last executing test programs: 9.075687026s ago: executing program 1 (id=238): r0 = msgget(0x0, 0x100) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/29) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x8, 0x6, 0x2, 0x1860, 0x1, 0x200, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x200040, 0x0) r4 = openat(r3, &(0x7f0000000180)='./file0\x00', 0x480, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_SCRNMAP(r5, 0x4b41, &(0x7f00000001c0)="f4c038eeb5681b2623e1ae1caaf9f7629023c6f0a9fcad901473565d92a7a26b1e72104ea2c0dd7dadcfa22e2b72476ed0e30a1440cde979c14b91c4b365a27d69511f66bd88a17c44bbb8f63fd2c78779febe2e92163ae334fb6092613bae1764cbadeaafbf71d197b840927df2b5b7769e28e4530265def0e9eccae7ed54e474f83c69d4e9502019138652b360a5aeb954cbbdc4d4032228ee4c17f437f641af2b9c05e6bf510c57cc5133913c1f2766b157a39072e61fe137c7c5065a0ca0be779debe0434737691e04d5ba7f7393e0a317172db2940aeac32ec2848dd705a5") (async) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f00000002c0)=@arm64={0x3, 0x3, 0x4, '\x00', 0xa9}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, 0xee00}}, './file1\x00'}) (async) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6}}, &(0x7f0000000540)=0xe8) (async) r10 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000580)=0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f00000005c0)={{0x1, r7, r8, r9, 0x0, 0x10, 0x2}, 0x0, 0x0, 0xe83, 0x8, 0x2, 0xffffffff7fffffff, 0x9, 0x1, 0x7ff, 0x0, r10, r11}) (async) r12 = socket$inet_udplite(0x2, 0x2, 0x88) newfstatat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x100) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000700), r13) (async) r14 = openat$cgroup_int(r6, &(0x7f0000000740)='cpuset.sched_load_balance\x00', 0x2, 0x0) close_range(r14, r12, 0x0) (async) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000780)=0x126, 0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)) socket$inet6_udp(0xa, 0x2, 0x0) r15 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000800)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x79, 0x11, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0xa0, 0xa, [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x3, 0x1, 0x3, 0x6, {0x9, 0x21, 0x7, 0x3, 0x1, {0x22, 0xf23}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x9, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x7, 0x1, 0x6}}]}}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x201, 0xf, 0x8, 0xff, 0x40, 0x9}, 0x58, &(0x7f0000000880)={0x5, 0xf, 0x58, 0x4, [@ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0x7f, 0xf0f, 0xfffc, [0xf0, 0x3f00, 0x3ff0, 0x3f]}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "7483e5c4c86c8c07086eb415025ead04"}, @ssp_cap={0x20, 0x10, 0xa, 0xc9, 0x5, 0x6, 0xf, 0x0, [0x5ff0, 0xc0c0, 0x30, 0xc0, 0xff3f0f]}, @ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x441}}, {0x8d, &(0x7f0000000940)=@string={0x8d, 0x3, "0be4295516b044d754d96b0cf4763b0a511a3eb82ad7f9b3223359746d96b082addd8e066feca0adfd7e66e21b0354dd0940426cea112a91397e1c61eb7c8051e420f008e2022ec84ef151f31df892ef639e224cf36a5732f8bd30b0b28e47e34e54fbb927fefb96f71479ce2d4fffa66e8c0784b542ad8eccc8c065e71a2269fb2826097e72bf417586b2"}}, {0x54, &(0x7f0000000a00)=@string={0x54, 0x3, "35fc0801c52ce54b53166e51bdcfbcad1bd9833dfc5fafc116ccfe49be7285ffbc436225c45cb35d33b5a1bb576b95fc272a122fde320116c2db7f84a995547930a24f299842411778463bc0d604040800b4"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x1809}}, {0x88, &(0x7f0000000ac0)=@string={0x88, 0x3, "959d2803db420826c4a4c38e32e58678ead72f51c9a392073a6741eaa14180ef693d7f1728859fc23643083fb3a8ba7e8cbaba8769510f238db8010116ec1235b49c9d1bcf610b245c4ecd8db369128f163dc96268cd16e282dde7de3aa340bd4ecaa9ccdb27a154f617a921bf189913f5538174979f725b9438970233008816451629ab82d3"}}]}) syz_usb_control_io$hid(r15, &(0x7f0000000d00)={0x24, &(0x7f0000000c00)={0x40, 0xf, 0xc, {0xc, 0x3, "f4c1cd5039ef7ad98794"}}, &(0x7f0000000c40)={0x0, 0x3, 0x1b, @string={0x1b, 0x3, "65314c3f60e9787ac7a0ef396b5d5116e83dc48e1c47d451ae"}}, &(0x7f0000000c80)={0x0, 0x22, 0x9, {[@global=@item_4={0x3, 0x1, 0x0, "92a8f4bd"}, @main=@item_012={0x1, 0x0, 0x8, "ef"}, @main=@item_012={0x1, 0x0, 0xb, '\t'}]}}, &(0x7f0000000cc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0xa94}}}}, &(0x7f0000000ec0)={0x2c, &(0x7f0000000d40)={0x40, 0x0, 0x6a, "a74dde0d72bd15b6f26aace7d00f4d8bc3c719f959cfd0ec19004f52b201e0e08233a5756f8d47e7b4ee0b882dc97ef57d301bc4fe207121ba4e4492c2f648e99b68f596cb10c38bba87642dfed9223c567bfa0be41ba3cd438dfe19252715e81cba58ff941680160eaa"}, &(0x7f0000000dc0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000e00)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000e40)={0x20, 0x1, 0x15, "c8edf814f1051fe9c9bc7fe9bab013bf1091b55633"}, &(0x7f0000000e80)={0x20, 0x3, 0x1, 0xc}}) write$sndseq(0xffffffffffffffff, &(0x7f0000001040)=[{0x34, 0x10, 0x7, 0x9, @time={0x0, 0x2}, {0x92, 0x5}, {0xfc, 0x9}, @note={0x8, 0x40, 0xf2, 0x93}}, {0x8, 0x9, 0x9, 0x0, @time={0x12, 0x8}, {0x7, 0x2}, {0x10, 0x8}, @connect={{}, {0xdd, 0x4}}}, {0x1, 0x9, 0x3, 0x35, @tick=0x6, {0xd, 0xf}, {0x4, 0xe6}, @raw8={"94dfb0b264e8de04b6a62dba"}}, {0x6, 0xc, 0x0, 0x7a, @tick=0x81, {0x3, 0xbd}, {0x0, 0x3}, @addr={0x2, 0x2b}}, {0x7c, 0x9, 0x4, 0x0, @time, {0x8, 0x6}, {0x4, 0x9d}, @quote={{0x80, 0x6}, 0xd, &(0x7f0000000f40)={0x4, 0xe2, 0x6, 0xe0, @tick=0x6, {0xff, 0x5}, {0x6, 0xf8}, @control={0x7, 0x3, 0x1}}}}, {0x2, 0x2, 0x4, 0x81, @tick=0xd, {0x59, 0x7}, {0x3, 0x7}, @addr={0xa0, 0xa1}}, {0xbd, 0x6, 0x2, 0x1, @time={0x3d69, 0x1}, {0x8, 0x3}, {0x8, 0x9}, @ext={0x92, &(0x7f0000000f80)="02cde41372c282d8abb1b1a729555be1ef821ac3b65cdf8b5ad369459b7557062d2277c76b49e8f9b169267e3045815de9b819b8e18a456259dafea21cb9c74114210bfef2c9acd2f9b392d0f7888b89b76b936ba45b175a50d097d04f2e7c279dde69fbe22dc7c8f70516e61cae461d6b5275dde7b85077a5574ac9c03c7600d28c55148fa4df51b476f69c9f88306d9d06"}}, {0xb6, 0x9, 0x1, 0x7, @tick, {0x0, 0x10}, {0x2, 0x7}, @note={0xcd, 0x2, 0x5}}, {0x9, 0x80, 0x5, 0x81, @tick=0x3, {0x1, 0x10}, {0x80, 0x3}, @result={0x7fffffff, 0x9}}, {0x4, 0x8, 0x6, 0x8, @tick=0x9, {0x0, 0x4}, {0xf, 0x5}, @queue={0xe5, {0x6, 0xffff4726}}}], 0x118) 8.479551265s ago: executing program 3 (id=244): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000200)="876d1ee6e8f99b30df54bb9caa7d24bc62720f061a8964e846730e7a9fd9599b295f2fe8a18685bc8428b8edefe139e93bf75ba8e3c53fa2244b9123aae148ac28684ecb07b582c45fcc3544c6d52a5edfca60ece3754bbb26ee0f2cc309cd92c4f0ad4f07edf683acaf275ff8c54b", 0x6f}], 0x1) 8.438115939s ago: executing program 3 (id=245): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$kcm(0x2d, 0x2, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000540)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000040)={@my=0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000c, 0x30, r0, 0x4ee7000) rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f00000002c0)={0x32, 0x0, 0x6}) socket$inet_udplite(0x2, 0x2, 0x88) 7.48970326s ago: executing program 3 (id=247): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r2, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) io_destroy(r2) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000180)={0x20, 0x14, 0x1, 'r'}, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.316344649s ago: executing program 2 (id=252): syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x2000) (async) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x2000) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000180)={&(0x7f0000000300)=[{0x1, 0x6000, 0x0, 0x0}, {0x222, 0x1c00, 0x0, 0x0}], 0x2}) (async) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000180)={&(0x7f0000000300)=[{0x1, 0x6000, 0x0, 0x0}, {0x222, 0x1c00, 0x0, 0x0}], 0x2}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) syz_io_uring_setup(0x2b9, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$ax25(0x3, 0x3, 0x8) fcntl$getownex(r2, 0x10, &(0x7f0000000340)) (async) fcntl$getownex(r2, 0x10, &(0x7f0000000340)={0x0, 0x0}) sched_setattr(r3, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r6, 0xbbbbbbbb}) io_setup(0x4, &(0x7f00000014c0)) (async) io_setup(0x4, &(0x7f00000014c0)=0x0) r9 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_getevents(r8, 0x1, 0x1, &(0x7f00000000c0)=[{}], 0x0) io_submit(r8, 0x1, &(0x7f0000000540)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x6020, r4, 0x0, 0x0, 0x2, 0x0, 0x0, r9}]) (async) io_submit(r8, 0x1, &(0x7f0000000540)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x6020, r4, 0x0, 0x0, 0x2, 0x0, 0x0, r9}]) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x51080, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r9}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x6, r10}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x6, r10}, 0x38) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r6], &(0x7f0000000200), &(0x7f00000000c0)=[r7], &(0x7f0000000040), 0x0, 0x300}) 5.752001976s ago: executing program 1 (id=254): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_io_uring_setup(0x17b3, &(0x7f0000000500)={0x0, 0xbc48, 0x13290, 0x0, 0x1dd}, &(0x7f0000000300), &(0x7f0000000340)) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r1, 0x0, 0x0) 5.750639635s ago: executing program 0 (id=255): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000200)="876d1ee6e8f99b30df54bb9caa7d24bc62720f061a8964e846730e7a9fd9599b295f2fe8a18685bc8428b8edefe139e93bf75ba8e3c53fa2", 0x38}], 0x1) 5.716946472s ago: executing program 2 (id=256): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200, 0x20000002, 0x0, 0x0, 0x8}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x60002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) (async) dup(r1) (async) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[], 0xb0) (async) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) (async) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200, 0x20000002, 0x0, 0x0, 0x8}}, 0x50) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (async) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x60002, 0x0) (async) 5.657931633s ago: executing program 0 (id=257): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$kcm(0x2d, 0x2, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000540)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000040)={@my=0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000c, 0x30, r0, 0x4ee7000) rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f00000002c0)={0x32, 0x0, 0x6}) socket$inet_udplite(0x2, 0x2, 0x88) 5.601920552s ago: executing program 1 (id=258): socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x4) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x17}, './file0\x00'}) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) r2 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x2, 0x2d5}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd=r0, 0x0, 0x0, 0x7, 0x0, 0x1}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x3c, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r2, 0x7330, 0x0, 0x0, 0x0, 0x0) 5.148017174s ago: executing program 2 (id=259): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x9, 0x6}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(0x0, r2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002880)='net/ip6_mr_vif\x00') read$FUSE(r3, &(0x7f0000000300)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x10, &(0x7f0000001280), 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000300)="a912577169eb4378", 0x8}], 0x1}, 0x20000801) recvmsg(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40002002) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000023c0)={0x34, &(0x7f0000002240)=ANY=[@ANYBLOB="400e06"], 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x1, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x81, 0xc, 0x3234564e, 0x6, 0x3, [{0x9, 0x4}, {0x0, 0x6}, {0x1, 0x10000}, {0x4, 0x8}, {0x2, 0x9a}, {0x55fe649d, 0x81}, {0x2c1, 0x8}, {0x3, 0x1}], 0x44, 0x56, 0x8, 0x0, 0x7}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000002c0)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="001201"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.741167663s ago: executing program 0 (id=260): socket$unix(0x1, 0x1, 0x0) close(0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc020000000000000000000000000000ac1e0001000000000000000000000000000000000000003a0a88000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011007f0000010000000000000000000000000a0101000000000000000000000000000a010100000000000000000000000000640101000000000000000000000000003c000000000000000a000200"], 0xa0}}, 0x0) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x55}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x314d436, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800ffffffff7bfbfcdbdf250a148000ff01fd07"], 0x1c}}, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000640)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 4.415933297s ago: executing program 3 (id=263): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000240)="b9a00d0000b816000000ba000000000f30b9800000c00f3235000800000f30266726660f3821d50f0666baf80cb8bb71dc8bef66bafc0cb00fee0f20d835200000000f22d866b8f2008ee80f0f360d66ba6100ecb8009800000f23d00f21f8350000000c0f23f8"}], 0x1555555555555665, 0x61, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='hpfs\x00', 0x1c443, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x7, &(0x7f00000006c0)={0x1, 0x1}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x1db7, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r7, &(0x7f00000009c0)=[{&(0x7f0000000000)="34c41d", 0x3}], 0x1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000006c0), 0x400, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000780)={0x1, 0x0}, 0x8) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_query, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @alu={0x4, 0x1, 0xa, 0x6, 0x3, 0xffffffffffffff76, 0xffffffffffffffff}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xa}]}, &(0x7f0000000840)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000008c0)={0x5, 0xb, 0x9, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000900)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000940)=[{0x5, 0x5, 0x3}, {0xa000000, 0x3, 0x1, 0x2}, {0x0, 0x1, 0x7, 0x1}, {0x5, 0x1, 0x4}, {0x1, 0x2, 0x7, 0x5}], 0x10, 0xfb55, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x10, 0x12, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@jmp={0x5, 0x1, 0xa, 0x0, 0xd, 0x18}, @map_fd={0x18, 0x1, 0x1, 0x0, r7}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0xff, 0xc5, &(0x7f00000005c0)=""/197, 0x41100, 0x6, '\x00', r8, @sk_msg=0x7, r9, 0x8, &(0x7f0000000700)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0xf, 0x4, 0x74f3}, 0x10, r10, r11, 0x1, 0x0, &(0x7f0000000a80)=[{0x4, 0x3, 0x9, 0xf}], 0x10, 0xffffffff, @void, @value}, 0x94) r12 = dup3(r1, r0, 0x0) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r13, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@increfs], 0x0, 0x0, 0x0}) r14 = syz_usb_connect(0x0, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd2, 0xe7, 0x76, 0x10, 0x110a, 0x1653, 0x5ea7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x43, 0xd3, 0x78}}]}}]}}, 0x0) syz_usb_control_io$hid(r14, 0x0, 0x0) syz_usb_control_io$printer(r14, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x40, 0x11, 0xf, {0xf, 0x5, "9f5b22d3a1e84a24e93ede8059"}}, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000000400)={0x34, &(0x7f0000000440)=ANY=[@ANYBLOB="20088e00080063bb19ef346df09380031f9739a9ce196d008587963cf9cf48ec413a80f76599bbe8d6eb1f48d1f0c669a6504ab5ee9935ca5a92cfd834975bfdcb3c66eefda7d40000000000000000104f3fdce5d04740e5feb4eea4fea41f57c4dce719e3b894c081d3a811a98c9a4be94658fe30ff38d47de293cc6efe5a432e751f4551b46d21ca595603553d93791e6f2356b021"], &(0x7f0000000200)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000240)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x1, 0x28}, &(0x7f00000003c0)={0x20, 0x0, 0x1, 0x9}}) 3.941597981s ago: executing program 1 (id=264): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="88fb078b15f207f07a2088d2d95c864ec8f5b29f8bd51a4a9c5af3b26c63f5949289565a6e55bdd322ab6f3733a45325ff015737e2d10066fe2aaf76de45856ed813ca441e4eb924cf6d7c6533f465a7ce61c1ba023e7b8dd29be4781e951e8a620ac3dde604066cffdde096e47d25d8619f59c6feba878d3cbb8f58b49e4bdbf79379daeb2eecd82f65b4207b91053f65da088c234af3c4ce3581e1701f8040b81f5c74613ba3d6fa01d91627433a02872c5493a1e4419ff742d229881f15f204f54530a550", 0xc6, 0xfffffffffffffffa) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$unlink(0x9, r0, r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x40, 0x40) keyctl$search(0xa, r1, &(0x7f0000000240)='big_key\x00', &(0x7f0000000280)={'syz', 0x0}, r1) renameat(r2, &(0x7f00000002c0)='./file0\x00', r2, &(0x7f0000000300)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1\x00'}) unlinkat(r3, &(0x7f0000000380)='./file0\x00', 0x0) r4 = request_key(&(0x7f00000003c0)='.request_key_auth\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)='keyring\x00', r1) keyctl$clear(0x7, r4) syz_usb_connect$cdc_ncm(0x2, 0x74, &(0x7f0000000480)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x3, 0x80, 0xaa, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "2438f908db1b"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xfffffffa, 0x800, 0xa, 0x2}, {0x6, 0x24, 0x1a, 0x80, 0x1}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x31, 0xe, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x0, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xdc, 0x5, 0xe1}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x200, 0x0, 0x89, 0x70, 0x10, 0xed}, 0xf, &(0x7f0000000540)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x8, 0x3, 0x5}]}, 0x4, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0xc33}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x40e}}, {0x5c, &(0x7f0000000640)=@string={0x5c, 0x3, "896e86c2399a331c4f003c627c7ee870eff07facb9c85a1adb593fa8fae38920f8fed554a2a2619bb428bfbd6c23d41bba05e185b1dd134b9ee10c1bb44b52154b0bce0f8737338184af196df8e62397b232374a5c43299680d6"}}]}) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000740)={r1, 0x15, 0x1000}, &(0x7f0000000780)={'enc=', 'pkcs1', ' hash=', {'rmd160-generic\x00'}}, &(0x7f0000000800)="5f4eec1a1891635b5a15045adaa7ea10bb78672291", &(0x7f0000000840)=""/4096) setsockopt$inet_group_source_req(r3, 0x0, 0x2f, &(0x7f0000001840)={0x6, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) keyctl$describe(0x6, r0, &(0x7f0000001980)=""/199, 0xc7) keyctl$clear(0x7, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001b00)={0xa, &(0x7f0000001a80)=[{0x40, 0x8, 0x54, 0x1}, {0x800, 0x3, 0x2, 0x8000}, {0x337c, 0x9, 0x8, 0x6}, {0xd, 0x32, 0x40, 0x4}, {0x7b, 0x3, 0x80, 0xb}, {0x4, 0x1, 0x7, 0x6be5}, {0xa484, 0x8, 0x9a, 0x9}, {0x8001, 0x0, 0x5, 0x9}, {0xb, 0x0, 0xe, 0x1}, {0x4, 0x7, 0x2, 0x9}]}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000001c80)={'syztnl0\x00', &(0x7f0000001c00)={'syztnl1\x00', 0x0, 0x4, 0x9, 0x1, 0x4, 0x24, @empty, @remote, 0x10, 0x8000, 0x7fff, 0x655e}}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001d00)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x4, '\x00', 0x0, r3, 0x5, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x5, 0x10, &(0x7f0000001b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001bc0)='GPL\x00', 0x80, 0x0, 0x0, 0x41000, 0x4e, '\x00', r5, @fallback=0x9, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001cc0)={0x0, 0x2, 0xddcb, 0x6}, 0x10, 0xffffffffffffffff, r3, 0x8, &(0x7f0000001d80)=[r3, r3, r3, r6, r3, r3, r3], &(0x7f0000001dc0)=[{0x4, 0x1, 0x3, 0x6}, {0x3, 0x3, 0xb, 0x2}, {0x0, 0x4, 0x5, 0x5}, {0x4, 0x4, 0x4, 0x6}, {0x1, 0x2, 0xd, 0x2}, {0x0, 0x1, 0x6, 0xb}, {0x4, 0x5, 0x3, 0xc}, {0x5, 0x4, 0x4}], 0x10, 0x7, @void, @value}, 0x94) read(r2, &(0x7f0000001f00)=""/28, 0x1c) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000001f40), 0x482700, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000001f80)={r4, 0x4, 0x5e}, &(0x7f0000001fc0)={'enc=', 'raw', ' hash=', {'blake2s-256-generic\x00'}}, &(0x7f0000002040)="ff0d1279", &(0x7f0000002080)="d8ce01201f9af717ac972d2b06f2eed114915f6917c6bedf4c4abf9d29ce4c3c8616f91ae234f081e9d946948cd21bb23dc00a0a7548758c0acd88ef4c1d20b0514426b7585998033df6bfdb27f6f03db9e6ff63272c42e5a46aa82ebbee") keyctl$link(0x8, r1, r4) ioctl$SOUND_MIXER_WRITE_RECSRC(r3, 0xc0044dff, &(0x7f0000002100)=0xffff7fff) syz_genetlink_get_family_id$tipc2(&(0x7f0000002140), r3) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000024c0)={r3, 0x20, &(0x7f0000002480)={&(0x7f0000002380)=""/37, 0x25, 0x0, &(0x7f00000023c0)=""/175, 0xaf}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002580)={0x3, 0xb, &(0x7f0000002180)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0x3}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffb}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], &(0x7f0000002200)='syzkaller\x00', 0x8, 0xf3, &(0x7f0000002240)=""/243, 0x41000, 0x0, '\x00', r5, @sched_cls=0x2e, r3, 0x8, &(0x7f0000002340)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000002500)=[{0x2, 0x3, 0x4, 0xb}, {0x5, 0x1, 0xf, 0x2}, {0x0, 0x5, 0xd}, {0x1, 0x5, 0x0, 0x9}, {0x1, 0x4, 0x7, 0x4}, {0x5, 0x2, 0xc}, {0x0, 0x3, 0x5, 0xa}, {0x3, 0x5, 0x7, 0x1}], 0x10, 0x1, @void, @value}, 0x94) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000002640)={0xfff8, 0x28, 0x37f, 0xd6c2}) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000002680)={r0, 0x6f, 0xd0}, &(0x7f00000026c0)={'enc=', 'raw', ' hash=', {'cmac(serpent)\x00'}}, &(0x7f0000002740)="c93381852c47b721ec33bf0e2bc1f8db7fb843195207f33cde2f15a7c0961fd0965e2510301a4144d635f78fd151ec7e1c316b85f524922e00cafcb20060c93c65ca47ae70fdc445e4695bb7a95b8cf48d34da1afa05e578477e97b42c7cb8ca49c8dbcabbd1ade3152c6f2c3d3750", &(0x7f00000027c0)=""/208) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000028c0)={r4, 0x67, 0x36}, 0x0, &(0x7f0000002900)="d5318efc52788b29015eb376f8d93acfc0ef269b089c6c8374b8d7369928296e18a2c73a1c6ec8b65fadb5287a832d44d3f47a56c5642bfa66a74b6d70453e7de8cdd32def95e2382251d1f1e5fe1e1aa8f1c690fb4d3b974df56bdf6cc5ebb44a337983b2ed8b", &(0x7f0000002980)=""/54) 3.725102242s ago: executing program 0 (id=265): r0 = epoll_create(0x4) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x80042, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) r2 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x3, @loopback, 0x2}, {0xa, 0x0, 0x5, @private1}, r3}}, 0x48) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x4684e30, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, r3}}, 0x30) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, &(0x7f0000000080)={{0xffffffffffffffff, 0x2, 0x9, 0x3, 0x1f}, 0x1, 0x1}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) write$cgroup_pressure(r5, &(0x7f0000000080)={'full', 0x20, 0x4, 0x20, 0x6}, 0x2f) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f00000000c0)={0x1}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380), 0x0) r6 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r6, 0x0, 0x79) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000008ea0406d0422c200000000000109f72300010000000009040000010310000009210900000000000000000000000098e149a536d73809a705a75f6670ba09a45d8de0e057d1db21fc307f8f10b5693b0978c74774356891faa2607891add8fccbd43226be88241dbb19d6822280a529061829de0b3bd329a9ce90dde5036731c159d53e8b616613577a4d0355d9d2ecb560698cbf0b89ac6cd8c14a88f24a2f5b3f402330463e9f4f92"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000700002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000085000000070000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) 3.663936588s ago: executing program 4 (id=266): socket(0xa, 0x3, 0x3a) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x1, 0x3}, 0x6) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@gettaction={0x24, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}]}]}, 0x24}}, 0xc000) syz_io_uring_setup(0x890, &(0x7f00000003c0)={0x0, 0xaef2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) (async) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000580), 0x8, 0x101402) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) flock(r2, 0x2) (async) open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x7c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x10}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6c687d4997a64c8d20e1242b5a860bb2429c38e23f5586d9"}], @mon_options]}, 0x7c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) (async) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f00000004c0)=ANY=[@ANYBLOB="50000000080211000001080211000000ffffffffffff000000000000000000006400764f868a16c96a9120700f5a6ba2220100001bdacc97268ff1562196dda98ca14f82292b6050c81565bfa48f13a3010006028100"], 0x47) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) 3.289995521s ago: executing program 4 (id=267): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x5e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x400000000000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xffffffff, 0x105000) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2, &(0x7f0000000440)=ANY=[@ANYRESOCT=r2, @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67705fffffffffffffff7f0614000a4a37ec28bb1062a6df7907e302e5ca0958e31257da11d7a280b59abd2f6f78206bb69abec2b5bae76399389d30fe5ab45bc584a64c826b7a9830570f726371716165f0c24eb0925b1d3cbd33aa7a1ce681c26fafec21b9243384e8f12797b24485f5bf8154bfc15a5cb4f5148eee436016109c8a2ba80677e1d073e5f0d5540c21297f9d2c3251723fb4", @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000004180)={0x2020}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x42500) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) gettid() timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0xc, &(0x7f0000000180)=0x80000000, 0x4) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) socket$nl_generic(0x10, 0x3, 0x10) 2.176758795s ago: executing program 4 (id=268): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_io_uring_setup(0x17b3, &(0x7f0000000500)={0x0, 0xbc48, 0x13290, 0x0, 0x1dd}, &(0x7f0000000300), &(0x7f0000000340)) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r1, 0x0, 0x0) 1.973393469s ago: executing program 4 (id=269): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2bffffe6ca5543a10155b880e05b53ab7f0491c7c92e315eec4757f8dc902dbffb47572a331cc39909580f9c487d912d4503c36aaf8b9f50d52d66e85766210c27aa7c9d4ea41a07df591065316d0f64417b205b107fa5a24a023578d50e3bf3e6f9f842d77aa72c79931b68bf", @ANYRES16=r1, @ANYBLOB="010024bd7000fcdbdf25030000001800018014000200776c616e3100"/38], 0x2c}, 0x1, 0x0, 0x0, 0x20009005}, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) syz_clone3(&(0x7f0000001240)={0x80004000, 0x0, 0x0, 0x0, {0xfffffffd}, 0x0, 0xff86, 0x0, &(0x7f0000000000)=[0x0], 0x1}, 0x58) 1.747916254s ago: executing program 4 (id=270): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$kcm(0x2d, 0x2, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000540)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000040)={@my=0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000c, 0x30, r0, 0x4ee7000) rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f00000002c0)={0x32, 0x0, 0x6}) socket$inet_udplite(0x2, 0x2, 0x88) 1.475762944s ago: executing program 1 (id=271): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) socket$inet6(0xa, 0x1, 0xfffffff9) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$802154_dgram(r1, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x25, 0x2, 0x6) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', r8, 0x4, 0x0, 0x0, 0x0, 0x1, @dev, @dev, 0x80, 0x0, 0x1, 0x1}}) 1.056128062s ago: executing program 2 (id=272): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x0, 0xe4, 0x0, 0xf000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) 451.968195ms ago: executing program 0 (id=273): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x1, 0xfffffffe, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg2\x00'}]}]}, 0x44}}, 0x0) 446.210301ms ago: executing program 3 (id=274): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec00, @void, @value}, 0x90) 402.227957ms ago: executing program 2 (id=275): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xa8202, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000280)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000040)=""/18, 0x12}, {&(0x7f0000000500)=""/82, 0x52}, {&(0x7f0000000580)=""/255, 0xff}, {&(0x7f0000000680)=""/103, 0x67}, {&(0x7f00000001c0)=""/40, 0x28}, {&(0x7f0000000700)=""/145, 0x91}, {&(0x7f00000007c0)=""/227, 0xe3}], 0x7, &(0x7f0000000940)=""/188, 0xbc}, 0x1}], 0x1, 0x40000062, 0x0) clock_gettime(0xfffffff2, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x54, 0x0, 'syz0\x00', 0x0}) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r6, 0x0, 0x84) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r8, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) remap_file_pages(&(0x7f0000a84000/0x2000)=nil, 0x2000, 0x8, 0x4, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 157.204933ms ago: executing program 1 (id=276): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000200)={0x8, 0x3ff, {0x0}, {0xffffffffffffffff}, 0x0, 0x97bd}) sched_rr_get_interval(r0, &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000100)={0x4, 0x0, 0x4, 0x0, 0x4002}) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0xfdfdffff, 0x7fff, 0x7, 0x40087ffd, 0x1b, "518aba4d000000000000000000000000002000"}) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000002080)={0x18, {"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", 0x1000}}, 0x1006) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000140)={0x1, 0x0, &(0x7f00000000c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, r5, r6, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]}) 156.233264ms ago: executing program 0 (id=277): r0 = io_uring_setup(0x773d, &(0x7f0000000a40)={0x0, 0x0, 0x1000, 0x2, 0x3bc}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000100)=""/8, 0x8}], 0x1) (async) close_range(r0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000040)={0x3, 'vxcan1\x00', {0x8}, 0x7}) (async, rerun: 64) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x1]}, 0x8) (async, rerun: 64) r3 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002200)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x385e, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000002380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002340)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000040f1", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fcdbdf255900000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000810}, 0x40005) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000300)=0x2) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c091) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000180)={0x2020}, 0x2024) (async) socket$packet(0x11, 0x2, 0x300) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r7, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x4}], 0x1}}], 0x2, 0x40000121, 0x0) 156.064544ms ago: executing program 3 (id=278): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000200)=0x7, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0xb, @private2}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b702000001040000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006502040001001f000404000001007d60b7030000000000006a0a00fefdff00008500000026000000b7000000000000009500000000000000c743a0c8e3ebbadc20e5a7efcc9ac1467fb2ea80dbcf8df265e1b40e4c8afd5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96bcbbbd2cb2000ce03000000000000007e357754508535766c80114604a86fe569b05614eab9297eb290a248a120c9c6e39f403ff065fd3052aae80675eeba68562eaeaea5fecf298ca20f274233106eab63ecf772de7b265040b6c50b7420b48a93fe94c756108afcd0b2eb78040000005f02a5a6474ae549070004000000001294fba0ed5020e6474ac921fee1f6d8ad6a80d0947cd6d4a561ced21a0b4a902be6af7ec2d1ba002e57f301000000000000000000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed951a73ea73d7c7f14e306f1f1d1377e57bbb19700f0077e9d0000b93eb0f2c6f8141e350dc68147e5958128d22d58625cf9dba211bfff9c3709c9b134625d3d2369f516a49eeeb1a662c8dfb875bdf5c6ba73cccdfacb202994c40d322717faff03323dce8a34ee0ca2cf61efb4b30000642735d6d482ba98d252f36c54333a8b1aa736369392b9067665339820f5f1557b0bf7cc06a5a13c714e0b1a1f000000ff3283076cda3d0b1a2905cfc3d04f1db264b530abcbe44bc405f600807970727fb819afa1907228fa9e83433eedb4ac88d0285594ffb0d14c09d5c77f33702822b02488ea570204c8441ced81cacf945dcb2486d65ceec8bcaffbe800a041a378b40dc9e3600e916ae6307bd8325a442095bc9a8b0c95905979f34adddbb26f0d24425c8ab9d937d84b521914f92eed3d3e9de82942a952e86b567aff5bc2e3c1fcc00f618363df5d0d181ee8f4b8fd356c9eb365adc037e443820c05c5db16ff07a9cf471e2ebf91ab00a05f88c1cd55f8c81f5eb1f8d615ca27efb2193bb61665a1ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50225563cd37343d09da72472efc2b2877fbab12a891513e5f0763ae06c0610a2869747c143d7500760600f3ffb2310e19ac58bf29d7f178d09a9f634a3ae492f54649589e3692768a0f3a08ff275df45508ad85950d8e08465fa1067ea8f383b3e7a7ddf5977d46f4bc38f914b4a496426d8468f9ba618b6b2218b50c8fc9efbce3ba799cf70de7e13be871aa7eb402e2b11f440361e18d4e334bfc6ae54e62e67a03b4c756c544189e4519a029674e2a2bbbc7f6600000000000800000e5e30b70b1eb176d3a62660600000030a0af132e680510811d3ab71af5d98e2d3d928a749e8b9402d14655612bd58fb40b4625cb69bf6cea97b447f2d970d99100000000086000001b881afb2cc500003a73562af4878f75b4f9540057b8a3fff2bc02c5941626d2015f414546e87835ba18e9101734a9e9c6955fc6b9a25fe2a3dd8bab7f21beccba5493a164c663eceed401737c12c65804712236a9a29a43b1e27e9b6816f2328ea8423121f12b7b35aa721fef26934ccafde573bee5c33ef15309f43cbd5d61aa679a9c402d337ebf57a5eacb569401c1df7b9c45b09743c61d1db37f0000000000020000000061d7d6818db785d8ba13dc577fe61a68eb365de5661f43d4c789bb117a3d208ae44a381b718b3157e218959156ff8e92b7e92bc275d2c9114547351a0d0f2a70d13be0194b6cb68b03000000000000004f153bbc7f52861e4e5df0d19e4e40ac44cfda6f87807e5b5ed7072c04da88afd3d4b79f060e004a0e2f00b9e726ac75d2ac0691314c627e9a8a07bdd607919fd48f01ad6d2f7621d9a75b134f1bc25ed7c33d411a5baa4daa3add16afc502b2b7629541d722e91d631e5ffb9d4beb5aa5a2c4e490a5bd5cf4538ba310b8cbc221af38ea842d4cb908bcd574f794459fd54b58c6a791e6df620047bade4ba41ee0141843958479544619f749ff70088b0fd115077f7eff7c5a3315ca604d110df1c54407f191a78d8362e4dc6e1138391c2af2b96779bb76c9f1daea4f085f38810edef6dd047937c231cba791a4e7713c5b3b0a0b6ba37db5016e02d114d714459d065a79609fea4efebad04edac11aac0e53dd094827453144fa419ee81823d00a90a9058ba740d2f41253a8d01a8c1a7265a084e30ad10d412aee8170a7111d62473e7bd8f3d64fb7ebdd32aada331900000000000000000000000084ef49dd02000000bf48ea48e0e1f463d9dcb285038ec38d5f4969ed0e98a71ac7bf8159a234833a5241722b2d24aa2fa4965d4eb7966fb27d118b6ef3308627e67d42f1041d5e92da28e0a7724ce715854775cbe06c5166f1dac0745f1373156a536cb6394c2c4473e2050cacf693fdf8e305080000001a901ecd90a5f53b8327a485557bc2a147b036477915e600000000034258ebbb6099b597d17ee2fc97ca850b8580b1337016a40566814594c13052b9d2b0741326825f19a24460e545c71e1940c998f39ac04a0c29691a7c8f7a78c1a7590a293c561f304533c638ae635f5ce026f7fa034d8cfe0e11831d4829692beab26891ef583cfcb713a4d3a2d8b958c0875d7e4bdcf98802db086ebcbb9d82fa569a18f06facc2ffe1ea9ae4231e1e503faa2de7f898c97788c4b9c61c70ff92abdf7476cc351156d11c0ada7614f315f4c6cca119d16827d4e864f5a7a9b690272a510c451dc07f391309d02e31e53b2bf0b5f86e776b1bcfe6c85ccd7ddf8a9559d596b5603895f265685fdd11263c946f8ef3ccec1b0d45a47a89b8237cbbdab14e4ca6dc76b2c41e071b93a065c0f5aa718e1cfab29beea78a6bd9a3114f0fb92be9a5862627b4bd99db2c08e4636e43f05f33535d5d1f9bb40e1fd8e5125a3d29b31dd94a6744bbc21722222b976089f073a4d3fcafc6d06518cf0c4fc6c3e3da0000000000000000000000007d3b60775243f2143d9f54804b11102cf0e4c641db1ba8bf75e46ab3a8fdece6562e7ebb3e407f3c7504dfa3da3aecbd49af3d1edeea11cc970416fadeedc8423bfdc85041ac4d8243a1130e6f4cb5bbfed9d095e18c98c7d690e4c491a7ddcd5635bc61dbed719ca28e8ca3f1fbbe588913ed057f1d6e34a79f4dc10df54d1993a5bc5f9ef6dbd339ee4b0b5764169f305e284ef82cc23e9366d4bc7eb45c7230b13433e5240657cb8eba33260147be8620b6d98cc48b000000000000000000000000c1ce872b18984f080100000000000000bd3fded92547d41809b398f36749083a147eb09ff1ed601bd36b873d3947fb223da647052528e0466cb917db7800f7c7000b593fca1903991cca1343882e3a1f60044f11c081dae4fc5bcf20efacdd2c577f4bcda2eea6f75a31dc90eebb6135b6fb824052181b0ad8a49ebf03ccf61d7e39bf6b0762d24d19796016301d1415b5110ba9df7f204aedb2a2e4e621c0553d312b309db67192f98ef7800000d629c04e216afc8fc66616bbf304e452373aa927c2ad6f5417f1b9bc322b802c1a1c42112a92a331cdc113b9ace3ff52ede7a853f9a89002ba070bac2f635a03db3375e5564f1a798bf9c0f8c72725d2eca9b0ec7e453d78ea20eca61530fe574299b393ca144adcb06108dfbb934065a87972739150a8752ac111c4d9062ccb95c54034fbdee131d94dfbaab1854d55665746fb7b47d25e54070b0d14c0a29c57bc4930075e1761913b036d43852c6df9f10e15105b2a1866b598a3577943514db0dce953dcec62139ff3f16066efec5d8cbc0600000000007289be5883aab951ea67cf2ff691d05c1ea91dd569ed9897fe8d88a0a6977dc8955be17e8026aff11c61fa5cc76196c1423cd597345253baa1537eb6962a3ce1fe5d5ab46938e8fb23fa7047bc59c4345e912585a8adb5fe2ff51b64a326321b594e3f2d339f4090bdae6b30b62064bacbc155d3c930576f506b093ca7c60957bdfdd6536baaa871cf6a603c736b78761e6463b8ac503e219cc3d98f649602ad24d5667368290ee926fba76ee482a201a03efece3b236f4ee2ffcd5d90d92a2f0c5cea48c87f27c2f1e92988a6508c12f6b7755cc48eb10edafca92cb0260c72295a27a24846d3a2334bd60e94c0fd07e5db0a4964a7fc4e89e11a300510776934e87bb3c21394f46954a012b2a3b0760f5bad1dbd6b466ed7153bd18ee2c0b2353c38df9e0782eb000000000000000000000000001b58cadcc5aaf65e05663985a177aa1d1ea2ad1b8151c7d58f5b92827f550269b3585d98e1394e816a477e52ce2f6de2bd7192f46cf965e774968d151d2bda084b10ec4c8d2c6ab582b1e5e3ed874235ff128c661298ed75879d8a4025ad1c3d9ef6355dc7284c6e648a61da026a777fcc7ae2c60ce64a2f2b0000000000000000000000000000003022110d1230e998429a6fd8f35939a8ae5acc89123839d84b98df6f8ee2ad0b238759bf400ac14c591aefe9660076a494f73b0ea8f3cb4a9c2e4f745a2afb593fabb9481600b2f44e6415153c1f8cf974a226d2700608bb2838ef07d75aed8b082716be3c37f60f48b9995f6325fdaa1c164b1e2bcbde00"/3344], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="b907ef23f66a54f05c13e5f0888e", 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x1, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000400", 0x18, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private1, [{0x2, 0x0, "a06a"}]}}}}}}, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0xf, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r4, 0x7, 0x4}, 0xc) fchdir(r3) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a400, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) 155.449299ms ago: executing program 4 (id=279): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_io_uring_setup(0x17b3, &(0x7f0000000500)={0x0, 0xbc48, 0x13290, 0x0, 0x1dd}, &(0x7f0000000300), &(0x7f0000000340)) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r1, 0x0, &(0x7f0000002340)) 0s ago: executing program 2 (id=280): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.147' (ED25519) to the list of known hosts. [ 344.643773][ T30] audit: type=1400 audit(1747470289.789:67): avc: denied { mounton } for pid=5837 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 344.648192][ T5837] cgroup: Unknown subsys name 'net' [ 344.666995][ T30] audit: type=1400 audit(1747470289.789:68): avc: denied { mount } for pid=5837 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 344.696991][ T30] audit: type=1400 audit(1747470289.839:69): avc: denied { unmount } for pid=5837 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 344.895418][ T5837] cgroup: Unknown subsys name 'cpuset' [ 344.903494][ T5837] cgroup: Unknown subsys name 'rlimit' [ 345.069019][ T30] audit: type=1400 audit(1747470290.209:70): avc: denied { setattr } for pid=5837 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 345.110629][ T30] audit: type=1400 audit(1747470290.209:71): avc: denied { create } for pid=5837 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 345.131727][ T30] audit: type=1400 audit(1747470290.209:72): avc: denied { write } for pid=5837 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 345.152219][ T30] audit: type=1400 audit(1747470290.209:73): avc: denied { read } for pid=5837 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 345.172545][ T30] audit: type=1400 audit(1747470290.229:74): avc: denied { read } for pid=5478 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 345.180896][ T5840] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 345.193484][ T30] audit: type=1400 audit(1747470290.239:75): avc: denied { mounton } for pid=5837 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 345.227014][ T30] audit: type=1400 audit(1747470290.239:76): avc: denied { mount } for pid=5837 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 346.131124][ T5837] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 348.297868][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 348.315824][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 348.325671][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 348.326850][ T5865] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 348.333566][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 348.341240][ T5865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 348.348247][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 348.363651][ T5855] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 348.371085][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 348.389655][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 348.397925][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 348.403072][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 348.405478][ T5861] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 348.417513][ T5866] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 348.419391][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 348.426827][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 348.433299][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 348.447506][ T5861] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 348.449211][ T5124] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 348.456355][ T5861] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 348.463578][ T5124] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 348.469064][ T5861] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 348.486492][ T5861] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 348.493640][ T56] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 348.501383][ T56] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 348.875914][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 348.980626][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 349.111412][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 349.133239][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.140571][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.148281][ T5860] bridge_slave_0: entered allmulticast mode [ 349.155120][ T5860] bridge_slave_0: entered promiscuous mode [ 349.163352][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.170820][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.178072][ T5860] bridge_slave_1: entered allmulticast mode [ 349.185077][ T5860] bridge_slave_1: entered promiscuous mode [ 349.215793][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 349.242408][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.268595][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.326090][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 349.358539][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.366156][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.373770][ T5862] bridge_slave_0: entered allmulticast mode [ 349.380415][ T5862] bridge_slave_0: entered promiscuous mode [ 349.391584][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.399111][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.406503][ T5862] bridge_slave_1: entered allmulticast mode [ 349.413791][ T5862] bridge_slave_1: entered promiscuous mode [ 349.433647][ T5860] team0: Port device team_slave_0 added [ 349.439571][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.446694][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.453868][ T5857] bridge_slave_0: entered allmulticast mode [ 349.460848][ T5857] bridge_slave_0: entered promiscuous mode [ 349.486433][ T5860] team0: Port device team_slave_1 added [ 349.502303][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.509601][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.518403][ T5857] bridge_slave_1: entered allmulticast mode [ 349.525130][ T5857] bridge_slave_1: entered promiscuous mode [ 349.591027][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.608992][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.616458][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.623954][ T5848] bridge_slave_0: entered allmulticast mode [ 349.630614][ T5848] bridge_slave_0: entered promiscuous mode [ 349.638359][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.645831][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.671846][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.685428][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.692541][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.718642][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.731730][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.748818][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.758180][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.765423][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.773172][ T5848] bridge_slave_1: entered allmulticast mode [ 349.779850][ T5848] bridge_slave_1: entered promiscuous mode [ 349.803199][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.848472][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.889810][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.909231][ T5857] team0: Port device team_slave_0 added [ 349.915283][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.925206][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.932324][ T5847] bridge_slave_0: entered allmulticast mode [ 349.939322][ T5847] bridge_slave_0: entered promiscuous mode [ 349.947804][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.954964][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.962130][ T5847] bridge_slave_1: entered allmulticast mode [ 349.969141][ T5847] bridge_slave_1: entered promiscuous mode [ 349.977612][ T5862] team0: Port device team_slave_0 added [ 349.985866][ T5862] team0: Port device team_slave_1 added [ 350.015531][ T5857] team0: Port device team_slave_1 added [ 350.049443][ T5860] hsr_slave_0: entered promiscuous mode [ 350.055922][ T5860] hsr_slave_1: entered promiscuous mode [ 350.076401][ T5848] team0: Port device team_slave_0 added [ 350.114280][ T5848] team0: Port device team_slave_1 added [ 350.120281][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.128014][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.154149][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.166524][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.173763][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.199736][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.213370][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.225442][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.235135][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.242081][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.268400][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.309337][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.316407][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.342531][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.367385][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.374377][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.401291][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.437018][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.444321][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.470408][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.482824][ T56] Bluetooth: hci1: command tx timeout [ 350.484008][ T5847] team0: Port device team_slave_0 added [ 350.496830][ T5847] team0: Port device team_slave_1 added [ 350.543329][ T5857] hsr_slave_0: entered promiscuous mode [ 350.549386][ T5857] hsr_slave_1: entered promiscuous mode [ 350.556818][ T5857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.564688][ T56] Bluetooth: hci3: command tx timeout [ 350.564698][ T5852] Bluetooth: hci2: command tx timeout [ 350.564912][ T5852] Bluetooth: hci0: command tx timeout [ 350.570326][ T5857] Cannot create hsr debugfs directory [ 350.575946][ T5852] Bluetooth: hci4: command tx timeout [ 350.621930][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.629211][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.655871][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.690404][ T5862] hsr_slave_0: entered promiscuous mode [ 350.696812][ T5862] hsr_slave_1: entered promiscuous mode [ 350.702973][ T5862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.710552][ T5862] Cannot create hsr debugfs directory [ 350.717011][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.724377][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.750426][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.801771][ T5848] hsr_slave_0: entered promiscuous mode [ 350.808691][ T5848] hsr_slave_1: entered promiscuous mode [ 350.814751][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.822301][ T5848] Cannot create hsr debugfs directory [ 350.886970][ T5847] hsr_slave_0: entered promiscuous mode [ 350.893396][ T5847] hsr_slave_1: entered promiscuous mode [ 350.899346][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.907792][ T5847] Cannot create hsr debugfs directory [ 351.081390][ T5860] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 351.093598][ T5860] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 351.139922][ T5860] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 351.149431][ T5860] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 351.256932][ T5857] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 351.270500][ T5857] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 351.281560][ T5857] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 351.310459][ T5857] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 351.376868][ T5862] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 351.393533][ T5862] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 351.419472][ T5862] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 351.442868][ T5862] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 351.485252][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 351.502284][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.526273][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 