last executing test programs: 13.18014186s ago: executing program 4 (id=390): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x1) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f00000001c0)=0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xd5956000) pwritev(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)='\x00!G', 0x3}], 0x1, 0xee, 0x4200004) (fail_nth: 2) 12.544590523s ago: executing program 3 (id=394): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = socket(0x2b, 0x1, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000004340)=""/102376, 0x18fe8) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) r6 = dup(r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, 0x0, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r8}, 0x18) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f000001fec0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) setsockopt$inet6_group_source_req(r9, 0x29, 0x2b, &(0x7f000001ff00)={0x6e5, {{0xa, 0x4e20, 0x2, @mcast1, 0xc310}}, {{0xa, 0x4e21, 0xe4, @remote, 0x3ff}}}, 0x108) connect$can_j1939(r7, &(0x7f0000000300)={0x1d, r8, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000008b00)={@private2}, &(0x7f0000008b40)=0x14) sendmmsg$inet(r6, &(0x7f000000bf80), 0x0, 0x200400d1) sendmsg$inet6(r6, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x7fff, @loopback, 0x6}, 0x1c, &(0x7f0000000440)}, 0x54) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f000001da80)) 12.515776182s ago: executing program 4 (id=395): syz_open_dev$vim2m(&(0x7f0000000100), 0x4000052, 0x2) r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$kcm(0x29, 0x2, 0x0) close(r2) r3 = socket$kcm(0x2b, 0x1, 0x0) close(r3) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004040) 11.405928157s ago: executing program 3 (id=398): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004040) 10.75135335s ago: executing program 3 (id=400): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sysinfo(&(0x7f0000000000)=""/196) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000100)=""/207, 0x0, 0xcf, 0x1, 0x3, 0x10000}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000380)='sched_switch\x00', r4}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r5, 0x30}, 0x10) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r3, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x400000, 0x12, "3eccd8fd0000000000000010000000040100"}) 9.565058786s ago: executing program 3 (id=403): ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="05000000040000000800000002"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a000004090001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x2133, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0xca, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0x4, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000000c0)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="40061c"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 8.975326908s ago: executing program 1 (id=407): r0 = socket$nl_crypto(0x10, 0x3, 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) getsockopt$inet_buf(0xffffffffffffffff, 0x118, 0x4, 0x0, &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') listen(0xffffffffffffffff, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000000)=0x6, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000000) sendmsg$netlink(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000006940)=ANY=[@ANYBLOB="e0000000130001002b", @ANYRES32=r0, @ANYBLOB="0c00ed00030000000000000008003f", @ANYRES32=r0, @ANYBLOB="04000b0004000180bcb493de0bb58fd75bdc5e7c53ed39d06fd043db86af6933d71e30cab89da1cd72deb5178a8576e69b2ff911b2fc9aec9a3e2c48ddc884448fd51602af338a3185dcc3b9743391b1e5189f75c863271e1bf36c11da94a91a9711f9fd7b5144ea0447d4700e4798a7"], 0xe0}], 0x1, 0x0, 0x0, 0x20008020}, 0x8880) 8.972850345s ago: executing program 4 (id=408): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000002000000129bd7000fddbdf250a00000f030000022a000100050013000200000014000200ff02000000000000000000000000000114000100fe8000000000000000f6f8ff000000aa"], 0x4c}, 0x1, 0x0, 0x0, 0x20048844}, 0x4040) keyctl$read(0xb, r2, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x3c, r4, 0x1, 0x170bd2c, 0x8000, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x80) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xfffffffd, 0x4, 0xb, 0x8001}}) open(0x0, 0x64842, 0x389b0d52417bb201) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x3, 0x0, @random="a1fb75d10a28"}, 0x10) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='veth0_to_hsr\x00'}) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4008080) syz_emit_ethernet(0x22, &(0x7f0000000440)=ANY=[], 0x0) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r7 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509"], 0x0) r8 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) write$P9_RVERSION(r8, &(0x7f0000000640)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x5ce) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x7d, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) close_range(r7, 0xffffffffffffffff, 0x0) 7.754452019s ago: executing program 1 (id=411): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket(0x8000000010, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = syz_open_dev$mouse(&(0x7f00000003c0), 0x9, 0x6000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000180)='proc\x00', 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000500)='svcrdma_post_send\x00', r4, 0x0, 0x2}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) 6.780789828s ago: executing program 1 (id=413): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000191000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r3 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2480, 0x1) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x18, 0x1411, 0x1, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) 6.328641983s ago: executing program 3 (id=414): sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000300)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) syz_usb_connect(0x3, 0x24, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) 6.271792054s ago: executing program 0 (id=415): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000040)=""/220) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000080), 0x84, &(0x7f0000000200)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x65]}}]}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010102, 0x4e22, 0x1, 'lblcr\x00', 0x0, 0x10001, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @private=0xa010102, 0x1ffc, 0x200000001, 'none\x00', 0x9, 0x821}, 0x2c) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x48, &(0x7f0000001600), 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004050}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="09000000cb734b273e157ce99927de020000006d05", @ANYRES32, @ANYBLOB="faffff82b5ade696cf8f54000000000002000000", @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB="00000000000000000000000000004e6800000000000000009fbdd50002fbae185c6fc2123f669376efa44d95c715109c66723dcb702fd90dc3192553d2668b0bfdfb7e455e8f9775c0e9906292882d526bd1af04d752e51437ab8637dcc10d2e5e40e88f3da5cf557ee9672c3c3edeb8b6d14291c340ba4b"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 5.744392997s ago: executing program 0 (id=417): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000191000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2480, 0x1) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) 5.591380498s ago: executing program 4 (id=418): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r0, 0x545c, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x5, 0xe4340000, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x70, 0x0, 0x1, 0x801, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}]}]}, 0x70}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0cc5604, &(0x7f0000000300)={0x5, @win={{0x4, 0x4a3, 0x1, 0x2b9}, 0x0, 0x964, &(0x7f0000000080)={{0x11, 0xf4ec, 0x2, 0x5}}, 0x2, &(0x7f00000001c0)="548fb3a4a855dc30f769c85b6b5c060b0b71feec3e5d8d06e6dd4582aefafba4b6abd6cac0e5"}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500016698b2759a978dd3801800018014000240fe8000000000000000000000000000bb06000c400e1f000029dc2db809b8dd0fccbf3d0680820500070088000000060005404e2420003be163b05a9d73ce8823403116eb1cc94a8806be798b9518f2355c232db2be56b884d3bf48f2e286263591c3c51d719b1314ef0b8b9804af36cb149143d271ccea15931a9e17422003eca46edab9386dc876d01a1939b6011580419f738125d40b15ba23f672f3700d271c3233244cc893645b44d9668c3c5427"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) userfaultfd(0x80000) fsopen(&(0x7f0000000280)='rpc_pipefs\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r5, &(0x7f0000000240)='./file0\x00', 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000200)={0x5d, 0x401, 0xffffbe39, 0xe9, 0x7}, 0x14) r8 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0xed01) ioctl$DRM_IOCTL_MODE_GET_LEASE(r8, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) 5.098810357s ago: executing program 1 (id=419): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r1, 0x5407, 0x0) syz_io_uring_setup(0x23c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r4, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) ioctl$TIOCMSET(r1, 0x5418, 0x0) close(r0) 4.908549309s ago: executing program 2 (id=420): syz_open_dev$vim2m(&(0x7f0000000100), 0x4000052, 0x2) r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$kcm(0x29, 0x2, 0x0) close(r2) r3 = socket$kcm(0x2b, 0x1, 0x0) close(r3) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004040) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r3) 4.841996538s ago: executing program 0 (id=421): syz_open_dev$vim2m(&(0x7f0000000100), 0x4000052, 0x2) r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$kcm(0x29, 0x2, 0x0) close(r2) r3 = socket$kcm(0x2b, 0x1, 0x0) close(r3) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004040) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r3) 4.584951607s ago: executing program 2 (id=422): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002040)='oom_score_adj\x00') write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000010c0)={0x30, 0x5, 0x0, {0x0, 0x2, 0x5, 0x6}}, 0x30) write$cgroup_int(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000019300)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000007b0000009500000000000000e0bd423f35dddadf1dc0eff8a91e2592976c15a248ab2d2d607813a4b7edc2e6cc18c70b28e84fe38ab1098790"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000140)=0x10000008, 0x4) unshare(0x6a040000) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x40040) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x4) 4.348043621s ago: executing program 0 (id=423): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket(0x8000000010, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$mouse(0x0, 0x9, 0x6000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000180)='proc\x00', 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000500)='svcrdma_post_send\x00', r4, 0x0, 0x2}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) 4.107154161s ago: executing program 2 (id=424): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x6000, 0x0, 0x7, 0x8, 0x0, 0x0, 0x3, 0x0, 0x9, 0x6}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x8080000, 0xc, 0x0, 0x7, 0xec, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4, 0xfc}, {0x1000, 0xeeee8000, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x7, 0x1, 0x2, 0x0, 0x0, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0x8, 0x0, 0x0, 0x7, 0x8, 0x43, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x110, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.452366183s ago: executing program 4 (id=425): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newsa={0x144, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0xa, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x0, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x350759, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff00000000800000000035000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0xc084) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x6000, 0x0, 0x7, 0x8, 0x0, 0x0, 0x3, 0x0, 0x9, 0x6}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x8080000, 0xc, 0x0, 0x7, 0xec, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4, 0xfc}, {0x1000, 0xeeee8000, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x7, 0x1, 0x2, 0x0, 0x0, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0x8, 0x0, 0x0, 0x7, 0x8, 0x43, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x110, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1, 0x1]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.424514403s ago: executing program 0 (id=426): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000540)={0x0, 0x80, 0x0, 0xf, 0x8}, &(0x7f0000000580)=0x18) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x1, 0x7, 0x5, 0x2}) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x4c) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x10100c, &(0x7f0000000700)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@xino_on}, {@uuid_auto}], [{@flag='sync'}, {@fowner_lt}, {@fowner_eq}, {@appraise}, {@fowner_gt}, {@fowner_lt}]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r0], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0x1}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') 2.119688741s ago: executing program 0 (id=427): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x25dfdc00, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x4000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}]}, &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0xebcc, 0x1, 0x2, 0x24e}, &(0x7f00000000c0)=0x0, &(0x7f0000000380)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f00000001c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x80, 0x3, 0x0, 0x9276, 0x0, 0x0, {0x1}}) io_uring_enter(r6, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000240)={'batadv_slave_1\x00', &(0x7f0000000140)=@ethtool_eeprom={0xc, 0x1, 0x9}}) 2.052509752s ago: executing program 2 (id=428): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180a000000000000000000000002ffae43980be4e0707104768c2d6a008500000087000000950000000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x94) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='xs_stream_read_request\x00', r4, 0x0, 0x2000000}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) unshare(0x8000280) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_pidfd_open(r9, 0x0) ioctl$EXT4_IOC_MIGRATE(r10, 0xff07) close_range(r8, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NDA_DST_MAC={0xa}]}, 0x28}}, 0x20024090) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r3, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r3, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket(0x10, 0x3, 0x0) 1.96335397s ago: executing program 4 (id=429): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4951, &(0x7f0000000300)={0x0, 0xe3d6, 0x2, 0x1, 0x141}, 0x0, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) pipe2$watch_queue(0x0, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0xc) r6 = openat$cgroup_procs(r4, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0xfff) sendfile(r6, r5, 0x0, 0x5) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x14) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) 1.962383049s ago: executing program 1 (id=430): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000191000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r3 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2480, 0x1) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x18, 0x1411, 0x1, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) 1.621856006s ago: executing program 32 (id=429): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4951, &(0x7f0000000300)={0x0, 0xe3d6, 