551'. [ 283.936013][ T8034] netlink: 'syz.0.553': attribute type 10 has an invalid length. [ 283.945592][ T8034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.553'. [ 284.343112][ T8030] FAULT_INJECTION: forcing a failure. [ 284.343112][ T8030] name failslab, interval 1, probability 0, space 0, times 0 [ 284.356712][ T8030] CPU: 1 UID: 0 PID: 8030 Comm: syz.2.554 Not tainted 6.15.0-rc6-syzkaller-00080-g1a80a098c606 #0 PREEMPT(full) [ 284.356727][ T8030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 284.356734][ T8030] Call Trace: [ 284.356738][ T8030] [ 284.356742][ T8030] dump_stack_lvl+0x16c/0x1f0 [ 284.356763][ T8030] should_fail_ex+0x512/0x640 [ 284.356779][ T8030] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 284.356793][ T8030] should_failslab+0xc2/0x120 [ 284.356805][ T8030] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 284.356817][ T8030] ? vm_area_dup+0x25/0x760 [ 284.356834][ T8030] vm_area_dup+0x25/0x760 [ 284.356849][ T8030] __split_vma+0x17f/0x1030 [ 284.356870][ T8030] ? __pfx___split_vma+0x10/0x10 [ 284.356895][ T8030] vma_modify+0x2b5/0x510 [ 284.356907][ T8030] vma_modify_policy+0x219/0x2d0 [ 284.356918][ T8030] ? __pfx_vma_modify_policy+0x10/0x10 [ 284.356941][ T8030] mbind_range+0x175/0x570 [ 284.356957][ T8030] do_mbind+0x848/0xf30 [ 284.356976][ T8030] ? __pfx_do_mbind+0x10/0x10 [ 284.356989][ T8030] ? find_held_lock+0x2b/0x80 [ 284.357003][ T8030] ? ksys_write+0x190/0x240 [ 284.357028][ T8030] ? __pfx_get_nodes+0x10/0x10 [ 284.357039][ T8030] ? __fget_files+0x20e/0x3c0 [ 284.357053][ T8030] kernel_mbind+0x1e3/0x1f0 [ 284.357069][ T8030] ? __pfx_kernel_mbind+0x10/0x10 [ 284.357082][ T8030] ? rcu_is_watching+0x12/0xc0 [ 284.357101][ T8030] do_syscall_64+0xcd/0x260 [ 284.357119][ T8030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.357130][ T8030] RIP: 0033:0x7f008838e969 [ 284.357140][ T8030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.357151][ T8030] RSP: 002b:00007f0089193038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 284.357162][ T8030] RAX: ffffffffffffffda RBX: 00007f00885b5fa0 RCX: 00007f008838e969 [ 284.357169][ T8030] RDX: 0000000000000004 RSI: 0000000000800000 RDI: 0000200000001000 [ 284.357176][ T8030] RBP: 00007f0089193090 R08: 0000000000000000 R09: 0000000000000000 [ 284.357183][ T8030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.357190][ T8030] R13: 0000000000000000 R14: 00007f00885b5fa0 R15: 00007ffc06153e48 [ 284.357205][ T8030] [ 284.576565][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.616716][ T8042] 9pnet_fd: Insufficient options for proto=fd [ 285.902726][ T8058] netlink: 24 bytes leftover after parsing attributes in process `syz.0.558'. [ 285.911915][ T8058] netlink: 24 bytes leftover after parsing attributes in process `syz.0.558'. [ 287.870820][ T8068] netlink: 'syz.4.565': attribute type 10 has an invalid length. [ 287.988782][ T8068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.565'. [ 288.199434][ T8079] 9pnet_fd: Insufficient options for proto=fd [ 289.780038][ T8102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.573'. [ 289.789740][ T8102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.573'. [ 290.518402][ T8112] trusted_key: encrypted_key: insufficient parameters specified [ 290.757075][ T8116] netlink: 'syz.0.578': attribute type 10 has an invalid length. [ 290.899683][ T30] audit: type=1400 audit(1747263114.125:422): avc: denied { create } for pid=8117 comm="syz.3.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 290.919759][ C1] vkms_vblank_simulate: vblank timer overrun [ 290.956950][ T8116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.578'. [ 293.679694][ T55] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 293.717131][ T8128] sp0: Synchronizing with TNC [ 293.910826][ T30] audit: type=1800 audit(1747263116.055:423): pid=8146 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.585" name="bus" dev="overlay" ino=613 res=0 errno=0 [ 294.587156][ T8158] trusted_key: encrypted_key: insufficient parameters specified [ 295.873382][ T8173] netlink: 'syz.4.593': attribute type 10 has an invalid length. [ 295.911861][ T8173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.593'. [ 295.960879][ T8175] syzkaller1: entered promiscuous mode [ 295.967445][ T8175] syzkaller1: entered allmulticast mode [ 296.345329][ T8188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.594'. [ 296.355078][ T8188] net_ratelimit: 1053 callbacks suppressed [ 296.355108][ T8188] openvswitch: netlink: nsh attr 0 has unexpected len 32764 expected 0 [ 296.369353][ T8188] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.962472][ T8181] xt_cgroup: invalid path, errno=-2 [ 298.411143][ T8210] trusted_key: encrypted_key: insufficient parameters specified [ 298.880750][ T8224] tmpfs: Unknown parameter 'smackfstransmute' [ 300.183678][ T8236] FAULT_INJECTION: forcing a failure. [ 300.183678][ T8236] name failslab, interval 1, probability 0, space 0, times 0 [ 300.196546][ T30] audit: type=1400 audit(1747263123.555:424): avc: denied { bind } for pid=8202 comm="syz.3.