last executing test programs: 15.763877004s ago: executing program 0 (id=1041): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket(0xa, 0x3, 0x3a) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r5, 0x400455c8, 0x4) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000000c0)=0xe) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000200)=0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0xfd, 0x7, 0xaa, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x2, 0x4]}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x1b, 0x0, 0x0, 0x10, &(0x7f0000000400), &(0x7f0000000580), 0x8, 0x77, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) 6.118533842s ago: executing program 1 (id=1080): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x200000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 5.55538171s ago: executing program 1 (id=1082): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r8, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) 5.450863992s ago: executing program 4 (id=1083): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r2}, 0x10) r3 = syz_pidfd_open(r0, 0x0) setns(r3, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 5.285277924s ago: executing program 3 (id=1084): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000280)={{0xffffffffffffffff, 0x3, 0xe, 0x1, 0x8001}}) sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socket(0xa, 0x2, 0x2) fsopen(0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x802, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'vlan0\x00', &(0x7f0000000340)=@ethtool_coalesce={0x1, 0x2, 0xf, 0x2b, 0x5, 0x42, 0x4, 0xfffffffd, 0xf, 0x6, 0x1, 0x56a, 0x7fffffff, 0x967d, 0x401, 0x7, 0xe36, 0x5, 0x0, 0xe8c, 0x2, 0x7e, 0x2}}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x113) pwritev2(r7, &(0x7f0000000100)=[{&(0x7f0000000240)="1228fa036302f4985a0777781409b402e7aeec1a4631500aa0316dc192b9b0b285a48982b10bde724698ae06c003467768a5434f52d07ad9cf807cc047d54590839af6a7e9685c779879b44de9c66146af428c0da932", 0x56}], 0x1, 0xcfbc, 0x3, 0x0) sendfile(r7, r7, 0x0, 0x7a680003) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r6) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x88, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1ff}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x88}}, 0x0) 4.85827936s ago: executing program 0 (id=1086): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800003f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) futimesat(0xffffffffffffffff, 0x0, 0x0) 4.846419081s ago: executing program 0 (id=1087): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000002c0)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nogrpid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1000410, &(0x7f00000021c0)={[{@grpid}, {@grpquota}], [{@measure}]}, 0x4, 0x4e8, &(0x7f00000006c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x2) flock(r1, 0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) ioprio_set$pid(0x1, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000d40)={0x3, [0x5, 0x3, 0x8bc]}) poll(0x0, 0x0, 0x5) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x109) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={r4, 0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1, 0x0, 0x5}, 0x18) r5 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000080)={0x0, "69dcaf20127e9a854528f45826cb35be51ca73845d177dd8dba7221daeccfda56b75cfe286fdd14cb5b11b1cab614fec2236da7d88ea0f0700"}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r5, &(0x7f0000000300)='asymmetric\x00', 0x0, 0x0) 4.544074625s ago: executing program 4 (id=1088): getrusage(0x0, &(0x7f0000000500)) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x7}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) listen(0xffffffffffffffff, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18}}], 0x1, 0x0) epoll_create1(0x80000) 4.493632445s ago: executing program 4 (id=1089): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000380)={r2, r3+60000000}) 4.493183255s ago: executing program 4 (id=1090): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 4.434253056s ago: executing program 4 (id=1091): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x5}, 0x8) 4.348569597s ago: executing program 1 (id=1092): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x200000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 4.316735958s ago: executing program 3 (id=1094): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) io_setup(0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r5, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.914028118s ago: executing program 1 (id=1098): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r2}, 0x10) r3 = syz_pidfd_open(r0, 0x0) setns(r3, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 2.881295539s ago: executing program 3 (id=1099): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fchmod(0xffffffffffffffff, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r2, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 2.79111502s ago: executing program 2 (id=1101): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80ff, 0x1) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setlease(r0, 0x400, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d8) 2.731981131s ago: executing program 2 (id=1102): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.943691322s ago: executing program 3 (id=1103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r8, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) 1.821014054s ago: executing program 1 (id=1104): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x204100, 