0x2, 0x1, 0x141}, 0x0, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) pipe2$watch_queue(0x0, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0xc) r6 = openat$cgroup_procs(r4, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0xfff) sendfile(r6, r5, 0x0, 0x5) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x14) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) 1.614442565s ago: executing program 3 (id=432): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = socket(0x2b, 0x1, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000004340)=""/102376, 0x18fe8) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) r6 = dup(r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, 0x0, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r8}, 0x18) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f000001fec0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) setsockopt$inet6_group_source_req(r9, 0x29, 0x2b, &(0x7f000001ff00)={0x6e5, {{0xa, 0x4e20, 0x2, @mcast1, 0xc310}}, {{0xa, 0x4e21, 0xe4, @remote, 0x3ff}}}, 0x108) connect$can_j1939(r7, &(0x7f0000000300)={0x1d, r8, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000008b00)={@private2}, &(0x7f0000008b40)=0x14) sendmmsg$inet(r6, &(0x7f000000bf80), 0x0, 0x200400d1) sendmsg$inet6(r6, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x7fff, @loopback, 0x6}, 0x1c, &(0x7f0000000440)=[{0x0}], 0x1}, 0x54) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f000001da80)) 1.040716585s ago: executing program 1 (id=433): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4951, &(0x7f0000000300)={0x0, 0xe3d6, 0x2, 0x1, 0x141}, 0x0, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) pipe2$watch_queue(0x0, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0xc) r6 = openat$cgroup_procs(r4, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0xfff) sendfile(r6, r5, 0x0, 0x5) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x14) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) 276.713952ms ago: executing program 2 (id=434): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000540)={0x4, 0x0, [{0x9, 0x4, 0x0, 0x0, @msi={0xffff721c, 0x6, 0x8, 0x2}}, {0x6, 0x2, 0x0, 0x0, @msi={0x2, 0x2, 0x7f, 0x400}}, {0x7, 0x1, 0x0, 0x0, @sint={0xd0, 0x23}}, {0x0, 0x8, 0x1, 0x0, @msi={0x1, 0x2, 0x3, 0x9}}]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'macsec0\x00'}) r1 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) fdatasync(r0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r1, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80800) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x3) syz_emit_ethernet(0x76, &(0x7f0000000680)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x15, 0x4, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x80000000, 0xfbc}, @nop, @sack={0x5, 0x12, [0x7, 0x767, 0xb, 0xfffffffc]}, @timestamp={0x8, 0xa, 0x800001, 0x8a}, @exp_fastopen={0xfe, 0x4}, @md5sig={0x13, 0x12, "0c39e122bd2f7556512830127a3fa7b7"}]}}}}}}}, 0x0) 0s ago: executing program 2 (id=435): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x2, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000180)={r4}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc00864d2, &(0x7f0000000140)={r4}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.144' (ED25519) to the list of known hosts. [ 65.924274][ T30] audit: type=1400 audit(1765554405.484:62): avc: denied { mounton } for pid=5803 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 65.947830][ T30] audit: type=1400 audit(1765554405.504:63): avc: denied { mount } for pid=5803 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.951072][ T5803] cgroup: Unknown subsys name 'net' [ 65.978303][ T30] audit: type=1400 audit(1765554405.534:64): avc: denied { unmount } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.114932][ T5803] cgroup: Unknown subsys name 'cpuset' [ 66.123239][ T5803] cgroup: Unknown subsys name 'rlimit' [ 66.244348][ T30] audit: type=1400 audit(1765554405.804:65): avc: denied { setattr } for pid=5803 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.267774][ T30] audit: type=1400 audit(1765554405.804:66): avc: denied { create } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.303415][ T30] audit: type=1400 audit(1765554405.804:67): avc: denied { write } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.324418][ T30] audit: type=1400 audit(1765554405.804:68): avc: denied { read } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.345339][ T30] audit: type=1400 audit(1765554405.834:69): avc: denied { mounton } for pid=5803 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 66.370296][ T30] audit: type=1400 audit(1765554405.834:70): avc: denied { mount } for pid=5803 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 66.409788][ T5805] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 66.419081][ T30] audit: type=1400 audit(1765554405.984:71): avc: denied { relabelto } for pid=5805 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 67.378311][ T5803] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.339062][ T5136] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.341432][ T5821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.355398][ T5136] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.362688][ T5821] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.363372][ T5136] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.371006][ T5821] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.384415][ T5136] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.385848][ T5821] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.391927][ T5136] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.406430][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.407491][ T5136] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.416544][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.428789][ T5821] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.436550][ T5823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.446245][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.456667][ T5820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.466435][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.486310][ T5823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.487790][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.503207][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.511173][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.511285][ T5820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.527671][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.536572][ T5820] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.558649][ T5136] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.958164][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 70.132871][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 70.167884][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 70.224519][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 70.248982][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.257065][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.264500][ T5813] bridge_slave_0: entered allmulticast mode [ 70.271374][ T5813] bridge_slave_0: entered promiscuous mode [ 70.328418][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.335701][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.343997][ T5813] bridge_slave_1: entered allmulticast mode [ 70.350737][ T5813] bridge_slave_1: entered promiscuous mode [ 70.375634][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 70.470285][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.501760][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.509415][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.516730][ T5824] bridge_slave_0: entered allmulticast mode [ 70.523509][ T5824] bridge_slave_0: entered promiscuous mode [ 70.531820][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.557267][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.564548][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.571653][ T5824] bridge_slave_1: entered allmulticast mode [ 70.579251][ T5824] bridge_slave_1: entered promiscuous mode [ 70.641768][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.649215][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.656857][ T5818] bridge_slave_0: entered allmulticast mode [ 70.664156][ T5818] bridge_slave_0: entered promiscuous mode [ 70.689951][ T5813] team0: Port device team_slave_0 added [ 70.695855][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.703164][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.710289][ T5828] bridge_slave_0: entered allmulticast mode [ 70.717260][ T5828] bridge_slave_0: entered promiscuous mode [ 70.724456][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.731604][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.739080][ T5818] bridge_slave_1: entered allmulticast mode [ 70.746045][ T5818] bridge_slave_1: entered promiscuous mode [ 70.764039][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.774574][ T5813] team0: Port device team_slave_1 added [ 70.780290][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.787441][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.794720][ T5828] bridge_slave_1: entered allmulticast mode [ 70.801466][ T5828] bridge_slave_1: entered promiscuous mode [ 70.817344][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.824678][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.831802][ T5814] bridge_slave_0: entered allmulticast mode [ 70.838760][ T5814] bridge_slave_0: entered promiscuous mode [ 70.847908][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.884061][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.891724][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.899252][ T5814] bridge_slave_1: entered allmulticast mode [ 70.906767][ T5814] bridge_slave_1: entered promiscuous mode [ 70.942520][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.969113][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.976148][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.002486][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.016625][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.027997][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.045735][ T5824] team0: Port device team_slave_0 added [ 71.051932][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.059157][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.085389][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.100954][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.120023][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.130613][ T5824] team0: Port device team_slave_1 added [ 71.160020][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.177391][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.183994][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.202629][ T5818] team0: Port device team_slave_0 added [ 71.227662][ T5828] team0: Port device team_slave_0 added [ 71.234780][ T5818] team0: Port device team_slave_1 added [ 71.258507][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.265496][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.291378][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.303965][ T5828] team0: Port device team_slave_1 added [ 71.310049][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.317026][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.342946][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.363865][ T5814] team0: Port device team_slave_0 added [ 71.401814][ T5814] team0: Port device team_slave_1 added [ 71.413514][ T5813] hsr_slave_0: entered promiscuous mode [ 71.419728][ T5813] hsr_slave_1: entered promiscuous mode [ 71.436581][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.443737][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.469850][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.481424][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.488660][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.514925][ T5821] Bluetooth: hci0: command tx timeout [ 71.514929][ T5136] Bluetooth: hci2: command tx timeout [ 71.515297][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.547366][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.554448][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.572305][ T5136] Bluetooth: hci3: command tx timeout [ 71.580401][ T5820] Bluetooth: hci1: command tx timeout [ 71.591742][ T5821] Bluetooth: hci4: command tx timeout [ 71.592605][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.608790][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.615995][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.642232][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.697940][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.705087][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.731422][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.764980][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.771938][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.798512][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.814439][ T5824] hsr_slave_0: entered promiscuous mode [ 71.820593][ T5824] hsr_slave_1: entered promiscuous mode [ 71.826773][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 71.832808][ T5824] Cannot create hsr debugfs directory [ 71.858357][ T5828] hsr_slave_0: entered promiscuous mode [ 71.864547][ T5828] hsr_slave_1: entered promiscuous mode [ 71.870478][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 71.876439][ T5828] Cannot create hsr debugfs directory [ 71.923510][ T5818] hsr_slave_0: entered promiscuous mode [ 71.929982][ T5818] hsr_slave_1: entered promiscuous mode [ 71.936181][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 71.941899][ T5818] Cannot create hsr debugfs directory [ 72.049495][ T5814] hsr_slave_0: entered promiscuous mode [ 72.056281][ T5814] hsr_slave_1: entered promiscuous mode [ 72.062347][ T5814] debugfs: 'hsr0' already exists in 'hsr' [ 72.068072][ T5814] Cannot create hsr debugfs directory [ 72.389126][ T5813] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.414675][ T5813] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.424455][ T5813] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.443912][ T5813] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.493193][ T5828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.520709][ T5828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.531221][ T5828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.545731][ T5828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.615866][ T5818] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.634829][ T5818] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.656140][ T5818] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.669891][ T5818] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.741869][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.760321][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.775369][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.787482][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.875272][ T5814] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.886631][ T5814] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.896491][ T5814] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.907180][ T5814] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.919343][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.974608][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.983973][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.008204][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.015413][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.047774][ T4969] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.054915][ T4969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.084010][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.095273][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.135488][ T4969] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.142696][ T4969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.179150][ T4969] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.186266][ T4969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.197966][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.215412][ T4969] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.222529][ T4969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.251729][ T3445] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.258843][ T3445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.288177][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.317493][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.351246][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 73.351347][ T30] audit: type=1400 audit(1765554412.904:84): avc: denied { sys_module } for pid=5813 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 73.351986][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.416691][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.426545][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.433723][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.462479][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.469618][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.488775][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.495928][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.548095][ T3009] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.555294][ T3009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.572754][ T5820] Bluetooth: hci2: command tx timeout [ 73.573245][ T5821] Bluetooth: hci0: command tx timeout [ 73.616299][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.654298][ T5821] Bluetooth: hci1: command tx timeout [ 73.654638][ T5136] Bluetooth: hci4: command tx timeout [ 73.666309][ T5820] Bluetooth: hci3: command tx timeout [ 73.830524][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.930295][ T5813] veth0_vlan: entered promiscuous mode [ 73.978826][ T5813] veth1_vlan: entered promiscuous mode [ 74.061439][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.095286][ T5813] veth0_macvtap: entered promiscuous mode [ 74.128505][ T5813] veth1_macvtap: entered promiscuous mode [ 74.177274][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.215939][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.226714][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.249192][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.269336][ T5818] veth0_vlan: entered promiscuous mode [ 74.281564][ T4969] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.299872][ T4969] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.309924][ T4969] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.324943][ T4969] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.338951][ T5818] veth1_vlan: entered promiscuous mode [ 74.404613][ T5814] veth0_vlan: entered promiscuous mode [ 74.461645][ T5824] veth0_vlan: entered promiscuous mode [ 74.480083][ T5814] veth1_vlan: entered promiscuous mode [ 74.489589][ T5828] veth0_vlan: entered promiscuous mode [ 74.503740][ T3009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.514569][ T3009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.526945][ T5824] veth1_vlan: entered promiscuous mode [ 74.554746][ T5818] veth0_macvtap: entered promiscuous mode [ 74.569723][ T5828] veth1_vlan: entered promiscuous mode [ 74.589209][ T3009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.598551][ T5818] veth1_macvtap: entered promiscuous mode [ 74.602548][ T3009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.607726][ T5814] veth0_macvtap: entered promiscuous mode [ 74.625051][ T5814] veth1_macvtap: entered promiscuous mode [ 74.640146][ T30] audit: type=1400 audit(1765554414.194:85): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/root/syzkaller.DG2yMF/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 74.665293][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.688413][ T30] audit: type=1400 audit(1765554414.194:86): avc: denied { mount } for pid=5813 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 74.697396][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.727540][ T30] audit: type=1400 audit(1765554414.194:87): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/root/syzkaller.DG2yMF/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 74.730165][ T5813] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.753011][ T30] audit: type=1400 audit(1765554414.194:88): avc: denied { mount } for pid=5813 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 74.789830][ T30] audit: type=1400 audit(1765554414.194:89): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/root/syzkaller.DG2yMF/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 74.795510][ T5824] veth0_macvtap: entered promiscuous mode [ 74.821212][ T30] audit: type=1400 audit(1765554414.194:90): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/root/syzkaller.DG2yMF/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 74.849643][ T30] audit: type=1400 audit(1765554414.234:91): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 74.858226][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.886871][ T5828] veth0_macvtap: entered promiscuous mode [ 74.895654][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.910840][ T5824] veth1_macvtap: entered promiscuous mode [ 74.926378][ T5828] veth1_macvtap: entered promiscuous mode [ 74.954895][ T30] audit: type=1400 audit(1765554414.234:92): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 74.978007][ T3445] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.987166][ T3445] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.997982][ T30] audit: type=1400 audit(1765554414.234:93): avc: denied { mount } for pid=5813 comm="syz-executor" name="/" dev="gadgetfs" ino=8254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 75.038150][ T3445] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.492279][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 75.500491][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 75.536272][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.741031][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.253165][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.294621][ T5136] Bluetooth: hci2: command tx timeout [ 76.294721][ T5817] Bluetooth: hci3: command tx timeout [ 76.310869][ T5821] Bluetooth: hci1: command tx timeout [ 76.311005][ T5820] Bluetooth: hci0: command tx timeout [ 76.316360][ T5823] Bluetooth: hci4: command tx timeout [ 76.368379][ T3445] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.392374][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.401836][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.410457][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.466473][ T3445] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.484429][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.499478][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.511225][ T3445] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.537719][ T3445] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.550348][ T3445] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.573695][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.591636][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.629925][ T4640] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.661188][ T4640] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.688567][ T4640] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.715281][ T4640] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.738975][ T4640] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.750434][ T4640] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.771691][ T3445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.773191][ T4640] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.788827][ T3445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.820896][ T4640] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.874296][ T4640] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.882905][ T4640] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.917519][ T4640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.933371][ T4640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.002870][ T4640] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.010707][ T4640] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.052795][ T4640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.060629][ T4640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.149976][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.178723][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.247696][ T3009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.274458][ T4640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.283872][ T3009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.311196][ T4640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.398566][ T5823] Bluetooth: hci4: command tx timeout [ 78.398603][ T5821] Bluetooth: hci2: command tx timeout [ 78.405486][ T5817] Bluetooth: hci0: command tx timeout [ 78.410301][ T5136] Bluetooth: hci3: command tx timeout [ 78.425474][ T5820] Bluetooth: hci1: command tx timeout [ 78.602525][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.914809][ T5973] Illegal XDP return value 2840147427 on prog (id 7) dev N/A, expect packet loss! [ 79.452454][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.662806][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 79.662821][ T30] audit: type=1400 audit(1765554419.224:126): avc: denied { execute } for pid=5965 comm="syz.0.7" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 79.690137][ T5966] process 'syz.0.7' launched '/dev/fd/9' with NULL argv: empty string added [ 79.723020][ T5983] Bluetooth: MGMT ver 1.23 [ 79.729022][ T5983] warning: `syz.0.7' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 79.796076][ T30] audit: type=1400 audit(1765554419.284:127): avc: denied { bind } for pid=5965 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.818900][ T30] audit: type=1400 audit(1765554419.284:128): avc: denied { write } for pid=5965 comm="syz.0.7" path="socket:[8975]" dev="sockfs" ino=8975 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.826679][ T5984] xt_TCPMSS: Only works on TCP SYN packets [ 79.974047][ T30] audit: type=1400 audit(1765554419.304:129): avc: denied { read } for pid=5978 comm="syz.4.11" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 80.044272][ T30] audit: type=1400 audit(1765554419.304:130): avc: denied { open } for pid=5978 comm="syz.4.11" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 80.245933][ T30] audit: type=1400 audit(1765554419.374:131): avc: denied { execute_no_trans } for pid=5965 comm="syz.0.7" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 80.407377][ T5987] input: syz0 as /devices/virtual/input/input5 [ 80.459082][ T30] audit: type=1400 audit(1765554419.474:132): avc: denied { create } for pid=5978 comm="syz.4.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 81.245799][ T30] audit: type=1400 audit(1765554419.484:133): avc: denied { connect } for pid=5978 comm="syz.4.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 81.403030][ T30] audit: type=1400 audit(1765554419.494:134): avc: denied { create } for pid=5978 comm="syz.4.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.465595][ T9] cfg80211: failed to load regulatory.db [ 81.504688][ T30] audit: type=1400 audit(1765554419.494:135): avc: denied { setopt } for pid=5978 comm="syz.4.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.736175][ T48] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.004714][ T48] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 82.029112][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 82.151722][ T48] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 82.322627][ T48] usb 4-1: string descriptor 0 read error: -22 [ 82.337823][ T48] usb 4-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 82.539621][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.723832][ T48] usb 4-1: config 0 descriptor?? [ 82.728962][ T6004] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 82.735513][ T6004] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 82.744320][ T6004] vhci_hcd vhci_hcd.0: Device attached [ 82.758042][ T6008] vhci_hcd: connection closed [ 82.760386][ T34] vhci_hcd vhci_hcd.4: stop threads [ 82.765063][ T48] em28xx 4-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 82.765107][ T48] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 84.235198][ T48] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 84.243199][ T48] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 84.256828][ T48] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 84.265251][ T48] em28xx 4-1:0.0: No AC97 audio processor [ 84.335724][ T5939] usb 42-1: SetAddress Request (2) to port 0 [ 84.354960][ T34] vhci_hcd vhci_hcd.4: release socket [ 84.362117][ T5939] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 84.377506][ T34] vhci_hcd vhci_hcd.4: disconnect device [ 84.403261][ T48] usb 4-1: USB disconnect, device number 2 [ 84.410380][ T48] em28xx 4-1:0.0: Disconnecting em28xx [ 84.506133][ T48] em28xx 4-1:0.0: Freeing device [ 85.029176][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 85.029191][ T30] audit: type=1400 audit(1765554424.584:153): avc: denied { create } for pid=6019 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 85.105539][ T30] audit: type=1400 audit(1765554424.584:154): avc: denied { getopt } for pid=6019 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 85.281430][ T30] audit: type=1400 audit(1765554424.714:155): avc: denied { create } for pid=6022 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 85.395056][ T6026] Invalid source name [ 85.399164][ T6026] UBIFS error (pid: 6026): cannot open "./file0", error -22 [ 85.422944][ T30] audit: type=1400 audit(1765554424.944:156): avc: denied { create } for pid=6022 comm="syz.0.21" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 85.875071][ T30] audit: type=1400 audit(1765554424.944:157): avc: denied { mounton } for pid=6022 comm="syz.0.21" path="/5/file0" dev="tmpfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 85.989187][ T6030] Invalid source name [ 85.993304][ T6030] UBIFS error (pid: 6030): cannot open "./file0", error -22 [ 86.119909][ T30] audit: type=1400 audit(1765554425.574:158): avc: denied { unlink } for pid=5813 comm="syz-executor" name="file0" dev="tmpfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 86.435047][ T30] audit: type=1400 audit(1765554425.994:159): avc: denied { ioctl } for pid=6032 comm="syz.0.23" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 86.752155][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 87.002742][ T30] audit: type=1400 audit(1765554426.514:160): avc: denied { read } for pid=6017 comm="syz.1.18" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 87.026980][ T30] audit: type=1400 audit(1765554426.514:161): avc: denied { open } for pid=6017 comm="syz.1.18" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 87.050406][ T30] audit: type=1400 audit(1765554426.514:162): avc: denied { ioctl } for pid=6017 comm="syz.1.18" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 87.137481][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.159183][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 87.202875][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 87.228178][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 87.253416][ T9] usb 4-1: Product: syz [ 87.269331][ T9] usb 4-1: Manufacturer: syz [ 87.281392][ T9] usb 4-1: SerialNumber: syz [ 88.874585][ T6061] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 89.007810][ T6062] Zero length message leads to an empty skb [ 89.194114][ T5929] IPVS: starting estimator thread 0... [ 89.264010][ T6065] binder: 6064:6065 ioctl 4018620d 0 returned -22 [ 89.313386][ T6063] IPVS: using max 39 ests per chain, 93600 per kthread [ 89.471870][ T89] usb 4-1: USB disconnect, device number 3 [ 89.492619][ T5939] usb 42-1: device descriptor read/8, error -110 [ 89.520800][ T6067] 9p: Bad value for 'rfdno' [ 89.990133][ T5939] usb usb42-port1: attempt power cycle [ 90.579461][ T6087] Invalid source name [ 90.583599][ T6087] UBIFS error (pid: 6087): cannot open "./file0", error -22 [ 91.062719][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 91.362347][ T5939] usb usb42-port1: unable to enumerate USB device [ 91.442104][ T30] audit: type=1400 audit(1765554430.154:191): avc: denied { write } for pid=6083 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 91.506867][ T30] audit: type=1400 audit(1765554431.064:192): avc: denied { getopt } for pid=6090 comm="syz.4.