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 300.229258][ T8236] CPU: 1 UID: 0 PID: 8236 Comm: syz.4.607 Not tainted 6.15.0-rc6-syzkaller-00080-g1a80a098c606 #0 PREEMPT(full) [ 300.229309][ T8236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 300.229331][ T8236] Call Trace: [ 300.229344][ T8236] [ 300.229358][ T8236] dump_stack_lvl+0x16c/0x1f0 [ 300.229393][ T8236] should_fail_ex+0x512/0x640 [ 300.229418][ T8236] ? __kvmalloc_node_noprof+0x122/0x600 [ 300.229450][ T8236] should_failslab+0xc2/0x120 [ 300.229471][ T8236] __kvmalloc_node_noprof+0x135/0x600 [ 300.229501][ T8236] ? bucket_table_alloc.isra.0+0x83/0x460 [ 300.229531][ T8236] ? bucket_table_alloc.isra.0+0x83/0x460 [ 300.229553][ T8236] bucket_table_alloc.isra.0+0x83/0x460 [ 300.229580][ T8236] rhashtable_init_noprof+0x41a/0x7e0 [ 300.229610][ T8236] rhltable_init_noprof+0x20/0x60 [ 300.229634][ T8236] nf_tables_newtable+0xf94/0x1b40 [ 300.229666][ T8236] ? __pfx___nla_validate_parse+0x10/0x10 [ 300.229687][ T8236] ? __pfx_nf_tables_newtable+0x10/0x10 [ 300.229720][ T8236] ? __nla_parse+0x40/0x60 [ 300.229743][ T8236] nfnetlink_rcv_batch+0x190b/0x2350 [ 300.229786][ T8236] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 300.229814][ T8236] ? find_held_lock+0x2b/0x80 [ 300.229859][ T8236] ? avc_has_perm_noaudit+0x149/0x3b0 [ 300.229912][ T8236] ? __nla_parse+0x40/0x60 [ 300.229934][ T8236] nfnetlink_rcv+0x3c1/0x430 [ 300.229959][ T8236] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 300.229994][ T8236] netlink_unicast+0x53d/0x7f0 [ 300.230022][ T8236] ? __pfx_netlink_unicast+0x10/0x10 [ 300.230054][ T8236] netlink_sendmsg+0x8d1/0xdd0 [ 300.230084][ T8236] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.230127][ T8236] ____sys_sendmsg+0xa98/0xc70 [ 300.230155][ T8236] ? copy_msghdr_from_user+0x10a/0x160 [ 300.230176][ T8236] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.230216][ T8236] ___sys_sendmsg+0x134/0x1d0 [ 300.230240][ T8236] ? __pfx____sys_sendmsg+0x10/0x10 [ 300.230300][ T8236] __sys_sendmsg+0x16d/0x220 [ 300.230322][ T8236] ? __pfx___sys_sendmsg+0x10/0x10 [ 300.230353][ T8236] ? rcu_is_watching+0x12/0xc0 [ 300.230384][ T8236] do_syscall_64+0xcd/0x260 [ 300.230413][ T8236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.230433][ T8236] RIP: 0033:0x7f740fd8e969 [ 300.230448][ T8236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.230466][ T8236] RSP: 002b:00007f7410c02038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.230484][ T8236] RAX: ffffffffffffffda RBX: 00007f740ffb5fa0 RCX: 00007f740fd8e969 [ 300.230498][ T8236] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 300.230509][ T8236] RBP: 00007f7410c02090 R08: 0000000000000000 R09: 0000000000000000 [ 300.230521][ T8236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.230533][ T8236] R13: 0000000000000000 R14: 00007f740ffb5fa0 R15: 00007ffed05fddc8 [ 300.230561][ T8236] [ 301.065314][ T8247] tmpfs: Unknown parameter 'smackfstransmute' [ 301.705723][ T8244] syzkaller1: entered promiscuous mode [ 301.729728][ T8244] syzkaller1: entered allmulticast mode [ 301.922250][ T55] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 301.970049][ T8228] sp0: Synchronizing with TNC [ 302.002803][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.609'. [ 302.012273][ T8255] openvswitch: netlink: nsh attr 0 has unexpected len 32764 expected 0 [ 302.020661][ T8255] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.002011][ T30] audit: type=1326 audit(1747263126.355:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8273 comm="syz.1.616" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7566f8e969 code=0x0 [ 303.132626][ T8277] vlan2: entered allmulticast mode [ 303.216994][ T8280] bond2: entered allmulticast mode [ 303.302549][ T8284] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 304.438102][ T8288] syzkaller1: entered promiscuous mode [ 304.495890][ T8288] syzkaller1: entered allmulticast mode [ 304.797359][ T8295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.620'. [ 304.806229][ T8295] openvswitch: netlink: nsh attr 0 has unexpected len 32764 expected 0 [ 304.814482][ T8295] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.444088][ T8300] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 306.977319][ T8312] syzkaller1: entered promiscuous mode [ 306.992596][ T8312] syzkaller1: entered allmulticast mode [ 307.155374][ T8319] vlan2: entered allmulticast mode [ 307.168133][ T8319] erspan0: entered allmulticast mode [ 308.659291][ T8350] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 309.500925][ T8348] binder: BINDER_SET_CONTEXT_MGR already set [ 309.506911][ T8348] binder: 8347:8348 ioctl 4018620d 200000000040 returned -16 [ 311.363278][ T8356] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 312.882978][ T30] audit: type=1400 audit(1747263136.235:426): avc: denied { read } for pid=8373 comm="syz.0.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 315.360193][ T8405] bridge_slave_0: left allmulticast mode [ 315.365874][ T8405] bridge_slave_0: left promiscuous mode [ 315.397741][ T8405] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.457814][ T8405] bridge_slave_1: left allmulticast mode [ 315.489828][ T8405] bridge_slave_1: left promiscuous mode [ 315.506732][ T8405] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.558778][ T8405] bond0: (slave bond_slave_0): Releasing backup interface [ 316.097413][ T8405] bond0: (slave bond_slave_1): Releasing backup interface [ 316.221861][ T8405] team0: Port device team_slave_0 removed [ 316.235572][ T8405] team0: Port device team_slave_1 removed [ 316.244836][ T8405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.255500][ T8405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.267988][ T8405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.276671][ T8405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.307722][ T8405] bond0: (slave wlan1): Releasing backup interface [ 316.318735][ T8414] tipc: Enabling of bearer rejected, already enabled [ 316.599673][ T30] audit: type=1400 audit(1747263139.945:427): avc: denied { setcheckreqprot } for pid=8425 comm="syz.0.659" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 316.700426][ T8426] netlink: 16 bytes leftover after parsing attributes in process `syz.0.659'. [ 316.966979][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.973783][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.053155][ T8432] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 318.029215][ T8431] netlink: 'syz.3.661': attribute type 10 has an invalid length. [ 318.074952][ T8431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.661'. [ 318.098497][ T30] audit: type=1400 audit(1747263141.445:428): avc: denied { setopt } for pid=8390 comm="syz.4.