0x0) r3 = syz_pidfd_open(0x0, 0x0) pidfd_send_signal(r3, 0x8, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.767396174s ago: executing program 2 (id=1105): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000280)={{0xffffffffffffffff, 0x3, 0xe, 0x1, 0x8001}}) sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socket(0xa, 0x2, 0x2) fsopen(0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x802, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'vlan0\x00', &(0x7f0000000340)=@ethtool_coalesce={0x1, 0x2, 0xf, 0x2b, 0x5, 0x42, 0x4, 0xfffffffd, 0xf, 0x6, 0x1, 0x56a, 0x7fffffff, 0x967d, 0x401, 0x7, 0xe36, 0x5, 0x0, 0xe8c, 0x2, 0x7e, 0x2}}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x113) pwritev2(r7, &(0x7f0000000100)=[{&(0x7f0000000240)="1228fa036302f4985a0777781409b402e7aeec1a4631500aa0316dc192b9b0b285a48982b10bde724698ae06c003467768a5434f52d07ad9cf807cc047d54590839af6a7e9685c779879b44de9c66146af428c0da932", 0x56}], 0x1, 0xcfbc, 0x3, 0x0) sendfile(r7, r7, 0x0, 0x7a680003) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r6) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x88, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1ff}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x88}}, 0x0) 1.707830745s ago: executing program 0 (id=1106): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000e18a0000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18) write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000900), 0x2, 0x0) ppoll(&(0x7f0000000940)=[{r7, 0x2029}, {r2, 0x8044}, {0xffffffffffffffff, 0x4000}, {r0, 0x2200}], 0x4, &(0x7f0000000980)={0x0, 0x3938700}, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b040000ff00000020001280080001007369740014000280060008003f0000000800020077"], 0x40}}, 0x4048084) 1.031174865s ago: executing program 0 (id=1107): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x22, &(0x7f0000000480)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x26, 0x14, 0x67, 0x0, 0x7f, 0x29, 0x0, @private=0xa010101, @broadcast}}}}}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) 939.018716ms ago: executing program 1 (id=1108): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x200000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 431.867434ms ago: executing program 4 (id=1109): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) io_setup(0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r5, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 236.602337ms ago: executing program 2 (id=1110): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000"], 0x22c}}, 0x0) 220.666576ms ago: executing program 3 (id=1111): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 150.368928ms ago: executing program 0 (id=1112): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, 'trans=fd,'}}]}}) 142.182088ms ago: executing program 3 (id=1113): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$inet6(0xa, 0x2, 0x0) socket(0x18, 0x5, 0x86b0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000300)=""/112, 0x103000, 0x6bc22fd484172ea7, 0xc, 0x1}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000f8100000877598107e8fb49b9bad6e69a15ddfdb7b4d15c34c086d9a71c6c986ed5ced020387c9a8dd7d65", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)={[{0x2d, 'cpu'}]}, 0x5) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x11, r10, 0x800000000000) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000400)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x4e23, 0x4, @empty}}}, 0x108) syz_emit_ethernet(0x46, 0x0, 0x0) 65.857389ms ago: executing program 2 (id=1114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 2 (id=1115): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) kernel console output (not intermixed with test programs): .254086][ T23] audit: type=1400 audit(1747842482.981:198): avc: denied { listen } for pid=651 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.281875][ T643] ********************************************************** [ 35.291380][ T23] audit: type=1400 audit(1747842483.011:199): avc: denied { accept } for pid=651 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.402371][ T655] EXT4-fs (loop2): Test dummy encryption mode enabled [ 35.409354][ T655] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 35.568070][ T23] audit: type=1400 audit(1747842483.291:200): avc: denied { unmount } for pid=339 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 35.677357][ T23] audit: type=1400 audit(1747842483.321:201): avc: denied { create } for pid=659 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 35.825812][ T23] audit: type=1400 audit(1747842483.381:202): avc: denied { block_suspend } for pid=661 comm="syz.3.74" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 35.901349][ T23] audit: type=1400 audit(1747842483.501:203): avc: denied { read } for pid=659 comm="syz.1.73" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 35.924502][ T23] audit: type=1400 audit(1747842483.501:204): avc: denied { open } for pid=659 comm="syz.1.73" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 35.948526][ T23] audit: type=1400 audit(1747842483.501:205): avc: denied { map } for pid=659 comm="syz.1.73" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 35.981974][ T655] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 36.301008][ T23] audit: type=1400 audit(1747842483.871:206): avc: denied { read write } for pid=668 comm="syz.3.77" name="ppp" dev="devtmpfs" ino=10422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 36.306709][ T614] usb 4-1: USB disconnect, device number 2 [ 36.335134][ T23] audit: type=1400 audit(1747842483.881:207): avc: denied { open } for pid=668 comm="syz.3.77" path="/dev/ppp" dev="devtmpfs" ino=10422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 36.391710][ T673] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 36.532122][ T679] EXT4-fs (loop1): Test dummy encryption mode enabled [ 36.549542][ T679] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 36.779713][ T684] netlink: 24 bytes leftover after parsing attributes in process `syz.0.78'. [ 37.509892][ T689] syz.3.81 (689) used greatest stack depth: 21264 bytes left [ 37.645081][ T700] device pim6reg1 entered promiscuous mode [ 37.953234][ T708] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8816c018, mo2=0002] [ 37.962564][ T708] EXT4-fs (loop1): orphan cleanup on readonly fs [ 37.968991][ T708] EXT4-fs error (device loop1): ext4_ext_check_inode:543: inode #4: comm syz.1.87: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 65535, max 32767(4), depth 0(0) [ 37.988503][ T708] EXT4-fs error (device loop1): ext4_quota_enable:6059: comm syz.1.87: Bad quota inode: 4, type: 1 [ 37.988535][ T707] loop4: p2 < > p3 p4 < > [ 38.004418][ T707] loop4: partition table partially beyond EOD, truncated [ 38.011511][ T708] EXT4-fs warning (device loop1): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 38.028456][ T707] loop4: p2 start 4294902784 is beyond EOD, truncated [ 38.035483][ T708] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 38.038753][ T707] loop4: p3 start 3724543488 is beyond EOD, truncated [ 38.043157][ T708] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,debug,grpquota,nolazytime,debug,debug,,errors=continue [ 38.073112][ T164] loop4: p2 < > p3 p4 < > [ 38.078953][ T164] loop4: partition table partially beyond EOD, truncated [ 38.086829][ T164] loop4: p2 start 4294902784 is beyond EOD, truncated [ 38.102747][ T164] loop4: p3 start 3724543488 is beyond EOD, truncated [ 38.814382][ T731] netlink: 24 bytes leftover after parsing attributes in process `syz.0.94'. [ 38.829153][ T731] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=731 comm=syz.0.94 [ 39.092438][ T736] EXT4-fs (loop4): can't mount with dioread_nolock if block size != PAGE_SIZE [ 39.123211][ T338] udevd[338]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 39.407265][ T741] EXT4-fs (loop2): Test dummy encryption mode enabled [ 39.414631][ T741] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [ 39.425182][ T741] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 39.437972][ T741] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 39.817932][ T755] device pim6reg1 entered promiscuous mode [ 39.893352][ T749] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,nogrpid,nodelalloc,acl,noinit_itable,,errors=continue [ 39.977905][ T750] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 39.983329][ T756] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 39.986530][ T750] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 40.008781][ T750] F2FS-fs (loop3): invalid crc_offset: 33558524 [ 40.020871][ T750] F2FS-fs (loop3): Found nat_bits in checkpoint [ 40.022843][ T756] FAT-fs (loop0): Filesystem has been set read-only [ 40.057852][ T750] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 40.064971][ T750] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 40.111564][ T756] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 40.141678][ T756] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 40.243476][ T756] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 40.260848][ T23] kauditd_printk_skb: 37 callbacks suppressed [ 40.265953][ T756] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 40.277590][ T23] audit: type=1326 audit(1747842487.961:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=770 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a5e97969 code=0x7ffc0000 [ 40.288069][ T756] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 40.534231][ T23] audit: type=1326 audit(1747842487.961:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=770 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a5e97969 code=0x7ffc0000 [ 40.698657][ T756] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 40.935044][ T23] audit: type=1326 audit(1747842487.961:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=770 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd8a5e97969 code=0x7ffc0000 [ 40.958123][ T23] audit: type=1326 audit(1747842487.961:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=770 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a5e97969 code=0x7ffc0000 [ 40.981230][ T23] audit: type=1326 audit(1747842487.961:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=770 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a5e97969 code=0x7ffc0000 [ 41.010997][ T756] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 41.029994][ T756] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 41.034063][ T23] audit: type=1326 audit(1747842487.961:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=770 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd8a5e97969 code=0x7ffc0000 [ 41.066964][ T23] audit: type=1326 audit(1747842487.961:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=770 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a5e97969 code=0x7ffc0000 [ 41.090714][ T756] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 41.104657][ T23] audit: type=1326 audit(1747842487.961:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=770 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a5e97969 code=0x7ffc0000 [ 41.128353][ T23] audit: type=1400 