last executing test programs: 11.652720173s ago: executing program 4 (id=139): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f00000001c0)={0x40, 0x14, 0x7, "21676615e0f71d"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="201019"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.481480073s ago: executing program 3 (id=150): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000100)={0x0, 0x22, 0x1b, {[@main=@item_4={0x3, 0x0, 0xa, "206e66dc"}, @main=@item_4={0x3, 0x0, 0xa, "25dcc6d9"}, @global=@item_4={0x3, 0x1, 0x7}, @local=@item_4={0x3, 0x2, 0x8, "cc7af532"}, @main=@item_4={0x3, 0x0, 0xc, "190bedfd"}, @local=@item_012={0x1, 0x2, 0x2, 'Z'}]}}, 0x0}, 0x0) 8.386692706s ago: executing program 4 (id=152): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000000), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect$uac1(0x69a90eab3db9c902, 0x87, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x4, 0xa0, 0x6}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r1, 0x4b63, 0x3) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x1}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000007000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020737200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 7.844464552s ago: executing program 2 (id=155): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x7c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000681000/0x1000)=nil, 0x1000}, 0x2}) 7.20424158s ago: executing program 2 (id=156): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x10000a0) inotify_init1(0x0) r1 = io_uring_setup(0x17e7, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x7d842c78, 0x112}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000c80)={"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"}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x100000008, 0x7f, 0x1, 0x0, 0x2, 0xfffffffffffff804, 0x0, 0x0, 0x0, 0x200, 0x7, 0x0, 0x1, 0x8], 0xeeee0000, 0x4fb40}) ioctl$KVM_RUN(r4, 0xae80, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000000)='`', 0x1) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000300), 0x2) 6.87652292s ago: executing program 2 (id=159): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000009e0000006a0a00ff000000007908280400000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000010000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffec4, 0x10, 0x0, 0x1e, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x2d) 6.785978943s ago: executing program 2 (id=160): syz_usb_connect(0x3, 0x6b, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x15, 0x9c, 0xe1, 0x40, 0x19d2, 0x25, 0xbadf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x59, 0x1, 0x0, 0x6, 0x10, 0xeb}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0xe, 0x8, 0x3, 0x8, 0x20}, 0x5a, &(0x7f00000000c0)={0x5, 0xf, 0xfffffffffffffe22, 0x1}, 0x7}) 5.978950958s ago: executing program 4 (id=162): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f0000000380)={0x40, 0x9, 0x11, {0x11, 0x23, "70a066a212b2fee17c7d14e9baebbc"}}, 0x0, &(0x7f0000001540)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x0, 0x0, 0x9, 0x4, 0x1, 0x61a1}}}, 0x0) 5.357919187s ago: executing program 3 (id=167): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000003c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400, 0x0, 0x1, 0x8, 0xe, 0x5}, 0x20) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f5, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 4.35501461s ago: executing program 3 (id=169): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.320075929s ago: executing program 2 (id=170): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x12c2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220b000000a091"], 0x0}, 0x0) 4.124956363s ago: executing program 3 (id=171): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @local=@item_4={0x3, 0x2, 0x2, "7d59aa68"}, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_4={0x3, 0x1, 0x0, "748cc7b4"}, @main=@item_4={0x3, 0x0, 0xb, "c83e2503"}, @local=@item_4={0x3, 0x2, 0x2, "b09ea549"}, @main=@item_4={0x3, 0x0, 0x8, "ce9abc16"}]}}, 0x0}, 0x0) 3.41639778s ago: executing program 1 (id=172): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setuid(0xee00) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0xfffffffc, 0x0, 0x10, 0x0, 0x7, 0x83, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x1, 0x8, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0x800000d, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x8a, '\x00', 0x8}, {0x4, 0x8, 0x2, '\x00', 0xb}, {0x4, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0x11}, {0x5, 0x9, 0x8, '\x00', 0xb4}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x5, 0xc, '\x00', 0x2}, {0x7f, 0x44, 0x1, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0x6}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x28}, {0xcf, 0x5, 0x5, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x8, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x1}, {0x98, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0x29, 0x80, '\x00', 0x7f}, {0x90, 0x6, 0x15, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x2, 0x4}]}}) 3.34613111s ago: executing program 0 (id=173): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) poll(0x0, 0x0, 0x7) 3.229036319s ago: executing program 0 (id=174): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0xa, 0x6, @remote}, 0x14) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x80, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x800, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xffffbff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x9, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x80000000, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.169264624s ago: executing program 1 (id=175): openat$vcsa(0xffffffffffffff9c, 0x0, 0x88042, 0x0) openat$rtc(0xffffff9c, &(0x7f0000000040), 0xa200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x72}, [@ldst={0x4, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x50a23}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 3.093793141s ago: executing program 4 (id=176): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000001c0)={0x38, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}}, 0x10004000) 3.017357909s ago: executing program 4 (id=177): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x111, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x28, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x40, 0x9}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) socket$inet6(0xa, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 2.417337526s ago: executing program 1 (id=178): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008810) 2.35535871s ago: executing program 0 (id=179): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa2, 0xd9, 0x99, 0x20, 0x4b3, 0x4001, 0x110, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x10, 0x0, 0x10}}]}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x101, 0x7fff, 0xcc, 0x40}, 0x50) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt(0xffffffffffffffff, 0x29, 0x31, 0x0, &(0x7f0000001ffc)) r2 = openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.controllers\x00', 0x275a, 0xfffe) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7f, 0x8, &(0x7f00000000c0)) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/255, 0xff}, {&(0x7f0000000200)=""/209, 0xd1}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x3, 0x800000, 0x5) ioctl$sock_TIOCINQ(r2, 0x541b, 0x0) 2.185118748s ago: executing program 1 (id=180): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000000400)=""/4096, 0xc00) 2.025165185s ago: executing program 1 (id=181): capset(0x0, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0x2}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/packet\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x2, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f00000000c0)={0x4000009, 0x3c, 0x4, 0x17, 0x3, 0xc0, 0x5, 0x14c, 0x1}) recvmmsg$unix(r4, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x42, 0x0) 1.467481034s ago: executing program 3 (id=182): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r0 = userfaultfd(0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) read(r0, &(0x7f00000002c0)=""/153, 0x99) 1.181087055s ago: executing program 2 (id=183): syz_usb_connect$cdc_ecm(0x0, 0x66, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x54, 0x1, 0x1, 0x0, 0x50}}]}}, 0x0) 1.075772917s ago: executing program 1 (id=184): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000240)={{0x2, 0x4e21, @empty}, {0x1, @broadcast}, 0x38, {0x2, 0x4e23, @private=0xa010101}, 'ip6gre0\x00'}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80}}]}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet(r2, &(0x7f0000000000)={0x2, 0x2, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000200)={0x14, 0x0, 0xffffffffffffffff}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) 706.003148ms ago: executing program 0 (id=185): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)=@generic={0x0, r1}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x1, 0x0, 0xfffffffc, {0x0, 0x0, 0xe403, 0x0, 0x0, 0x2}}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfd44) 581.057766ms ago: executing program 0 (id=186): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r0, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x2c}}, 0x0) 580.504883ms ago: executing program 3 (id=187): socket(0x41503864490ca358, 0x6, 0xffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f00000014c0)=0x4d) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000880)={0x3ff, {{0x2, 0x4e23, @multicast2}}}, 0x90) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) shutdown(r5, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000440)={&(0x7f000047b000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000340)=0x40) 537.401781ms ago: executing program 0 (id=188): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 4 (id=189): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1c, 0x3, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.83' (ED25519) to the list of known hosts. [ 91.543849][ T30] audit: type=1400 audit(1772269931.798:62): avc: denied { mounton } for pid=5801 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 91.567541][ T30] audit: type=1400 audit(1772269931.818:63): avc: denied { mount } for pid=5801 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 91.569810][ T5801] cgroup: Unknown subsys name 'net' [ 91.597381][ T30] audit: type=1400 audit(1772269931.848:64): avc: denied { unmount } for pid=5801 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 91.713195][ T5801] cgroup: Unknown subsys name 'cpuset' [ 91.720890][ T5801] cgroup: Unknown subsys name 'rlimit' [ 91.839805][ T30] audit: type=1400 audit(1772269932.088:65): avc: denied { setattr } for pid=5801 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.890764][ T30] audit: type=1400 audit(1772269932.088:66): avc: denied { create } for pid=5801 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 91.917346][ T5803] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 91.924418][ T30] audit: type=1400 audit(1772269932.088:67): avc: denied { write } for pid=5801 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 91.946390][ T30] audit: type=1400 audit(1772269932.098:68): avc: denied { read } for pid=5801 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 91.967631][ T30] audit: type=1400 audit(1772269932.108:69): avc: denied { mounton } for pid=5801 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 91.993966][ T30] audit: type=1400 audit(1772269932.108:70): avc: denied { mount } for pid=5801 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 92.017375][ T30] audit: type=1400 audit(1772269932.188:71): avc: denied { relabelto } for pid=5803 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 92.884786][ T5801] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.105273][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 97.105288][ T30] audit: type=1400 audit(1772269937.358:76): avc: denied { create } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.142247][ T30] audit: type=1400 audit(1772269937.358:77): avc: denied { read write } for pid=5817 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 97.166646][ T30] audit: type=1400 audit(1772269937.358:78): avc: denied { open } for pid=5817 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 97.190207][ T30] audit: type=1400 audit(1772269937.368:79): avc: denied { ioctl } for pid=5817 comm="syz-executor" path="socket:[4681]" dev="sockfs" ino=4681 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.242441][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.249914][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.256684][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.258191][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.264354][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.276825][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.279587][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.285952][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.292634][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.299931][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.306481][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.313766][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.320859][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.327188][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.341572][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.341652][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.348608][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.356102][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.363730][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.377203][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.385920][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.389513][ T30] audit: type=1400 audit(1772269937.638:80): avc: denied { read } for pid=5817 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 97.393867][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.422953][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.425482][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.437681][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.472570][ T30] audit: type=1400 audit(1772269937.668:81): avc: denied { open } for pid=5818 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 97.522139][ T30] audit: type=1400 audit(1772269937.668:82): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 97.767757][ T30] audit: type=1400 audit(1772269938.018:83): avc: denied { module_request } for pid=5818 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 97.852696][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 97.900608][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 97.938787][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 98.013718][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 98.055905][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 98.126167][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.133673][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.140867][ T5818] bridge_slave_0: entered allmulticast mode [ 98.147567][ T5818] bridge_slave_0: entered promiscuous mode [ 98.162082][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.169163][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.176408][ T5821] bridge_slave_0: entered allmulticast mode [ 98.183260][ T5821] bridge_slave_0: entered promiscuous mode [ 98.206026][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.213308][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.220587][ T5818] bridge_slave_1: entered allmulticast mode [ 98.227510][ T5818] bridge_slave_1: entered promiscuous mode [ 98.234470][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.241538][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.248599][ T5824] bridge_slave_0: entered allmulticast mode [ 98.255324][ T5824] bridge_slave_0: entered promiscuous mode [ 98.261904][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.268967][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.276331][ T5821] bridge_slave_1: entered allmulticast mode [ 98.282988][ T5821] bridge_slave_1: entered promiscuous mode [ 98.309340][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.316449][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.323747][ T5824] bridge_slave_1: entered allmulticast mode [ 98.330364][ T5824] bridge_slave_1: entered promiscuous mode [ 98.347582][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.354815][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.361967][ T5820] bridge_slave_0: entered allmulticast mode [ 98.368593][ T5820] bridge_slave_0: entered promiscuous mode [ 98.401093][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.408184][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.415583][ T5820] bridge_slave_1: entered allmulticast mode [ 98.422315][ T5820] bridge_slave_1: entered promiscuous mode [ 98.431443][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.449595][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.461271][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.483538][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.494334][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.505709][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.520421][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.527840][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.534993][ T5817] bridge_slave_0: entered allmulticast mode [ 98.541624][ T5817] bridge_slave_0: entered promiscuous mode [ 98.585663][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.592838][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.600577][ T5817] bridge_slave_1: entered allmulticast mode [ 98.607584][ T5817] bridge_slave_1: entered promiscuous mode [ 98.615804][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.626786][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.637544][ T5818] team0: Port device team_slave_0 added [ 98.650677][ T5821] team0: Port device team_slave_0 added [ 98.657747][ T5824] team0: Port device team_slave_0 added [ 98.677047][ T5818] team0: Port device team_slave_1 added [ 98.690210][ T5821] team0: Port device team_slave_1 added [ 98.697093][ T5824] team0: Port device team_slave_1 added [ 98.740186][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.747160][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.773116][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.786049][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.797508][ T5820] team0: Port device team_slave_0 added [ 98.803729][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.810651][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.836545][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.854314][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.861433][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.887472][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.904445][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.914934][ T5820] team0: Port device team_slave_1 added [ 98.928240][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.935283][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.961616][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.972830][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.979749][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.005913][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.043398][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.050337][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.076230][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.102461][ T5817] team0: Port device team_slave_0 added [ 99.120050][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.127158][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.153223][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.172713][ T5817] team0: Port device team_slave_1 added [ 99.189816][ T5818] hsr_slave_0: entered promiscuous mode [ 99.196022][ T5818] hsr_slave_1: entered promiscuous mode [ 99.202769][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.209692][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.236185][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.250626][ T5824] hsr_slave_0: entered promiscuous mode [ 99.256873][ T5824] hsr_slave_1: entered promiscuous mode [ 99.262925][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 99.268674][ T5824] Cannot create hsr debugfs directory [ 99.311427][ T5821] hsr_slave_0: entered promiscuous mode [ 99.317544][ T5821] hsr_slave_1: entered promiscuous mode [ 99.323559][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 99.329270][ T5821] Cannot create hsr debugfs directory [ 99.343676][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.350624][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.376656][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.388919][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.396042][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.422308][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.433304][ T51] Bluetooth: hci0: command tx timeout [ 99.441185][ T51] Bluetooth: hci1: command tx timeout [ 99.511121][ T51] Bluetooth: hci3: command tx timeout [ 99.516634][ T5834] Bluetooth: hci4: command tx timeout [ 99.523012][ T5836] Bluetooth: hci2: command tx timeout [ 99.564973][ T5820] hsr_slave_0: entered promiscuous mode [ 99.571107][ T5820] hsr_slave_1: entered promiscuous mode [ 99.576936][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 99.582965][ T5820] Cannot create hsr debugfs directory [ 99.603233][ T5817] hsr_slave_0: entered promiscuous mode [ 99.609187][ T5817] hsr_slave_1: entered promiscuous mode [ 99.615132][ T5817] debugfs: 'hsr0' already exists in 'hsr' [ 99.620847][ T5817] Cannot create hsr debugfs directory [ 99.876216][ T5824] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 99.891193][ T5824] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 99.900109][ T5824] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 99.918011][ T5824] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 