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.674493][ T6098] xt_TCPMSS: Only works on TCP SYN packets [ 91.703791][ T30] audit: type=1400 audit(1765554431.254:193): avc: denied { connect } for pid=6090 comm="syz.4.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.834075][ T30] audit: type=1400 audit(1765554431.254:194): avc: denied { name_connect } for pid=6090 comm="syz.4.36" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 92.042237][ T5939] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.221773][ T6102] ======================================================= [ 92.221773][ T6102] WARNING: The mand mount option has been deprecated and [ 92.221773][ T6102] and is ignored by this kernel. Remove the mand [ 92.221773][ T6102] option from the mount to silence this warning. [ 92.221773][ T6102] ======================================================= [ 92.221791][ T30] audit: type=1400 audit(1765554431.774:195): avc: denied { mounton } for pid=6101 comm="syz.0.38" path="/12/file0" dev="tmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 92.312132][ T5939] usb 2-1: Using ep0 maxpacket: 8 [ 92.323374][ T5939] usb 2-1: config 0 has no interfaces? [ 92.407341][ T5939] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 92.441634][ T6102] overlay: Bad value for 'uuid' [ 92.458328][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.470927][ T30] audit: type=1400 audit(1765554431.874:196): avc: denied { mount } for pid=6101 comm="syz.0.38" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 92.499175][ T5939] usb 2-1: config 0 descriptor?? [ 92.504786][ T30] audit: type=1400 audit(1765554431.994:197): avc: denied { mounton } for pid=6101 comm="syz.0.38" path="/12/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 92.629130][ T30] audit: type=1400 audit(1765554431.994:198): avc: denied { mount } for pid=6101 comm="syz.0.38" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 92.748814][ T30] audit: type=1400 audit(1765554432.304:199): avc: denied { create } for pid=6104 comm="syz.4.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 93.103736][ T30] audit: type=1400 audit(1765554432.644:200): avc: denied { create } for pid=6110 comm="syz.4.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 93.192750][ T6113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.41'. [ 93.319947][ T5939] usb 2-1: USB disconnect, device number 2 [ 93.930626][ T6117] binder: 6115:6117 ioctl 4018620d 0 returned -22 [ 98.632200][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 98.632213][ T30] audit: type=1400 audit(1765554438.184:212): avc: denied { create } for pid=6160 comm="syz.4.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 98.858636][ T30] audit: type=1400 audit(1765554438.184:213): avc: denied { ioctl } for pid=6160 comm="syz.4.55" path="socket:[9492]" dev="sockfs" ino=9492 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 100.235320][ T6174] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 102.114617][ T6179] hfsplus: unable to find HFS+ superblock [ 103.436094][ T5941] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 103.632299][ T5941] usb 3-1: Using ep0 maxpacket: 8 [ 103.641175][ T5941] usb 3-1: config 0 has no interfaces? [ 103.654101][ T5941] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 103.682242][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.703435][ T5941] usb 3-1: config 0 descriptor?? [ 103.806137][ T5897] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.332980][ T5941] usb 3-1: USB disconnect, device number 2 [ 104.362249][ T5897] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.389552][ T5897] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 104.438517][ T5897] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 104.547623][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 104.556039][ T5897] usb 2-1: Product: syz [ 104.560504][ T5897] usb 2-1: Manufacturer: syz [ 104.566235][ T5897] usb 2-1: SerialNumber: syz [ 104.785158][ T6194] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 104.958732][ T30] audit: type=1400 audit(1765554444.514:214): avc: denied { create } for pid=6204 comm="syz.0.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 105.113127][ T6194] usb 5-1: Using ep0 maxpacket: 16 [ 105.120537][ T6194] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.135761][ T6194] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.146410][ T6194] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 105.162214][ T6194] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 105.167549][ T5929] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 105.171252][ T6194] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.181286][ T6194] usb 5-1: config 0 descriptor?? [ 105.362184][ T5929] usb 3-1: Using ep0 maxpacket: 8 [ 105.373594][ T6213] xt_TCPMSS: Only works on TCP SYN packets [ 105.415876][ T5929] usb 3-1: config 0 has no interfaces? [ 105.426393][ T5929] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 105.441458][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.456645][ T5929] usb 3-1: config 0 descriptor?? [ 105.639855][ T6194] input: HID 0955:7214 Haptics as /devices/virtual/input/input6 [ 105.807044][ T6194] shield 0003:0955:7214.0001: Registered Thunderstrike controller [ 105.825012][ T6194] shield 0003:0955:7214.0001: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 105.842897][ T5941] usb 3-1: USB disconnect, device number 3 [ 105.916030][ T5897] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 105.939854][ T6194] usb 5-1: USB disconnect, device number 2 [ 105.954094][ T5897] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 106.166764][ T5897] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 106.196861][ T5897] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 106.252406][ T6220] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 107.190217][ T6194] usb 2-1: USB disconnect, device number 3 [ 107.862202][ T30] audit: type=1400 audit(1765554447.414:215): avc: denied { create } for pid=6229 comm="syz.4.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 108.157648][ T6235] kvm: user requested TSC rate below hardware speed [ 108.302140][ T30] audit: type=1400 audit(1765554447.744:216): avc: denied { create } for pid=6226 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 108.381293][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71'. [ 108.407488][ T30] audit: type=1400 audit(1765554447.744:217): avc: denied { getopt } for pid=6226 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 108.462141][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 108.872141][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 109.039614][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 109.129933][ T6250] Invalid source name [ 109.134059][ T6250] UBIFS error (pid: 6250): cannot open "./file0", error -22 [ 109.619752][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 109.674967][ T30] audit: type=1400 audit(1765554449.224:218): avc: denied { create } for pid=6254 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.765540][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 109.788982][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.809214][ T30] audit: type=1400 audit(1765554449.234:219): avc: denied { bind } for pid=6254 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.841454][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 109.861088][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.877876][ T30] audit: type=1400 audit(1765554449.254:220): avc: denied { write } for pid=6254 comm="syz.0.77" path="socket:[9846]" dev="sockfs" ino=9846 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 111.306237][ T6265] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 111.335932][ T5929] IPVS: starting estimator thread 0... [ 111.752143][ T6266] IPVS: using max 37 ests per chain, 88800 per kthread [ 112.012238][ T30] audit: type=1400 audit(1765554451.564:221): avc: denied { bind } for pid=6268 comm="syz.0.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 112.112823][ T30] audit: type=1400 audit(1765554451.564:222): avc: denied { name_bind } for pid=6268 comm="syz.0.83" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 112.185293][ T30] audit: type=1400 audit(1765554451.564:223): avc: denied { node_bind } for pid=6268 comm="syz.0.83" saddr=127.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 112.528317][ T24] usb 3-1: usb_control_msg returned -71 [ 112.533988][ T24] usbtmc 3-1:16.0: can't read capabilities [ 112.583793][ T24] usb 3-1: USB disconnect, device number 4 [ 112.740315][ T89] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 112.932095][ T89] usb 4-1: Using ep0 maxpacket: 16 [ 112.952700][ T89] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.978390][ T89] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.989500][ T89] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 113.032950][ T89] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 113.063126][ T89] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.089185][ T89] usb 4-1: config 0 descriptor?? [ 113.095093][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 113.292386][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 113.304192][ T24] usb 1-1: config 0 has no interfaces? [ 113.326704][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 113.380907][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.530287][ T24] usb 1-1: config 0 descriptor?? [ 113.573585][ T89] input: HID 0955:7214 Haptics as /devices/virtual/input/input7 [ 113.648697][ T89] shield 0003:0955:7214.0002: Registered Thunderstrike controller [ 113.679271][ T89] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 114.192442][ T5897] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 114.221207][ T89] usb 4-1: USB disconnect, device number 4 [ 114.236403][ T5897] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 114.277542][ T5897] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 114.320637][ T5897] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 114.395946][ T9] usb 1-1: USB disconnect, device number 2 [ 119.870446][ T30] audit: type=1400 audit(1765554459.424:224): avc: denied { set_context_mgr } for pid=6327 comm="syz.0.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 120.209901][ T6335] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 121.349868][ T6343] loop7: detected capacity change from 0 to 7 [ 121.408015][ T6343] Dev loop7: unable to read RDB block 7 [ 121.462164][ T6343] loop7: unable to read partition table [ 121.467932][ T6343] loop7: partition table beyond EOD, truncated [ 121.702151][ T6343] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 123.708574][ T6375] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 127.423731][ T30] audit: type=1400 audit(1765554466.984:225): avc: denied { append } for pid=6403 comm="syz.1.120" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 127.633943][ T6413] Invalid source name [ 127.638008][ T6413] UBIFS error (pid: 6413): cannot open "./file0", error -22 [ 127.668093][ T30] audit: type=1400 audit(1765554467.004:226): avc: denied { read } for pid=6403 comm="syz.1.120" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 127.987673][ T30] audit: type=1400 audit(1765554467.004:227): avc: denied { open } for pid=6403 comm="syz.1.120" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 128.327007][ T6409] bond0: (slave bond_slave_0): Releasing backup interface [ 128.416438][ T6422] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 128.504108][ T9] IPVS: starting estimator thread 0... [ 128.514221][ T30] audit: type=1400 audit(1765554468.074:228): avc: denied { setopt } for pid=6419 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 128.813006][ T6423] IPVS: using max 50 ests per chain, 120000 per kthread [ 129.782447][ T48] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 129.965522][ T48] usb 4-1: Using ep0 maxpacket: 8 [ 130.816996][ T6442] xt_TCPMSS: Only works on TCP SYN packets [ 130.981019][ T48] usb 4-1: config 0 has no interfaces? [ 131.022287][ T48] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 131.104892][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.182642][ T48] usb 4-1: config 0 descriptor?? [ 132.401625][ T5941] usb 4-1: USB disconnect, device number 5 [ 132.623974][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.630310][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.764652][ T6458] faux_driver vgem: [drm] Unknown color mode 127; guessing buffer size. [ 133.055987][ T30] audit: type=1400 audit(1765554472.334:229): avc: denied { map } for pid=6453 comm="syz.2.133" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 133.492210][ T30] audit: type=1400 audit(1765554472.334:230): avc: denied { execute } for pid=6453 comm="syz.2.133" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 133.567275][ T30] audit: type=1400 audit(1765554472.674:231): avc: denied { write } for pid=6453 comm="syz.2.133" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 133.825755][ T30] audit: type=1400 audit(1765554472.674:232): avc: denied { map } for pid=6453 comm="syz.2.133" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 133.889267][ T30] audit: type=1400 audit(1765554472.864:233): avc: denied { setopt } for pid=6456 comm="syz.3.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 133.940544][ T6465] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 134.922112][ T5929] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 134.936993][ T30] audit: type=1400 audit(1765554474.494:234): avc: denied { accept } for pid=6474 comm="syz.3.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 134.964894][ T30] audit: type=1400 audit(1765554474.524:235): avc: denied { create } for pid=6474 comm="syz.3.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 135.006896][ T30] audit: type=1400 audit(1765554474.564:236): avc: denied { write } for pid=6474 comm="syz.3.