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 318.170003][ T30] audit: type=1400 audit(1747263141.505:429): avc: denied { write } for pid=8425 comm="syz.0.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 318.189345][ C1] vkms_vblank_simulate: vblank timer overrun [ 318.356015][ T8436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.663'. [ 318.661945][ T30] audit: type=1800 audit(1747263141.965:430): pid=8446 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.664" name="bus" dev="overlay" ino=724 res=0 errno=0 [ 318.690306][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 318.889945][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 318.899378][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 320.026349][ T10] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 320.169772][ T10] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 320.192267][ T8451] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 320.238777][ T10] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 320.463352][ T10] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 320.475920][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 320.482822][ T10] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 320.491890][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.506495][ T10] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 320.994828][ T8470] FAULT_INJECTION: forcing a failure. [ 320.994828][ T8470] name failslab, interval 1, probability 0, space 0, times 0 [ 321.007773][ T8470] CPU: 0 UID: 0 PID: 8470 Comm: syz.4.670 Not tainted 6.15.0-rc6-syzkaller-00080-g1a80a098c606 #0 PREEMPT(full) [ 321.007800][ T8470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 321.007825][ T8470] Call Trace: [ 321.007832][ T8470] [ 321.007839][ T8470] dump_stack_lvl+0x16c/0x1f0 [ 321.007870][ T8470] should_fail_ex+0x512/0x640 [ 321.007905][ T8470] should_failslab+0xc2/0x120 [ 321.007928][ T8470] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 321.007949][ T8470] ? getname_flags.part.0+0x4c/0x550 [ 321.007979][ T8470] getname_flags.part.0+0x4c/0x550 [ 321.008007][ T8470] getname_flags+0x93/0xf0 [ 321.008036][ T8470] do_sys_openat2+0xb8/0x1d0 [ 321.008060][ T8470] ? __pfx_do_sys_openat2+0x10/0x10 [ 321.008087][ T8470] ? __fget_files+0x20e/0x3c0 [ 321.008112][ T8470] __x64_sys_openat+0x174/0x210 [ 321.008147][ T8470] ? __pfx___x64_sys_openat+0x10/0x10 [ 321.008172][ T8470] ? rcu_is_watching+0x12/0xc0 [ 321.008204][ T8470] do_syscall_64+0xcd/0x260 [ 321.008235][ T8470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.008255][ T8470] RIP: 0033:0x7f740fd8e969 [ 321.008271][ T8470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.008291][ T8470] RSP: 002b:00007f7410be1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 321.008310][ T8470] RAX: ffffffffffffffda RBX: 00007f740ffb6080 RCX: 00007f740fd8e969 [ 321.008323][ T8470] RDX: 000000000008417f RSI: 0000200000000140 RDI: ffffffffffffff9c [ 321.008336][ T8470] RBP: 00007f7410be1090 R08: 0000000000000000 R09: 0000000000000000 [ 321.008348][ T8470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.008359][ T8470] R13: 0000000000000000 R14: 00007f740ffb6080 R15: 00007ffed05fddc8 [ 321.008387][ T8470] [ 321.936535][ T8474] tipc: Started in network mode [ 322.012380][ T8474] tipc: Node identity 080211000001, cluster identity 4711 [ 322.027530][ T10] ums-sddr09 2-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 322.071203][ T10] usb 2-1: USB disconnect, device number 13 [ 322.116793][ T8474] tipc: Enabled bearer , priority 0 [ 322.931990][ T8487] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 323.141340][ T5864] tipc: Node number set to 134418688 [ 323.465490][ T8490] fuse: Unknown parameter 'gr¿¯²$!X*00000000000000000000' [ 324.869683][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 325.126243][ T8506] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 325.154709][ T8497] netlink: 'syz.2.680': attribute type 10 has an invalid length. [ 325.175829][ T8497] bond0: (slave wlan1): Opening slave failed [ 325.259642][ T10] usb 2-1: device descriptor read/64, error -71 [ 325.381804][ T8513] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 326.091449][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 326.290563][ T8516] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 326.322414][ T8496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.171060][ T8528] netlink: 'syz.0.686': attribute type 10 has an invalid length. [ 327.424998][ T8531] tmpfs: Unknown parameter 'smackfstransmute' [ 328.233906][ T8537] tmpfs: Unknown parameter 'smackfstransmute' [ 328.411576][ T8522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.863759][ T30] audit: type=1800 audit(1747263152.215:431): pid=8540 