99.954999][ T5821] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 99.973476][ T5821] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 99.983229][ T5821] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.004076][ T5821] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 100.065966][ T5817] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.087682][ T5817] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.097084][ T5817] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.107123][ T5817] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.173178][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.179954][ T5820] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.193450][ T5820] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.220494][ T5820] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.230065][ T5820] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.253335][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.282575][ T133] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.289807][ T133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.315854][ T5818] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.327594][ T133] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.334674][ T133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.358810][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.367602][ T5818] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.379824][ T5818] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.403734][ T5818] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.432151][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.458215][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.465386][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.485088][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.500497][ T133] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.507598][ T133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.535992][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.556492][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.563605][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.574718][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.581773][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.623744][ T30] audit: type=1400 audit(1772269940.878:84): avc: denied { sys_module } for pid=5824 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 100.659118][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.690313][ T5821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.732890][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.756653][ T133] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.763816][ T133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.794837][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.801939][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.857224][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.918027][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.950023][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.969517][ T5820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.003350][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.010470][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.032107][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.039188][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.067274][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.082613][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.242605][ T5817] veth0_vlan: entered promiscuous mode [ 101.268261][ T5817] veth1_vlan: entered promiscuous mode [ 101.295864][ T5821] veth0_vlan: entered promiscuous mode [ 101.325179][ T5821] veth1_vlan: entered promiscuous mode [ 101.355987][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.377949][ T5817] veth0_macvtap: entered promiscuous mode [ 101.393386][ T5817] veth1_macvtap: entered promiscuous mode [ 101.433876][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.444901][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.473737][ T1003] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.489670][ T5821] veth0_macvtap: entered promiscuous mode [ 101.497250][ T1003] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.507621][ T1003] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.512029][ T5836] Bluetooth: hci1: command tx timeout [ 101.522422][ T51] Bluetooth: hci0: command tx timeout [ 101.525311][ T5824] veth0_vlan: entered promiscuous mode [ 101.541685][ T1003] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.555541][ T5821] veth1_macvtap: entered promiscuous mode [ 101.581453][ T5824] veth1_vlan: entered promiscuous mode [ 101.591588][ T51] Bluetooth: hci3: command tx timeout [ 101.596746][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.597050][ T5834] Bluetooth: hci4: command tx timeout [ 101.609781][ T5836] Bluetooth: hci2: command tx timeout [ 101.620615][ T5820] veth0_vlan: entered promiscuous mode [ 101.655390][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.678637][ T5820] veth1_vlan: entered promiscuous mode [ 101.686585][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.700298][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.711622][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.755605][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.764783][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.775479][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.780521][ T5818] veth0_vlan: entered promiscuous mode [ 101.791139][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.804015][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.814477][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.824700][ T30] audit: type=1400 audit(1772269942.078:85): avc: denied { mounton } for pid=5817 comm="syz-executor" path="/root/syzkaller.iGmRdF/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 101.860477][ T5818] veth1_vlan: entered promiscuous mode [ 101.873850][ T5824] veth0_macvtap: entered promiscuous mode [ 101.883196][ T5817] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 101.936317][ T5824] veth1_macvtap: entered promiscuous mode [ 101.982340][ T5820] veth0_macvtap: entered promiscuous mode [ 101.990333][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.006585][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.030461][ T5818] veth0_macvtap: entered promiscuous mode [ 102.053878][ T5820] veth1_macvtap: entered promiscuous mode [ 102.080092][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.095022][ T5818] veth1_macvtap: entered promiscuous mode [ 102.104676][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.116195][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.124163][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.145707][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.160626][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.189928][ T1003] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.235715][ T1003] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.260491][ T1003] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.278345][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 102.278358][ T30] audit: type=1400 audit(1772269942.528:104): avc: denied { read } for pid=5937 comm="syz.3.4" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 102.322084][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.349394][ T1003] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.352039][ T30] audit: type=1400 audit(1772269942.558:105): avc: denied { open } for pid=5937 comm="syz.3.4" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 102.365576][ T1003] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.421500][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.430043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.728693][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.831113][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.894016][ T30] audit: type=1400 audit(1772269942.698:106): avc: denied { create } for pid=5937 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 102.914111][ T30] audit: type=1400 audit(1772269942.698:107): avc: denied { getopt } for pid=5937 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 102.934076][ T30] audit: type=1400 audit(1772269942.698:108): avc: denied { read write } for pid=5937 comm="syz.3.4" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 102.937840][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.958956][ T30] audit: type=1400 audit(1772269942.698:109): avc: denied { open } for pid=5937 comm="syz.3.4" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 103.001952][ T1003] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.007560][ T30] audit: type=1400 audit(1772269942.708:110): avc: denied { read } for pid=5937 comm="syz.3.4" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 103.014445][ T1003] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.042884][ T30] audit: type=1400 audit(1772269942.708:111): avc: denied { open } for pid=5937 comm="syz.3.4" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 103.066138][ T30] audit: type=1400 audit(1772269943.258:112): avc: denied { create } for pid=5935 comm="syz.1.6" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 103.088609][ T1003] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.091103][ T30] audit: type=1400 audit(1772269943.258:113): avc: denied { ioctl } for pid=5935 comm="syz.1.6" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=7844 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 103.160002][ T1003] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.194765][ T1003] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.207154][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.215763][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.264471][ T1003] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.276814][ T1003] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.286781][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.331763][ T948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.347298][ T948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.383855][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.392252][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.413363][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.422052][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.432658][ T9] usb 2-1: device descriptor read/64, error -71 [ 103.475575][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.493496][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.545593][ T133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.568832][ T133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.577646][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.592369][ T5836] Bluetooth: hci1: command tx timeout [ 103.597761][ T5836] Bluetooth: hci0: command tx timeout [ 103.671316][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 103.673359][ T5836] Bluetooth: hci2: command tx timeout [ 103.679037][ T5834] Bluetooth: hci4: command tx timeout [ 103.679062][ T5834] Bluetooth: hci3: command tx timeout [ 103.757141][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.810826][ T9] usb 2-1: device descriptor read/64, error -71 [ 103.821748][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.874124][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.264876][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.347520][ T9] usb usb2-port1: attempt power cycle [ 104.365874][ T10] usb 4-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 104.380359][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.391483][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.401093][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.402224][ T10] usb 4-1: config 0 descriptor?? [ 104.409666][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 104.471909][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 104.480413][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 104.711239][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 105.671325][ T5836] Bluetooth: hci1: command tx timeout [ 105.683640][ T5836] Bluetooth: hci0: command tx timeout [ 105.762713][ T5836] Bluetooth: hci3: command tx timeout [ 105.762726][ T51] Bluetooth: hci4: command tx timeout [ 106.064805][ T5836] Bluetooth: hci2: command tx timeout [ 106.201651][ T10] hid-rmi 0003:0461:4E72.0001: unknown main item tag 0x0 [ 106.265131][ T10] hid-rmi 0003:0461:4E72.0001: unknown main item tag 0x0 [ 106.283117][ T10] hid-rmi 0003:0461:4E72.0001: unknown main item tag 0x0 [ 106.291772][ T10] hid-rmi 0003:0461:4E72.0001: unknown main item tag 0x0 [ 106.298893][ T10] hid-rmi 0003:0461:4E72.0001: unknown main item tag 0x0 [ 106.306634][ T9] usb 2-1: device descriptor read/8, error -71 [ 106.392122][ T10] hid-rmi 0003:0461:4E72.0001: unknown main item tag 0x0 [ 106.406824][ T10] hid-rmi 0003:0461:4E72.0001: unknown main item tag 0x0 [ 106.416494][ T10] hid-rmi 0003:0461:4E72.0001: unknown main item tag 0x0 [ 106.428611][ T10] hid-rmi 0003:0461:4E72.0001: unknown main item tag 0x0 [ 106.436186][ T10] hid-rmi 0003:0461:4E72.0001: unknown main item tag 0x0 [ 106.457201][ T10] hid-rmi 0003:0461:4E72.0001: hidraw0: USB HID vff.fc Device [HID 0461:4e72] on usb-dummy_hcd.3-1/input0 [ 106.510845][ T10] usb 4-1: USB disconnect, device number 2 [ 106.594848][ T5981] fido_id[5981]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 106.693203][ T5983] FAULT_INJECTION: forcing a failure. [ 106.693203][ T5983] name failslab, interval 1, probability 0, space 0, times 0 [ 106.706212][ T5983] CPU: 0 UID: 0 PID: 5983 Comm: syz.1.18 Not tainted syzkaller #0 PREEMPT(full) [ 106.706241][ T5983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 106.706251][ T5983] Call Trace: [ 106.706257][ T5983] [ 106.706263][ T5983] dump_stack_lvl+0x100/0x190 [ 106.706296][ T5983] should_fail_ex.cold+0x5/0xa [ 106.706318][ T5983] should_failslab+0xc2/0x120 [ 106.706344][ T5983] __kmalloc_node_noprof+0xe6/0x850 [ 106.706367][ T5983] ? alloc_slab_obj_exts+0x4e/0x190 [ 106.706385][ T5983] ? find_held_lock+0x2b/0x80 [ 106.706410][ T5983] alloc_slab_obj_exts+0x4e/0x190 [ 106.706430][ T5983] __memcg_slab_post_alloc_hook+0x24a/0x9a0 [ 106.706452][ T5983] ? kasan_save_track+0x14/0x30 [ 106.706477][ T5983] kmem_cache_alloc_lru_noprof+0x592/0x6e0 [ 106.706499][ T5983] ? __d_alloc+0x34/0xa80 [ 106.706524][ T5983] __d_alloc+0x34/0xa80 [ 106.706546][ T5983] d_alloc_parallel+0x111/0x14e0 [ 106.706577][ T5983] ? find_held_lock+0x2b/0x80 [ 106.706598][ T5983] ? __d_lookup+0x25c/0x4a0 [ 106.706621][ T5983] ? __pfx_d_alloc_parallel+0x10/0x10 [ 106.706648][ T5983] ? __d_lookup+0x266/0x4a0 [ 106.706679][ T5983] lookup_open.isra.0+0x57c/0x11b0 [ 106.706708][ T5983] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 106.706747][ T5983] ? lookup_fast+0x2da/0x600 [ 106.706773][ T5983] path_openat+0xa98/0x31a0 [ 106.706798][ T5983] ? __pfx_path_openat+0x10/0x10 [ 106.706823][ T5983] do_file_open+0x20e/0x430 [ 106.706841][ T5983] ? __pfx_do_file_open+0x10/0x10 [ 106.706867][ T5983] ? __pfx_kfree_link+0x10/0x10 [ 106.706897][ T5983] ? alloc_fd+0x476/0x790 [ 106.706916][ T5983] ? do_getname+0x191/0x390 [ 106.706938][ T5983] do_sys_openat2+0x10d/0x1e0 [ 106.706958][ T5983] ? __pfx_do_sys_openat2+0x10/0x10 [ 106.706976][ T5983] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 106.706998][ T5983] ? __fget_files+0x21f/0x3d0 [ 106.707019][ T5983] __x64_sys_openat+0x12d/0x210 [ 106.707039][ T5983] ? __pfx___x64_sys_openat+0x10/0x10 [ 106.707058][ T5983] ? ksys_write+0x1ac/0x250 [ 106.707092][ T5983] do_syscall_64+0x106/0xf80 [ 106.707108][ T5983] ? clear_bhb_loop+0x40/0x90 [ 106.707129][ T5983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.707147][ T5983] RIP: 0033:0x7f4e2b55cfce [ 106.707161][ T5983] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 106.707176][ T5983] RSP: 002b:00007f4e2c49ef28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 106.707193][ T5983] RAX: ffffffffffffffda RBX: 00007f4e2c49f6c0 RCX: 00007f4e2b55cfce [ 106.707204][ T5983] RDX: 0000000000000000 RSI: 00007f4e2b632270 RDI: ffffffffffffff9c [ 106.707214][ T5983] RBP: 00007f4e2c49f090 R08: 0000000000000000 R09: 0000000000000000 [ 106.707223][ T5983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 106.707238][ T5983] R13: 00007f4e2b816038 R14: 00007f4e2b815fa0 R15: 00007ffc6365b388 [ 106.707262][ T5983] [ 106.713245][ T791] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 107.273874][ T791] usb 5-1: Using ep0 maxpacket: 16 [ 107.280562][ T791] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.294303][ T791] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 107.303364][ T791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.713623][ T791] usb 5-1: Product: syz [ 107.719098][ T791] usb 5-1: Manufacturer: syz [ 107.725604][ T791] usb 5-1: SerialNumber: syz [ 107.736730][ T791] usb 5-1: config 0 descriptor?? [ 107.752363][ T791] mcba_usb 5-1:0.0: Can't find endpoints [ 107.974864][ T5885] usb 5-1: USB disconnect, device number 2 [ 108.431070][ T5885] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 108.446404][ T6002] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 108.516545][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 108.516575][ T30] audit: type=1400 audit(1772269948.708:156): avc: denied { create } for pid=5998 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 108.732130][ T30] audit: type=1400 audit(1772269948.728:157): avc: denied { create } for pid=5998 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 108.756197][ T30] audit: type=1400 audit(1772269948.728:158): avc: denied { write } for pid=5998 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 108.777308][ T30] audit: type=1400 audit(1772269948.758:159): avc: denied { ioctl } for pid=5998 comm="syz.2.22" path="socket:[8589]" dev="sockfs" ino=8589 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 108.817955][ T30] audit: type=1400 audit(1772269948.768:160): avc: denied { read } for pid=5998 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 108.842138][ T5885] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 108.852419][ T5885] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 108.869659][ T30] audit: type=1400 audit(1772269949.008:161): avc: denied { name_bind } for pid=6009 comm="syz.4.25" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 108.908519][ T30] audit: type=1400 audit(1772269949.008:162): avc: denied { node_bind } for pid=6009 comm="syz.4.25" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 108.963354][ T30] audit: type=1400 audit(1772269949.218:163): avc: denied { append } for pid=6013 comm="syz.2.27" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 108.987775][ T5885] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 109.009065][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 109.073226][ T5885] usb 1-1: SerialNumber: syz [ 109.113236][ T5885] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 109.190942][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 109.293467][ T30] audit: type=1400 audit(1772269949.538:164): avc: denied { mounton } for pid=6018 comm="syz.1.29" path="/6/bus" dev="tmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 109.351367][ T30] audit: type=1400 audit(1772269949.568:165): avc: denied { unlink } for pid=6018 comm="syz.1.29" name="#1" dev="tmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 109.373329][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 109.391373][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 109.399976][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.412467][ T9] usb 5-1: New USB device found, idVendor=0eef, idProduct=480e, bcdDevice= 0.40 [ 109.422031][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.430002][ T9] usb 5-1: Product: syz [ 109.434610][ T9] usb 5-1: SerialNumber: syz [ 109.520793][ T5949] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.658450][ T9] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 109.673025][ T5949] usb 3-1: Using ep0 maxpacket: 16 [ 109.682900][ T5949] usb 3-1: config 1 has an invalid descriptor of length 30, skipping remainder of the config [ 109.697950][ T9] usb 5-1: USB disconnect, device number 3 [ 109.717079][ T5949] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 11 [ 109.732275][ T5949] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 109.741544][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.877520][ T5878] usb 1-1: USB disconnect, device number 2 [ 109.963607][ T6019] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 110.072249][ T5885] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 110.241282][ T5885] usb 4-1: Using ep0 maxpacket: 8 [ 110.250379][ T5885] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.260797][ T5885] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 110.272543][ T5878] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 110.284527][ T5885] usb 4-1: New USB device found, idVendor=0421, idProduct=04ce, bcdDevice=dd.8d [ 110.294346][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.305062][ T5885] usb 4-1: Product: syz [ 110.311271][ T5885] usb 4-1: Manufacturer: syz [ 110.316059][ T5885] usb 4-1: SerialNumber: syz [ 110.326523][ T5885] usb 4-1: config 0 descriptor?? [ 110.452309][ T5878] usb 1-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 110.463115][ T5878] usb 1-1: config 127 has 0 interfaces, different from the descriptor's value: 1 [ 110.476891][ T5878] usb 1-1: New USB device found, idVendor=0e6f, idProduct=b8e2, bcdDevice=59.b2 [ 110.486200][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.517865][ T6036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6036 comm=syz.4.35 [ 110.709935][ T5885] usb 4-1: USB disconnect, device number 3 [ 110.737704][ T5878] usb 1-1: string descriptor 0 read error: -71 [ 110.750915][ T5878] usb 1-1: USB disconnect, device number 3 [ 111.079611][ T6019] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 111.461012][ T5949] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 111.531403][ T815] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 111.536418][ T6052] ======================================================= [ 111.536418][ T6052] WARNING: The mand mount option has been deprecated and [ 111.536418][ T6052] and is ignored by this kernel. Remove the mand [ 111.536418][ T6052] option from the mount to silence this warning. [ 111.536418][ T6052] ======================================================= [ 111.636876][ T5878] usb 3-1: USB disconnect, device number 2 [ 111.872090][ T815] usb 5-1: Using ep0 maxpacket: 16 [ 111.894390][ T815] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 111.906796][ T5949] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.917890][ T815] usb 5-1: config 0 has no interface number 0 [ 111.958934][ T5949] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 111.968605][ T815] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 111.988877][ T5949] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 112.005748][ T815] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 112.480854][ T815] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 112.490808][ T815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.498982][ T5949] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.508127][ T815] usb 5-1: Product: syz [ 112.512305][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.520288][ T5949] usb 2-1: Product: syz [ 112.524521][ T815] usb 5-1: Manufacturer: syz [ 112.529114][ T815] usb 5-1: SerialNumber: syz [ 112.535566][ T5949] usb 2-1: Manufacturer: syz [ 112.540159][ T5949] usb 2-1: SerialNumber: syz [ 112.545585][ T815] usb 5-1: config 0 descriptor?? [ 112.551869][ T6044] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 112.566691][ T6044] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 112.816164][ T6044] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 112.830907][ T6044] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 112.888078][ T6068] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 113.067551][ T6071] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 113.377809][ T5949] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 113.385860][ T815] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 113.400814][ T5949] cdc_ncm 2-1:1.0: bind() failure [ 113.409330][ T815] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 113.419961][ T5949] usb 2-1: USB disconnect, device number 6 [ 113.433737][ T815] asix 5-1:0.251: probe with driver asix failed with error -5 [ 113.450514][ T815] usb 5-1: USB disconnect, device number 4 [ 113.607428][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 113.607443][ T30] audit: type=1400 audit(1772269953.858:185): avc: denied { create } for pid=6067 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 113.688394][ T6075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.48'. [ 113.720824][ T6075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.031558][ T5878] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 114.253316][ T6075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.290763][ T5878] usb 4-1: Using ep0 maxpacket: 8 [ 114.310168][ T5878] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.341665][ T5878] usb 4-1: New USB device found, idVendor=05ac, idProduct=8242, bcdDevice= 0.00 [ 114.387959][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.397380][ T30] audit: type=1400 audit(1772269954.648:186): avc: denied { ioctl } for pid=6087 comm="syz.1.52" path="socket:[9671]" dev="sockfs" ino=9671 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 114.452851][ T5878] usb 4-1: config 0 descriptor?? [ 114.461651][ T5878] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 114.504447][ T30] audit: type=1326 audit(1772269954.758:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6091 comm="syz.2.53" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ef4d9c799 code=0x0 [ 114.674062][ T6095] kvm: kvm [6094]: vcpu0, guest rIP: 0x5408d Unhandled WRMSR(0x40000087) = 0x7 [ 114.763077][ T30] audit: type=1400 audit(1772269955.018:188): avc: denied { read } for pid=6098 comm="syz.4.55" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 114.785945][ T30] audit: type=1400 audit(1772269955.018:189): avc: denied { open } for pid=6098 comm="syz.4.55" path="/dev/rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 114.812487][ T30] audit: type=1400 audit(1772269955.018:190): avc: denied { ioctl } for pid=6098 comm="syz.4.55" path="/dev/rtc0" dev="devtmpfs" ino=922 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 115.034172][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 115.090807][ T5878] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 115.240755][ T5878] usb 5-1: Using ep0 maxpacket: 32 [ 115.249644][ T5878] usb 5-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 115.263254][ T30] audit: type=1400 audit(1772269955.518:191): avc: denied { mounton } for pid=6105 comm="syz.1.58" path="/11/file0" dev="tmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 115.264231][ T5878] usb 5-1: config 253 has 0 interfaces, different from the descriptor's value: 1 [ 115.293473][ T30] audit: type=1400 audit(1772269955.548:192): avc: denied { read write } for pid=6107 comm="syz.0.59" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 115.326225][ T5878] usb 5-1: New USB device found, idVendor=4a06, idProduct=a314, bcdDevice= 4.fd [ 115.336116][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.356408][ T30] audit: type=1400 audit(1772269955.548:193): avc: denied { open } for pid=6107 comm="syz.0.59" path="/dev/uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 115.370720][ T5878] usb 5-1: Product: syz [ 115.409355][ T6110] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.443260][ T30] audit: type=1400 audit(1772269955.578:194): avc: denied { ioctl } for pid=6107 comm="syz.0.59" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x55c9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 115.556864][ T5878] usb 5-1: Manufacturer: syz [ 115.563383][ T5878] usb 5-1: SerialNumber: syz [ 116.052010][ T5878] usb 5-1: USB disconnect, device number 5 [ 116.250591][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 116.833921][ T5885] usb 4-1: USB disconnect, device number 4 [ 116.884792][ T10] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 116.925939][ T10] usb 3-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 116.948867][ T10] usb 3-1: New USB device found, idVendor=08dd, idProduct=0987, bcdDevice=fc.b1 [ 116.968791][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.977324][ T10] usb 3-1: Product: syz [ 116.982021][ T10] usb 3-1: Manufacturer: syz [ 117.095319][ T6141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.67'. [ 117.147003][ T10] usb 3-1: SerialNumber: syz [ 117.945784][ T10] usb 3-1: USB disconnect, device number 3 [ 119.790804][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 119.790834][ T30] audit: type=1400 audit(1772269959.968:216): avc: denied { bind } for pid=6173 comm="syz.1.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.910523][ T30] audit: type=1400 audit(1772269959.968:217): avc: denied { setopt } for pid=6173 comm="syz.1.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.090769][ T5885] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 120.230145][ T6201] netlink: 35 bytes leftover after parsing attributes in process `syz.0.91'. [ 120.241037][ T6201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.91'. [ 120.342304][ T5885] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.495843][ T5885] usb 3-1: string descriptor 0 read error: -22 [ 120.623276][ T5885] usb 3-1: New USB device found, idVendor=057e, idProduct=2017, bcdDevice= 0.40 [ 120.724599][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.888290][ T5885] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 120.911282][ T5949] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 121.255950][ T6214] xt_TPROXY: Can be used only with -p tcp or -p udp [ 121.462778][ T10] usb 3-1: USB disconnect, device number 4 [ 121.474498][ T6217] netlink: 60 bytes leftover after parsing attributes in process `syz.4.95'. [ 121.483833][ T6219] netlink: 156 bytes leftover after parsing attributes in process `syz.1.96'. [ 121.489075][ T6217] unsupported nlmsg_type 40 [ 121.507753][ T6219] tipc: Started in network mode [ 121.516520][ T6219] tipc: Node identity 000000005f003a000000000000000001, cluster identity 4711 [ 121.527987][ T6219] tipc: Enabling of bearer rejected, failed to enable media [ 121.582097][ T5949] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.603095][ T5949] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 121.624411][ T6221] overlayfs: missing 'lowerdir' [ 121.662643][ T5949] usb 4-1: config 1 interface 1 has no altsetting 0 [ 121.703818][ T30] audit: type=1400 audit(1772269961.958:218): avc: denied { bind } for pid=6222 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 121.723531][ T5949] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 121.737829][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.747819][ T5949] usb 4-1: Product: syz [ 121.757323][ T30] audit: type=1400 audit(1772269961.958:219): avc: denied { connect } for pid=6222 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 121.778302][ T5949] usb 4-1: Manufacturer: syz [ 121.787296][ T5949] usb 4-1: SerialNumber: syz [ 121.794770][ T30] audit: type=1400 audit(1772269961.958:220): avc: denied { read write } for pid=6222 comm="syz.1.99" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 121.821677][ T30] audit: type=1400 audit(1772269961.958:221): avc: denied { open } for pid=6222 comm="syz.1.99" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 121.867868][ T30] audit: type=1400 audit(1772269961.958:222): avc: denied { ioctl } for pid=6222 comm="syz.1.99" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 121.914166][ T30] audit: type=1400 audit(1772269962.168:223): avc: denied { write } for pid=6227 comm="syz.4.100" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 122.046286][ T6233] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 122.159204][ T30] audit: type=1400 audit(1772269962.298:224): avc: denied { mounton } for pid=6224 comm="syz.0.98" path="/26/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 122.331166][ T5885] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 122.414364][ T5949] usb 4-1: selecting invalid altsetting 0 [ 122.420172][ T5949] usb 4-1: selecting invalid altsetting 0 [ 122.426467][ T5949] cdc_ncm 4-1:1.0: bind() failure [ 122.435547][ T5949] usb 4-1: selecting invalid altsetting 0 [ 122.441330][ T5949] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -22 [ 122.449427][ T5949] usb 4-1: selecting invalid altsetting 0 [ 122.455330][ T5949] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -22 [ 122.460201][ T6234] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 122.463949][ T5949] usb 4-1: selecting invalid altsetting 0 [ 122.480154][ T30] audit: type=1400 audit(1772269962.708:225): avc: denied { load_policy } for pid=6232 comm="syz.4.102" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 122.509695][ T6234] SELinux: failed to load policy [ 122.514911][ T5949] usbtest 4-1:1.1: probe with driver usbtest failed with error -22 [ 122.530069][ T5949] usb 4-1: USB