351.538353][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 351.561389][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 351.616579][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.640471][ T5903] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.647705][ T5903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.659590][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.666753][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.681439][ T5847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 351.697189][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.714584][ T5847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 351.747134][ T5847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 351.764644][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.777598][ T5847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 351.815694][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.822866][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.831931][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.839094][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.856963][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.888171][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.927715][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.934823][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.947894][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.954990][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.021630][ T5857] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 352.034446][ T5857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 352.051107][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.066517][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 352.066531][ T30] audit: type=1400 audit(1747470297.209:90): avc: denied { sys_module } for pid=5860 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 352.084539][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.117163][ T5862] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 352.129902][ T5862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 352.186122][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.218828][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.231578][ T3450] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.238809][ T3450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.258717][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.265901][ T5877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.317412][ T5911] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.324581][ T5911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.339944][ T5911] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.347537][ T5911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.396038][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.476048][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.563047][ T5852] Bluetooth: hci1: command tx timeout [ 352.598890][ T5857] veth0_vlan: entered promiscuous mode [ 352.642909][ T5852] Bluetooth: hci4: command tx timeout [ 352.648357][ T5852] Bluetooth: hci0: command tx timeout [ 352.654007][ T5856] Bluetooth: hci3: command tx timeout [ 352.659411][ T5856] Bluetooth: hci2: command tx timeout [ 352.672188][ T5857] veth1_vlan: entered promiscuous mode [ 352.700042][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.761533][ T5857] veth0_macvtap: entered promiscuous mode [ 352.774790][ T5857] veth1_macvtap: entered promiscuous mode [ 352.836434][ T5862] veth0_vlan: entered promiscuous mode [ 352.858745][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.876074][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.909752][ T5857] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.919651][ T5857] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.928754][ T5857] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.940314][ T5857] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.978680][ T5862] veth1_vlan: entered promiscuous mode [ 352.998261][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.044877][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.051880][ T5860] veth0_vlan: entered promiscuous mode [ 353.072028][ T5862] veth0_macvtap: entered promiscuous mode [ 353.098000][ T5862] veth1_macvtap: entered promiscuous mode [ 353.121637][ T5860] veth1_vlan: entered promiscuous mode [ 353.146622][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.167851][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.182234][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.193403][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.199032][ T5862] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.210045][ T5862] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.219838][ T5862] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.228907][ T5862] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.248962][ T5848] veth0_vlan: entered promiscuous mode [ 353.288912][ T5848] veth1_vlan: entered promiscuous mode [ 353.311637][ T5860] veth0_macvtap: entered promiscuous mode [ 353.318927][ T5903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.321397][ T5860] veth1_macvtap: entered promiscuous mode [ 353.332920][ T5903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.350684][ T5848] veth0_macvtap: entered promiscuous mode [ 353.379354][ T30] audit: type=1400 audit(1747470298.519:91): avc: denied { mounton } for pid=5857 comm="syz-executor" path="/root/syzkaller.QB8LJy/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 353.386913][ T5847] veth0_vlan: entered promiscuous mode [ 353.417548][ T30] audit: type=1400 audit(1747470298.519:92): avc: denied { mount } for pid=5857 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 353.444501][ T30] audit: type=1400 audit(1747470298.549:93): avc: denied { mounton } for pid=5857 comm="syz-executor" path="/root/syzkaller.QB8LJy/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 353.466512][ T5848] veth1_macvtap: entered promiscuous mode [ 353.475782][ T30] audit: type=1400 audit(1747470298.549:94): avc: denied { mount } for pid=5857 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 353.498026][ T30] audit: type=1400 audit(1747470298.549:95): avc: denied { mounton } for pid=5857 comm="syz-executor" path="/root/syzkaller.QB8LJy/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 353.535221][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.535777][ T5857] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 353.548445][ T5847] veth1_vlan: entered promiscuous mode [ 353.568700][ T30] audit: type=1400 audit(1747470298.549:96): avc: denied { mounton } for pid=5857 comm="syz-executor" path="/root/syzkaller.QB8LJy/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 353.595891][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.606545][ T30] audit: type=1400 audit(1747470298.559:97): avc: denied { unmount } for pid=5857 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 353.624883][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.634241][ T30] audit: type=1400 audit(1747470298.589:98): avc: denied { mounton } for pid=5857 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 353.649006][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.662747][ T30] audit: type=1400 audit(1747470298.589:99): avc: denied { mount } for pid=5857 comm="syz-executor" name="/" dev="gadgetfs" ino=6496 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 353.671163][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.703929][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.714256][ T5860] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.724480][ T5860] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.733319][ T5860] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.757822][ T5860] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.936763][ T5847] veth0_macvtap: entered promiscuous mode [ 353.945264][ T5848] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.954679][ T5848] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.964817][ T5848] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.419117][ T5848] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.447847][ T5847] veth1_macvtap: entered promiscuous mode [ 354.459745][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.470319][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.515296][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.530419][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.562977][ T5847] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.571737][ T5847] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.580473][ T5847] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.589273][ T5847] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.643931][ T5852] Bluetooth: hci1: command tx timeout [ 354.726269][ T5852] Bluetooth: hci0: command tx timeout [ 354.731717][ T5852] Bluetooth: hci3: command tx timeout [ 354.738509][ T5856] Bluetooth: hci2: command tx timeout [ 354.739362][ T5861] Bluetooth: hci4: command tx timeout [ 354.840702][ T5911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.872847][ T5911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.935335][ T3450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.955313][ T3450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.045878][ T3450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.057212][ T5911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.057283][ T3450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.084575][ T5911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.148951][ T5952] warning: `syz.0.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 355.173035][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.185936][ T48] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 355.206550][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.438338][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.470886][ T5955] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 355.472604][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 355.480203][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 355.494591][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 355.503142][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 355.511599][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 355.521489][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 355.540834][ T48] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.563499][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.572934][ T48] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 355.584215][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.596257][ T48] usb 3-1: Product: syz [ 355.600451][ T48] usb 3-1: Manufacturer: syz [ 355.606469][ T48] usb 3-1: SerialNumber: syz [ 355.713026][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 355.724942][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 355.962718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 356.042560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 356.092508][ T5905] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 356.115028][ T5937] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 356.515196][ T5905] usb 4-1: Using ep0 maxpacket: 16 [ 356.801194][ T48] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 356.811924][ T5905] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 356.821424][ T5861] Bluetooth: hci1: command tx timeout [ 356.826056][ T5905] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 356.831999][ T5861] Bluetooth: hci3: command tx timeout [ 356.839357][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.841455][ T5905] usb 4-1: config 0 descriptor?? [ 356.859223][ T5937] usb 5-1: device descriptor read/64, error -71 [ 356.863577][ T5861] Bluetooth: hci2: command tx timeout [ 356.872218][ T5861] Bluetooth: hci0: command tx timeout [ 356.878809][ T5905] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 356.979054][ T5861] Bluetooth: hci4: command tx timeout [ 357.001467][ T48] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 357.008949][ T48] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 357.016070][ T48] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 357.060715][ T48] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 357.227680][ T10] usb 3-1: USB disconnect, device number 2 [ 357.235729][ T10] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 357.302751][ T5989] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 357.332288][ T5989] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.350303][ T5989] bond0: (slave team0): Enslaving as an active interface with an up link [ 357.413658][ T5168] bcm5974 4-1:0.0: could not read from device [ 357.637855][ T5937] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 357.663966][ T5905] bcm5974 4-1:0.0: could not read from device [ 357.708799][ T5168] bcm5974 4-1:0.0: could not read from device [ 357.736317][ T5905] input: failed to attach handler mousedev to device input5, error: -5 [ 357.776996][ T5168] bcm5974 4-1:0.0: could not read from device [ 357.783256][ T5937] usb 5-1: device descriptor read/64, error -71 [ 357.792503][ T5905] usb 4-1: USB disconnect, device number 2 [ 357.898703][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 357.898717][ T30] audit: type=1400 audit(1747470303.039:130): avc: denied { create } for pid=5993 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 357.939416][ T5937] usb usb5-port1: attempt power cycle [ 358.050529][ T30] audit: type=1400 audit(1747470303.089:131): avc: denied { bind } for pid=5993 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 358.069966][ T30] audit: type=1400 audit(1747470303.089:132): avc: denied { create } for pid=5993 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 359.003033][ T30] audit: type=1400 audit(1747470303.639:133): avc: denied { read write } for pid=5995 comm="syz.1.12" name="video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 359.030780][ T5989] syz.3.4 (5989) used greatest stack depth: 21400 bytes left [ 359.091773][ T30] audit: type=1400 audit(1747470303.649:134): avc: denied { open } for pid=5995 comm="syz.1.12" path="/dev/video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 359.167635][ T5937] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 359.210888][ T30] audit: type=1400 audit(1747470303.669:135): avc: denied { ioctl } for pid=5995 comm="syz.1.12" path="/dev/video8" dev="devtmpfs" ino=951 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 359.363648][ T30] audit: type=1400 audit(1747470303.679:136): avc: denied { create } for pid=5995 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 359.383799][ T30] audit: type=1400 audit(1747470303.699:137): avc: denied { connect } for pid=5995 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 359.403830][ T30] audit: type=1400 audit(1747470303.719:138): avc: denied { read } for pid=5995 comm="syz.1.12" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 359.453275][ T5937] usb 5-1: device not accepting address 4, error -71 [ 359.928477][ T30] audit: type=1400 audit(1747470303.729:139): avc: denied { open } for pid=5995 comm="syz.1.12" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 360.576326][ T6019] netlink: 92 bytes leftover after parsing attributes in process `syz.2.16'. [ 360.892954][ T5970] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 361.128513][ T6036] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 361.155397][ T6036] netlink: 'syz.0.20': attribute type 39 has an invalid length. [ 361.236604][ T5970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.249382][ T5970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.335616][ T5970] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 361.353361][ T5937] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 361.421768][ T6044] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 361.433786][ T6044] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 361.544757][ T5937] usb 5-1: Using ep0 maxpacket: 8 [ 361.635516][ T5937] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 361.735908][ T5937] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 361.777382][ T5970] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 361.786699][ T5937] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 361.790531][ T5970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.809042][ T5937] usb 5-1: config 250 has no interface number 0 [ 361.814019][ T5970] usb 4-1: config 0 descriptor?? [ 361.821104][ T5937] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 361.852574][ T5937] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 361.864376][ T5937] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 361.877116][ T5937] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 361.887751][ T5937] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 361.925875][ T5937] usb 5-1: config 250 interface 228 has no altsetting 0 [ 361.946273][ T5937] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 361.962589][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 361.981695][ T5937] usb 5-1: Product: syz [ 361.986362][ T5937] usb 5-1: SerialNumber: syz [ 362.087310][ T5937] hub 5-1:250.228: bad descriptor, ignoring hub [ 362.110991][ T5937] hub 5-1:250.228: probe with driver hub failed with error -5 [ 362.129985][ T6053] Zero length message leads to an empty skb [ 362.131137][ T6050] 8021q: adding VLAN 0 to HW filter on device bond1 [ 362.356206][ T5970] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 362.516341][ T5970] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 362.559643][ T5937] usblp 5-1:250.228: usblp1: USB Bidirectional printer dev 5 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 362.657459][ T5937] usb 5-1: USB disconnect, device number 5 [ 362.700282][ T5937] usblp1: removed [ 363.644126][ T10] usb 4-1: USB disconnect, device number 3 [ 363.737935][ T6058] fido_id[6058]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 363.808550][ T6068] netlink: 'syz.2.27': attribute type 1 has an invalid length. [ 363.881265][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 363.881282][ T30] audit: type=1400 audit(1747470309.019:169): avc: denied { allowed } for pid=6067 comm="syz.2.