audit(1747842488.831:253): avc: denied { unmount } for pid=341 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 41.309170][ T23] audit: type=1400 audit(1747842489.031:254): avc: denied { write } for pid=799 comm="syz.3.108" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 41.736515][ T817] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 41.745550][ T817] ext4 filesystem being mounted at /24/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 42.074734][ T830] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 42.117960][ T830] EXT4-fs (loop1): Ignoring removed nobh option [ 42.159421][ T830] EXT4-fs (loop1): Ignoring removed bh option [ 42.174950][ T830] EXT4-fs (loop1): can't mount with dioread_nolock if block size != PAGE_SIZE [ 42.719828][ T836] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,nogrpid,nodelalloc,acl,noinit_itable,,errors=continue [ 42.850697][ T845] EXT4-fs (loop4): Ignoring removed bh option [ 42.860520][ T845] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 42.869902][ T845] EXT4-fs (loop4): failed to open journal device unknown-block(0,0): -6 [ 42.939486][ T856] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 43.488111][ T866] erofs: (device loop2): mounted with opts: , root inode @ nid 36. [ 43.985970][ T125] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 44.720646][ T125] usb 5-1: Using ep0 maxpacket: 8 [ 44.760932][ T125] usb 5-1: too many configurations: 36, using maximum allowed: 8 [ 44.941107][ T125] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 44.958868][ T125] usb 5-1: can't read configurations, error -61 [ 45.120881][ T125] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 45.393267][ T125] usb 5-1: Using ep0 maxpacket: 8 [ 45.451818][ T125] usb 5-1: too many configurations: 36, using maximum allowed: 8 [ 45.809909][ T23] kauditd_printk_skb: 34 callbacks suppressed [ 45.809929][ T23] audit: type=1326 audit(1747842493.481:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=892 comm="syz.1.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff091764969 code=0x7ffc0000 [ 46.550872][ T125] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 46.560276][ T125] usb 5-1: can't read configurations, error -71 [ 46.575065][ T125] usb usb5-port1: attempt power cycle [ 46.705564][ T23] audit: type=1326 audit(1747842493.481:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=892 comm="syz.1.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff091764969 code=0x7ffc0000 [ 46.834763][ T904] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 46.836919][ T23] audit: type=1326 audit(1747842493.481:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=892 comm="syz.1.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7ff091764969 code=0x7ffc0000 [ 46.866714][ T23] audit: type=1326 audit(1747842493.491:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=892 comm="syz.1.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff091764969 code=0x7ffc0000 [ 46.918921][ T898] loop2: p2 p3 p4 [ 46.927590][ T898] loop2: p2 start 452985600 is beyond EOD, truncated [ 46.934858][ T898] loop2: p3 size 33554432 extends beyond EOD, truncated [ 46.942248][ T23] audit: type=1326 audit(1747842493.491:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=892 comm="syz.1.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff091764969 code=0x7ffc0000 [ 46.968858][ T898] loop2: p4 start 8388607 is beyond EOD, truncated [ 46.979343][ T902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.141'. [ 47.009543][ T23] audit: type=1326 audit(1747842493.491:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=892 comm="syz.1.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff091764969 code=0x7ffc0000 [ 47.015238][ T913] overlayfs: statfs failed on './file0' [ 47.038735][ T23] audit: type=1326 audit(1747842493.491:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=892 comm="syz.1.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff091764969 code=0x7ffc0000 [ 47.064785][ T23] audit: type=1326 audit(1747842493.491:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=892 comm="syz.1.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff091764969 code=0x7ffc0000 [ 47.088710][ T23] audit: type=1326 audit(1747842493.491:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=892 comm="syz.1.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff091764969 code=0x7ffc0000 [ 47.118771][ T23] audit: type=1326 audit(1747842493.501:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=892 comm="syz.1.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff091764969 code=0x7ffc0000 [ 47.160265][ T338] udevd[338]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 47.234656][ T916] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 47.356131][ T928] PF_BRIDGE: br_mdb_parse() with invalid entry [ 47.392415][ T925] EXT4-fs (loop2): Ignoring removed bh option [ 47.502612][ T930] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=930 comm=syz.4.152 [ 47.562803][ T925] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 47.639324][ T925] EXT4-fs (loop2): failed to open journal device unknown-block(0,0): -6 [ 47.653061][ T932] device pim6reg1 entered promiscuous mode [ 48.341657][ T834] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 48.841511][ T834] usb 3-1: Using ep0 maxpacket: 8 [ 48.859534][ T953] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 48.890943][ T834] usb 3-1: too many configurations: 108, using maximum allowed: 8 [ 49.030980][ T834] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 49.071508][ T834] usb 3-1: can't read configurations, error -61 [ 49.270971][ T834] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 49.335576][ T976] device pim6reg1 entered promiscuous mode [ 49.486663][ T981] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 49.536590][ T834] usb 3-1: Using ep0 maxpacket: 8 [ 49.546093][ T985] PF_BRIDGE: br_mdb_parse() with invalid entry [ 49.580972][ T834] usb 3-1: too many configurations: 108, using maximum allowed: 8 [ 49.657926][ T987] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=987 comm=syz.1.167 [ 49.731359][ T834] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 49.739347][ T834] usb 3-1: can't read configurations, error -61 [ 49.749127][ T834] usb usb3-port1: attempt power cycle [ 49.920903][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 50.169233][ T834] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 50.260958][ T834] usb 3-1: Using ep0 maxpacket: 8 [ 50.391062][ T834] usb 3-1: device descriptor read/all, error -71 [ 50.825965][ T23] kauditd_printk_skb: 38 callbacks suppressed [ 50.840942][ T23] audit: type=1326 audit(1747842498.391:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=995 comm="syz.1.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff091764969 code=0x7ffc0000 [ 50.939690][ T23] audit: type=1326 audit(1747842498.401:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=995 comm="syz.1.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff091764969 code=0x7ffc0000 [ 51.080601][ T23] audit: type=1326 audit(1747842498.401:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=995 comm="syz.1.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff091764969 code=0x7ffc0000 [ 51.120197][ T23] audit: type=1326 audit(1747842498.401:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=995 comm="syz.1.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff091764969 code=0x7ffc0000 [ 51.270909][ T23] audit: type=1326 audit(1747842498.401:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=995 comm="syz.1.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff091764969 code=0x7ffc0000 [ 51.294337][ T23] audit: type=1326 audit(1747842498.401:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=995 comm="syz.1.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff091764969 code=0x7ffc0000 [ 51.317873][ T23] audit: type=1326 audit(1747842498.401:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=995 comm="syz.1.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff091764969 code=0x7ffc0000 [ 51.434254][ T23] audit: type=1326 audit(1747842498.401:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=995 comm="syz.1.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff091764969 code=0x7ffc0000 [ 51.457498][ T23] audit: type=1326 audit(1747842498.411:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=995 comm="syz.1.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff091764969 code=0x7ffc0000 [ 51.480949][ T23] audit: type=1326 audit(1747842498.411:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=995 comm="syz.1.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff091764969 code=0x7ffc0000 [ 51.581345][ T1011] device pim6reg1 entered promiscuous mode [ 53.074171][ T125] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 53.133833][ T1028] syz.3.178[1028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.133879][ T1028] syz.3.178[1028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.156313][ T1027] EXT4-fs (loop2): Ignoring removed bh option [ 53.179120][ T1027] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 53.196943][ T1027] EXT4-fs (loop2): failed to open journal device unknown-block(0,0): -6 [ 53.240701][ T1031] loop4: p2 < > p3 p4 < > [ 53.245636][ T1031] loop4: partition table partially beyond EOD, truncated [ 53.253075][ T1031] loop4: p2 start 4294902784 is beyond EOD, truncated [ 53.259841][ T1031] loop4: p3 start 3724543488 is beyond EOD, truncated [ 53.471240][ T125] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.482916][ T125] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.494809][ T125] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 53.505754][ T125] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.515352][ T338] udevd[338]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 53.522071][ T125] usb 1-1: config 0 descriptor?? [ 53.710849][ T834] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 53.950888][ T834] usb 3-1: Using ep0 maxpacket: 8 [ 53.991380][ T834] usb 3-1: too many configurations: 153, using maximum allowed: 8 [ 54.041822][ T125] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 54.050375][ T125] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 54.121389][ T834] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 54.152916][ T834] usb 3-1: can't read configurations, error -61 [ 54.326149][ T125] cp2112 0003:10C4:EA90.0002: Part Number: 0x82 Device Version: 0xFE [ 54.729559][ T1054] device pim6reg1 entered promiscuous mode [ 54.977743][ T125] cp2112 0003:10C4:EA90.0002: error requesting SMBus config [ 54.991503][ T125] cp2112: probe of 0003:10C4:EA90.0002 failed with error -71 [ 54.995215][ T415] Bluetooth: hci0: Frame reassembly failed (-84) [ 55.013200][ T125] usb 1-1: USB disconnect, device number 2 [ 55.080520][ T834] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 55.373508][ T1071] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1071 comm=syz.3.191 [ 55.520979][ T834] usb 3-1: Using ep0 maxpacket: 8 [ 55.570956][ T834] usb 3-1: too many configurations: 153, using maximum allowed: 8 [ 55.612871][ T1068] F2FS-fs (loop0): Unrecognized mount option "discard_unit=segment" or missing value [ 55.738826][ T834] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 55.746912][ T834] usb 3-1: can't read configurations, error -61 [ 55.753756][ T834] usb usb3-port1: attempt power cycle [ 56.118198][ T1065] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.125623][ T1065] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.565873][ T23] kauditd_printk_skb: 49 callbacks suppressed [ 56.565882][ T23] audit: type=1400 audit(1747842504.291:396): avc: denied { create } for pid=1083 comm="syz.0.196" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 56.620854][ T23] audit: type=1400 audit(1747842504.341:397): avc: denied { mounton } for pid=1083 comm="syz.0.196" path="/42/file0" dev="tmpfs" ino=17789 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 56.777818][ T1082] PF_BRIDGE: br_mdb_parse() with invalid entry [ 56.799581][ T1065] syz.4.189 (1065) used greatest stack depth: 20736 bytes left [ 56.818543][ T23] audit: type=1400 audit(1747842504.541:398): avc: denied { setattr } for pid=1086 comm="syz.4.197" name="file0" dev="9p" ino=7016996764471618667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 56.848535][ T23] audit: type=1400 audit(1747842504.571:399): avc: denied { unmount } for pid=341 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 56.869769][ T23] audit: type=1400 audit(1747842504.591:400): avc: denied { unlink } for pid=341 comm="syz-executor" name="file0" dev="tmpfs" ino=17789 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 57.513227][ T23] audit: type=1326 audit(1747842505.201:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1088 comm="syz.0.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497767d969 code=0x7ffc0000 [ 57.563421][ T108] Bluetooth: hci0: command 0x1003 tx timeout [ 57.980310][ T415] Bluetooth: hci0: Frame reassembly failed (-84) [ 58.054440][ T23] audit: type=1326 audit(1747842505.201:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1088 comm="syz.0.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497767d969 code=0x7ffc0000 [ 58.078201][ T23] audit: type=1326 audit(1747842505.211:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1088 comm="syz.0.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f497767d969 code=0x7ffc0000 [ 58.153784][ T1104] IPv6: sit1: Disabled Multicast RS [ 58.208515][ T23] audit: type=1326 audit(1747842505.211:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1088 comm="syz.0.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497767d969 code=0x7ffc0000 [ 58.232175][ T23] audit: type=1326 audit(1747842505.211:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1088 comm="syz.0.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497767d969 code=0x7ffc0000 [ 58.419835][ T1113] EXT4-fs (loop0): Ignoring removed bh option [ 58.428501][ T1113] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 58.437015][ T1113] EXT4-fs (loop0): failed to open journal device unknown-block(0,0): -6 [ 60.000928][ T359] Bluetooth: hci0: command 0x1001 tx timeout [ 60.008586][ T415] Bluetooth: hci0: Frame reassembly failed (-84) [ 60.014723][ T1128] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 60.025775][ T1128] F2FS-fs (loop2): invalid crc value [ 60.032517][ T1128] F2FS-fs (loop2): Found nat_bits in checkpoint [ 60.050889][ T615] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 60.057457][ T1128] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 60.290870][ T615] usb 1-1: Using ep0 maxpacket: 8 [ 60.331020][ T615] usb 1-1: too many configurations: 227, using maximum allowed: 8 [ 60.450950][ T615] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 60.458625][ T615] usb 1-1: can't read configurations, error -61 [ 60.610859][ T615] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 60.788124][ T1145] PF_BRIDGE: br_mdb_parse() with invalid entry [ 60.850880][ T615] usb 1-1: Using ep0 maxpacket: 8 [ 61.006149][ T615] usb 1-1: too many configurations: 227, using maximum allowed: 8 [ 61.130921][ T615] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 61.138630][ T615] usb 1-1: can't read configurations, error -61 [ 61.145042][ T615] usb usb1-port1: attempt power cycle [ 61.234511][ T1151] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 61.244448][ T1151] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 61.844106][ T1159] EXT4-fs (loop2): orphan cleanup on readonly fs [ 61.854851][ T1159] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz.2.217: bg 0: block 248: padding at end of block bitmap is not set [ 61.871344][ T1159] __quota_error: 24 callbacks suppressed [ 61.877177][ T1159] Quota error (device loop2): write_blk: dquota write failed [ 61.884779][ T1159] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 61.897943][ T1159] EXT4-fs (loop2): 1 truncate cleaned up [ 61.905161][ T1159] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 62.100024][ T871] Bluetooth: hci0: command 0x1009 tx timeout [ 63.125146][ T1172] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 63.264675][ T23] audit: type=1400 audit(1747842510.991:430): avc: denied { ioctl } for pid=1175 comm="syz.3.224" path="/dev/input/event1" dev="devtmpfs" ino=9845 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 63.300154][ T1178] Zero length message leads to an empty skb [ 63.398725][ T23] audit: type=1326 audit(1747842511.121:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1186 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497767d969 code=0x7ffc0000 [ 63.422579][ T23] audit: type=1326 audit(1747842511.121:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1186 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497767d969 