disconnect, device number 5 [ 122.690640][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.707120][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.719427][ T5885] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 122.730349][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.742404][ T5885] usb 2-1: config 0 descriptor?? [ 122.751240][ T6245] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 123.447548][ T5885] hid_parser_main: 1 callbacks suppressed [ 123.447569][ T5885] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 123.460514][ T5885] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 123.467575][ T5885] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 123.474578][ T5885] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 123.481646][ T5885] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 123.488607][ T5885] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 123.496044][ T5885] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 123.504610][ T5885] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 123.646673][ T5885] cp2112 0003:10C4:EA90.0002: Part Number: 0x82 Device Version: 0xFE [ 124.048685][ T5885] cp2112 0003:10C4:EA90.0002: error setting SMBus config [ 124.057122][ T5885] cp2112 0003:10C4:EA90.0002: probe with driver cp2112 failed with error -71 [ 124.069725][ T5885] usb 2-1: USB disconnect, device number 7 [ 124.117368][ T6254] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 124.123879][ T6254] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 124.134085][ T6254] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 124.143274][ T6254] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 124.149312][ T6254] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 124.156978][ T6254] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 124.164394][ T6254] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 124.170335][ T6254] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 124.177184][ T6254] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 124.185211][ T6254] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 124.191298][ T6254] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 124.197821][ T6254] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 124.204558][ T6254] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 124.210478][ T6254] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 124.217981][ T6254] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 124.844442][ T10] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 124.852682][ T5949] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 125.031867][ T5949] usb 1-1: Using ep0 maxpacket: 16 [ 125.038721][ T5949] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.038804][ T10] usb 5-1: No LPM exit latency info found, disabling LPM. [ 125.057629][ T5949] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.068063][ T5949] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 125.081066][ T5949] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 125.090146][ T5949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.098685][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.127283][ T10] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 125.136361][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 125.147211][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 125.160610][ T10] usb 5-1: string descriptor 0 read error: -22 [ 125.167027][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 125.176326][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.189261][ T5885] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 125.202895][ T5949] usb 1-1: config 0 descriptor?? [ 125.233936][ T10] usb 5-1: low speed audio streaming not supported [ 125.243734][ T10] usb 5-1: 0:2 : does not exist [ 125.362083][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.373036][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.382785][ T5885] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 125.395679][ T5885] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 125.404735][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.415733][ T5885] usb 2-1: config 0 descriptor?? [ 125.430998][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.470372][ T9] usb 5-1: USB disconnect, device number 6 [ 125.490751][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 125.630335][ T6259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.642907][ T6259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.646927][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.661851][ T10] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 125.664216][ T6259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.674183][ T10] usb 4-1: New USB device found, idVendor=2100, idProduct=9e66, bcdDevice=c7.28 [ 125.684433][ T6259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.689518][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.714811][ T5949] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 125.722573][ T5949] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 125.734798][ T5949] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 125.884614][ T5885] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 125.906320][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 125.906334][ T30] audit: type=1400 audit(1772269966.158:235): avc: denied { getopt } for pid=6277 comm="syz.2.119" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 125.933703][ T6278] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 125.945273][ T5885] usb 4-1: USB disconnect, device number 6 [ 125.948932][ T5949] microsoft 0003:045E:07DA.0003: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 125.978995][ T5949] microsoft 0003:045E:07DA.0003: no inputs found [ 125.991491][ T30] audit: type=1400 audit(1772269966.218:236): avc: denied { ioctl } for pid=6277 comm="syz.2.119" path="socket:[10305]" dev="sockfs" ino=10305 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 126.021188][ T5949] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 126.045032][ T5949] usb 1-1: USB disconnect, device number 4 [ 126.062198][ T6280] fido_id[6280]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 126.150847][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 126.187487][ T5885] usb 2-1: USB disconnect, device number 8 [ 126.231093][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 126.237128][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 126.243322][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 126.259623][ T30] audit: type=1400 audit(1772269966.508:237): avc: denied { connect } for pid=6287 comm="syz.4.124" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 126.376388][ T30] audit: type=1400 audit(1772269966.628:238): avc: denied { mount } for pid=6291 comm="syz.4.125" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 126.422614][ T30] audit: type=1400 audit(1772269966.628:239): avc: denied { remount } for pid=6291 comm="syz.4.125" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 126.442709][ T30] audit: type=1400 audit(1772269966.678:240): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 126.572962][ T6296] vcan0: entered allmulticast mode [ 126.739981][ T6296] netlink: 24 bytes leftover after parsing attributes in process `syz.2.123'. [ 126.964592][ T30] audit: type=1400 audit(1772269967.218:241): avc: denied { read } for pid=6301 comm="syz.0.128" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 127.021056][ T30] audit: type=1400 audit(1772269967.218:242): avc: denied { open } for pid=6301 comm="syz.0.128" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 127.047451][ T30] audit: type=1400 audit(1772269967.248:243): avc: denied { ioctl } for pid=6301 comm="syz.0.128" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 127.073934][ T5939] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 127.080602][ T30] audit: type=1400 audit(1772269967.298:244): avc: denied { nlmsg_write } for pid=6303 comm="syz.3.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 127.233174][ T6308] hub 8-0:1.0: USB hub found [ 127.239198][ T6308] hub 8-0:1.0: 1 port detected [ 127.257693][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.274521][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.326871][ T5939] usb 5-1: unable to get BOS descriptor or descriptor too short [ 127.412666][ T5939] usb 5-1: not running at top speed; connect to a high speed hub [ 127.542930][ T5939] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.590813][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.616016][ T5939] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 127.637843][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.646113][ T5939] usb 5-1: Product: ᶑ셋ᶯ㠬䣫䂠蒏껫⽥萔璔넺ᩇ켯텐⌟龂ฃ᰾⛥慎障먧눧ᒸ⳻⏂◖ᒂ뵁㰦▢衂쫕帡큔ꋗ靐鑂鈅慡踚閴胂駻䔧䃅㦫⋱퀝縏弘ꕇ燍駍ힻ泌㝼轙蚈攔貸⣐鱳ꢁⱰ羫├䴿칫父ᚻ㘑䙶ȷ↨퟼椔侨꫗ꥥ旇揙쬐徼ቛ㎫毖㾖 [ 127.678065][ T5939] usb 5-1: SerialNumber: а [ 127.756130][ T5949] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 127.912156][ T5939] usb 5-1: bad CDC descriptors [ 127.920980][ T5949] usb 1-1: Using ep0 maxpacket: 8 [ 127.944962][ T5939] usb 5-1: USB disconnect, device number 7 [ 127.945600][ T5949] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.985002][ T5949] usb 1-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 127.997868][ T5949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.043141][ T5949] usb 1-1: config 0 descriptor?? [ 128.055683][ T5949] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 128.232261][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 128.276882][ T6333] fuse: Bad value for 'fd' [ 128.284987][ T6333] netlink: 16 bytes leftover after parsing attributes in process `syz.2.137'. [ 128.311865][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 128.318237][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 128.325935][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 128.401096][ T5939] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 128.590609][ T6306] netlink: 24 bytes leftover after parsing attributes in process `syz.0.129'. [ 128.595883][ T5949] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 128.613440][ T5939] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.624331][ T5939] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 128.633648][ T5939] usb 4-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 128.644955][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.658364][ T5939] usb 4-1: config 0 descriptor?? [ 128.772500][ T5949] usb 2-1: LPM exit latency is zeroed, disabling LPM. [ 128.780201][ T5949] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.793120][ T5949] usb 2-1: string descriptor 0 read error: -22 [ 128.799364][ T5949] usb 2-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.40 [ 128.808845][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.823313][ T5949] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 128.871311][ T5949] usb 4-1: USB disconnect, device number 7 [ 128.929009][ T9] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 129.036881][ T5939] usb 2-1: USB disconnect, device number 9 [ 129.101975][ T9] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 