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 364.065055][ T30] audit: type=1400 audit(1747470309.049:170): avc: denied { map } for pid=6067 comm="syz.2.27" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7969 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 364.113465][ T6070] veth3: entered promiscuous mode [ 364.212437][ T30] audit: type=1400 audit(1747470309.049:171): avc: denied { read write } for pid=6067 comm="syz.2.27" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7969 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 364.817186][ T6088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.33'. [ 364.845075][ T6088] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.854434][ T6088] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.863560][ T6088] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.872292][ T6088] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.383228][ T6088] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.392186][ T6088] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.401215][ T6088] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.410430][ T6088] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.595878][ T6098] netlink: 'syz.3.35': attribute type 10 has an invalid length. [ 365.650691][ T6098] team0: Device hsr_slave_0 failed to register rx_handler [ 365.672410][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 365.848791][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 365.870990][ T10] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 365.880512][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.012382][ T10] usb 3-1: Product: syz [ 366.020085][ T10] usb 3-1: Manufacturer: syz [ 366.035393][ T10] usb 3-1: SerialNumber: syz [ 366.105490][ T6103] usb usb8: usbfs: process 6103 (syz.3.36) did not claim interface 0 before use [ 366.469891][ T10] usb 3-1: config 0 descriptor?? [ 366.481069][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 366.539062][ T30] audit: type=1400 audit(1747470311.679:172): avc: denied { create } for pid=6087 comm="syz.1.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 366.611781][ T30] audit: type=1400 audit(1747470311.749:173): avc: denied { write } for pid=6087 comm="syz.1.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 366.613056][ T6088] ieee802154 phy0 wpan0: encryption failed: -22 [ 366.714934][ T6088] ieee802154 phy0 wpan0: encryption failed: -22 [ 366.902261][ T10] gspca_se401: Bayer format not supported! [ 367.695285][ T6107] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 367.720740][ T30] audit: type=1400 audit(1747470312.319:174): avc: denied { write } for pid=6104 comm="syz.3.37" name="unix" dev="proc" ino=4026532945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 367.857535][ T30] audit: type=1400 audit(1747470312.959:175): avc: denied { module_load } for pid=6093 comm="syz.2.34" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1037 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 367.895643][ T10] usb 3-1: USB disconnect, device number 3 [ 368.015660][ T30] audit: type=1400 audit(1747470313.029:176): avc: denied { bind } for pid=6093 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 368.078429][ T6116] Cannot find del_set index 0 as target [ 368.230196][ T30] audit: type=1400 audit(1747470313.029:177): avc: denied { setopt } for pid=6093 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 368.272312][ T30] audit: type=1400 audit(1747470313.339:178): avc: denied { setopt } for pid=6117 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 368.531128][ T6120] vlan2: entered allmulticast mode [ 368.536378][ T6120] vlan1: entered allmulticast mode [ 368.541519][ T6120] veth0_vlan: entered allmulticast mode [ 369.426202][ T6132] Cannot find del_set index 0 as target [ 369.470127][ T30] audit: type=1400 audit(1747470314.589:179): avc: denied { create } for pid=6129 comm="syz.0.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 370.152175][ T30] audit: type=1326 audit(1747470315.279:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2678f8e969 code=0x7fc00000 [ 370.532749][ T6144] xt_CT: You must specify a L4 protocol and not use inversions on it [ 370.557144][ T6144] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 371.474742][ T30] audit: type=1400 audit(1747470316.579:181): avc: denied { read write } for pid=6148 comm="syz.2.50" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 371.942927][ T30] audit: type=1400 audit(1747470316.579:182): avc: denied { open } for pid=6148 comm="syz.2.50" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 372.462469][ T30] audit: type=1400 audit(1747470317.019:183): avc: denied { unmount } for pid=5862 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 372.492418][ T30] audit: type=1400 audit(1747470317.199:184): avc: denied { create } for pid=6157 comm="syz.3.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 372.518561][ T30] audit: type=1400 audit(1747470317.199:185): avc: denied { shutdown } for pid=6157 comm="syz.3.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 373.022751][ T30] audit: type=1400 audit(1747470318.159:186): avc: denied { setopt } for pid=6169 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 373.175600][ T30] audit: type=1400 audit(1747470318.219:187): avc: denied { create } for pid=6169 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 373.197524][ T30] audit: type=1400 audit(1747470318.229:188): avc: denied { write } for pid=6169 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 374.286485][ T6179] random: crng reseeded on system resumption [ 374.451036][ T6188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.59'. [ 374.550641][ T6190] sp0: Synchronizing with TNC [ 374.826486][ T6188] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.835335][ T6188] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.844275][ T6188] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.853034][ T6188] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.887929][ T6192] ieee802154 phy0 wpan0: encryption failed: -22 [ 374.912704][ T6188] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.921607][ T6188] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.930496][ T6188] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.939481][ T6188] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.985191][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 374.985206][ T30] audit: type=1400 audit(1747470320.129:194): avc: denied { ioctl } for pid=6175 comm="syz.1.57" path="socket:[8599]" dev="sockfs" ino=8599 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 375.021526][ T6185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.57'. [ 375.110124][ T30] audit: type=1400 audit(1747470320.249:195): avc: denied { search } for pid=5478 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.148963][ T6185] vlan2: entered allmulticast mode [ 375.154271][ T6185] vlan1: entered allmulticast mode [ 375.159377][ T6185] veth0_vlan: entered allmulticast mode [ 375.240398][ T30] audit: type=1400 audit(1747470320.249:196): avc: denied { read } for pid=5478 comm="dhcpcd" name="n101" dev="tmpfs" ino=2204 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 375.560516][ T30] audit: type=1400 audit(1747470320.249:197): avc: denied { open } for pid=5478 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=2204 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 375.584131][ T30] audit: type=1400 audit(1747470320.249:198): avc: denied { getattr } for pid=5478 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=2204 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 375.612476][ T30] audit: type=1400 audit(1747470320.489:199): avc: denied { create } for pid=6181 comm="syz.4.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 375.633572][ T30] audit: type=1400 audit(1747470320.489:200): avc: denied { mount } for pid=6181 comm="syz.4.58" name="/" dev="ramfs" ino=9335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 376.235052][ T30] audit: type=1400 audit(1747470321.369:201): avc: denied { write } for pid=6203 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 376.913416][ T30] audit: type=1400 audit(1747470321.659:202): avc: denied { getopt } for pid=6202 comm="syz.2.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 376.937682][ T6212] vivid-000: disconnect [ 376.957948][ T30] audit: type=1400 audit(1747470322.099:203): avc: denied { map } for pid=6208 comm="syz.0.64" path="/dev/video9" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 377.379368][ T6209] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 377.500252][ T5877] Bluetooth: hci5: Frame reassembly failed (-84) [ 377.546204][ T6208] vivid-000: reconnect [ 377.692715][ T48] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 377.762506][ T5904] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 377.872927][ T48] usb 4-1: Using ep0 maxpacket: 16 [ 377.960106][ T48] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.023722][ T48] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.104329][ T5904] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 378.152496][ T5904] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 378.162898][ T48] usb 4-1: config 0 interface 0 has no altsetting 0 [ 378.171869][ T48] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 378.191380][ T5904] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 378.200801][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.422482][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.428841][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.437202][ T5904] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.472148][ T48] usb 4-1: config 0 descriptor?? [ 378.533615][ T5904] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.549345][ T5904] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 378.560226][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 378.579261][ T5904] usb 3-1: Product: syz [ 378.583761][ T5904] usb 3-1: Manufacturer: syz [ 378.668568][ T5904] cdc_wdm 3-1:1.0: skipping garbage [ 378.693645][ T5904] cdc_wdm 3-1:1.0: skipping garbage [ 378.704858][ T5904] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 378.710841][ T5904] cdc_wdm 3-1:1.0: Unknown control protocol [ 378.821368][ T6216] cdc_wdm 3-1:1.0: Error submitting int urb - -90 [ 378.829321][ T6216] fuse: Unknown parameter 'rootmoe' [ 378.836606][ T5904] usb 3-1: USB disconnect, device number 4 [ 378.942424][ T5937] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 378.954813][ T48] hid (null): unknown global tag 0xe [ 378.972913][ T48] cougar 0003:060B:500A.0002: unexpected long global item [ 378.980414][ T48] cougar 0003:060B:500A.0002: parse failed [ 378.987847][ T48] cougar 0003:060B:500A.0002: probe with driver cougar failed with error -22 [ 379.095509][ T5937] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 379.105869][ T5937] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 379.116902][ T5937] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 379.126479][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.134726][ T5937] usb 2-1: Product: syz [ 379.138940][ T5937] usb 2-1: Manufacturer: syz [ 379.143571][ T5937] usb 2-1: SerialNumber: syz [ 379.173245][ T972] usb 4-1: USB disconnect, device number 4 [ 379.454904][ T5861] Bluetooth: hci5: command 0x1003 tx timeout [ 379.462154][ T5852] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 379.567539][ T6230] syz.1.71(6230): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 380.056720][ T6239] capability: warning: `syz.0.73' uses deprecated v2 capabilities in a way that may be insecure [ 380.076658][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 380.076675][ T30] audit: type=1400 audit(1747470325.219:222): avc: denied { read write } for pid=6229 comm="syz.1.71" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 380.156257][ T30] audit: type=1400 audit(1747470325.219:223): avc: denied { open } for pid=6229 comm="syz.1.71" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 380.219398][ T30] audit: type=1326 audit(1747470325.219:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6229 comm="syz.1.71" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05b578e969 code=0x0 [ 380.354309][ T5937] usb 2-1: 0:2 : does not exist [ 380.470641][ T30] audit: type=1400 audit(1747470325.229:225): avc: denied { bind } for pid=6242 comm="syz.4.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 380.516398][ T5937] usb 2-1: USB disconnect, device number 2 [ 380.737180][ T30] audit: type=1400 audit(1747470325.299:226): avc: denied { read } for pid=6242 comm="syz.4.75" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 380.877356][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 380.932201][ T30] audit: type=1400 audit(1747470325.299:227): avc: denied { open } for pid=6242 comm="syz.4.75" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 381.004679][ T30] audit: type=1400 audit(1747470325.299:228): avc: denied { ioctl } for pid=6242 comm="syz.4.75" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 381.051383][ T30] audit: type=1400 audit(1747470325.979:229): avc: denied { write } for pid=6252 comm="syz.2.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 381.070898][ T30] audit: type=1400 audit(1747470325.979:230): avc: denied { connect } for pid=6252 comm="syz.2.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 381.172421][ T30] audit: type=1400 audit(1747470325.979:231): avc: denied { name_connect } for pid=6252 comm="syz.2.77" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 381.172512][ T5937] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 381.317089][ T6269] Invalid ELF header magic: != ELF [ 381.391830][ T5937] usb 2-1: device descriptor read/64, error -71 [ 381.726426][ T5937] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 382.733261][ T10] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 383.041120][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.086357][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 383.197585][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 383.286114][ T6295] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 383.716818][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 383.872770][ T5905] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 383.885267][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 383.951100][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 383.983510][ T10] usb 3-1: Manufacturer: syz [ 383.985222][ T6300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=6300 comm=syz.1.90 [ 384.007603][ T10] usb 3-1: config 0 descriptor?? [ 384.138805][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 384.245809][ T6302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.90'. [ 384.255549][ T6302] openvswitch: netlink: Missing key (keys=40, expected=100) [ 384.318712][ T5905] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 384.592464][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 384.602422][ T48] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 384.664857][ T5905] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 384.704622][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.737654][ T5905] usb 5-1: Product: syz [ 384.753617][ T5905] usb 5-1: Manufacturer: syz [ 384.765682][ T48] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 384.843683][ T5905] usb 5-1: SerialNumber: syz [ 384.863527][ T5905] usb 5-1: config 0 descriptor?? [ 384.872806][ T6292] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 384.900493][ T6292] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 384.910536][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.928993][ T5905] usb 5-1: ucan: probing device on interface #0 [ 384.974067][ T48] usb 1-1: config 0 descriptor?? [ 384.992464][ T10] rc_core: IR keymap rc-hauppauge not found [ 384.994209][ T48] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 385.018663][ T10] Registered IR keymap rc-empty [ 385.040714][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 385.082636][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 385.105378][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 385.247448][ T6311] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 385.282627][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7 [ 385.303689][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 385.303706][ T30] audit: type=1400 audit(1747470330.449:241): avc: denied { ioctl } for pid=5168 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2812 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 385.348998][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 385.383114][ T48] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 385.392829][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 385.452648][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 385.460162][ T5905] usb 5-1: ucan: device reported invalid device info [ 385.467097][ T5905] usb 5-1: ucan: probe failed; try to update the device firmware [ 385.482884][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 385.512711][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 385.564197][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 385.590959][ T30] audit: type=1400 audit(1747470330.729:242): avc: denied { create } for pid=6297 comm="syz.0.