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.689" name="bus" dev="overlay" ino=733 res=0 errno=0 [ 331.253743][ T8550] tmpfs: Unknown parameter 'smackfstransmute' [ 332.210114][ T8555] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 332.747360][ T8568] tmpfs: Bad value for 'mpol' [ 332.759630][ T8568] netlink: del zone limit has 4 unknown bytes [ 334.118048][ T8580] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 334.253586][ T8587] netlink: 28 bytes leftover after parsing attributes in process `syz.2.700'. [ 334.497896][ T8587] netlink: 28 bytes leftover after parsing attributes in process `syz.2.700'. [ 336.704234][ T8614] netlink: 'syz.0.708': attribute type 10 has an invalid length. [ 336.953412][ T8617] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 336.959869][ T8617] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 336.985018][ T8617] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 336.991471][ T8617] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 337.047760][ T8617] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 337.054187][ T8617] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 337.154700][ T8617] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 337.161125][ T8617] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 337.520099][ T8623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.709'. [ 337.956220][ T8611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.990191][ T8617] net_ratelimit: 124 callbacks suppressed [ 337.990210][ T8617] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 338.002363][ T8617] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 338.032270][ T8617] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 338.038674][ T8617] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 338.055071][ T8617] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 338.061489][ T8617] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 338.098063][ T8617] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 338.104491][ T8617] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 338.169735][ T8617] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 338.176120][ T8617] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 338.807533][ T8629] tmpfs: Unknown parameter 'smackfstransmute' [ 339.331537][ T8633] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 340.517112][ T8644] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 340.704552][ T8648] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 341.452851][ T8639] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 342.176449][ T8663] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 343.018073][ T8662] netlink: 'syz.2.719': attribute type 10 has an invalid length. [ 343.095269][ T8662] bond0: (slave wlan1): Opening slave failed [ 344.153087][ T8667] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 344.900254][ T8681] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 345.892223][ T30] audit: type=1400 audit(1747263168.365:432): avc: denied { bind } for pid=8686 comm="syz.4.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 346.080259][ T8688] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 346.394454][ T30] audit: type=1400 audit(1747263169.745:433): avc: denied { listen } for pid=8702 comm="syz.0.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 346.427927][ T30] audit: type=1400 audit(1747263169.745:434): avc: denied { accept } for pid=8702 comm="syz.0.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 346.460587][ T8711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.733'. [ 346.469990][ T8711] netlink: 20 bytes leftover after parsing attributes in process `syz.0.733'. [ 346.906468][ T8712] tmpfs: Unknown parameter 'smackfstransmute' [ 346.916433][ T8709] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 347.208255][ T30] audit: type=1326 audit(1747263170.545:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8719 comm="syz.2.736" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f008838e969 code=0x0 [ 347.255770][ T8722] syzkaller1: entered promiscuous mode [ 347.269940][ T8722] syzkaller1: entered allmulticast mode [ 348.221892][ T8730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.735'. [ 348.231853][ T8730] net_ratelimit: 920 callbacks suppressed [ 348.231892][ T8730] openvswitch: netlink: nsh attr 0 has unexpected len 32764 expected 0 [ 348.245983][ T8730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.998147][ T30] audit: type=1400 audit(1747263172.345:436): avc: denied { read write } for pid=8733 comm="syz.1.739" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 349.022033][ T8731] tmpfs: Unknown parameter 'smackfstransmute' [ 349.034622][ T30] audit: type=1400 audit(1747263172.345:437): avc: denied { open } for pid=8733 comm="syz.1.739" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 349.083752][ T8737] sctp: [Deprecated]: syz.1.739 (pid 8737) Use of struct sctp_assoc_value in delayed_ack socket option. [ 349.083752][ T8737] Use struct sctp_sack_info instead [ 349.193614][ T8738] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 349.953731][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 350.110497][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 350.136296][ T10] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 350.159918][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.185654][ T10] usb 2-1: config 0 descriptor?? [ 350.374140][ T10] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 