129.110133][ T9] usb 5-1: config 0 has no interface number 0 [ 129.118327][ T9] usb 5-1: config 0 interface 41 has no altsetting 0 [ 129.122593][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 129.133022][ T9] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 129.146070][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.155443][ T9] usb 5-1: Product: syz [ 129.159581][ T9] usb 5-1: Manufacturer: syz [ 129.164562][ T9] usb 5-1: SerialNumber: syz [ 129.170613][ T9] usb 5-1: config 0 descriptor?? [ 129.200780][ T791] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 129.360761][ T791] usb 3-1: Using ep0 maxpacket: 16 [ 129.367577][ T791] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.380722][ T791] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.391425][ T791] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 129.404666][ T791] usb 3-1: config 0 interface 0 has no altsetting 0 [ 129.420939][ T791] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 129.440731][ T791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.459520][ T791] usb 3-1: config 0 descriptor?? [ 129.670770][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 129.928773][ T791] hid (null): bogus close delimiter [ 130.188795][ T791] usb 3-1: USB disconnect, device number 5 [ 130.311021][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 130.386849][ T5949] usb 1-1: USB disconnect, device number 5 [ 130.403408][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 130.409992][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 130.416003][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 130.500497][ T9] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 130.525759][ T9] usb 5-1: USB disconnect, device number 8 [ 130.869313][ T6358] SELinux: security_context_str_to_sid (unc) failed with errno=-22 [ 131.844912][ T6366] netlink: 168 bytes leftover after parsing attributes in process `syz.1.148'. [ 132.224197][ T6368] input: syz0 as /devices/virtual/input/input9 [ 132.375922][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 132.375937][ T30] audit: type=1400 audit(1772269972.618:253): avc: denied { create } for pid=6378 comm="syz.0.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 132.570901][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 132.590741][ T791] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 132.977898][ T791] usb 5-1: not running at top speed; connect to a high speed hub [ 133.015151][ T791] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.035519][ T791] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 133.053845][ T5949] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 133.056343][ T791] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 133.072665][ T791] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 133.092017][ T791] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 133.102895][ T791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.114508][ T791] usb 5-1: Product: syz [ 133.118756][ T791] usb 5-1: Manufacturer: syz [ 133.123802][ T791] usb 5-1: SerialNumber: syz [ 133.133557][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.146958][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.156796][ T30] audit: type=1400 audit(1772269973.398:254): avc: denied { watch } for pid=6387 comm="syz.2.156" path="/28" dev="tmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 133.179178][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 133.194396][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.225379][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.234517][ T5949] usb 2-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 133.249084][ T9] usb 4-1: config 0 descriptor?? [ 133.254112][ T5949] usb 2-1: config 13 has 0 interfaces, different from the descriptor's value: 1 [ 133.281754][ T5949] usb 2-1: New USB device found, idVendor=2639, idProduct=0011, bcdDevice=20.48 [ 133.298704][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.306784][ T5949] usb 2-1: Product: syz [ 133.314323][ T5949] usb 2-1: Manufacturer: syz [ 133.348690][ T5949] usb 2-1: SerialNumber: syz [ 133.452310][ T791] usb 5-1: 0:2 : does not exist [ 133.462509][ T6394] netlink: 56 bytes leftover after parsing attributes in process `syz.0.158'. [ 133.549591][ T791] usb 5-1: USB disconnect, device number 9 [ 133.593115][ T5949] usb 2-1: USB disconnect, device number 10 [ 133.619773][ T5808] udevd[5808]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.708777][ T9] plantronics 0003:047F:FFFF.0006: unbalanced collection at end of report description [ 133.721930][ T9] plantronics 0003:047F:FFFF.0006: parse failed [ 133.734512][ T30] audit: type=1400 audit(1772269973.988:255): avc: denied { create } for pid=6403 comm="syz.0.161" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 133.734683][ T9] plantronics 0003:047F:FFFF.0006: probe with driver plantronics failed with error -22 [ 133.820749][ T815] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 133.919893][ T30] audit: type=1400 audit(1772269974.158:256): avc: denied { mounton } for pid=6403 comm="syz.0.161" path="/38/file0" dev="tmpfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 134.331363][ T9] usb 4-1: USB disconnect, device number 8 [ 134.404951][ T815] usb 3-1: unable to get BOS descriptor set [ 134.417154][ T815] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.427636][ T815] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 134.439731][ T815] usb 3-1: string descriptor 0 read error: -22 [ 134.446309][ T815] usb 3-1: New USB device found, idVendor=19d2, idProduct=0025, bcdDevice=ba.df [ 134.455552][ T815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.466593][ T815] usb 3-1: config 0 descriptor?? [ 134.605522][ T30] audit: type=1400 audit(1772269974.858:257): avc: denied { unlink } for pid=5820 comm="syz-executor" name="file0" dev="tmpfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 134.638680][ T791] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 134.672676][ T30] audit: type=1400 audit(1772269974.928:258): avc: denied { ioctl } for pid=6412 comm="syz.0.164" path="socket:[10693]" dev="sockfs" ino=10693 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 134.746313][ T5939] usb 3-1: USB disconnect, device number 6 [ 134.803505][ T791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.819721][ T791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.833462][ T791] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 134.853796][ T791] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 135.005247][ T791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.016538][ T791] usb 5-1: config 0 descriptor?? [ 135.447548][ T6421] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6421 comm=syz.0.166 [ 135.593243][ T30] audit: type=1400 audit(1772269975.778:259): avc: denied { bind } for pid=6419 comm="syz.3.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 136.018725][ T6427] capability: warning: `syz.3.169' uses deprecated v2 capabilities in a way that may be insecure [ 136.205779][ T791] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x1 [ 136.213260][ T791] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x7 [ 136.222225][ T791] plantronics 0003:047F:FFFF.0007: unbalanced collection at end of report description [ 136.235401][ T791] plantronics 0003:047F:FFFF.0007: parse failed [ 136.241795][ T791] plantronics 0003:047F:FFFF.0007: probe with driver plantronics failed with error -22 [ 136.417172][ T30] audit: type=1400 audit(1772269976.578:260): avc: denied { ioctl } for pid=6424 comm="syz.0.168" path="socket:[11479]" dev="sockfs" ino=11479 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 136.590748][ T791] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 136.635440][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 136.663868][ T5949] usb 5-1: USB disconnect, device number 10 [ 136.800760][ T791] usb 4-1: Using ep0 maxpacket: 16 [ 136.802139][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.807457][ T791] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.816094][ T9] usb 3-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 136.833135][ T791] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.838616][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.854283][ T791] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 136.865767][ T9] usb 3-1: config 0 descriptor?? [ 136.892673][ T791] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 136.911902][ T791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.955974][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 136.962095][ T791] usb 4-1: config 0 descriptor?? [ 137.068615][ T30] audit: type=1400 audit(1772269977.318:261): avc: denied { connect } for pid=6441 comm="syz.0.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 137.167463][ T30] audit: type=1400 audit(1772269977.418:262): avc: denied { write } for pid=6444 comm="syz.1.175" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 137.643197][ T30] audit: type=1400 audit(1772269977.738:263): avc: denied { create } for pid=6444 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 137.711350][ T791] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 137.814323][ T791] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 137.821880][ T791] microsoft 0003:045E:07DA.0008: usage index exceeded [ 137.828638][ T791] microsoft 0003:045E:07DA.0008: item 0 2 2 2 parsing failed [ 137.837425][ T791] microsoft 0003:045E:07DA.0008: parse failed [ 137.843578][ T791] microsoft 0003:045E:07DA.0008: probe with driver microsoft failed with error -22 [ 137.878657][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 138.007665][ T791] usb 4-1: USB disconnect, device number 9 [ 138.051352][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 138.059964][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.080775][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 138.089816][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.114850][ T9] usb 5-1: config 0 descriptor?? [ 138.132952][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 138.136877][ T6458] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 138.153316][ T6458] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 138.169079][ T6458] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 138.177607][ T6458] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 138.186057][ T6458] overlayfs: d_ino too big (35, ino=9223372036854776008, xinobits=3) [ 138.195839][ T6458] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 138.204842][ T6458] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 138.213914][ T6458] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 138.222418][ T6458] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 138.231109][ T6458] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 138.239477][ T6458] overlayfs: d_ino too big (dev, ino=9223372036854775811, xinobits=3) [ 138.248007][ T6458] overlayfs: d_ino too big (io.pressure, ino=4611686018427387915, xinobits=3) [ 138.260758][ T5939] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 138.480430][ T5939] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 138.492880][ T5939] usb 1-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 138.510498][ T5939] usb 1-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10 [ 138.549817][ T30] audit: type=1400 audit(1772269978.778:264): avc: denied { setopt } for pid=6459 comm="syz.1.181" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 138.597299][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.608754][ T5939] usb 1-1: Product: syz [ 138.613821][ T5939] usb 1-1: Manufacturer: syz [ 138.618742][ T5939] usb 1-1: SerialNumber: syz [ 139.101960][ T5939] usb 1-1: USB disconnect, device number 6 [ 139.110755][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 139.129638][ T791] usb 3-1: USB disconnect, device number 7 [ 139.570764][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 139.630869][ T791] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 139.654186][ T6473] SELinux: failed to load policy [ 139.731035][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 139.739901][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.759015][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 139.769060][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.790005][ T10] usb 2-1: config 0 descriptor?? [ 139.802780][ T791] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.808166][ T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 139.841484][ T791] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 139.915869][ T30] audit: type=1400 audit(1772269980.128:265): avc: denied { getopt } for pid=6476 comm="syz.3.