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 386.275212][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 386.284744][ T30] audit: type=1400 audit(1747470330.999:243): avc: denied { execute } for pid=6297 comm="syz.0.91" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8821 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 386.309367][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 386.317040][ T30] audit: type=1400 audit(1747470330.999:244): avc: denied { create } for pid=6297 comm="syz.0.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 386.482456][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 386.483552][ T48] gspca_cpia1: usb_control_msg 01, error -110 [ 386.505263][ T48] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 386.953407][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 386.982512][ T30] audit: type=1400 audit(1747470331.049:245): avc: denied { sys_admin } for pid=6297 comm="syz.0.91" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 387.016414][ T10] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 387.026089][ T10] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 387.037789][ T30] audit: type=1400 audit(1747470331.719:246): avc: denied { mount } for pid=6288 comm="syz.4.89" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 387.308627][ T5941] usb 1-1: USB disconnect, device number 2 [ 388.139369][ T30] audit: type=1400 audit(1747470333.279:247): avc: denied { unmount } for pid=5860 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 388.160542][ T6223] usb 5-1: USB disconnect, device number 6 [ 388.256962][ T48] usb 3-1: USB disconnect, device number 5 [ 388.667877][ T30] audit: type=1326 audit(1747470333.809:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6338 comm="syz.0.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38ed8e969 code=0x7ffc0000 [ 388.833127][ T30] audit: type=1326 audit(1747470333.809:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6338 comm="syz.0.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38ed8e969 code=0x7ffc0000 [ 388.972427][ T30] audit: type=1326 audit(1747470333.809:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6338 comm="syz.0.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd38ed8e969 code=0x7ffc0000 [ 389.076250][ T6357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.102'. [ 389.133914][ T6357] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.143043][ T6357] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.151758][ T6357] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.160913][ T6357] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.161632][ T6357] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.171002][ T6357] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.180188][ T6357] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.189222][ T6357] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.124712][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 391.124749][ T30] audit: type=1400 audit(1747470336.259:255): avc: denied { read write } for pid=6359 comm="syz.1.103" name="vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 391.168618][ T30] audit: type=1400 audit(1747470336.259:256): avc: denied { open } for pid=6359 comm="syz.1.103" path="/dev/vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 391.222957][ T30] audit: type=1400 audit(1747470336.309:257): avc: denied { ioctl } for pid=6359 comm="syz.1.103" path="/dev/vmci" dev="devtmpfs" ino=697 ioctlcmd=0x7a7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 391.469362][ T6371] ieee802154 phy0 wpan0: encryption failed: -22 [ 391.757537][ T30] audit: type=1400 audit(1747470336.889:258): avc: denied { create } for pid=6383 comm="syz.3.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 391.942046][ T48] libceph: connect (1)[c::]:6789 error -101 [ 391.948673][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 392.031294][ T6384] ceph: No mds server is up or the cluster is laggy [ 392.502856][ T6223] libceph: connect (1)[c::]:6789 error -101 [ 392.509601][ T6223] libceph: mon0 (1)[c::]:6789 connect error [ 392.604723][ T6394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.171403][ T6407] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 393.197581][ T6407] CIFS mount error: No usable UNC path provided in device string! [ 393.197581][ T6407] [ 393.208144][ T6407] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 393.512457][ T30] audit: type=1400 audit(1747470338.369:259): avc: denied { create } for pid=6399 comm="syz.2.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 393.743998][ T30] audit: type=1400 audit(1747470338.369:260): avc: denied { bind } for pid=6399 comm="syz.2.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 394.171306][ T6418] overlayfs: missing 'lowerdir' [ 394.581634][ T30] audit: type=1400 audit(1747470338.369:261): avc: denied { listen } for pid=6399 comm="syz.2.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 394.611362][ T30] audit: type=1400 audit(1747470338.699:262): avc: denied { read } for pid=6392 comm="syz.0.109" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 394.655079][ T30] audit: type=1400 audit(1747470338.699:263): avc: denied { open } for pid=6392 comm="syz.0.109" path="/dev/input/event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 394.746916][ T30] audit: type=1400 audit(1747470338.699:264): avc: denied { ioctl } for pid=6392 comm="syz.0.109" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 394.772389][ C1] vkms_vblank_simulate: vblank timer overrun [ 396.554988][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 396.555003][ T30] audit: type=1400 audit(1747470341.689:266): avc: denied { read } for pid=6422 comm="syz.2.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 396.586154][ T30] audit: type=1400 audit(1747470341.689:267): avc: denied { map } for pid=6422 comm="syz.2.118" path="socket:[10035]" dev="sockfs" ino=10035 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 396.610107][ T30] audit: type=1400 audit(1747470341.689:268): avc: denied { accept } for pid=6422 comm="syz.2.118" path="socket:[10035]" dev="sockfs" ino=10035 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 397.105294][ T6451] ipt_ECN: cannot use operation on non-tcp rule [ 397.516761][ T6451] tun0: tun_chr_ioctl cmd 1074025678 [ 397.522145][ T6451] tun0: group set to 0 [ 398.595358][ T6465] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (60) [ 398.652694][ T5888] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 398.805089][ T30] audit: type=1400 audit(1747470343.949:269): avc: denied { create } for pid=6468 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 398.827143][ T5888] usb 5-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 398.840201][ T30] audit: type=1400 audit(1747470343.969:270): avc: denied { ioctl } for pid=6468 comm="syz.1.131" path="socket:[8980]" dev="sockfs" ino=8980 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 398.861506][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.890829][ T30] audit: type=1400 audit(1747470344.019:271): avc: denied { bind } for pid=6468 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 398.911529][ T5888] usb 5-1: Product: syz [ 398.921059][ T30] audit: type=1400 audit(1747470344.029:272): avc: denied { write } for pid=6468 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 398.924851][ T5888] usb 5-1: Manufacturer: syz [ 398.943472][ T6474] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 398.996340][ T5888] usb 5-1: SerialNumber: syz [ 399.013291][ T5888] usb 5-1: config 0 descriptor?? [ 399.225474][ T6463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.362227][ T6463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.230888][ T30] audit: type=1400 audit(1747470345.369:273): avc: denied { connect } for pid=6486 comm="syz.2.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 401.176940][ T30] audit: type=1400 audit(1747470346.289:274): avc: denied { connect } for pid=6492 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 401.604827][ T5888] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 401.653938][ T5888] asix 5-1:0.0: probe with driver asix failed with error -71 [ 401.709430][ T5888] usb 5-1: USB disconnect, device number 7 [ 401.850950][ T6499] bridge1: entered allmulticast mode [ 401.959649][ T6506] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 402.599362][ T6508] overlayfs: missing 'workdir' [ 402.763967][ T6518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.776472][ T30] audit: type=1400 audit(1747470347.919:275): avc: denied { create } for pid=6516 comm="syz.4.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 403.088835][ T30] audit: type=1400 audit(1747470347.949:276): avc: denied { write } for pid=6516 comm="syz.4.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 403.191792][ T972] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 403.732128][ T30] audit: type=1400 audit(1747470348.009:277): avc: denied { create } for pid=6516 comm="syz.4.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 403.753425][ T30] audit: type=1400 audit(1747470348.029:278): avc: denied { bind } for pid=6516 comm="syz.4.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 403.797794][ T972] usb 1-1: config index 0 descriptor too short (expected 8192, got 96) [ 403.825996][ T972] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.840397][ T972] usb 1-1: config 0 has no interfaces? [ 403.885601][ T972] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 403.910908][ T30] audit: type=1400 audit(1747470348.039:279): avc: denied { write } for pid=6516 comm="syz.4.145" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 403.910921][ T972] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 403.957861][ T972] usb 1-1: Product: syz [ 403.962057][ T972] usb 1-1: Manufacturer: syz [ 403.972065][ T972] usb 1-1: config 0 descriptor?? [ 404.026826][ T30] audit: type=1400 audit(1747470348.859:280): avc: denied { create } for pid=6524 comm="syz.3.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 404.046478][ T30] audit: type=1400 audit(1747470348.869:281): avc: denied { listen } for pid=6524 comm="syz.3.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 404.111415][ T30] audit: type=1400 audit(1747470348.869:282): avc: denied { append } for pid=6524 comm="syz.3.148" name="dlm-monitor" dev="devtmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 404.147457][ T6534] mmap: syz.1.151 (6534) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 404.383164][ T5941] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 404.618119][ T5941] usb 4-1: device descriptor read/64, error -71 [ 405.002689][ T5941] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 405.169600][ T5941] usb 4-1: device descriptor read/64, error -71 [ 405.227423][ T30] audit: type=1400 audit(1747470350.309:283): avc: denied { connect } for pid=6548 comm="syz.1.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 405.698802][ T5905] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 405.709186][ T30] audit: type=1400 audit(1747470350.369:284): avc: denied { shutdown } for pid=6548 comm="syz.1.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 405.804307][ T5941] usb usb4-port1: attempt power cycle [ 405.862994][ T5905] usb 5-1: Using ep0 maxpacket: 8 [ 405.876681][ T5905] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.889728][ T5905] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 405.904628][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.965931][ T5905] usb 5-1: config 0 descriptor?? [ 406.001572][ T5905] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 406.025215][ T972] usb 1-1: USB disconnect, device number 3 [ 406.071605][ T6554] netlink: 132 bytes leftover after parsing attributes in process `syz.1.157'. [ 406.091384][ T6554] Cannot find del_set index 0 as target [ 406.142522][ T5941] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 406.184481][ T5905] gspca_vc032x: reg_r err -32 [ 406.189263][ T5905] vc032x 5-1:0.0: probe with driver vc032x failed with error -32 [ 406.202399][ T5941] usb 4-1: device descriptor read/8, error -71 [ 406.375438][ T6561] capability: warning: `syz.1.159' uses 32-bit capabilities (legacy support in use) [ 406.457492][ T6561] program syz.1.159 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.018947][ T5941] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 407.282442][ T5861] Bluetooth: hci4: command 0x0405 tx timeout [ 407.325525][ T6575] ipt_ECN: cannot use operation on non-tcp rule [ 407.400895][ T6576] tun0: tun_chr_ioctl cmd 1074025678 [ 407.406543][ T6576] tun0: group set to 0 [ 407.423456][ T5941] usb 4-1: device not accepting address 8, error -71 [ 407.431903][ T5941] usb usb4-port1: unable to enumerate USB device [ 407.451666][ T5905] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 407.554850][ T6579] ======================================================= [ 407.554850][ T6579] WARNING: The mand mount option has been deprecated and [ 407.554850][ T6579] and is ignored by this kernel. Remove the mand [ 407.554850][ T6579] option from the mount to silence this warning. [ 407.554850][ T6579] ======================================================= [ 407.632397][ T5905] usb 2-1: Using ep0 maxpacket: 32 [ 407.648613][ T5905] usb 2-1: config 0 interface 0 has no altsetting 0 [ 407.667138][ T5905] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 407.692891][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.701866][ T5905] usb 2-1: Product: syz [ 407.712577][ T5905] usb 2-1: Manufacturer: syz [ 407.721539][ T5905] usb 2-1: SerialNumber: syz [ 407.737515][ T5905] usb 2-1: config 0 descriptor?? [ 407.775813][ T5941] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 408.226417][ T5888] usb 5-1: USB disconnect, device number 8 [ 408.242918][ T5941] usb 4-1: Using ep0 maxpacket: 8 [ 408.256425][ T5941] usb 4-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 9818, setting to 1024 [ 408.286433][ T5941] usb 4-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 408.338458][ T5941] usb 4-1: config 1 interface 0 has no altsetting 0 [ 408.363640][ T5941] usb 4-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.40 [ 408.379423][ T5905] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 408.386979][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.411327][ T5941] usb 4-1: Product: 㳃젶鈼뗲㭉쮳૳鸛쉰郰牳᜛䅊苬佴悗妇驁ꥎﷁሤ䃍⧮粿ȟ㐞㿆眳忀∺㰌蔃޴縩સ룁뒲௃賢秺㺪譿˦菰ⷅ㯁右말˗烼ꤐټឆ⹂藆薺럻쬗梂䕏ﳉ吥袆䭖葲嶔ӕꁸ銣࿽峞ᚙ盦꠵ʊᜡ竺㙗⿑㣁뜞㈭铄䚨䯽極 [ 408.467323][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 408.467339][ T30] audit: type=1400 audit(1747470353.609:290): avc: denied { name_bind } for pid=6587 comm="syz.4.168" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 408.498726][ T5941] usb 4-1: Manufacturer: ࠾ [ 408.530109][ T5941] usb 4-1: SerialNumber: 陟떧흁⡵⑷ᥣ쫨ᣫ痐궾ᰯꄛ芕섖酘ױ쮎渭萚ﻣ￰闛몥鳺쏘ꒀ脼劀焸蠌㊵럥㔮臍菣鷎묷⪴歽隿ﱹⶳ쁳団ᡬ姺緜쫟繭﫿韷ᑇ帋뺪㮇ᰫ趶瞮漣艆⵱苭ⷄ㘲矺옦暋鮍涪뷠ੑ뾷둯ؖ늟ᴼ쾺圌肠卢뷰ॶ녔肙ⳋᓂ䔯 [ 408.607834][ T6571] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 408.668569][ T6595] netlink: 80 bytes leftover after parsing attributes in process `syz.2.170'. [ 408.803809][ T5905] usb 2-1: USB disconnect, device number 5 [ 408.811626][ T30] audit: type=1400 audit(1747470353.949:291): avc: denied { create } for pid=6577 comm="syz.0.