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 135.114766][ T5929] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 135.123286][ T5929] usb 2-1: config 0 has no interface number 0 [ 135.130108][ T5929] usb 2-1: config 0 interface 41 has no altsetting 0 [ 135.168311][ T5929] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 136.149240][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.158971][ T5929] usb 2-1: Product: syz [ 136.163425][ T5929] usb 2-1: Manufacturer: syz [ 136.174935][ T5929] usb 2-1: SerialNumber: syz [ 136.182934][ T5929] usb 2-1: config 0 descriptor?? [ 136.239232][ T30] audit: type=1400 audit(1765554475.794:237): avc: denied { name_connect } for pid=6484 comm="syz.4.142" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 136.292153][ T6194] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 136.455096][ T6194] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 136.492327][ T6194] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 136.522178][ T6194] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.537526][ T6194] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 136.547625][ T6194] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 136.577398][ T6194] usb 3-1: Product: syz [ 136.581632][ T6194] usb 3-1: Manufacturer: syz [ 136.597638][ T6194] usb 3-1: SerialNumber: syz [ 136.617737][ T6470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.662840][ T6470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.935818][ T6194] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 137.854840][ T791] usb 3-1: USB disconnect, device number 5 [ 137.903227][ T791] usblp0: removed [ 138.522861][ T5929] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 138.535174][ T5929] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 138.643485][ T5941] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 138.718622][ T5929] usb 2-1: USB disconnect, device number 4 [ 138.904016][ T30] audit: type=1400 audit(1765554478.404:238): avc: denied { create } for pid=6506 comm="syz.2.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 139.021004][ T5941] usb 4-1: Using ep0 maxpacket: 8 [ 139.038831][ T5941] usb 4-1: config 0 has no interfaces? [ 139.052280][ T5941] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 139.061336][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.137039][ T30] audit: type=1400 audit(1765554478.404:239): avc: denied { map } for pid=6506 comm="syz.2.146" path="socket:[11709]" dev="sockfs" ino=11709 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 139.177801][ T6509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.146'. [ 139.323021][ T5941] usb 4-1: config 0 descriptor?? [ 139.381664][ T6513] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 139.520492][ T6514] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 139.527034][ T6514] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 139.535515][ T30] audit: type=1400 audit(1765554478.414:240): avc: denied { read accept } for pid=6506 comm="syz.2.146" path="socket:[11709]" dev="sockfs" ino=11709 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 139.604772][ T5898] usb 4-1: USB disconnect, device number 6 [ 139.618128][ T6514] vhci_hcd vhci_hcd.0: Device attached [ 139.696238][ T30] audit: type=1400 audit(1765554478.954:241): avc: denied { lock } for pid=6506 comm="syz.2.146" path="socket:[11709]" dev="sockfs" ino=11709 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 139.892163][ T6314] usb 42-1: SetAddress Request (6) to port 0 [ 139.898738][ T6314] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 140.666578][ T6524] netlink: 20 bytes leftover after parsing attributes in process `syz.3.150'. [ 141.113776][ T5833] udevd[5833]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 142.127188][ T30] audit: type=1400 audit(1765554481.684:242): avc: denied { create } for pid=6528 comm="syz.2.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 142.154153][ T5806] udevd[5806]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 142.239346][ T30] audit: type=1400 audit(1765554481.724:243): avc: denied { ioctl } for pid=6528 comm="syz.2.151" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 142.300168][ T6515] vhci_hcd: connection reset by peer [ 142.322347][ T60] vhci_hcd vhci_hcd.4: stop threads [ 142.331152][ T60] vhci_hcd vhci_hcd.4: release socket [ 142.339350][ T30] audit: type=1326 audit(1765554481.734:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6528 comm="syz.2.151" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f21cb98f749 code=0x7ffe0000 [ 142.371775][ T60] vhci_hcd vhci_hcd.4: disconnect device [ 145.012211][ T6314] usb 42-1: device descriptor read/8, error -110 [ 145.033108][ T6553] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 145.231562][ T6547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.158'. [ 145.330263][ T30] audit: type=1400 audit(1765554484.824:245): avc: denied { connect } for pid=6549 comm="syz.3.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 145.392182][ T30] audit: type=1400 audit(1765554484.884:246): avc: denied { create } for pid=6549 comm="syz.3.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 145.732512][ T6314] usb usb42-port1: attempt power cycle [ 145.820057][ T30] audit: type=1400 audit(1765554484.884:247): avc: denied { ioctl } for pid=6549 comm="syz.3.154" path="socket:[11782]" dev="sockfs" ino=11782 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 145.912221][ T30] audit: type=1400 audit(1765554484.884:248): avc: denied { write } for pid=6549 comm="syz.3.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 145.999414][ T89] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 146.052662][ T5897] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 146.242112][ T89] usb 1-1: Using ep0 maxpacket: 8 [ 146.249929][ T5897] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 146.263391][ T5897] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 146.276278][ T89] usb 1-1: config 0 has no interfaces? [ 146.281980][ T89] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 146.306604][ T5897] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.341598][ T6314] usb usb42-port1: unable to enumerate USB device [ 146.348259][ T89] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.361991][ T5897] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 146.402614][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 146.420111][ T89] usb 1-1: config 0 descriptor?? [ 146.445496][ T5897] usb 5-1: Product: syz [ 146.461384][ T5897] usb 5-1: Manufacturer: syz [ 146.475851][ T5897] usb 5-1: SerialNumber: syz [ 146.659939][ T791] usb 1-1: USB disconnect, device number 3 [ 146.711825][ T5897] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 148.233351][ T6171] usb 5-1: USB disconnect, device number 3 [ 148.258146][ T6171] usblp0: removed [ 148.849539][ T6602] FAULT_INJECTION: forcing a failure. [ 148.849539][ T6602] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 148.867919][ T6602] CPU: 0 UID: 0 PID: 6602 Comm: syz.2.166 Not tainted syzkaller #0 PREEMPT(full) [ 148.867944][ T6602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 148.867960][ T6602] Call Trace: [ 148.867966][ T6602] [ 148.867974][ T6602] dump_stack_lvl+0x16c/0x1f0 [ 148.868000][ T6602] should_fail_ex+0x512/0x640 [ 148.868026][ T6602] _copy_from_user+0x2e/0xd0 [ 148.868048][ T6602] bpf_test_init.isra.0+0xce/0x130 [ 148.868078][ T6602] bpf_prog_test_run_xdp+0x66c/0x1660 [ 148.868109][ T6602] ? __fget_files+0x204/0x3c0 [ 148.868131][ T6602] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 148.868154][ T6602] ? __might_fault+0xc0/0x190 [ 148.868174][ T6602] ? fput+0x70/0xf0 [ 148.868198][ T6602] ? __bpf_prog_get+0x97/0x2a0 [ 148.868217][ T6602] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 148.868242][ T6602] __sys_bpf+0x1035/0x4980 [ 148.868269][ T6602] ? __pfx___sys_bpf+0x10/0x10 [ 148.868290][ T6602] ? find_held_lock+0x2b/0x80 [ 148.868319][ T6602] ? find_held_lock+0x2b/0x80 [ 148.868352][ T6602] ? __mutex_unlock_slowpath+0x161/0x790 [ 148.868385][ T6602] ? fput+0x70/0xf0 [ 148.868406][ T6602] ? ksys_write+0x1ac/0x250 [ 148.868426][ T6602] ? __pfx_ksys_write+0x10/0x10 [ 148.868451][ T6602] __x64_sys_bpf+0x78/0xc0 [ 148.868474][ T6602] ? lockdep_hardirqs_on+0x7c/0x110 [ 148.868489][ T6602] do_syscall_64+0xcd/0xf80 [ 148.868507][ T6602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.868524][ T6602] RIP: 0033:0x7f21cb98f749 [ 148.868538][ T6602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.868560][ T6602] RSP: 002b:00007f21cc8d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 148.868578][ T6602] RAX: ffffffffffffffda RBX: 00007f21cbbe5fa0 RCX: 00007f21cb98f749 [ 148.868589][ T6602] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 148.868599][ T6602] RBP: 00007f21cc8d9090 R08: 0000000000000000 R09: 0000000000000000 [ 148.868608][ T6602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.868617][ T6602] R13: 00007f21cbbe6038 R14: 00007f21cbbe5fa0 R15: 00007ffcd8b0e088 [ 148.868643][ T6602] [ 149.724487][ T30] audit: type=1400 audit(1765554489.284:249): avc: denied { create } for pid=6607 comm="syz.2.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 149.762114][ T30] audit: type=1400 audit(1765554489.304:250): avc: denied { connect } for pid=6607 comm="syz.2.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 150.787313][ T791] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 150.995750][ T791] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 151.033879][ T791] usb 2-1: config 0 interface 0 has no altsetting 0 [ 151.237297][ T791] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 151.272945][ T791] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 151.344612][ T791] usb 2-1: Product: syz [ 151.352289][ T791] usb 2-1: Manufacturer: syz [ 151.361011][ T791] usb 2-1: SerialNumber: syz [ 151.380493][ T791] usb 2-1: config 0 descriptor?? [ 151.440228][ T791] usb 2-1: selecting invalid altsetting 0 [ 152.164162][ T791] usb 2-1: USB disconnect, device number 5 [ 156.075764][ T30] audit: type=1400 audit(1765554495.634:251): avc: denied { execute } for pid=6651 comm="syz.4.181" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B64202097F5479741C2D8F05571E62BA56C940BB607175CFB0421E4C4B1A21CFF433B94510DB67D9CEC430BCFEBE49A52E52C8203202864656C6574656429 dev="hugetlbfs" ino=12116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 156.200276][ T30] audit: type=1400 audit(1765554495.744:252): avc: denied { ioctl } for pid=6651 comm="syz.4.181" path="socket:[12499]" dev="sockfs" ino=12499 ioctlcmd=0x7213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 156.231564][ T6654] FAULT_INJECTION: forcing a failure. [ 156.231564][ T6654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.262282][ T6654] CPU: 1 UID: 0 PID: 6654 Comm: syz.3.182 Not tainted syzkaller #0 PREEMPT(full) [ 156.262300][ T6654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 156.262309][ T6654] Call Trace: [ 156.262315][ T6654] [ 156.262321][ T6654] dump_stack_lvl+0x16c/0x1f0 [ 156.262344][ T6654] should_fail_ex+0x512/0x640 [ 156.262369][ T6654] _copy_from_iter+0x2a4/0x16c0 [ 156.262391][ T6654] ? __alloc_skb+0x220/0x410 [ 156.262404][ T6654] ? __alloc_skb+0x35d/0x410 [ 156.262417][ T6654] ? __pfx__copy_from_iter+0x10/0x10 [ 156.262430][ T6654] ? netlink_autobind.isra.0+0x158/0x370 [ 156.262447][ T6654] netlink_sendmsg+0x820/0xdd0 [ 156.262461][ T6654] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.262477][ T6654] ____sys_sendmsg+0xa5d/0xc30 [ 156.262490][ T6654] ? copy_msghdr_from_user+0x10a/0x160 [ 156.262504][ T6654] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.262522][ T6654] ___sys_sendmsg+0x134/0x1d0 [ 156.262538][ T6654] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.262571][ T6654] __sys_sendmsg+0x16d/0x220 [ 156.262587][ T6654] ? __pfx___sys_sendmsg+0x10/0x10 [ 156.262611][ T6654] do_syscall_64+0xcd/0xf80 [ 156.262624][ T6654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.262635][ T6654] RIP: 0033:0x7f0a38b8f749 [ 156.262644][ T6654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.262654][ T6654] RSP: 002b:00007f0a39a5e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.262665][ T6654] RAX: ffffffffffffffda RBX: 00007f0a38de5fa0 RCX: 00007f0a38b8f749 [ 156.262672][ T6654] RDX: 0000000020008000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 156.262678][ T6654] RBP: 00007f0a39a5e090 R08: 0000000000000000 R09: 0000000000000000 [ 156.262684][ T6654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.262690][ T6654] R13: 00007f0a38de6038 R14: 00007f0a38de5fa0 R15: 00007ffc21cee0e8 [ 156.262704][ T6654] [ 156.472375][ T30] audit: type=1400 audit(1765554495.744:253): avc: denied { write } for pid=6651 comm="syz.4.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 156.492346][ T30] audit: type=1400 audit(1765554495.744:254): avc: denied { nlmsg_write } for pid=6651 comm="syz.4.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 156.938322][ T30] audit: type=1400 audit(1765554496.484:255): avc: denied { create } for pid=6659 comm="syz.4.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 157.313470][ T30] audit: type=1400 audit(1765554496.484:256): avc: denied { write } for pid=6659 comm="syz.4.183" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 160.125688][ T30] audit: type=1400 audit(1765554499.664:257): avc: denied { mount } for pid=6675 comm="syz.0.189" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 160.281526][ T30] audit: type=1400 audit(1765554499.834:258): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 161.782293][ T30] audit: type=1400 audit(1765554501.344:259): avc: denied { create } for pid=6695 comm="syz.1.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 162.114995][ T30] audit: type=1400 audit(1765554501.674:260): avc: denied { execute } for pid=6695 comm="syz.1.191" name="file2" dev="tmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 162.201137][ T6704] Invalid source name [ 162.205251][ T6704] UBIFS error (pid: 6704): cannot open "./file0", error -22 [ 162.713804][ T30] audit: type=1400 audit(1765554502.234:261): avc: denied { execute_no_trans } for pid=6695 comm="syz.1.191" path="/33/file2" dev="tmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 162.913731][ T6708] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20001 [ 162.920588][ T30] audit: type=1400 audit(1765554502.244:262): avc: denied { sqpoll } for pid=6695 comm="syz.1.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 164.906769][ T30] audit: type=1400 audit(1765554504.464:263): avc: denied { setopt } for pid=6724 comm="syz.3.199" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 164.992378][ T5953] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 165.039942][ T30] audit: type=1400 audit(1765554504.594:264): avc: denied { name_bind } for pid=6728 comm="syz.3.201" src=19998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 165.041505][ T6729] syzkaller1: entered promiscuous mode [ 165.091115][ T6732] xt_TCPMSS: Only works on TCP SYN packets [ 165.132202][ T6729] syzkaller1: entered allmulticast mode [ 165.233213][ T5953] usb 5-1: Using ep0 maxpacket: 8 [ 165.240035][ T30] audit: type=1400 audit(1765554504.594:265): avc: denied { ioctl } for pid=6728 comm="syz.3.201" path="socket:[12685]" dev="sockfs" ino=12685 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 165.270073][ T5953] usb 5-1: config 0 has no interfaces? [ 165.275656][ T5953] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 165.292069][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.422149][ T30] audit: type=1400 audit(1765554504.674:266): avc: denied { create } for pid=6726 comm="syz.2.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 165.456925][ T5953] usb 5-1: config 0 descriptor?? [ 165.516502][ T30] audit: type=1400 audit(1765554504.674:267): avc: denied { write } for pid=6726 comm="syz.2.