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 139.967451][ T791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 139.978875][ T791] usb 3-1: SerialNumber: syz [ 139.989514][ T30] audit: type=1400 audit(1772269980.138:266): avc: denied { name_bind } for pid=6476 comm="syz.3.187" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 140.088445][ T791] usb 3-1: bad CDC descriptors [ 140.265920][ T791] usb 3-1: USB disconnect, device number 8 [ 140.295317][ T5949] usb 5-1: USB disconnect, device number 11 [ 140.368465][ T6487] ------------[ cut here ]------------ [ 140.374052][ T6487] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000) [ 140.398661][ T6487] WARNING: kernel/bpf/verifier.c:2763 at reg_bounds_sanity_check+0x36a/0x1280, CPU#1: syz.4.189/6487 [ 140.409646][ T6487] Modules linked in: [ 140.414086][ T6487] CPU: 1 UID: 0 PID: 6487 Comm: syz.4.189 Not tainted syzkaller #0 PREEMPT(full) [ 140.423641][ T6487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 140.433891][ T6487] RIP: 0010:reg_bounds_sanity_check+0x3aa/0x1280 [ 140.440232][ T6487] Code: ff ff 50 8b 85 6c ff ff ff 50 8b 85 78 ff ff ff 50 8b 85 7c ff ff ff 50 ff 75 b8 4c 8b 4d c0 48 8b 95 70 ff ff ff 48 8b 75 80 <67> 48 0f b9 3a 48 8b 95 48 ff ff ff 48 83 c4 38 48 b8 00 00 00 00 [ 140.459892][ T6487] RSP: 0018:ffffc9000d007280 EFLAGS: 00010283 [ 140.465997][ T6487] RAX: 00000000ffffdfcd RBX: ffff88806a9a327c RCX: 00000000ffffdfcd [ 140.474206][ T6487] RDX: ffffffff8bb8cac0 RSI: ffffffff8bb91a80 RDI: ffffffff90dd7110 [ 140.482366][ T6487] RBP: ffffc9000d007370 R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 140.490427][ T6487] R10: 00000000ffffdfcc R11: 0000000000000000 R12: 00000000ffffdfcd [ 140.498485][ T6487] R13: ffffffffffffdfcc R14: ffff88806a9a3230 R15: ffff88806a9a3284 [ 140.506466][ T6487] FS: 00007f33f3f086c0(0000) GS:ffff888124447000(0000) knlGS:0000000000000000 [ 140.515805][ T6487] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.522740][ T6487] CR2: 00007f33f304eaeb CR3: 000000006a950000 CR4: 00000000003526f0 [ 140.530740][ T6487] Call Trace: [ 140.534018][ T6487] [ 140.536962][ T6487] reg_set_min_max+0x199/0x2d0 [ 140.541752][ T6487] check_cond_jmp_op+0x2b94/0x6860 [ 140.546889][ T6487] ? bpf_mark_stack_read+0x3c0/0x3d0 [ 140.552233][ T6487] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 140.557703][ T6487] ? do_check_common+0x6574/0xcb00 [ 140.562852][ T6487] ? kfree+0x1f6/0x6b0 [ 140.566920][ T6487] ? compute_scc_callchain+0x257/0x370 [ 140.572403][ T6487] do_check_common+0x99b7/0xcb00 [ 140.577376][ T6487] ? __pfx_do_check_common+0x10/0x10 [ 140.582705][ T6487] ? get_call_summary+0x781/0x800 [ 140.587739][ T6487] bpf_check+0xbd53/0xcd50 [ 140.592200][ T6487] ? __pfx_bpf_check+0x10/0x10 [ 140.596974][ T6487] ? avc_has_perm+0x135/0x1e0 [ 140.601672][ T6487] ? __pfx_avc_has_perm+0x10/0x10 [ 140.606710][ T6487] ? bpf_prog_load+0x1c86/0x2c20 [ 140.611679][ T6487] bpf_prog_load+0x1c86/0x2c20 [ 140.616446][ T6487] ? __pfx_bpf_prog_load+0x10/0x10 [ 140.622017][ T6487] ? avc_has_perm_noaudit+0x145/0x3b0 [ 140.627424][ T6487] ? avc_has_perm+0x135/0x1e0 [ 140.632488][ T6487] ? selinux_bpf+0xfb/0x150 [ 140.637185][ T6487] __sys_bpf+0x223a/0x4b90 [ 140.641745][ T6487] ? tomoyo_path_number_perm+0x188/0x580 [ 140.647463][ T6487] ? __pfx___sys_bpf+0x10/0x10 [ 140.652263][ T6487] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 140.658165][ T6487] ? __lock_acquire+0x4a5/0x2630 [ 140.663165][ T6487] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 140.668197][ T6487] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 140.675121][ T6487] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 140.680961][ T6487] ? kcov_ioctl+0x16a/0x720 [ 140.685467][ T6487] __x64_sys_bpf+0x7b/0xc0 [ 140.689882][ T6487] ? lockdep_hardirqs_on+0x78/0x100 [ 140.695114][ T6487] do_syscall_64+0x106/0xf80 [ 140.699705][ T6487] ? clear_bhb_loop+0x40/0x90 [ 140.704570][ T6487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.710464][ T6487] RIP: 0033:0x7f33f2f9c799 [ 140.714989][ T6487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.735140][ T6487] RSP: 002b:00007f33f3f08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 140.743927][ T6487] RAX: ffffffffffffffda RBX: 00007f33f3215fa0 RCX: 00007f33f2f9c799 [ 140.751946][ T6487] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 140.759918][ T6487] RBP: 00007f33f3032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 140.767936][ T6487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.775919][ T6487] R13: 00007f33f3216038 R14: 00007f33f3215fa0 R15: 00007ffecad28f48 [ 140.783939][ T6487] [ 140.786959][ T6487] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 140.794235][ T6487] CPU: 1 UID: 0 PID: 6487 Comm: syz.4.189 Not tainted syzkaller #0 PREEMPT(full) [ 140.803432][ T6487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 140.813493][ T6487] Call Trace: [ 140.816771][ T6487] [ 140.819698][ T6487] dump_stack_lvl+0x100/0x190 [ 140.824392][ T6487] vpanic+0x552/0x970 [ 140.828374][ T6487] ? __pfx_vpanic+0x10/0x10 [ 140.832876][ T6487] panic+0xd1/0xe0 [ 140.836582][ T6487] ? __pfx_panic+0x10/0x10 [ 140.840985][ T6487] check_panic_on_warn.cold+0x19/0x34 [ 140.846341][ T6487] ? reg_bounds_sanity_check+0x36a/0x1280 [ 140.852041][ T6487] __warn.cold+0x191/0x348 [ 140.856438][ T6487] __report_bug+0x296/0x3d0 [ 140.860931][ T6487] ? reg_bounds_sanity_check+0x36a/0x1280 [ 140.866644][ T6487] ? __pfx___report_bug+0x10/0x10 [ 140.871657][ T6487] ? copy_verifier_state+0xbea/0x1010 [ 140.877003][ T6487] ? push_stack+0x1ca/0x380 [ 140.881483][ T6487] ? check_cond_jmp_op+0xaae/0x6860 [ 140.886671][ T6487] ? do_check_common+0x99b7/0xcb00 [ 140.891764][ T6487] ? bpf_check+0xbd53/0xcd50 [ 140.896337][ T6487] ? bpf_prog_load+0x1c86/0x2c20 [ 140.901253][ T6487] ? __sys_bpf+0x223a/0x4b90 [ 140.905820][ T6487] ? __x64_sys_bpf+0x7b/0xc0 [ 140.910393][ T6487] report_bug_entry+0xe1/0x290 [ 140.915144][ T6487] ? reg_bounds_sanity_check+0x3aa/0x1280 [ 140.920848][ T6487] handle_bug+0x1c9/0x2a0 [ 140.925159][ T6487] exc_invalid_op+0x17/0x50 [ 140.929647][ T6487] asm_exc_invalid_op+0x1a/0x20 [ 140.934480][ T6487] RIP: 0010:reg_bounds_sanity_check+0x3aa/0x1280 [ 140.940797][ T6487] Code: ff ff 50 8b 85 6c ff ff ff 50 8b 85 78 ff ff ff 50 8b 85 7c ff ff ff 50 ff 75 b8 4c 8b 4d c0 48 8b 95 70 ff ff ff 48 8b 75 80 <67> 48 0f b9 3a 48 8b 95 48 ff ff ff 48 83 c4 38 48 b8 00 00 00 00 [ 140.960385][ T6487] RSP: 0018:ffffc9000d007280 EFLAGS: 00010283 [ 140.966432][ T6487] RAX: 00000000ffffdfcd RBX: ffff88806a9a327c RCX: 00000000ffffdfcd [ 140.974380][ T6487] RDX: ffffffff8bb8cac0 RSI: ffffffff8bb91a80 RDI: ffffffff90dd7110 [ 140.982328][ T6487] RBP: ffffc9000d007370 R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 140.990293][ T6487] R10: 00000000ffffdfcc R11: 0000000000000000 R12: 00000000ffffdfcd [ 140.998259][ T6487] R13: ffffffffffffdfcc R14: ffff88806a9a3230 R15: ffff88806a9a3284 [ 141.006243][ T6487] reg_set_min_max+0x199/0x2d0 [ 141.011005][ T6487] check_cond_jmp_op+0x2b94/0x6860 [ 141.016109][ T6487] ? bpf_mark_stack_read+0x3c0/0x3d0 [ 141.021381][ T6487] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 141.026829][ T6487] ? do_check_common+0x6574/0xcb00 [ 141.031924][ T6487] ? kfree+0x1f6/0x6b0 [ 141.035974][ T6487] ? compute_scc_callchain+0x257/0x370 [ 141.041420][ T6487] do_check_common+0x99b7/0xcb00 [ 141.046362][ T6487] ? __pfx_do_check_common+0x10/0x10 [ 141.051633][ T6487] ? get_call_summary+0x781/0x800 [ 141.056644][ T6487] bpf_check+0xbd53/0xcd50 [ 141.061057][ T6487] ? __pfx_bpf_check+0x10/0x10 [ 141.065808][ T6487] ? avc_has_perm+0x135/0x1e0 [ 141.070470][ T6487] ? __pfx_avc_has_perm+0x10/0x10 [ 141.075488][ T6487] ? bpf_prog_load+0x1c86/0x2c20 [ 141.080401][ T6487] bpf_prog_load+0x1c86/0x2c20 [ 141.085147][ T6487] ? __pfx_bpf_prog_load+0x10/0x10 [ 141.090240][ T6487] ? avc_has_perm_noaudit+0x145/0x3b0 [ 141.095599][ T6487] ? avc_has_perm+0x135/0x1e0 [ 141.100267][ T6487] ? selinux_bpf+0xfb/0x150 [ 141.104757][ T6487] __sys_bpf+0x223a/0x4b90 [ 141.109149][ T6487] ? tomoyo_path_number_perm+0x188/0x580 [ 141.114773][ T6487] ? __pfx___sys_bpf+0x10/0x10 [ 141.119519][ T6487] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 141.125395][ T6487] ? __lock_acquire+0x4a5/0x2630 [ 141.130319][ T6487] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 141.135331][ T6487] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 141.142173][ T6487] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 141.147969][ T6487] ? kcov_ioctl+0x16a/0x720 [ 141.152456][ T6487] __x64_sys_bpf+0x7b/0xc0 [ 141.156852][ T6487] ? lockdep_hardirqs_on+0x78/0x100 [ 141.162032][ T6487] do_syscall_64+0x106/0xf80 [ 141.166600][ T6487] ? clear_bhb_loop+0x40/0x90 [ 141.171259][ T6487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.177133][ T6487] RIP: 0033:0x7f33f2f9c799 [ 141.181528][ T6487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.201115][ T6487] RSP: 002b:00007f33f3f08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 141.209504][ T6487] RAX: ffffffffffffffda RBX: 00007f33f3215fa0 RCX: 00007f33f2f9c799 [ 141.217451][ T6487] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 141.225398][ T6487] RBP: 00007f33f3032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 141.233345][ T6487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.241300][ T6487] R13: 00007f33f3216038 R14: 00007f33f3215fa0 R15: 00007ffecad28f48 [ 141.249265][ T6487] [ 141.252528][ T6487] Kernel Offset: disabled [ 141.256826][ T6487] Rebooting in 86400 seconds..