code=0x7ffc0000 [ 63.446289][ T23] audit: type=1326 audit(1747842511.121:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1186 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f497767d969 code=0x7ffc0000 [ 63.470298][ T23] audit: type=1326 audit(1747842511.121:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1186 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497767d969 code=0x7ffc0000 [ 63.496882][ T1189] EXT4-fs (loop3): Ignoring removed bh option [ 63.510535][ T23] audit: type=1326 audit(1747842511.121:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1186 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497767d969 code=0x7ffc0000 [ 63.534432][ T1189] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 63.543200][ T1189] EXT4-fs (loop3): failed to open journal device unknown-block(0,0): -6 [ 63.552270][ T23] audit: type=1326 audit(1747842511.121:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1186 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f497767d969 code=0x7ffc0000 [ 63.576350][ T23] audit: type=1326 audit(1747842511.121:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1186 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497767d969 code=0x7ffc0000 [ 64.772423][ T1202] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,sb=0x0000000000000003,lazytime,auto_da_alloc=0x0000000000000009,,errors=continue [ 64.922552][ T1205] netlink: 32 bytes leftover after parsing attributes in process `syz.0.230'. [ 64.931854][ T1205] PF_BRIDGE: br_mdb_parse() with invalid attr [ 65.084958][ T615] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 65.281199][ T74] cfg80211: failed to load regulatory.db [ 65.330883][ T615] usb 4-1: Using ep0 maxpacket: 8 [ 65.370936][ T615] usb 4-1: too many configurations: 22, using maximum allowed: 8 [ 65.512783][ T615] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 65.520720][ T615] usb 4-1: can't read configurations, error -61 [ 65.680843][ T615] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 65.765994][ T1212] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 65.776442][ T1212] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 65.791175][ T1212] EXT4-fs (loop1): 1 orphan inode deleted [ 65.797081][ T1212] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 65.806491][ T1212] ext4 filesystem being mounted at /38/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 65.994853][ T1217] EXT4-fs (loop2): Test dummy encryption mode enabled [ 66.012765][ T1217] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 66.060852][ T615] usb 4-1: Using ep0 maxpacket: 8 [ 66.100919][ T615] usb 4-1: too many configurations: 22, using maximum allowed: 8 [ 66.270892][ T615] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 66.278491][ T615] usb 4-1: can't read configurations, error -61 [ 66.284861][ T615] usb usb4-port1: attempt power cycle [ 67.057127][ T1232] xt_hashlimit: max too large, truncated to 1048576 [ 68.036381][ T23] kauditd_printk_skb: 26 callbacks suppressed [ 68.036391][ T23] audit: type=1400 audit(1747842515.701:462): avc: denied { read } for pid=1239 comm="syz.4.240" name="loop-control" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 68.068993][ T23] audit: type=1400 audit(1747842515.701:463): avc: denied { open } for pid=1239 comm="syz.4.240" path="/dev/loop-control" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 68.094984][ T23] audit: type=1400 audit(1747842515.711:464): avc: denied { ioctl } for pid=1239 comm="syz.4.240" path="/dev/loop-control" dev="devtmpfs" ino=148 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 68.122037][ T23] audit: type=1400 audit(1747842515.831:465): avc: denied { write } for pid=1246 comm="syz.0.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 68.250084][ T359] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 68.363912][ T1256] kernel profiling enabled (shift: 0) [ 68.521083][ T23] audit: type=1400 audit(1747842516.251:466): avc: denied { append } for pid=1246 comm="syz.0.243" name="001" dev="devtmpfs" ino=9766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 68.940890][ T359] usb 2-1: Using ep0 maxpacket: 32 [ 68.973066][ T1264] EXT4-fs (loop2): Ignoring removed bh option [ 68.979257][ T1264] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 68.987829][ T1264] EXT4-fs (loop2): failed to open journal device unknown-block(0,0): -6 [ 69.070939][ T359] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 69.079170][ T359] usb 2-1: config 0 has no interface number 0 [ 69.085494][ T359] usb 2-1: config 0 interface 184 has no altsetting 0 [ 69.470933][ T359] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 69.485465][ T359] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.502909][ T359] usb 2-1: Product: syz [ 69.517555][ T359] usb 2-1: Manufacturer: syz [ 69.528764][ T359] usb 2-1: config 0 descriptor?? [ 69.551094][ T359] usb 2-1: can't set config #0, error -71 [ 69.562262][ T359] usb 2-1: USB disconnect, device number 2 [ 69.630970][ T18] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 69.931089][ T18] usb 3-1: Using ep0 maxpacket: 8 [ 70.735286][ T1293] F2FS-fs (loop4): Found nat_bits in checkpoint [ 70.820879][ T1293] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 70.855136][ T18] usb 3-1: too many configurations: 60, using maximum allowed: 8 [ 70.990732][ T18] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 70.998539][ T18] usb 3-1: can't read configurations, error -61 [ 70.998796][ T342] attempt to access beyond end of device [ 70.998796][ T342] loop4: rw=2049, want=45104, limit=40427 [ 71.016737][ T23] audit: type=1400 audit(1747842518.741:467): avc: denied { read } for pid=1300 comm="syz.0.