351.617512][ T10] gspca_nw80x: reg_r err -110 [ 351.622320][ T10] nw80x 2-1:0.0: probe with driver nw80x failed with error -110 [ 351.707277][ T8770] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 351.990594][ T10] usb 2-1: USB disconnect, device number 16 [ 352.366980][ T8776] tmpfs: Unknown parameter 'smackfstransmute' [ 352.508766][ T8781] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 352.515213][ T8781] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 352.529209][ T8781] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 352.535649][ T8781] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 352.545778][ T8781] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 352.552231][ T8781] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 352.568428][ T8781] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 352.574872][ T8781] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 353.280730][ T8781] net_ratelimit: 272 callbacks suppressed [ 353.280748][ T8781] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 353.292925][ T8781] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 353.364054][ T8787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.750'. [ 353.764695][ T8781] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 353.771151][ T8781] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 353.778956][ T8781] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 353.785402][ T8781] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 353.792369][ T8781] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 353.798811][ T8781] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 353.862813][ T8781] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 353.869278][ T8781] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 353.901615][ T8789] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 354.140142][ T8792] syzkaller1: entered promiscuous mode [ 354.170389][ T8792] syzkaller1: entered allmulticast mode [ 354.664225][ T8793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.753'. [ 358.932994][ T8811] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 359.134439][ T30] audit: type=1326 audit(1747263182.485:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8821 comm="syz.3.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f1a78e969 code=0x7ffc0000 [ 359.263001][ T30] audit: type=1326 audit(1747263182.485:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8821 comm="syz.3.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f1a78e969 code=0x7ffc0000 [ 359.399926][ T30] audit: type=1326 audit(1747263182.485:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8821 comm="syz.3.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7f1a78e969 code=0x7ffc0000 [ 359.424508][ T30] audit: type=1326 audit(1747263182.485:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8821 comm="syz.3.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f1a78e969 code=0x7ffc0000 [ 359.485714][ T8825] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 359.534878][ T8825] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 360.341170][ T8827] input: syz1 as /devices/virtual/input/input24 [ 360.427833][ T30] audit: type=1326 audit(1747263182.485:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8821 comm="syz.3.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f1a78e969 code=0x7ffc0000 [ 360.673443][ T30] audit: type=1326 audit(1747263182.485:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8821 comm="syz.3.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f7f1a7907fc code=0x7ffc0000 [ 360.697048][ T30] audit: type=1326 audit(1747263182.485:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8821 comm="syz.3.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f7f1a790734 code=0x7ffc0000 [ 360.760273][ T30] audit: type=1326 audit(1747263182.485:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8821 comm="syz.3.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f7f1a790734 code=0x7ffc0000 [ 361.337439][ T30] audit: type=1326 audit(1747263182.485:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8821 comm="syz.3.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f1a78e969 code=0x7ffc0000 [ 361.366781][ T30] audit: type=1326 audit(1747263182.485:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8821 comm="syz.3.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f1a78e969 code=0x7ffc0000 [ 362.293466][ T8845] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 363.570874][ T8860] syzkaller1: entered promiscuous mode [ 363.576874][ T8860] syzkaller1: entered allmulticast mode [ 363.864500][ T8865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.769'. [ 363.873509][ T8865] net_ratelimit: 774 callbacks suppressed [ 363.873523][ T8865] openvswitch: netlink: nsh attr 0 has unexpected len 32764 expected 0 [ 363.887572][ T8865] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.396701][ T8886] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 366.403175][ T8886] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 366.573663][ T8886] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 366.580152][ T8886] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 366.587018][ T8886] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 366.593488][ T8886] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 366.606989][ T8886] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 366.613462][ T8886] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 366.803309][ T8896] input: syz1 as /devices/virtual/input/input26 [ 367.335883][ T8899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.774'. [ 368.081843][ T8901] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 369.122548][ T8886] net_ratelimit: 616 callbacks suppressed [ 369.122568][ T8886] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 369.143861][ T8886] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 369.159878][ T8886] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 369.166300][ T8886] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 369.251788][ T8886] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 369.258205][ T8886] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 369.271264][ T8886] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 369.277604][ T8886] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 369.329858][ T8886] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 369.336227][ T8886] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 369.966930][ T8925] tmpfs: Bad value for 'mpol' [ 370.705819][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 370.705844][ T30] audit: type=1800 audit(1747263193.755:471): pid=8928 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.784" name="bus" dev="overlay" ino=921 res=0 errno=0 [ 371.180263][ T30] audit: type=1400 audit(1747263194.045:472): avc: denied { listen } for pid=8919 comm="syz.3.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 372.010376][ T8934] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 372.749085][ T30] audit: type=1400 audit(1747263196.085:473): avc: denied { append } for pid=8940 comm="syz.0.790" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 372.794147][ T8946] tmpfs: Unknown parameter 'smackfstransmute' [ 375.925871][ T30] audit: type=1326 audit(1747263199.275:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f740fd8e969 code=0x7ffc0000 [ 376.049643][ T30] audit: type=1326 audit(1747263199.275:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f740fd8e969 code=0x7ffc0000 [ 376.199274][ T30] audit: type=1326 audit(1747263199.305:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f740fd8e969 code=0x7ffc0000 [ 376.346995][ T8987] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 376.358538][ T8987] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 376.879234][ T30] audit: type=1326 audit(1747263199.305:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f740fd8e969 code=0x7ffc0000 [ 377.219919][ T30] audit: type=1326 audit(1747263199.305:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f740fd8e969 code=0x7ffc0000 [ 377.295283][ T30] audit: type=1326 audit(1747263199.305:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f740fd907fc code=0x7ffc0000 [ 377.463543][ T8995] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 378.093458][ T30] audit: type=1326 audit(1747263199.305:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f740fd90734 code=0x7ffc0000 [ 378.325047][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.350242][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.357459][ T9006] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 379.106191][ T30] audit: type=1326 audit(1747263199.305:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f740fd90734 code=0x7ffc0000 [ 379.129360][ C0] vkms_vblank_simulate: vblank timer overrun [ 379.135625][ T30] audit: type=1326 audit(1747263199.305:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f740fd8e969 code=0x7ffc0000 [ 379.174750][ T30] audit: type=1326 audit(1747263199.305:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f740fd8e969 code=0x7ffc0000 [ 379.325547][ T9011] netlink: 'syz.4.805': attribute type 10 has an invalid length. [ 381.593887][ T9026] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 382.155395][ T9028] overlayfs: overlapping lowerdir path [ 384.469235][ T9053] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 385.105684][ T9010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.236028][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 385.236058][ T30] audit: type=1800 audit(1747263208.545:512): pid=9055 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.814" name="bus" dev="overlay" ino=874 res=0 errno=0 [ 385.263636][ C0] vkms_vblank_simulate: vblank timer overrun [ 386.186687][ T9057] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 387.598028][ T9086] tmpfs: Bad value for 'mpol' [ 387.663813][ T9086] net_ratelimit: 429 callbacks suppressed [ 387.663845][ T9086] netlink: del zone limit has 4 unknown bytes [ 387.870670][ T30] audit: type=1800 audit(1747263210.635:513): pid=9083 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.821" name="bus" dev="overlay" ino=907 res=0 errno=0 [ 388.898955][ T9099] 9pnet_fd: Insufficient options for proto=fd [ 388.987611][ T9105] tmpfs: Bad value for 'mpol' [ 389.021173][ T9105] netlink: del zone limit has 4 unknown bytes [ 390.079972][ T5867] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 390.648784][ T9122] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 390.811929][ T5864] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 390.833075][ T5867] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 390.854571][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.864478][ T5867] usb 3-1: Product: syz [ 390.868661][ T5867] usb 3-1: Manufacturer: syz [ 390.875924][ T5867] usb 3-1: SerialNumber: syz [ 390.891317][ T5867] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 390.933767][ T5929] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 