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 166.951852][ T30] audit: type=1400 audit(1765554506.464:268): avc: denied { map } for pid=6735 comm="syz.0.194" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 167.011887][ T5870] usb 5-1: USB disconnect, device number 4 [ 167.032204][ T30] audit: type=1400 audit(1765554506.464:269): avc: denied { execute } for pid=6735 comm="syz.0.194" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 167.156367][ T30] audit: type=1804 audit(1765554506.554:270): pid=6750 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.203" name="/newroot/40/file0" dev="fuse" ino=1 res=1 errno=0 [ 168.222010][ T6763] bridge0: entered allmulticast mode [ 168.442231][ T5953] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 168.559064][ T30] audit: type=1400 audit(1765554508.114:271): avc: denied { read write } for pid=6762 comm="syz.1.205" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 169.070971][ T30] audit: type=1400 audit(1765554508.564:272): avc: denied { open } for pid=6762 comm="syz.1.205" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 169.132239][ T5953] usb 5-1: Using ep0 maxpacket: 8 [ 169.140674][ T5953] usb 5-1: config 0 has no interfaces? [ 169.149735][ T5953] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 169.160603][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.193521][ T5953] usb 5-1: config 0 descriptor?? [ 169.218456][ T6774] syz.0.209 uses obsolete (PF_INET,SOCK_PACKET) [ 169.320522][ T30] audit: type=1400 audit(1765554508.874:273): avc: denied { ioctl } for pid=6773 comm="syz.0.209" path="socket:[13044]" dev="sockfs" ino=13044 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 169.613489][ T5953] usb 5-1: USB disconnect, device number 5 [ 169.629635][ T6778] xt_TCPMSS: Only works on TCP SYN packets [ 169.906607][ T30] audit: type=1400 audit(1765554509.464:274): avc: denied { setopt } for pid=6777 comm="syz.3.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 170.755138][ T6800] FAULT_INJECTION: forcing a failure. [ 170.755138][ T6800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.770859][ T6800] CPU: 0 UID: 0 PID: 6800 Comm: syz.4.216 Not tainted syzkaller #0 PREEMPT(full) [ 170.770876][ T6800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 170.770883][ T6800] Call Trace: [ 170.770887][ T6800] [ 170.770891][ T6800] dump_stack_lvl+0x16c/0x1f0 [ 170.770908][ T6800] should_fail_ex+0x512/0x640 [ 170.770924][ T6800] _copy_to_iter+0x463/0x1710 [ 170.770942][ T6800] ? __pfx__copy_to_iter+0x10/0x10 [ 170.770954][ T6800] ? do_raw_spin_unlock+0x172/0x230 [ 170.770970][ T6800] ? _raw_spin_unlock+0x28/0x50 [ 170.770986][ T6800] ? traverse.part.0.constprop.0+0x2c5/0x650 [ 170.771007][ T6800] seq_read_iter+0x71e/0x12d0 [ 170.771020][ T6800] ? _parse_integer_limit+0x17f/0x1d0 [ 170.771042][ T6800] seq_read+0x3a3/0x570 [ 170.771056][ T6800] ? __pfx_seq_read+0x10/0x10 [ 170.771073][ T6800] ? find_held_lock+0x2b/0x80 [ 170.771093][ T6800] ? import_ubuf+0x1b6/0x220 [ 170.771106][ T6800] ? avc_policy_seqno+0x9/0x20 [ 170.771123][ T6800] ? __pfx_seq_read+0x10/0x10 [ 170.771137][ T6800] proc_reg_read+0x240/0x330 [ 170.771152][ T6800] ? __pfx_proc_reg_read+0x10/0x10 [ 170.771164][ T6800] vfs_readv+0x5c1/0x8b0 [ 170.771180][ T6800] ? __pfx_vfs_readv+0x10/0x10 [ 170.771204][ T6800] ? __fget_files+0x20e/0x3c0 [ 170.771218][ T6800] ? _mutex_trylock_nest_lock+0x2d0/0x330 [ 170.771234][ T6800] ? do_preadv+0x1a6/0x270 [ 170.771244][ T6800] do_preadv+0x1a6/0x270 [ 170.771256][ T6800] ? __pfx_do_preadv+0x10/0x10 [ 170.771267][ T6800] ? ksys_write+0x1ac/0x250 [ 170.771280][ T6800] ? __pfx_ksys_write+0x10/0x10 [ 170.771294][ T6800] __x64_sys_preadv2+0xef/0x160 [ 170.771310][ T6800] do_syscall_64+0xcd/0xf80 [ 170.771324][ T6800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.771335][ T6800] RIP: 0033:0x7fe0f2b8f749 [ 170.771345][ T6800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.771355][ T6800] RSP: 002b:00007fe0f3a77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 170.771366][ T6800] RAX: ffffffffffffffda RBX: 00007fe0f2de5fa0 RCX: 00007fe0f2b8f749 [ 170.771373][ T6800] RDX: 0000000000000001 RSI: 0000200000000840 RDI: 0000000000000003 [ 170.771379][ T6800] RBP: 00007fe0f3a77090 R08: 0000000000000000 R09: 0000000000000000 [ 170.771385][ T6800] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000001 [ 170.771391][ T6800] R13: 00007fe0f2de6038 R14: 00007fe0f2de5fa0 R15: 00007fff8b38a5e8 [ 170.771406][ T6800] [ 171.599878][ T6643] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 172.012127][ T6643] usb 3-1: Using ep0 maxpacket: 8 [ 172.019412][ T6643] usb 3-1: config 0 has no interfaces? [ 172.022132][ T6171] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 172.032368][ T6643] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 172.032394][ T6643] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.034658][ T6643] usb 3-1: config 0 descriptor?? [ 172.196659][ T6815] netlink: 68 bytes leftover after parsing attributes in process `syz.1.220'. [ 172.252117][ T6171] usb 1-1: Using ep0 maxpacket: 8 [ 172.265722][ T6171] usb 1-1: config 0 has no interfaces? [ 172.271529][ T6171] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 172.291931][ T6171] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.491536][ T6171] usb 1-1: config 0 descriptor?? [ 172.493379][ T30] audit: type=1400 audit(1765554512.044:275): avc: denied { setopt } for pid=6816 comm="syz.1.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 172.686550][ T5953] usb 3-1: USB disconnect, device number 6 [ 173.013787][ T6643] usb 1-1: USB disconnect, device number 4 [ 173.398511][ T6836] netlink: 20 bytes leftover after parsing attributes in process `syz.2.225'. [ 174.751912][ T6854] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 176.251626][ T6869] binder: 6864:6869 ioctl 4018620d 0 returned -22 [ 176.964086][ T6171] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 177.296206][ T6171] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 177.325855][ T6171] usb 5-1: config 0 interface 0 has no altsetting 0 [ 177.985522][ T6171] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 178.007409][ T6171] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 178.030437][ T6171] usb 5-1: Product: syz [ 178.045780][ T6171] usb 5-1: Manufacturer: syz [ 178.075166][ T6171] usb 5-1: SerialNumber: syz [ 178.096355][ T6171] usb 5-1: config 0 descriptor?? [ 178.307587][ T6171] usb 5-1: selecting invalid altsetting 0 [ 178.348089][ T5870] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 178.651369][ T6866] snd-usb-audio 5-1:0.0: Runtime PM usage count underflow! [ 178.667570][ T5898] usb 5-1: USB disconnect, device number 6 [ 178.682118][ T5870] usb 3-1: Using ep0 maxpacket: 8 [ 178.694286][ T5870] usb 3-1: config 0 has no interfaces? [ 178.699922][ T5870] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 178.709371][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.947694][ T5870] usb 3-1: config 0 descriptor?? [ 178.974200][ T5807] udevd[5807]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 179.099662][ T6892] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 24 [ 179.255117][ T5898] usb 3-1: USB disconnect, device number 7 [ 179.468818][ T6900] /dev/nullb0: Can't open blockdev [ 182.522607][ T6929] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.530510][ T6929] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.907385][ T6931] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=6931 comm=syz.1.249 [ 183.019510][ T6929] bridge_slave_0: left allmulticast mode [ 183.037378][ T6929] bridge_slave_0: left promiscuous mode [ 183.088063][ T6929] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.311008][ T30] audit: type=1804 audit(1765554522.844:276): pid=6934 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.251" name="/newroot/54/file0" dev="fuse" ino=1 res=1 errno=0 [ 184.982103][ T5939] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 185.182689][ T5939] usb 2-1: Using ep0 maxpacket: 8 [ 185.204599][ T5939] usb 2-1: config 0 has no interfaces? [ 185.232379][ T5939] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 185.272147][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.576855][ T5939] usb 2-1: config 0 descriptor?? [ 185.998941][ T5953] usb 2-1: USB disconnect, device number 6 [ 186.021422][ T6969] netlink: 16 bytes leftover after parsing attributes in process `syz.2.259'. [ 187.359603][ T6978] netlink: 52 bytes leftover after parsing attributes in process `syz.4.257'. [ 187.403893][ T6978] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.412076][ T6978] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.764953][ T30] audit: type=1400 audit(1765554527.324:277): avc: denied { setopt } for pid=6981 comm="syz.4.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 187.790713][ T6982] Bluetooth: MGMT ver 1.23 [ 187.832416][ T30] audit: type=1400 audit(1765554527.374:278): avc: denied { shutdown } for pid=6981 comm="syz.4.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 188.044369][ T30] audit: type=1400 audit(1765554527.604:279): avc: denied { mount } for pid=6983 comm="syz.4.265" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 188.045604][ T6984] overlayfs: failed to resolve '/aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa': -36 [ 188.116118][ T30] audit: type=1400 audit(1765554527.604:280): avc: denied { mounton } for pid=6983 comm="syz.4.265" path="/54/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 188.153786][ T6985] overlayfs: failed to resolve '/ÿÿ': -2 [ 188.200554][ T30] audit: type=1400 audit(1765554527.744:281): avc: denied { read } for pid=6983 comm="syz.4.265" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 188.293277][ T30] audit: type=1400 audit(1765554527.744:282): avc: denied { open } for pid=6983 comm="syz.4.265" path="/54/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 188.352253][ T30] audit: type=1400 audit(1765554527.904:283): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 190.593480][ T5136] Bluetooth: hci0: command 0x1407 tx timeout [ 190.599616][ T5820] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 191.761868][ T5940] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 191.954846][ T30] audit: type=1400 audit(1765554531.514:284): avc: denied { create } for pid=7014 comm="syz.3.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 191.985236][ T5940] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 192.028431][ T30] audit: type=1400 audit(1765554531.534:285): avc: denied { ioctl } for pid=7014 comm="syz.3.261" path="socket:[13981]" dev="sockfs" ino=13981 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 192.054972][ T5940] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 192.074567][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 192.094881][ T5940] usb 5-1: Product: syz [ 192.099079][ T5940] usb 5-1: Manufacturer: syz [ 192.113319][ T5940] usb 5-1: SerialNumber: syz [ 192.362312][ T5940] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 192.843071][ T5953] usb 5-1: USB disconnect, device number 7 [ 192.871826][ T5953] usblp0: removed [ 192.948829][ T7025] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 192.955377][ T7025] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 193.997695][ T6643] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 194.048261][ T7025] vhci_hcd vhci_hcd.0: Device attached [ 194.071230][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.082268][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 194.094017][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.192970][ T6171] usb 40-1: SetAddress Request (2) to port 0 [ 194.199774][ T6171] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 194.214606][ T6643] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 194.226484][ T6643] usb 2-1: config 0 interface 0 has no altsetting 0 [ 194.236638][ T6643] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 194.242131][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 194.250871][ T6643] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 194.260558][ T24] usb 3-1: config 0 has no interfaces? [ 194.269430][ T6643] usb 2-1: Product: syz [ 194.293834][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 194.299762][ T6643] usb 2-1: Manufacturer: syz [ 194.315419][ T6643] usb 2-1: SerialNumber: syz [ 194.351160][ T6643] usb 2-1: config 0 descriptor?? [ 194.368172][ T6643] usb 2-1: selecting invalid altsetting 0 [ 194.374250][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.452242][ T5820] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 194.457298][ T5817] Bluetooth: hci0: command 0x1407 tx timeout [ 194.510528][ T24] usb 3-1: config 0 descriptor?? [ 195.280003][ T5953] usb 2-1: USB disconnect, device number 7 [ 195.405888][ T5870] usb 3-1: USB disconnect, device number 8 [ 195.613138][ T7031] vhci_hcd: connection reset by peer [ 195.632427][ T1111] vhci_hcd vhci_hcd.3: stop threads [ 195.674352][ T1111] vhci_hcd vhci_hcd.3: release socket [ 195.684958][ T1111] vhci_hcd vhci_hcd.3: disconnect device [ 196.136597][ T5817] Bluetooth: hci2: command 0x0406 tx timeout [ 196.147582][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 196.153922][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 196.163122][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 197.494160][ T5821] Bluetooth: hci0: command 0x1407 tx timeout [ 199.206946][ T7072] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 199.213486][ T7072] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 199.225588][ T7072] vhci_hcd vhci_hcd.0: Device attached [ 199.332411][ T6171] usb 40-1: device descriptor read/8, error -110 [ 199.373332][ T7067] bond0: (slave bond_slave_0): Releasing backup interface [ 199.631616][ T5897] usb 42-1: SetAddress Request (10) to port 0 [ 199.848402][ T6171] usb usb40-port1: attempt power cycle [ 199.863619][ T5897] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 201.243298][ T6171] usb usb40-port1: unable to enumerate USB device [ 201.743458][ T7094] FAULT_INJECTION: forcing a failure. [ 201.743458][ T7094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.022204][ T7094] CPU: 0 UID: 0 PID: 7094 Comm: syz.3.285 Not tainted syzkaller #0 PREEMPT(full) [ 202.022231][ T7094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 202.022242][ T7094] Call Trace: [ 202.022248][ T7094] [ 202.022256][ T7094] dump_stack_lvl+0x16c/0x1f0 [ 202.022282][ T7094] should_fail_ex+0x512/0x640 [ 202.022309][ T7094] _copy_from_user+0x2e/0xd0 [ 202.022352][ T7094] video_usercopy+0xee2/0x16c0 [ 202.022373][ T7094] ? __pfx___video_do_ioctl+0x10/0x10 [ 202.022399][ T7094] ? selinux_kernel_read_file+0x50/0x120 [ 202.022420][ T7094] ? __pfx_video_usercopy+0x10/0x10 [ 202.022454][ T7094] v4l2_ioctl+0x1bd/0x250 [ 202.022479][ T7094] ? __pfx_v4l2_ioctl+0x10/0x10 [ 202.022506][ T7094] __x64_sys_ioctl+0x18e/0x210 [ 202.022531][ T7094] do_syscall_64+0xcd/0xf80 [ 202.022552][ T7094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.022571][ T7094] RIP: 0033:0x7f0a38b8f749 [ 202.022587][ T7094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.022609][ T7094] RSP: 002b:00007f0a39a5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 202.022627][ T7094] RAX: ffffffffffffffda RBX: 00007f0a38de5fa0 RCX: 00007f0a38b8f749 [ 202.022640][ T7094] RDX: 0000200000000380 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 202.022651][ T7094] RBP: 00007f0a39a5e090 R08: 0000000000000000 R09: 0000000000000000 [ 202.022662][ T7094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.022673][ T7094] R13: 00007f0a38de6038 R14: 00007f0a38de5fa0 R15: 00007ffc21cee0e8 [ 202.022701][ T7094] [ 202.359554][ T7073] vhci_hcd: connection reset by peer [ 202.411913][ T274] vhci_hcd vhci_hcd.4: stop threads [ 202.417447][ T274] vhci_hcd vhci_hcd.4: release socket [ 202.494232][ T7102] hfsplus: unable to find HFS+ superblock [ 202.946479][ T274] vhci_hcd vhci_hcd.4: disconnect device [ 203.078675][ T7104] netlink: 32 bytes leftover after parsing attributes in process `syz.2.293'. [ 203.282421][ T5929] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 203.379294][ T30] audit: type=1400 audit(1765554542.934:286): avc: denied { wake_alarm } for pid=7111 comm="syz.2.295" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 203.408240][ T30] audit: type=1400 audit(1765554542.964:287): avc: denied { bind } for pid=7111 comm="syz.2.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 203.429515][ T30] audit: type=1400 audit(1765554542.964:288): avc: denied { setopt } for pid=7111 comm="syz.2.