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 408.831484][ T48] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 408.931023][ T5941] usbhid 4-1:1.0: can't add hid device: -71 [ 408.939329][ T5941] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 408.982266][ T5941] usb 4-1: USB disconnect, device number 9 [ 409.006140][ T48] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 409.019842][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 50543, setting to 64 [ 409.043942][ T48] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 409.056579][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.066180][ T6580] syz.0.165 (6580) used greatest stack depth: 20392 bytes left [ 409.077055][ T48] usb 5-1: Product: syz [ 409.086869][ T48] usb 5-1: Manufacturer: syz [ 409.091597][ T48] usb 5-1: SerialNumber: syz [ 409.104357][ T48] usb 5-1: config 0 descriptor?? [ 409.114722][ T48] powermate 5-1:0.0: probe with driver powermate failed with error -5 [ 409.182167][ T30] audit: type=1400 audit(1747470354.319:292): avc: denied { unmount } for pid=5857 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 409.202211][ C1] vkms_vblank_simulate: vblank timer overrun [ 409.326270][ T6223] usb 5-1: USB disconnect, device number 9 [ 409.561404][ T5905] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 410.352380][ T5905] usb 1-1: Using ep0 maxpacket: 32 [ 410.363801][ T5905] usb 1-1: config 6 has an invalid interface number: 114 but max is 0 [ 410.372001][ T5905] usb 1-1: config 6 has no interface number 0 [ 410.480795][ T5905] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0060, bcdDevice=65.ac [ 410.508921][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.527996][ T30] audit: type=1400 audit(1747470355.669:293): avc: denied { append } for pid=6611 comm="syz.4.177" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 410.550646][ C1] vkms_vblank_simulate: vblank timer overrun [ 410.557782][ T5905] usb 1-1: Product: syz [ 410.557805][ T5905] usb 1-1: Manufacturer: syz [ 410.557819][ T5905] usb 1-1: SerialNumber: syz [ 410.606592][ T6616] ipt_ECN: cannot use operation on non-tcp rule [ 410.771097][ T6619] tun0: tun_chr_ioctl cmd 1074025678 [ 410.776627][ T6619] tun0: group set to 0 [ 410.844365][ T5852] Bluetooth: Unexpected start frame (len 16) [ 410.854197][ T30] audit: type=1400 audit(1747470355.719:294): avc: denied { create } for pid=6611 comm="syz.4.177" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 410.953395][ T5905] dvb-usb: found a 'Terratec Cinergy HT Express' in cold state, will try to load a firmware [ 411.109174][ T6621] netlink: 16 bytes leftover after parsing attributes in process `syz.2.178'. [ 411.625472][ T30] audit: type=1400 audit(1747470356.209:295): avc: denied { setopt } for pid=6615 comm="syz.2.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 411.827502][ T6623] Invalid source name [ 411.831604][ T6623] UBIFS error (pid: 6623): cannot open "./file0", error -22 [ 411.927005][ T30] audit: type=1400 audit(1747470356.799:296): avc: denied { write } for pid=6611 comm="syz.4.177" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 413.143472][ T6631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.179'. [ 413.299363][ T6628] netlink: 'syz.1.180': attribute type 11 has an invalid length. [ 413.555570][ T5905] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 414.003005][ T5905] dib0700: firmware download failed at 7 with -22 [ 414.022477][ T30] audit: type=1400 audit(1747470356.969:297): avc: denied { mounton } for pid=6611 comm="syz.4.177" path="/27/file0" dev="tmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 414.063574][ T30] audit: type=1400 audit(1747470357.889:298): avc: denied { create } for pid=6624 comm="syz.0.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 414.080763][ T5905] usb 1-1: USB disconnect, device number 4 [ 414.086142][ T30] audit: type=1400 audit(1747470358.269:299): avc: denied { mounton } for pid=6624 comm="syz.0.179" path="/34/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 414.146430][ T30] audit: type=1400 audit(1747470358.489:300): avc: denied { create } for pid=6627 comm="syz.2.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 414.265711][ T30] audit: type=1400 audit(1747470358.699:301): avc: denied { firmware_load } for pid=5905 comm="kworker/0:4" path="/lib/firmware/dvb-usb-dib0700-1.20.fw" dev="sda1" ino=414 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 414.312432][ T48] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 414.488229][ T5941] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 414.823955][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.927315][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.971413][ T48] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 415.014357][ T5941] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 415.031618][ T5941] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.160633][ T48] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 415.169793][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.188330][ T5941] usb 2-1: config 0 interface 0 has no altsetting 0 [ 415.196471][ T5941] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 415.232430][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.581618][ T5941] usb 2-1: config 0 descriptor?? [ 415.862267][ T48] usb 3-1: config 0 descriptor?? [ 416.029209][ T5941] usb 2-1: can't set config #0, error -71 [ 416.029744][ T48] usb 3-1: can't set config #0, error -71 [ 416.229082][ T48] usb 3-1: USB disconnect, device number 6 [ 416.241978][ T5941] usb 2-1: USB disconnect, device number 6 [ 416.542544][ T48] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 417.622636][ T48] usb 3-1: Using ep0 maxpacket: 8 [ 417.632991][ T48] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 417.642493][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.650468][ T48] usb 3-1: Product: syz [ 417.654963][ T48] usb 3-1: Manufacturer: syz [ 417.659544][ T48] usb 3-1: SerialNumber: syz [ 417.665954][ T48] usb 3-1: config 0 descriptor?? [ 417.694494][ T48] gspca_main: se401-2.14.0 probing 047d:5003 [ 418.794025][ T30] audit: type=1400 audit(1747470363.939:302): avc: denied { create } for pid=6686 comm="syz.0.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 418.887854][ T6664] block nbd2: NBD_DISCONNECT [ 419.508527][ T48] gspca_se401: Bayer format not supported! [ 419.539409][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.194'. [ 419.615422][ T30] audit: type=1400 audit(1747470363.969:303): avc: denied { getopt } for pid=6686 comm="syz.0.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 420.120680][ T6689] netlink: 'syz.4.194': attribute type 5 has an invalid length. [ 420.179940][ T30] audit: type=1400 audit(1747470364.139:304): avc: denied { create } for pid=6680 comm="syz.4.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 420.526243][ T6689] netlink: 20 bytes leftover after parsing attributes in process `syz.4.194'. [ 420.919063][ T30] audit: type=1400 audit(1747470364.149:305): avc: denied { write } for pid=6680 comm="syz.4.194" path="socket:[11505]" dev="sockfs" ino=11505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 421.208403][ T5904] usb 3-1: USB disconnect, device number 7 [ 421.429951][ T6689] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 422.548279][ T6702] netlink: 'syz.2.198': attribute type 4 has an invalid length. [ 422.608266][ T6689] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 422.735119][ T6689] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 422.752659][ T6689] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 423.200943][ T6689] geneve2: entered promiscuous mode [ 423.208000][ T6689] geneve2: entered allmulticast mode [ 423.544132][ T6717] tty tty4: ldisc open failed (-12), clearing slot 3 [ 424.185946][ T6731] syz.3.204 uses obsolete (PF_INET,SOCK_PACKET) [ 425.293237][ T6746] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 425.352443][ T30] audit: type=1400 audit(1747470370.479:306): avc: denied { relabelto } for pid=6745 comm="syz.3.208" name="file0" dev="tmpfs" ino=231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:" [ 425.380159][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.208'. [ 425.458898][ T30] audit: type=1400 audit(1747470370.479:307): avc: denied { associate } for pid=6745 comm="syz.3.208" name="file0" dev="tmpfs" ino=231 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 425.464571][ T6749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.209'. [ 425.569058][ T30] audit: type=1400 audit(1747470370.479:308): avc: denied { bind } for pid=6745 comm="syz.3.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 425.626379][ T6749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.209'. [ 425.631879][ T30] audit: type=1400 audit(1747470370.549:309): avc: denied { mounton } for pid=6748 comm="syz.4.209" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 425.715283][ T30] audit: type=1400 audit(1747470370.759:310): avc: denied { unlink } for pid=5847 comm="syz-executor" name="file0" dev="tmpfs" ino=231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:" [ 426.623287][ T6766] Cannot find del_set index 0 as target [ 427.270979][ T30] audit: type=1400 audit(1747470372.409:311): avc: denied { read write } for pid=6773 comm="syz.2.217" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 427.579416][ T30] audit: type=1400 audit(1747470372.409:312): avc: denied { open } for pid=6773 comm="syz.2.217" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 430.805716][ T30] audit: type=1400 audit(1747470375.939:313): avc: denied { connect } for pid=6816 comm="syz.4.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 431.471648][ T30] audit: type=1400 audit(1747470376.609:314): avc: denied { bind } for pid=6829 comm="syz.4.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 431.529415][ T6837] ipt_ECN: cannot use operation on non-tcp rule [ 431.888761][ T30] audit: type=1400 audit(1747470377.029:315): avc: denied { ioctl } for pid=6839 comm="syz.3.234" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 432.143360][ T6849] tun0: tun_chr_ioctl cmd 1074025678 [ 432.148705][ T6849] tun0: group set to 0 [ 432.874894][ T30] audit: type=1400 audit(1747470378.019:316): avc: denied { open } for pid=6857 comm="syz.1.238" path="/dev/ttyq6" dev="devtmpfs" ino=381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 433.162414][ T5905] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 433.182827][ T5888] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 433.302488][ T5905] usb 2-1: device descriptor read/64, error -71 [ 433.342655][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 433.359857][ T5888] usb 5-1: config 0 has an invalid interface number: 124 but max is 0 [ 433.368241][ T5888] usb 5-1: config 0 has no interface number 0 [ 433.376507][ T5888] usb 5-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=72.01 [ 433.385822][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.393867][ T5888] usb 5-1: Product: syz [ 433.398150][ T5888] usb 5-1: Manufacturer: syz [ 433.402792][ T5888] usb 5-1: SerialNumber: syz [ 433.410851][ T5888] usb 5-1: config 0 descriptor?? [ 433.483979][ T972] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 433.593923][ T5905] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 433.648056][ T5941] usb 5-1: USB disconnect, device number 10 [ 433.833395][ T5905] usb 2-1: device descriptor read/64, error -71 [ 433.855842][ T6884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.246'. [ 433.869125][ T972] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 433.894805][ T972] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 433.913038][ T6884] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.921735][ T6884] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.930465][ T6884] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.939211][ T6884] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.949102][ T5905] usb usb2-port1: attempt power cycle [ 433.957963][ T972] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 433.969495][ T972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.982796][ T6870] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 433.992071][ T972] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 434.008603][ T6884] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.017609][ T6884] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.026490][ T6884] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.035375][ T6884] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.118399][ T6885] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.216295][ T972] usb 1-1: USB disconnect, device number 5 [ 434.313413][ T5905] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 434.339783][ T5905] usb 2-1: device descriptor read/8, error -71 [ 434.777382][ T5905] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 434.822979][ T5905] usb 2-1: device descriptor read/8, error -71 [ 434.943109][ T5905] usb usb2-port1: unable to enumerate USB device [ 434.949587][ T972] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 435.103760][ T972] usb 4-1: Using ep0 maxpacket: 16 [ 435.125371][ T972] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 435.556109][ T972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 435.575167][ T30] audit: type=1400 audit(1747470380.719:317): avc: denied { getopt } for pid=6900 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 435.600316][ T30] audit: type=1400 audit(1747470380.719:318): avc: denied { create } for pid=6900 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 435.621309][ T972] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 435.635746][ T30] audit: type=1400 audit(1747470380.779:319): avc: denied { create } for pid=6900 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 435.660332][ T972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.733014][ T972] usb 4-1: Product: syz [ 435.752497][ T972] usb 4-1: Manufacturer: syz [ 435.884126][ T972] usb 4-1: SerialNumber: syz [ 435.903580][ T972] usb 4-1: config 0 descriptor?? [ 435.911365][ T972] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 435.923820][ T972] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 436.678711][ T6925] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 436.685389][ T6925] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 436.692784][ T6926] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(10) [ 436.693557][ T972] em28xx 4-1:0.0: chip ID is em28178 [ 436.699374][ T6926] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 436.712157][ C1] vkms_vblank_simulate: vblank timer overrun [ 436.801215][ T6933] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(14) [ 436.807849][ T6933] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 436.864381][ T6925] vhci_hcd vhci_hcd.0: Device attached [ 436.885082][ T6926] vhci_hcd vhci_hcd.0: Device attached [ 436.897871][ T972] usb 4-1: USB disconnect, device number 10 [ 436.905846][ T972] em28xx 4-1:0.0: Disconnecting em28xx [ 436.921113][ T6933] vhci_hcd vhci_hcd.0: Device attached [ 436.955280][ T972] em28xx 4-1:0.0: Freeing device [ 436.987142][ T5888] vhci_hcd: vhci_device speed not set [ 436.992789][ T6937] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9) [ 436.999304][ T6937] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 437.007135][ T10] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 437.027546][ T30] audit: type=1400 audit(1747470382.169:320): avc: denied { execute } for pid=6923 comm="syz.1.258" path="/55/blkio.bfq.io_merged" dev="tmpfs" ino=304 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 437.032675][ T6937] vhci_hcd vhci_hcd.0: Device attached [ 437.083419][ T5888] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 437.129767][ T6938] vhci_hcd: connection closed [ 437.131214][ T12] vhci_hcd: stop threads [ 437.141062][ T6927] vhci_hcd: connection reset by peer [ 437.141553][ T6928] vhci_hcd: connection closed [ 437.157316][ T6934] vhci_hcd: connection closed [ 437.188204][ T12] vhci_hcd: release socket [ 437.205497][ T12] vhci_hcd: disconnect device [ 437.210662][ T10] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 437.221213][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.230585][ T12] vhci_hcd: stop threads [ 437.240114][ T12] vhci_hcd: release socket [ 437.243476][ T10] usb 3-1: Product: syz [ 437.245704][ T12] vhci_hcd: disconnect device [ 437.248759][ T10] usb 3-1: Manufacturer: syz [ 437.248776][ T10] usb 3-1: SerialNumber: syz [ 437.253282][ T10] usb 3-1: config 0 descriptor?? [ 437.263091][ T12] vhci_hcd: stop threads [ 437.272556][ T12] vhci_hcd: release socket [ 437.277148][ T12] vhci_hcd: disconnect device [ 437.284924][ T12] vhci_hcd: stop threads [ 437.289199][ T12] vhci_hcd: release socket [ 437.294798][ T12] vhci_hcd: disconnect device [ 438.124605][ T30] audit: type=1400 audit(1747470383.269:321): avc: denied { read append } for pid=6950 comm="syz.3.263" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 438.156875][ T6955] binder: BINDER_SET_CONTEXT_MGR already set [ 438.176356][ T6955] binder: 6950:6955 ioctl 4018620d 200000000040 returned -16 [ 438.187809][ T10] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 438.266468][ T30] audit: type=1400 audit(1747470383.299:322): avc: denied { open } for pid=6950 comm="syz.3.263" path="/dev/ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 438.279547][ T6959] netlink: 'syz.4.266': attribute type 1 has an invalid length. [ 438.534619][ T5941] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 438.565814][ T972] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 438.600815][ T30] audit: type=1400 audit(1747470383.299:323): avc: denied { prog_load } for pid=6950 comm="syz.3.