391.039842][ T5864] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 391.096371][ T5864] usb 5-1: config 0 has no interface number 0 [ 391.199246][ T5864] usb 5-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 391.434594][ T5864] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 391.518031][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.612483][ T5864] usb 5-1: Product: syz [ 391.676019][ T5864] usb 5-1: Manufacturer: syz [ 391.968414][ T5864] usb 5-1: SerialNumber: syz [ 392.014979][ T5866] usb 3-1: USB disconnect, device number 13 [ 392.042315][ T5864] usb 5-1: config 0 descriptor?? [ 392.049276][ T9130] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 392.402257][ T5929] usb 3-1: Service connection timeout for: 256 [ 392.449079][ T5929] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 392.460538][ T5929] ath9k_htc: Failed to initialize the device [ 392.469344][ T5866] usb 3-1: ath9k_htc: USB layer deinitialized [ 393.398800][ T5864] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 393.421253][ T5864] keyspan 5-1:0.133: unsupported endpoint type 0 [ 393.443978][ T5864] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 393.474113][ T5864] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 393.648782][ T5864] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 394.780758][ T5864] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 394.800048][ T5864] usb 5-1: USB disconnect, device number 11 [ 394.858271][ T5864] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 394.911041][ T5864] keyspan 5-1:0.133: device disconnected [ 395.102393][ T9171] tmpfs: Bad value for 'mpol' [ 395.167179][ T9171] netlink: del zone limit has 4 unknown bytes [ 395.999222][ T9182] overlayfs: overlapping lowerdir path [ 397.194283][ T9199] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 401.423820][ T9209] vlan2: entered allmulticast mode [ 402.166713][ T9222] tmpfs: Bad value for 'mpol' [ 402.272220][ T9222] netlink: del zone limit has 4 unknown bytes [ 402.607860][ T9211] bond1: entered allmulticast mode [ 402.742898][ T9231] tmpfs: Bad value for 'mpol' [ 402.765680][ T9231] netlink: del zone limit has 4 unknown bytes [ 403.959746][ T5929] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 404.241349][ T5929] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 404.610029][ T9243] tmpfs: Unknown parameter 'smackfstransmute' [ 404.871745][ T5929] usb 4-1: config 0 has no interface number 0 [ 404.893690][ T5929] usb 4-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 404.986847][ T5929] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 404.998757][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.006840][ T5929] usb 4-1: Product: syz [ 405.011116][ T5929] usb 4-1: Manufacturer: syz [ 405.015797][ T5929] usb 4-1: SerialNumber: syz [ 405.566258][ T9256] tmpfs: Unknown parameter 'smackfstransmute' [ 405.577620][ T9257] tmpfs: Unknown parameter 'smackfstransmute' [ 405.625961][ T5929] usb 4-1: config 0 descriptor?? [ 405.687079][ T9262] syzkaller1: entered promiscuous mode [ 405.699310][ T9262] syzkaller1: entered allmulticast mode [ 407.161192][ T5929] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 407.193033][ T5929] keyspan 4-1:0.133: unsupported endpoint type 0 [ 407.245044][ T5929] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 407.253693][ T5929] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 407.314040][ T5929] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 407.394576][ T5929] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 407.451897][ T5929] usb 4-1: USB disconnect, device number 14 [ 407.503039][ T5929] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 407.534676][ T9284] bridge_slave_0: left allmulticast mode [ 407.845124][ T9284] bridge_slave_0: left promiscuous mode [ 407.864370][ T5929] keyspan 4-1:0.133: device disconnected [ 407.904354][ T9284] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.928518][ T9284] bridge_slave_1: left allmulticast mode [ 407.951168][ T9284] bridge_slave_1: left promiscuous mode [ 408.031310][ T9284] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.036108][ T9294] 9pnet_fd: Insufficient options for proto=fd [ 408.066260][ T9284] bond0: (slave bond_slave_0): Releasing backup interface [ 408.114133][ T9284] bond0: (slave bond_slave_1): Releasing backup interface [ 408.155641][ T9284] team0: Port device team_slave_0 removed [ 408.242608][ T9284] team0: Port device team_slave_1 removed [ 408.250431][ T9284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.450935][ T9284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.581347][ T9284] bond0: (slave wlan1): Releasing backup interface [ 408.709767][ T9302] binder: 9299:9302 ioctl c0306201 0 returned -14 [ 408.722552][ T9302] binder: BINDER_SET_CONTEXT_MGR already set [ 408.728594][ T9302] binder: 9299:9302 ioctl 4018620d 200000000040 returned -16 [ 409.628090][ T9284] tipc: Resetting bearer [ 412.194215][ T9333] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 412.200919][ T9324] bond2: entered allmulticast mode [ 412.581358][ T9340] 9pnet_fd: Insufficient options for proto=fd [ 413.432466][ T9344] non-paged memory [ 413.436654][ T9344] list_del corruption, ffff888077eb8830->next is LIST_POISON1 (dead000000000100) [ 413.446563][ T9344] ------------[ cut here ]------------ [ 413.452347][ T9344] kernel BUG at lib/list_debug.c:56! [ 413.457649][ T9344] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 413.464048][ T9344] CPU: 0 UID: 0 PID: 9344 Comm: syz.3.886 Not tainted 6.15.0-rc6-syzkaller-00080-g1a80a098c606 #0 PREEMPT(full) [ 413.475911][ T9344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 413.485947][ T9344] RIP: 0010:__list_del_entry_valid_or_report+0x121/0x200 [ 413.492958][ T9344] Code: 48 c7 c7 60 8c f4 8b e8 bd 3e c4 fc 90 0f 0b 4c 89 e7 e8 02 06 28 fd 4c 89 e2 48 89 de 48 c7 c7 c0 8c f4 8b e8 a0 3e c4 fc 90 <0f> 0b 48 89 ef e8 e5 05 28 fd 48 89 ea 48 89 de 48 c7 c7 20 8d f4 [ 413.512542][ T9344] RSP: 0018:ffffc900032d76b8 EFLAGS: 00010282 [ 413.518592][ T9344] RAX: 000000000000004e RBX: ffff888077eb8830 RCX: ffffc9000e411000 [ 413.526550][ T9344] RDX: 0000000000000000 RSI: ffffffff819b24b6 RDI: 0000000000000005 [ 413.534501][ T9344] RBP: dead000000000122 R08: 0000000000000005 R09: 0000000000000000 [ 413.542451][ T9344] R10: 0000000080000001 R11: 0000000000000001 R12: dead000000000100 [ 413.550398][ T9344] R13: 0000000000000005 R14: ffff888077eb8830 R15: ffff888077eb8838 [ 413.558348][ T9344] FS: 00007f7f1b6496c0(0000) GS:ffff8881249df000(0000) knlGS:0000000000000000 [ 413.567264][ T9344] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 413.573839][ T9344] CR2: 0000555592b625c8 CR3: 0000000032c08000 CR4: 00000000003526f0 [ 413.581801][ T9344] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 413.589758][ T9344] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 413.597714][ T9344] Call Trace: [ 413.600978][ T9344] [ 413.603895][ T9344] p9_fd_cancelled+0xa2/0x2a0 [ 413.608565][ T9344] ? __pfx_p9_fd_cancelled+0x10/0x10 [ 413.613836][ T9344] p9_client_flush.isra.0+0x349/0x420 [ 413.619203][ T9344] ? __pfx_p9_client_flush.isra.0+0x10/0x10 [ 413.625089][ T9344] ? _raw_spin_unlock+0x28/0x50 [ 413.629925][ T9344] ? p9_fd_cancel+0x96/0x290 [ 413.634501][ T9344] p9_client_rpc+0xaab/0xc50 [ 413.639079][ T9344] ? __pfx_p9_client_rpc+0x10/0x10 [ 413.644180][ T9344] ? pipe_poll+0x1c6/0x660 [ 413.648576][ T9344] ? __pfx_p9_pollwait+0x10/0x10 [ 413.653500][ T9344] ? __pfx_pipe_poll+0x10/0x10 [ 413.658243][ T9344] ? __pfx_autoremove_wake_function+0x10/0x10 [ 413.664300][ T9344] ? p9_fd_poll+0x1db/0x2c0 [ 413.668787][ T9344] ? p9_fd_create+0x327/0x490 [ 413.673446][ T9344] ? __pfx_p9_fd_create+0x10/0x10 [ 413.678451][ T9344] ? p9_client_create+0x7a9/0x11c0 [ 413.683555][ T9344] p9_client_create+0xc2d/0x11c0 [ 413.688484][ T9344] ? __pfx_p9_client_create+0x10/0x10 [ 413.693849][ T9344] ? rcu_is_watching+0x12/0xc0 [ 413.698603][ T9344] ? lockdep_init_map_type+0x5c/0x280 [ 413.703958][ T9344] ? __raw_spin_lock_init+0x3a/0x110 [ 413.709230][ T9344] v9fs_session_init+0x1f7/0x1a80 [ 413.714248][ T9344] ? __pfx_v9fs_session_init+0x10/0x10 [ 413.719700][ T9344] v9fs_mount+0xc5/0xa30 [ 413.723930][ T9344] ? __pfx_v9fs_mount+0x10/0x10 [ 413.728767][ T9344] ? legacy_get_tree+0x16/0x220 [ 413.733601][ T9344] ? __pfx_v9fs_mount+0x10/0x10 [ 413.738439][ T9344] legacy_get_tree+0x10c/0x220 [ 413.743186][ T9344] vfs_get_tree+0x8e/0x340 [ 413.747591][ T9344] path_mount+0x14d4/0x1f20 [ 413.752079][ T9344] ? kmem_cache_free+0x2d4/0x4d0 [ 413.757011][ T9344] ? __pfx_path_mount+0x10/0x10 [ 413.761849][ T9344] ? putname+0x154/0x1a0 [ 413.766076][ T9344] __x64_sys_mount+0x28d/0x310 [ 413.770822][ T9344] ? __pfx___x64_sys_mount+0x10/0x10 [ 413.776091][ T9344] ? rcu_is_watching+0x12/0xc0 [ 413.780843][ T9344] do_syscall_64+0xcd/0x260 [ 413.785337][ T9344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.791214][ T9344] RIP: 0033:0x7f7f1a78e969 [ 413.795611][ T9344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.815201][ T9344] RSP: 002b:00007f7f1b649038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 413.823595][ T9344] RAX: ffffffffffffffda RBX: 00007f7f1a9b6160 RCX: 00007f7f1a78e969 [ 413.831548][ T9344] RDX: 0000200000000080 RSI: 0000200000000180 RDI: 0000000000000000 [ 413.839499][ T9344] RBP: 00007f7f1a810ab1 R08: 0000200000000300 R09: 0000000000000000 [ 413.847451][ T9344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.855401][ T9344] R13: 0000000000000000 R14: 00007f7f1a9b6160 R15: 00007ffd286cc3c8 [ 413.863361][ T9344] [ 413.866363][ T9344] Modules linked in: [ 413.870620][ T9344] ---[ end trace 0000000000000000 ]--- [ 413.876057][ T9344] RIP: 0010:__list_del_entry_valid_or_report+0x121/0x200 [ 413.883077][ T9344] Code: 48 c7 c7 60 8c f4 8b e8 bd 3e c4 fc 90 0f 0b 4c 89 e7 e8 02 06 28 fd 4c 89 e2 48 89 de 48 c7 c7 c0 8c f4 8b e8 a0 3e c4 fc 90 <0f> 0b 48 89 ef e8 e5 05 28 fd 48 89 ea 48 89 de 48 c7 c7 20 8d f4 [ 413.902672][ T9344] RSP: 0018:ffffc900032d76b8 EFLAGS: 00010282 [ 413.908711][ T9344] RAX: 000000000000004e RBX: ffff888077eb8830 RCX: ffffc9000e411000 [ 413.916678][ T9344] RDX: 0000000000000000 RSI: ffffffff819b24b6 RDI: 0000000000000005 [ 413.924646][ T9344] RBP: dead000000000122 R08: 0000000000000005 R09: 0000000000000000 [ 413.932604][ T9344] R10: 0000000080000001 R11: 0000000000000001 R12: dead000000000100 [ 413.940569][ T9344] R13: 0000000000000005 R14: ffff888077eb8830 R15: ffff888077eb8838 [ 413.948516][ T9344] FS: 00007f7f1b6496c0(0000) GS:ffff8881249df000(0000) knlGS:0000000000000000 [ 413.957435][ T9344] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 413.964203][ T9344] CR2: 0000555592b625c8 CR3: 0000000032c08000 CR4: 00000000003526f0 [ 413.972161][ T9344] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 413.980124][ T9344] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 413.988072][ T9344] Kernel panic - not syncing: Fatal exception [ 413.994305][ T9344] Kernel Offset: disabled [ 413.998605][ T9344] Rebooting in 86400 seconds..