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 203.450154][ T5929] usb 1-1: Using ep0 maxpacket: 8 [ 203.533305][ T5929] usb 1-1: config 0 has no interfaces? [ 203.539858][ T5929] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 203.617487][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.857115][ T7125] binder: 7122:7125 ioctl 4018620d 0 returned -22 [ 203.981206][ T5929] usb 1-1: config 0 descriptor?? [ 204.248694][ T7131] hugetlbfs: Bad value 'k' for mount option 'nr_inodes' [ 204.248694][ T7131] [ 204.252697][ T30] audit: type=1400 audit(1765554543.804:289): avc: denied { mount } for pid=7130 comm="syz.2.298" name="/" dev="hugetlbfs" ino=14928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 204.356968][ T5898] usb 1-1: USB disconnect, device number 5 [ 204.400904][ T30] audit: type=1400 audit(1765554543.804:290): avc: denied { remount } for pid=7130 comm="syz.2.298" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 204.556274][ T30] audit: type=1400 audit(1765554544.114:291): avc: denied { read write } for pid=7130 comm="syz.2.298" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 204.595620][ T5940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 204.622220][ T30] audit: type=1400 audit(1765554544.144:292): avc: denied { open } for pid=7130 comm="syz.2.298" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 204.654314][ T5940] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 204.939484][ T5897] usb 42-1: device descriptor read/8, error -110 [ 205.398999][ T30] audit: type=1400 audit(1765554544.954:293): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 205.443043][ T5897] usb usb42-port1: attempt power cycle [ 206.038844][ T7145] binder: 7144:7145 ioctl 4018620d 0 returned -22 [ 206.152637][ T5897] usb usb42-port1: unable to enumerate USB device [ 206.346593][ T5897] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 206.870178][ T30] audit: type=1400 audit(1765554546.054:294): avc: denied { create } for pid=7159 comm="syz.4.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 207.006234][ T30] audit: type=1400 audit(1765554546.054:295): avc: denied { bind } for pid=7159 comm="syz.4.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 207.182942][ T5897] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 207.213752][ T5897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 207.227920][ T5897] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 207.237623][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 207.246333][ T5897] usb 4-1: Product: syz [ 207.250623][ T5897] usb 4-1: Manufacturer: syz [ 207.269667][ T5897] usb 4-1: SerialNumber: syz [ 207.299036][ T5897] usb 4-1: config 0 descriptor?? [ 207.378814][ T5897] usb 4-1: selecting invalid altsetting 0 [ 207.620484][ T5940] usb 4-1: USB disconnect, device number 7 [ 207.943454][ T5807] udevd[5807]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.753816][ T7171] FAULT_INJECTION: forcing a failure. [ 208.753816][ T7171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.782192][ T7171] CPU: 0 UID: 0 PID: 7171 Comm: syz.0.307 Not tainted syzkaller #0 PREEMPT(full) [ 208.782225][ T7171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 208.782236][ T7171] Call Trace: [ 208.782242][ T7171] [ 208.782250][ T7171] dump_stack_lvl+0x16c/0x1f0 [ 208.782266][ T7171] should_fail_ex+0x512/0x640 [ 208.782283][ T7171] _copy_from_iter+0x2a4/0x16c0 [ 208.782300][ T7171] ? __alloc_skb+0x220/0x410 [ 208.782313][ T7171] ? __alloc_skb+0x35d/0x410 [ 208.782326][ T7171] ? __pfx__copy_from_iter+0x10/0x10 [ 208.782339][ T7171] ? netlink_autobind.isra.0+0x158/0x370 [ 208.782355][ T7171] netlink_sendmsg+0x820/0xdd0 [ 208.782369][ T7171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.782385][ T7171] ____sys_sendmsg+0xa5d/0xc30 [ 208.782397][ T7171] ? copy_msghdr_from_user+0x10a/0x160 [ 208.782412][ T7171] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.782430][ T7171] ___sys_sendmsg+0x134/0x1d0 [ 208.782445][ T7171] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.782478][ T7171] __sys_sendmsg+0x16d/0x220 [ 208.782493][ T7171] ? __pfx___sys_sendmsg+0x10/0x10 [ 208.782517][ T7171] do_syscall_64+0xcd/0xf80 [ 208.782530][ T7171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.782543][ T7171] RIP: 0033:0x7f4da5f8f749 [ 208.782553][ T7171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.782563][ T7171] RSP: 002b:00007f4da6dc8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.782574][ T7171] RAX: ffffffffffffffda RBX: 00007f4da61e5fa0 RCX: 00007f4da5f8f749 [ 208.782581][ T7171] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000007 [ 208.782588][ T7171] RBP: 00007f4da6dc8090 R08: 0000000000000000 R09: 0000000000000000 [ 208.782594][ T7171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.782600][ T7171] R13: 00007f4da61e6038 R14: 00007f4da61e5fa0 R15: 00007ffdd5fc5e78 [ 208.782614][ T7171] [ 209.096370][ T7173] binder: 7172:7173 ioctl 4018620d 0 returned -22 [ 209.329907][ T7177] /dev/nullb0: Can't open blockdev [ 210.092502][ T5870] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 210.292148][ T5870] usb 4-1: Using ep0 maxpacket: 8 [ 210.299317][ T5870] usb 4-1: config 0 has no interfaces? [ 210.304828][ T5870] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 210.330694][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.424748][ T5870] usb 4-1: config 0 descriptor?? [ 211.210869][ T5929] usb 4-1: USB disconnect, device number 8 [ 211.252218][ T5820] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 211.252533][ T5821] Bluetooth: hci0: command 0x1407 tx timeout [ 212.055035][ T7214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.318'. [ 213.259201][ T7223] binder: 7217:7223 ioctl 4018620d 0 returned -22 [ 213.437489][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 213.437503][ T30] audit: type=1400 audit(1765554552.994:300): avc: denied { create } for pid=7224 comm="syz.4.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 213.603836][ T7229] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 213.611538][ T7229] audit: out of memory in audit_log_start [ 214.381382][ T30] audit: type=1400 audit(1765554553.054:301): avc: denied { write } for pid=7224 comm="syz.4.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 214.403818][ T30] audit: type=1400 audit(1765554553.074:302): avc: denied { setopt } for pid=7224 comm="syz.4.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 214.423488][ T30] audit: type=1400 audit(1765554553.154:303): avc: denied { connect } for pid=7227 comm="syz.2.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 214.450623][ T30] audit: type=1400 audit(1765554553.924:304): avc: denied { append } for pid=7230 comm="syz.4.324" name="file0" dev="tmpfs" ino=382 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 214.901473][ T7237] /dev/nullb0: Can't open blockdev [ 214.975662][ T30] audit: type=1400 audit(1765554554.534:305): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 216.100485][ T7260] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=670 sclass=netlink_route_socket pid=7260 comm=syz.0.332 [ 216.132284][ T5897] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 216.344432][ T5897] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 216.361678][ T5897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 216.393145][ T5897] usb 4-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 216.417903][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.450325][ T5897] usb 4-1: config 0 descriptor?? [ 216.721671][ T7266] netlink: 24 bytes leftover after parsing attributes in process `syz.1.334'. [ 216.917219][ T791] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 216.978384][ T7269] binder: 7267:7269 ioctl 4018620d 0 returned -22 [ 216.985823][ T5929] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 216.989744][ T5897] wacom 0003:056A:0094.0004: Using device in hidraw-only mode [ 217.058169][ T5897] wacom 0003:056A:0094.0004: hidraw0: USB HID v8.00 Device [HID 056a:0094] on usb-dummy_hcd.3-1/input0 [ 217.264875][ T5898] usb 4-1: USB disconnect, device number 9 [ 217.300797][ T7270] fido_id[7270]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 217.312245][ T5929] usb 2-1: Using ep0 maxpacket: 8 [ 217.326303][ T5929] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 217.338232][ T791] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 217.347923][ T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.356070][ T5929] usb 2-1: config 179 has no interface number 0 [ 217.364233][ T791] usb 3-1: Product: syz [ 217.368518][ T5929] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 217.380369][ T791] usb 3-1: Manufacturer: syz [ 217.385063][ T791] usb 3-1: SerialNumber: syz [ 217.390550][ T5929] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 217.403288][ T791] usb 3-1: config 0 descriptor?? [ 217.408558][ T5929] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 217.429804][ T5929] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 217.449501][ T5929] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 217.465140][ T5929] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 217.491690][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.513950][ T7266] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 217.656245][ T30] audit: type=1400 audit(1765554557.214:306): avc: denied { override_creds } for pid=7261 comm="syz.2.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 217.798269][ T30] audit: type=1400 audit(1765554557.354:307): avc: denied { setopt } for pid=7261 comm="syz.2.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 217.982722][ T5897] usb 2-1: USB disconnect, device number 8 [ 217.983498][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 217.998148][ C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 218.024910][ T48] usb 3-1: USB disconnect, device number 9 [ 218.081396][ T7281] xt_TCPMSS: Only works on TCP SYN packets [ 218.158583][ T5929] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 218.414845][ T5929] usb 5-1: config 0 has an invalid interface number: 122 but max is 0 [ 218.423146][ T5929] usb 5-1: config 0 has no interface number 0 [ 218.429300][ T5929] usb 5-1: config 0 interface 122 has no altsetting 0 [ 218.445104][ T5929] usb 5-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 218.921076][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.956616][ T5929] usb 5-1: Product: syz [ 218.962598][ T5929] usb 5-1: Manufacturer: syz [ 218.983673][ T5929] usb 5-1: SerialNumber: syz [ 219.612653][ T5929] usb 5-1: config 0 descriptor?? [ 220.677240][ T7302] /dev/nullb0: Can't open blockdev [ 222.822989][ T5929] dvb_usb_m920x 5-1:0.122: probe with driver dvb_usb_m920x failed with error -71 [ 222.852977][ T5929] usb 5-1: USB disconnect, device number 8 [ 223.334282][ T30] audit: type=1400 audit(1765554562.894:308): avc: denied { connect } for pid=7327 comm="syz.4.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 224.749454][ T30] audit: type=1400 audit(1765554564.304:309): avc: denied { setopt } for pid=7332 comm="syz.3.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 224.775329][ T7335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.353'. [ 224.820475][ T7338] FAULT_INJECTION: forcing a failure. [ 224.820475][ T7338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.831958][ T30] audit: type=1400 audit(1765554564.324:310): avc: denied { getopt } for pid=7332 comm="syz.3.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 224.869004][ T7338] CPU: 1 UID: 0 PID: 7338 Comm: syz.0.354 Not tainted syzkaller #0 PREEMPT(full) [ 224.869031][ T7338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 224.869041][ T7338] Call Trace: [ 224.869047][ T7338] [ 224.869054][ T7338] dump_stack_lvl+0x16c/0x1f0 [ 224.869079][ T7338] should_fail_ex+0x512/0x640 [ 224.869104][ T7338] _copy_from_iter+0x2a4/0x16c0 [ 224.869129][ T7338] ? __alloc_skb+0x220/0x410 [ 224.869148][ T7338] ? __alloc_skb+0x35d/0x410 [ 224.869168][ T7338] ? __pfx__copy_from_iter+0x10/0x10 [ 224.869189][ T7338] ? netlink_autobind.isra.0+0x158/0x370 [ 224.869217][ T7338] netlink_sendmsg+0x820/0xdd0 [ 224.869240][ T7338] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.869268][ T7338] ____sys_sendmsg+0xa5d/0xc30 [ 224.869288][ T7338] ? copy_msghdr_from_user+0x10a/0x160 [ 224.869316][ T7338] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.869347][ T7338] ___sys_sendmsg+0x134/0x1d0 [ 224.869373][ T7338] ? __pfx____sys_sendmsg+0x10/0x10 [ 224.869431][ T7338] __sys_sendmsg+0x16d/0x220 [ 224.869455][ T7338] ? __pfx___sys_sendmsg+0x10/0x10 [ 224.869498][ T7338] do_syscall_64+0xcd/0xf80 [ 224.869519][ T7338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.869538][ T7338] RIP: 0033:0x7f4da5f8f749 [ 224.869554][ T7338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.869570][ T7338] RSP: 002b:00007f4da6dc8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.869588][ T7338] RAX: ffffffffffffffda RBX: 00007f4da61e5fa0 RCX: 00007f4da5f8f749 [ 224.869600][ T7338] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 224.869611][ T7338] RBP: 00007f4da6dc8090 R08: 0000000000000000 R09: 0000000000000000 [ 224.869621][ T7338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.869631][ T7338] R13: 00007f4da61e6038 R14: 00007f4da61e5fa0 R15: 00007ffdd5fc5e78 [ 224.869659][ T7338] [ 225.088674][ T30] audit: type=1400 audit(1765554564.324:311): avc: denied { bind } for pid=7332 comm="syz.3.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 225.108249][ T30] audit: type=1400 audit(1765554564.414:312): avc: denied { bind } for pid=7332 comm="syz.3.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 225.273485][ T30] audit: type=1400 audit(1765554564.834:313): avc: denied { write } for pid=7342 comm="syz.1.348" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 226.669076][ T7358] hfsplus: unable to find HFS+ superblock [ 228.648191][ T7378] Invalid source name [ 228.652405][ T7378] UBIFS error (pid: 7378): cannot open "./file0", error -22 [ 229.944570][ T7392] netlink: 'syz.4.366': attribute type 1 has an invalid length. [ 230.192103][ T5939] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 230.282169][ T5870] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 230.487456][ T7401] binder: 7398:7401 ioctl 4018620d 0 returned -22 [ 230.702161][ T5939] usb 3-1: Using ep0 maxpacket: 8 [ 230.739854][ T5939] usb 3-1: config 0 has no interfaces? [ 230.770155][ T5939] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 230.795594][ T5870] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 230.811122][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.833247][ T5870] usb 4-1: config 0 interface 0 has no altsetting 0 [ 230.871544][ T5870] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 230.888764][ T5939] usb 3-1: config 0 descriptor?? [ 230.909885][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 230.958392][ T5870] usb 4-1: Product: syz [ 230.982219][ T5870] usb 4-1: Manufacturer: syz [ 231.006118][ T5870] usb 4-1: SerialNumber: syz [ 231.145851][ T5870] usb 4-1: config 0 descriptor?? [ 231.659918][ T5870] usb 4-1: selecting invalid altsetting 0 [ 231.716510][ T5929] usb 3-1: USB disconnect, device number 10 [ 232.704701][ T5953] usb 4-1: USB disconnect, device number 10 [ 233.726873][ T7438] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 233.733400][ T7438] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 233.864328][ T7438] vhci_hcd vhci_hcd.0: Device attached [ 234.106614][ T5929] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 234.262129][ T5898] usb 36-1: SetAddress Request (2) to port 0 [ 234.279105][ T5898] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 234.342094][ T5929] usb 1-1: device descriptor read/64, error -71 [ 235.514993][ T5929] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 235.672158][ T5929] usb 1-1: device descriptor read/64, error -71 [ 235.802370][ T5929] usb usb1-port1: attempt power cycle [ 236.252277][ T5929] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 236.291438][ T5929] usb 1-1: device descriptor read/8, error -71 [ 236.603825][ T7439] vhci_hcd: connection reset by peer [ 236.613974][ T1139] vhci_hcd vhci_hcd.1: stop threads [ 236.620077][ T1139] vhci_hcd vhci_hcd.1: release socket [ 236.625552][ T5929] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 236.646478][ T1139] vhci_hcd vhci_hcd.1: disconnect device [ 236.692697][ T5929] usb 1-1: device descriptor read/8, error -71 [ 236.822859][ T5929] usb usb1-port1: unable to enumerate USB device [ 237.434726][ T7480] binder: 7474:7480 ioctl 4018620d 0 returned -22 [ 237.693573][ T7472] /dev/nullb0: Can't open blockdev [ 237.779080][ T7483] netlink: 16 bytes leftover after parsing attributes in process `syz.3.387'. [ 238.517710][ T30] audit: type=1400 audit(1765554578.074:314): avc: denied { read } for pid=7491 comm="syz.2.