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 438.716777][ T30] audit: type=1400 audit(1747470383.299:324): avc: denied { bpf } for pid=6950 comm="syz.3.263" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 438.741298][ T30] audit: type=1400 audit(1747470383.299:325): avc: denied { perfmon } for pid=6950 comm="syz.3.263" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 438.782542][ T972] usb 2-1: not running at top speed; connect to a high speed hub [ 438.796116][ T5941] usb 4-1: Using ep0 maxpacket: 16 [ 438.812855][ T972] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 438.822942][ T972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.831560][ T972] usb 2-1: Product: Ў [ 438.836324][ T5905] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 438.852574][ T30] audit: type=1400 audit(1747470383.299:326): avc: denied { read } for pid=6950 comm="syz.3.263" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 438.876451][ T972] usb 2-1: Manufacturer: ళ [ 438.881166][ T972] usb 2-1: SerialNumber: 溉슆騹ᰳO戼繼烨걿좹ᩚ姛꠿₉ﻸ哕ꊢ魡⢴붿⍬ᯔֺ藡䬓ᬌ䮴ᕒୋ࿎㞇脳꾄洙霣㊲䨷䍜阩횀 [ 438.897029][ T5941] usb 4-1: New USB device found, idVendor=110a, idProduct=1653, bcdDevice=5e.a7 [ 438.963993][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.981498][ T5941] usb 4-1: Product: syz [ 438.991774][ T30] audit: type=1400 audit(1747470383.299:327): avc: denied { open } for pid=6950 comm="syz.3.263" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 439.000389][ T5941] usb 4-1: Manufacturer: syz [ 439.078032][ T6972] fuse: Unknown parameter '000000000000000000000030xffffffffffffffff' [ 439.432404][ T30] audit: type=1400 audit(1747470383.299:328): avc: denied { ioctl } for pid=6950 comm="syz.3.263" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 439.453858][ T5941] usb 4-1: SerialNumber: syz [ 439.457609][ C1] vkms_vblank_simulate: vblank timer overrun [ 439.466907][ T30] audit: type=1400 audit(1747470383.309:329): avc: denied { unmount } for pid=5857 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 439.494845][ T5941] usb 4-1: config 0 descriptor?? [ 439.518429][ T5905] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 439.526687][ T5905] usb 1-1: can't read configurations, error -61 [ 439.739671][ T5905] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 439.760879][ T972] cdc_ncm 2-1:1.0: bind() failure [ 439.776878][ T972] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 439.784712][ T972] cdc_ncm 2-1:1.1: bind() failure [ 439.799925][ T972] usb 2-1: USB disconnect, device number 11 [ 439.846470][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.854636][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.914547][ T5905] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 439.931747][ T5905] usb 1-1: can't read configurations, error -61 [ 439.939969][ T5905] usb usb1-port1: attempt power cycle [ 439.954986][ T5941] mxuport 4-1:0.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 439.968161][ T5941] mxuport 4-1:0.0: probe with driver mxuport failed with error -5 [ 440.166907][ T1864] usb 4-1: USB disconnect, device number 11 [ 440.472390][ T5905] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 440.675032][ T5905] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 440.687987][ T5905] usb 1-1: can't read configurations, error -61 [ 440.707000][ T10] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 440.829553][ T10] dm9601 3-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet, e2:82:e4:a1:19:89 [ 440.850226][ T10] usb 3-1: USB disconnect, device number 8 [ 440.866306][ T10] dm9601 3-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet [ 441.363001][ T5905] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 441.407513][ C0] raw-gadget.3 gadget.0: ignoring, device is not running [ 441.433208][ T5905] usb 1-1: device descriptor read/8, error -32 [ 441.650222][ T5905] usb usb1-port1: unable to enumerate USB device [ 441.764829][ T6996] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 441.779162][ T6996] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 442.028555][ T7005] ------------[ cut here ]------------ [ 442.028649][ T7005] WARNING: CPU: 0 PID: 7005 at drivers/gpu/drm/vkms/vkms_crtc.c:97 vkms_get_vblank_timestamp+0x167/0x1b0 [ 442.028707][ T7005] Modules linked in: [ 442.028785][ T7005] CPU: 0 UID: 0 PID: 7005 Comm: syz.1.276 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 442.028821][ T7005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 442.028846][ T7005] RIP: 0010:vkms_get_vblank_timestamp+0x167/0x1b0 [ 442.028889][ T7005] Code: c3 fb e8 2c 6e b1 fb 4c 89 e1 48 ba 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 11 00 75 43 49 89 04 24 eb c0 e8 4a a0 c3 fb 90 <0f> 0b 90 eb b5 e8 bf 1d 29 fc e9 dc fe ff ff e8 45 1e 29 fc e9 14 [ 442.028919][ T7005] RSP: 0018:ffffc9001ceeef08 EFLAGS: 00010283 [ 442.028960][ T7005] RAX: 0000000000005216 RBX: ffff888021f74028 RCX: ffffc9000ca0a000 [ 442.028986][ T7005] RDX: 0000000000080000 RSI: ffffffff85f7a5f6 RDI: 0000000000000006 [ 442.029010][ T7005] RBP: 00000066e8c0cdb6 R08: 0000000000000006 R09: 00000066e8c0cdb6 [ 442.029035][ T7005] R10: 00000066e8c0cdb6 R11: 0000000000000000 R12: ffffc9001ceef070 [ 442.029060][ T7005] R13: 00000066e8c0cdb6 R14: 0000000000004e20 R15: ffffffff85f7a490 [ 442.029084][ T7005] FS: 00007f05b66306c0(0000) GS:ffff8881249df000(0000) knlGS:0000000000000000 [ 442.029116][ T7005] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 442.029144][ T7005] CR2: 00007f05b660fd58 CR3: 000000003521b000 CR4: 00000000003526f0 [ 442.029171][ T7005] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 442.029193][ T7005] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 442.029218][ T7005] Call Trace: [ 442.029238][ T7005] [ 442.029280][ T7005] drm_crtc_get_last_vbltimestamp+0x105/0x1b0 [ 442.029321][ T7005] ? __pfx_drm_crtc_get_last_vbltimestamp+0x10/0x10 [ 442.029358][ T7005] ? __lock_acquire+0xaa4/0x1ba0 [ 442.029418][ T7005] drm_crtc_next_vblank_start+0x182/0x300 [ 442.029460][ T7005] drm_atomic_helper_wait_for_fences+0x203/0x830 [ 442.029512][ T7005] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 442.029546][ T7005] ? lockdep_hardirqs_on+0x7c/0x110 [ 442.029584][ T7005] ? read_tsc+0x9/0x20 [ 442.029621][ T7005] ? ktime_get+0x1a7/0x310 [ 442.029660][ T7005] commit_tail+0x83/0x400 [ 442.029710][ T7005] drm_atomic_helper_commit+0x2fd/0x380 [ 442.029744][ T7005] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 442.029777][ T7005] drm_atomic_commit+0x231/0x300 [ 442.029814][ T7005] ? __pfx_drm_atomic_commit+0x10/0x10 [ 442.029850][ T7005] ? __pfx___drm_printfn_info+0x10/0x10 [ 442.029914][ T7005] drm_client_modeset_commit_atomic+0x69d/0x7e0 [ 442.029970][ T7005] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 442.030004][ T7005] ? __mutex_lock+0x33e/0xb90 [ 442.030041][ T7005] ? __mutex_lock+0x1ca/0xb90 [ 442.030119][ T7005] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 442.030180][ T7005] drm_client_modeset_commit_locked+0x14d/0x580 [ 442.030219][ T7005] drm_fb_helper_pan_display+0x32d/0xa40 [ 442.030301][ T7005] fb_pan_display+0x47c/0x7d0 [ 442.030332][ T7005] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 442.030371][ T7005] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 442.030405][ T7005] fb_set_var+0x860/0x11f0 [ 442.030454][ T7005] ? __pfx_fb_set_var+0x10/0x10 [ 442.030485][ T7005] ? finish_task_switch.isra.0+0x221/0xc10 [ 442.030522][ T7005] ? rcu_is_watching+0x12/0xc0 [ 442.030579][ T7005] ? lock_acquire+0x140/0x350 [ 442.030641][ T7005] ? __pfx___schedule+0x10/0x10 [ 442.030676][ T7005] ? __lock_acquire+0xaa4/0x1ba0 [ 442.030778][ T7005] ? fb_find_best_mode+0x1e9/0x2f0 [ 442.030814][ T7005] ? fb_videomode_to_var+0x13/0x610 [ 442.030852][ T7005] fbcon_resize+0x684/0x910 [ 442.030901][ T7005] ? __pfx_fbcon_resize+0x10/0x10 [ 442.030930][ T7005] ? rcu_is_watching+0x12/0xc0 [ 442.031023][ T7005] ? __pfx_fbcon_resize+0x10/0x10 [ 442.031055][ T7005] vc_do_resize+0xccb/0x10e0 [ 442.031128][ T7005] ? __pfx_vc_do_resize+0x10/0x10 [ 442.031183][ T7005] vt_ioctl+0x24ce/0x2f50 [ 442.031224][ T7005] ? __pfx_vt_ioctl+0x10/0x10 [ 442.031303][ T7005] ? __sanitizer_cov_trace_switch+0x16/0x90 [ 442.031337][ T7005] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 442.031370][ T7005] ? do_vfs_ioctl+0x512/0x1990 [ 442.031406][ T7005] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 442.031439][ T7005] ? tty_jobctrl_ioctl+0x152/0xe00 [ 442.031479][ T7005] ? __pfx_vt_ioctl+0x10/0x10 [ 442.031515][ T7005] tty_ioctl+0x65a/0x1610 [ 442.031550][ T7005] ? __pfx_tty_ioctl+0x10/0x10 [ 442.031580][ T7005] ? irqentry_exit+0x3b/0x90 [ 442.031618][ T7005] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 442.031682][ T7005] ? selinux_file_ioctl+0x60/0x270 [ 442.031723][ T7005] ? write_comp_data+0x3c/0x90 [ 442.031779][ T7005] ? selinux_file_ioctl+0x180/0x270 [ 442.031818][ T7005] ? selinux_file_ioctl+0xb4/0x270 [ 442.031859][ T7005] ? __pfx_tty_ioctl+0x10/0x10 [ 442.031893][ T7005] __x64_sys_ioctl+0x193/0x200 [ 442.031931][ T7005] do_syscall_64+0xcd/0x260 [ 442.031973][ T7005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.032003][ T7005] RIP: 0033:0x7f05b578e969 [ 442.032031][ T7005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.032059][ T7005] RSP: 002b:00007f05b6630038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 442.032102][ T7005] RAX: ffffffffffffffda RBX: 00007f05b59b5fa0 RCX: 00007f05b578e969 [ 442.032127][ T7005] RDX: 0000200000000100 RSI: 000000000000560a RDI: 0000000000000003 [ 442.032149][ T7005] RBP: 00007f05b5810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 442.032172][ T7005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.032195][ T7005] R13: 0000000000000000 R14: 00007f05b59b5fa0 R15: 00007ffc2ab15b98 [ 442.032264][ T7005] [ 442.032288][ T7005] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 442.032303][ T7005] CPU: 0 UID: 0 PID: 7005 Comm: syz.1.276 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 442.032324][ T7005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 442.032335][ T7005] Call Trace: [ 442.032341][ T7005] [ 442.032348][ T7005] dump_stack_lvl+0x3d/0x1f0 [ 442.032372][ T7005] panic+0x71c/0x800 [ 442.032399][ T7005] ? __pfx_panic+0x10/0x10 [ 442.032427][ T7005] ? show_trace_log_lvl+0x29b/0x3e0 [ 442.032459][ T7005] ? vkms_get_vblank_timestamp+0x167/0x1b0 [ 442.032489][ T7005] check_panic_on_warn+0xab/0xb0 [ 442.032507][ T7005] __warn+0xf6/0x3c0 [ 442.032523][ T7005] ? vkms_get_vblank_timestamp+0x167/0x1b0 [ 442.032556][ T7005] report_bug+0x3c3/0x580 [ 442.032580][ T7005] ? vkms_get_vblank_timestamp+0x167/0x1b0 [ 442.032612][ T7005] handle_bug+0x184/0x210 [ 442.032629][ T7005] exc_invalid_op+0x17/0x50 [ 442.032645][ T7005] asm_exc_invalid_op+0x1a/0x20 [ 442.032662][ T7005] RIP: 0010:vkms_get_vblank_timestamp+0x167/0x1b0 [ 442.032689][ T7005] Code: c3 fb e8 2c 6e b1 fb 4c 89 e1 48 ba 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 11 00 75 43 49 89 04 24 eb c0 e8 4a a0 c3 fb 90 <0f> 0b 90 eb b5 e8 bf 1d 29 fc e9 dc fe ff ff e8 45 1e 29 fc e9 14 [ 442.032703][ T7005] RSP: 0018:ffffc9001ceeef08 EFLAGS: 00010283 [ 442.032718][ T7005] RAX: 0000000000005216 RBX: ffff888021f74028 RCX: ffffc9000ca0a000 [ 442.032730][ T7005] RDX: 0000000000080000 RSI: ffffffff85f7a5f6 RDI: 0000000000000006 [ 442.032741][ T7005] RBP: 00000066e8c0cdb6 R08: 0000000000000006 R09: 00000066e8c0cdb6 [ 442.032752][ T7005] R10: 00000066e8c0cdb6 R11: 0000000000000000 R12: ffffc9001ceef070 [ 442.032763][ T7005] R13: 00000066e8c0cdb6 R14: 0000000000004e20 R15: ffffffff85f7a490 [ 442.032773][ T7005] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 442.032798][ T7005] ? vkms_get_vblank_timestamp+0x166/0x1b0 [ 442.032818][ T7005] ? vkms_get_vblank_timestamp+0x166/0x1b0 [ 442.032837][ T7005] drm_crtc_get_last_vbltimestamp+0x105/0x1b0 [ 442.032854][ T7005] ? __pfx_drm_crtc_get_last_vbltimestamp+0x10/0x10 [ 442.032870][ T7005] ? __lock_acquire+0xaa4/0x1ba0 [ 442.032891][ T7005] drm_crtc_next_vblank_start+0x182/0x300 [ 442.032908][ T7005] drm_atomic_helper_wait_for_fences+0x203/0x830 [ 442.032924][ T7005] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 442.032937][ T7005] ? lockdep_hardirqs_on+0x7c/0x110 [ 442.032952][ T7005] ? read_tsc+0x9/0x20 [ 442.032967][ T7005] ? ktime_get+0x1a7/0x310 [ 442.032984][ T7005] commit_tail+0x83/0x400 [ 442.032999][ T7005] drm_atomic_helper_commit+0x2fd/0x380 [ 442.033011][ T7005] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 442.033024][ T7005] drm_atomic_commit+0x231/0x300 [ 442.033040][ T7005] ? __pfx_drm_atomic_commit+0x10/0x10 [ 442.033054][ T7005] ? __pfx___drm_printfn_info+0x10/0x10 [ 442.033076][ T7005] drm_client_modeset_commit_atomic+0x69d/0x7e0 [ 442.033094][ T7005] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 442.033108][ T7005] ? __mutex_lock+0x33e/0xb90 [ 442.033124][ T7005] ? __mutex_lock+0x1ca/0xb90 [ 442.033148][ T7005] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 442.033169][ T7005] drm_client_modeset_commit_locked+0x14d/0x580 [ 442.033185][ T7005] drm_fb_helper_pan_display+0x32d/0xa40 [ 442.033209][ T7005] fb_pan_display+0x47c/0x7d0 [ 442.033221][ T7005] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 442.033239][ T7005] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 442.033251][ T7005] fb_set_var+0x860/0x11f0 [ 442.033273][ T7005] ? __pfx_fb_set_var+0x10/0x10 [ 442.033286][ T7005] ? finish_task_switch.isra.0+0x221/0xc10 [ 442.033302][ T7005] ? rcu_is_watching+0x12/0xc0 [ 442.033322][ T7005] ? lock_acquire+0x140/0x350 [ 442.033346][ T7005] ? __pfx___schedule+0x10/0x10 [ 442.033361][ T7005] ? __lock_acquire+0xaa4/0x1ba0 [ 442.033392][ T7005] ? fb_find_best_mode+0x1e9/0x2f0 [ 442.033409][ T7005] ? fb_videomode_to_var+0x13/0x610 [ 442.033426][ T7005] fbcon_resize+0x684/0x910 [ 442.033441][ T7005] ? __pfx_fbcon_resize+0x10/0x10 [ 442.033451][ T7005] ? rcu_is_watching+0x12/0xc0 [ 442.033475][ T7005] ? __pfx_fbcon_resize+0x10/0x10 [ 442.033486][ T7005] vc_do_resize+0xccb/0x10e0 [ 442.033506][ T7005] ? __pfx_vc_do_resize+0x10/0x10 [ 442.033524][ T7005] vt_ioctl+0x24ce/0x2f50 [ 442.033543][ T7005] ? __pfx_vt_ioctl+0x10/0x10 [ 442.033564][ T7005] ? __sanitizer_cov_trace_switch+0x16/0x90 [ 442.033576][ T7005] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 442.033589][ T7005] ? do_vfs_ioctl+0x512/0x1990 [ 442.033603][ T7005] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 442.033615][ T7005] ? tty_jobctrl_ioctl+0x152/0xe00 [ 442.033633][ T7005] ? __pfx_vt_ioctl+0x10/0x10 [ 442.033648][ T7005] tty_ioctl+0x65a/0x1610 [ 442.033661][ T7005] ? __pfx_tty_ioctl+0x10/0x10 [ 442.033673][ T7005] ? irqentry_exit+0x3b/0x90 [ 442.033689][ T7005] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 442.033712][ T7005] ? selinux_file_ioctl+0x60/0x270 [ 442.033730][ T7005] ? write_comp_data+0x3c/0x90 [ 442.033749][ T7005] ? selinux_file_ioctl+0x180/0x270 [ 442.033766][ T7005] ? selinux_file_ioctl+0xb4/0x270 [ 442.033784][ T7005] ? __pfx_tty_ioctl+0x10/0x10 [ 442.033797][ T7005] __x64_sys_ioctl+0x193/0x200 [ 442.033814][ T7005] do_syscall_64+0xcd/0x260 [ 442.033831][ T7005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.033842][ T7005] RIP: 0033:0x7f05b578e969 [ 442.033851][ T7005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.033862][ T7005] RSP: 002b:00007f05b6630038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 442.033873][ T7005] RAX: ffffffffffffffda RBX: 00007f05b59b5fa0 RCX: 00007f05b578e969 [ 442.033880][ T7005] RDX: 0000200000000100 RSI: 000000000000560a RDI: 0000000000000003 [ 442.033887][ T7005] RBP: 00007f05b5810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 442.033893][ T7005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.033900][ T7005] R13: 0000000000000000 R14: 00007f05b59b5fa0 R15: 00007ffc2ab15b98 [ 442.033914][ T7005] [ 442.034128][ T7005] Kernel Offset: disabled