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 238.645790][ T7496] kvm: user requested TSC rate below hardware speed [ 238.768705][ T30] audit: type=1400 audit(1765554578.324:315): avc: denied { ioctl } for pid=7501 comm="syz.2.393" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 239.211210][ T7516] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 239.217780][ T7516] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 239.599246][ T7522] binder: 7519:7522 ioctl 4018620d 0 returned -22 [ 239.702001][ T7516] vhci_hcd vhci_hcd.0: Device attached [ 242.010570][ T7517] vhci_hcd: connection reset by peer [ 242.027495][ T50] vhci_hcd vhci_hcd.1: stop threads [ 242.058968][ T50] vhci_hcd vhci_hcd.1: release socket [ 242.077994][ T5898] usb 36-1: device descriptor read/8, error -110 [ 242.085619][ T50] vhci_hcd vhci_hcd.1: disconnect device [ 242.090237][ T7549] netlink: 44 bytes leftover after parsing attributes in process `syz.3.403'. [ 242.416855][ T30] audit: type=1400 audit(1765554581.974:316): avc: denied { create } for pid=7557 comm="syz.1.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 242.472748][ T5898] usb usb36-port1: attempt power cycle [ 242.492105][ T5832] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 242.613724][ T7563] overlayfs: missing 'lowerdir' [ 242.647441][ T30] audit: type=1400 audit(1765554582.204:317): avc: denied { write } for pid=7557 comm="syz.1.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 242.692908][ T5832] usb 4-1: device descriptor read/64, error -71 [ 242.984040][ T7569] FAULT_INJECTION: forcing a failure. [ 242.984040][ T7569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.006746][ T7569] CPU: 1 UID: 0 PID: 7569 Comm: syz.2.409 Not tainted syzkaller #0 PREEMPT(full) [ 243.006773][ T7569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 243.006784][ T7569] Call Trace: [ 243.006790][ T7569] [ 243.006797][ T7569] dump_stack_lvl+0x16c/0x1f0 [ 243.006821][ T7569] should_fail_ex+0x512/0x640 [ 243.006844][ T7569] _copy_from_user+0x2e/0xd0 [ 243.006865][ T7569] do_ip_getsockopt+0xab8/0x2750 [ 243.006894][ T7569] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 243.006923][ T7569] ? __lock_acquire+0x436/0x2890 [ 243.006954][ T7569] ? lock_acquire+0x179/0x330 [ 243.006974][ T7569] ? __pfx___might_resched+0x10/0x10 [ 243.006991][ T7569] ? rcu_is_watching+0x12/0xc0 [ 243.007008][ T7569] ? trace_contention_end+0xdd/0x110 [ 243.007030][ T7569] ? __mutex_lock+0x27b/0x1ca0 [ 243.007052][ T7569] ? avc_has_perm+0x144/0x1f0 [ 243.007074][ T7569] ? smc_getsockopt+0xbc/0x370 [ 243.007100][ T7569] ip_getsockopt+0x9b/0x1e0 [ 243.007115][ T7569] ? __pfx_ip_getsockopt+0x10/0x10 [ 243.007134][ T7569] tcp_getsockopt+0xa1/0x100 [ 243.007152][ T7569] smc_getsockopt+0x165/0x370 [ 243.007166][ T7569] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 243.007177][ T7569] ? __pfx_smc_getsockopt+0x10/0x10 [ 243.007195][ T7569] ? __pfx_smc_getsockopt+0x10/0x10 [ 243.007208][ T7569] do_sock_getsockopt+0x324/0x410 [ 243.007220][ T7569] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 243.007229][ T7569] ? __fget_files+0x204/0x3c0 [ 243.007252][ T7569] __sys_getsockopt+0x12f/0x260 [ 243.007271][ T7569] __x64_sys_getsockopt+0xbd/0x160 [ 243.007285][ T7569] ? do_syscall_64+0x91/0xf80 [ 243.007295][ T7569] ? lockdep_hardirqs_on+0x7c/0x110 [ 243.007306][ T7569] do_syscall_64+0xcd/0xf80 [ 243.007318][ T7569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.007330][ T7569] RIP: 0033:0x7f21cb98f749 [ 243.007340][ T7569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.007351][ T7569] RSP: 002b:00007f21cc8d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 243.007362][ T7569] RAX: ffffffffffffffda RBX: 00007f21cbbe5fa0 RCX: 00007f21cb98f749 [ 243.007370][ T7569] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000000000003 [ 243.007376][ T7569] RBP: 00007f21cc8d9090 R08: 0000200000000200 R09: 0000000000000000 [ 243.007382][ T7569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.007389][ T7569] R13: 00007f21cbbe6038 R14: 00007f21cbbe5fa0 R15: 00007ffcd8b0e088 [ 243.007407][ T7569] [ 243.256800][ T5832] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 243.266782][ T5898] usb usb36-port1: unable to enumerate USB device [ 243.323734][ T5928] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 243.524246][ T30] audit: type=1400 audit(1765554583.084:318): avc: denied { read } for pid=7570 comm="syz.2.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 243.572293][ T5832] usb 4-1: device descriptor read/64, error -71 [ 243.719793][ T5832] usb usb4-port1: attempt power cycle [ 243.737522][ T5928] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 243.747560][ T5928] usb 5-1: config 0 interface 0 has no altsetting 0 [ 243.756970][ T5928] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 243.766575][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 243.783229][ T5928] usb 5-1: Product: syz [ 243.789975][ T5928] usb 5-1: Manufacturer: syz [ 243.798393][ T5928] usb 5-1: SerialNumber: syz [ 243.814661][ T5928] usb 5-1: config 0 descriptor?? [ 243.829354][ T5928] usb 5-1: selecting invalid altsetting 0 [ 243.852474][ T5898] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 244.002543][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 244.009295][ T5898] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 244.017933][ T5898] usb 3-1: config 0 has no interface number 0 [ 244.025952][ T5898] usb 3-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 244.037940][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.048409][ T5898] usb 3-1: Product: syz [ 244.053641][ T5898] usb 3-1: Manufacturer: syz [ 244.058864][ T5898] usb 3-1: SerialNumber: syz [ 244.064612][ T5832] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 244.092816][ T5832] usb 4-1: device descriptor read/8, error -71 [ 244.110723][ T5898] usb 3-1: config 0 descriptor?? [ 244.131218][ T5898] hub 3-1:0.89: bad descriptor, ignoring hub [ 244.138703][ T5898] hub 3-1:0.89: probe with driver hub failed with error -5 [ 244.147809][ T48] usb 5-1: USB disconnect, device number 9 [ 244.148438][ T5898] option 3-1:0.89: GSM modem (1-port) converter detected [ 244.178623][ T5898] usb 3-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 244.342205][ T5832] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 244.531549][ T5832] usb 4-1: device descriptor read/8, error -71 [ 244.541875][ T6314] usb 3-1: USB disconnect, device number 11 [ 244.620551][ T7581] hfsplus: unable to find HFS+ superblock [ 244.654763][ T5832] usb usb4-port1: unable to enumerate USB device [ 244.964789][ T6314] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 244.985727][ T6314] option 3-1:0.89: device disconnected [ 245.068513][ T7586] Invalid source name [ 245.072611][ T7586] UBIFS error (pid: 7586): cannot open "./file0", error -22 [ 245.185842][ T7589] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 245.611835][ T7592] capability: warning: `syz.2.416' uses deprecated v2 capabilities in a way that may be insecure [ 245.853888][ T7597] Invalid source name [ 245.858058][ T7597] UBIFS error (pid: 7597): cannot open "./file0", error -22 [ 246.377955][ T7603] netlink: 52 bytes leftover after parsing attributes in process `syz.4.418'. [ 246.651108][ T5898] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 246.873678][ T5898] usb 5-1: config 0 has no interfaces? [ 246.879294][ T5898] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 246.893655][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.926629][ T5898] usb 5-1: config 0 descriptor?? [ 247.237651][ T5898] usb 5-1: USB disconnect, device number 10 [ 248.001043][ T7625] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 249.577798][ T7636] Invalid source name [ 249.581816][ T7636] UBIFS error (pid: 7636): cannot open "./file0", error -22 [ 249.606982][ T2996] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.781726][ T2996] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.910187][ T2996] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.172984][ T5820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 250.184836][ T5820] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 250.213440][ T5820] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 250.237143][ T5820] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 250.245699][ T5820] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 250.264967][ T2996] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.764463][ T2996] bridge_slave_1: left allmulticast mode [ 250.774459][ T2996] bridge_slave_1: left promiscuous mode [ 250.781858][ T2996] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.870458][ T2996] bridge_slave_0: left allmulticast mode [ 250.886598][ T2996] bridge_slave_0: left promiscuous mode [ 250.904249][ T2996] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.406899][ T7662] ------------[ cut here ]------------ [ 251.412709][ T7662] WARNING: drivers/gpu/drm/drm_prime.c:224 at drm_prime_destroy_file_private+0x43/0x60, CPU#0: syz.2.435/7662 [ 251.424580][ T7662] Modules linked in: [ 251.428557][ T7662] CPU: 0 UID: 0 PID: 7662 Comm: syz.2.435 Not tainted syzkaller #0 PREEMPT(full) [ 251.437837][ T7662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 251.448048][ T7662] RIP: 0010:drm_prime_destroy_file_private+0x43/0x60 [ 251.454828][ T7662] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 21 48 8b 83 90 00 00 00 48 85 c0 75 06 5b e9 03 ae 6c fc e8 fe ad 6c fc 90 <0f> 0b 90 5b e9 f4 ad 6c fc e8 af 7b d6 fc eb d8 66 66 2e 0f 1f 84 [ 251.475110][ T7662] RSP: 0018:ffffc90003417ca0 EFLAGS: 00010293 [ 251.481170][ T7662] RAX: 0000000000000000 RBX: ffff888030239380 RCX: ffffffff8b78d5d1 [ 251.489691][ T7662] RDX: ffff88802b928000 RSI: ffffffff855235c2 RDI: ffff888030239410 [ 251.497702][ T7662] RBP: ffff888030239000 R08: 0000000000000001 R09: fffff52000682f74 [ 251.505680][ T7662] R10: ffffc90003417ba7 R11: 0000000000000000 R12: ffff888147e9e000 [ 251.513682][ T7662] R13: ffff8880302392b0 R14: 0000000000000000 R15: ffff8880302392d8 [ 251.521638][ T7662] FS: 0000555566907500(0000) GS:ffff8881248fb000(0000) knlGS:0000000000000000 [ 251.530581][ T7662] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 251.537245][ T7662] CR2: 00007f21cb9733e0 CR3: 00000000262c8000 CR4: 00000000003526f0 [ 251.545219][ T7662] Call Trace: [ 251.548476][ T7662] [ 251.551380][ T7662] drm_file_free.part.0+0x7ee/0xcd0 [ 251.556603][ T7662] ? __pfx___fsnotify_parent+0x10/0x10 [ 251.562800][ T7662] drm_close_helper.isra.0+0x186/0x1f0 [ 251.568250][ T7662] drm_release+0x1ab/0x360 [ 251.573223][ T7662] ? __pfx_drm_release+0x10/0x10 [ 251.578148][ T7662] __fput+0x402/0xb70 [ 251.582156][ T7662] task_work_run+0x150/0x240 [ 251.586743][ T7662] ? __pfx_task_work_run+0x10/0x10 [ 251.591861][ T7662] ? __do_sys_close_range+0x278/0x730 [ 251.597256][ T7662] exit_to_user_mode_loop+0xfb/0x540 [ 251.602547][ T7662] do_syscall_64+0x4ee/0xf80 [ 251.607119][ T7662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.613036][ T7662] RIP: 0033:0x7f21cb98f749 [ 251.617435][ T7662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.637107][ T7662] RSP: 002b:00007ffcd8b0e1e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 251.645527][ T7662] RAX: 0000000000000000 RBX: 000000000003d5da RCX: 00007f21cb98f749 [ 251.653581][ T7662] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 251.661532][ T7662] RBP: 00007f21cbbe7da0 R08: 0000000000000001 R09: 00000007d8b0e4df [ 251.670163][ T7662] R10: 0000001b2f220000 R11: 0000000000000246 R12: 00007f21cbbe5fac [ 251.678638][ T7662] R13: 00007f21cbbe5fa0 R14: ffffffffffffffff R15: 00007ffcd8b0e300 [ 251.686675][ T7662] [ 251.689677][ T7662] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 251.696933][ T7662] CPU: 0 UID: 0 PID: 7662 Comm: syz.2.435 Not tainted syzkaller #0 PREEMPT(full) [ 251.706123][ T7662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 251.716154][ T7662] Call Trace: [ 251.719416][ T7662] [ 251.722324][ T7662] dump_stack_lvl+0x3d/0x1f0 [ 251.726905][ T7662] vpanic+0x640/0x6f0 [ 251.730860][ T7662] ? drm_prime_destroy_file_private+0x43/0x60 [ 251.736903][ T7662] panic+0xca/0xd0 [ 251.740623][ T7662] ? __pfx_panic+0x10/0x10 [ 251.745019][ T7662] ? check_panic_on_warn+0x1f/0xb0 [ 251.750109][ T7662] check_panic_on_warn+0xab/0xb0 [ 251.755031][ T7662] __warn+0x108/0x3c0 [ 251.758989][ T7662] __report_bug+0x2a0/0x520 [ 251.763472][ T7662] ? drm_prime_destroy_file_private+0x43/0x60 [ 251.769525][ T7662] ? __pfx___report_bug+0x10/0x10 [ 251.774546][ T7662] ? find_held_lock+0x2b/0x80 [ 251.779202][ T7662] ? drm_master_release+0x2c1/0x600 [ 251.784381][ T7662] ? drm_prime_destroy_file_private+0x43/0x60 [ 251.790430][ T7662] report_bug+0xb2/0x220 [ 251.794654][ T7662] ? drm_prime_destroy_file_private+0x43/0x60 [ 251.800700][ T7662] handle_bug+0x127/0x260 [ 251.805008][ T7662] exc_invalid_op+0x17/0x50 [ 251.809489][ T7662] asm_exc_invalid_op+0x1a/0x20 [ 251.814319][ T7662] RIP: 0010:drm_prime_destroy_file_private+0x43/0x60 [ 251.820977][ T7662] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 21 48 8b 83 90 00 00 00 48 85 c0 75 06 5b e9 03 ae 6c fc e8 fe ad 6c fc 90 <0f> 0b 90 5b e9 f4 ad 6c fc e8 af 7b d6 fc eb d8 66 66 2e 0f 1f 84 [ 251.840561][ T7662] RSP: 0018:ffffc90003417ca0 EFLAGS: 00010293 [ 251.846609][ T7662] RAX: 0000000000000000 RBX: ffff888030239380 RCX: ffffffff8b78d5d1 [ 251.854566][ T7662] RDX: ffff88802b928000 RSI: ffffffff855235c2 RDI: ffff888030239410 [ 251.862511][ T7662] RBP: ffff888030239000 R08: 0000000000000001 R09: fffff52000682f74 [ 251.870462][ T7662] R10: ffffc90003417ba7 R11: 0000000000000000 R12: ffff888147e9e000 [ 251.878418][ T7662] R13: ffff8880302392b0 R14: 0000000000000000 R15: ffff8880302392d8 [ 251.886371][ T7662] ? __mutex_unlock_slowpath+0x161/0x790 [ 251.891985][ T7662] ? drm_prime_destroy_file_private+0x42/0x60 [ 251.898045][ T7662] drm_file_free.part.0+0x7ee/0xcd0 [ 251.903227][ T7662] ? __pfx___fsnotify_parent+0x10/0x10 [ 251.908675][ T7662] drm_close_helper.isra.0+0x186/0x1f0 [ 251.914113][ T7662] drm_release+0x1ab/0x360 [ 251.918509][ T7662] ? __pfx_drm_release+0x10/0x10 [ 251.923423][ T7662] __fput+0x402/0xb70 [ 251.927383][ T7662] task_work_run+0x150/0x240 [ 251.931957][ T7662] ? __pfx_task_work_run+0x10/0x10 [ 251.937043][ T7662] ? __do_sys_close_range+0x278/0x730 [ 251.942397][ T7662] exit_to_user_mode_loop+0xfb/0x540 [ 251.947664][ T7662] do_syscall_64+0x4ee/0xf80 [ 251.952233][ T7662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.958103][ T7662] RIP: 0033:0x7f21cb98f749 [ 251.962513][ T7662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.982101][ T7662] RSP: 002b:00007ffcd8b0e1e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 251.990495][ T7662] RAX: 0000000000000000 RBX: 000000000003d5da RCX: 00007f21cb98f749 [ 251.998445][ T7662] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 252.006396][ T7662] RBP: 00007f21cbbe7da0 R08: 0000000000000001 R09: 00000007d8b0e4df [ 252.014344][ T7662] R10: 0000001b2f220000 R11: 0000000000000246 R12: 00007f21cbbe5fac [ 252.022294][ T7662] R13: 00007f21cbbe5fa0 R14: ffffffffffffffff R15: 00007ffcd8b0e300 [ 252.030249][ T7662] [ 252.033558][ T7662] Kernel Offset: disabled [ 252.037871][ T7662] Rebooting in 86400 seconds..