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.190974][ T18] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 71.378155][ T1306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.259'. [ 71.430881][ T18] usb 3-1: Using ep0 maxpacket: 8 [ 71.470954][ T18] usb 3-1: too many configurations: 60, using maximum allowed: 8 [ 71.643161][ T18] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 71.791492][ T1314] tmpfs: Unknown parameter 'ino`e32' [ 72.110369][ T23] audit: type=1400 audit(1747842519.461:468): avc: denied { write } for pid=1307 comm="syz.4.258" name="001" dev="devtmpfs" ino=9769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 73.330443][ T18] usb 3-1: can't read configurations, error -61 [ 73.336867][ T18] usb usb3-port1: attempt power cycle [ 73.561737][ T1329] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1329 comm=syz.1.265 [ 73.972297][ T1336] SELinux: Context system_u:object_r:netcontrol_device_t:s0 is not valid (left unmapped). [ 74.634734][ T23] audit: type=1400 audit(1747842521.711:469): avc: denied { relabelto } for pid=1332 comm="syz.4.267" name="file0" dev="tmpfs" ino=19647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:netcontrol_device_t:s0" [ 74.753588][ T23] audit: type=1400 audit(1747842521.711:470): avc: denied { associate } for pid=1332 comm="syz.4.267" name="file0" dev="tmpfs" ino=19647 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:netcontrol_device_t:s0" [ 75.051990][ T1339] netlink: 32 bytes leftover after parsing attributes in process `syz.2.268'. [ 75.060938][ T1339] PF_BRIDGE: br_mdb_parse() with invalid attr [ 75.171694][ T1345] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 75.251970][ T23] audit: type=1400 audit(1747842522.981:471): avc: denied { rmdir } for pid=342 comm="syz-executor" name="file0" dev="tmpfs" ino=19647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:netcontrol_device_t:s0" [ 75.362578][ T1356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.273'. [ 75.530498][ T1358] EXT4-fs (loop2): Ignoring removed bh option [ 75.536738][ T1358] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 75.545476][ T1358] EXT4-fs (loop2): failed to open journal device unknown-block(0,0): -6 [ 75.691349][ T1371] process 'syz.1.280' launched './file0' with NULL argv: empty string added [ 75.727214][ T23] audit: type=1400 audit(1747842523.431:472): avc: denied { execute_no_trans } for pid=1370 comm="syz.1.280" path="/50/file0" dev="tmpfs" ino=19357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.250967][ T1390] netlink: 32 bytes leftover after parsing attributes in process `syz.0.282'. [ 76.260148][ T1390] PF_BRIDGE: br_mdb_parse() with invalid attr [ 76.390791][ T359] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 76.921228][ T23] audit: type=1326 audit(1747842524.641:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1396 comm="syz.3.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7641be3969 code=0x7ffc0000 [ 77.082839][ T23] audit: type=1326 audit(1747842524.671:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1396 comm="syz.3.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f7641be3969 code=0x7ffc0000 [ 77.362394][ T23] audit: type=1326 audit(1747842524.671:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1396 comm="syz.3.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7641be3969 code=0x7ffc0000 [ 77.385890][ T359] usb 3-1: Using ep0 maxpacket: 8 [ 77.393757][ T23] audit: type=1326 audit(1747842524.671:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1396 comm="syz.3.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7641be3969 code=0x7ffc0000 [ 77.417494][ T23] audit: type=1326 audit(1747842524.671:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1396 comm="syz.3.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7641be3969 code=0x7ffc0000 [ 77.441134][ T23] audit: type=1326 audit(1747842524.671:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1396 comm="syz.3.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f7641be3969 code=0x7ffc0000 [ 77.597557][ T359] usb 3-1: too many configurations: 76, using maximum allowed: 8 [ 77.622170][ T1399] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue [ 77.633949][ T1399] ext4 filesystem being mounted at /59/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 77.691257][ T1411] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 77.730930][ T359] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 77.740229][ T359] usb 3-1: can't read configurations, error -61 [ 77.813971][ T1415] syz.4.290[1415] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.814217][ T1415] syz.4.290[1415] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.811263][ T1429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.292'. [ 79.788077][ T1446] EXT4-fs (loop2): Ignoring removed bh option [ 79.796126][ T1446] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 79.804737][ T1446] EXT4-fs (loop2): failed to open journal device unknown-block(0,0): -6 [ 80.290964][ T359] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 80.510964][ T108] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 80.550961][ T359] usb 3-1: Using ep0 maxpacket: 8 [ 80.591182][ T359] usb 3-1: too many configurations: 139, using maximum allowed: 8 [ 80.880937][ T359] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 80.888799][ T359] usb 3-1: can't read configurations, error -61 [ 80.895833][ T359] usb usb3-port1: attempt power cycle [ 80.960913][ T108] usb 5-1: device descriptor read/64, error 18 [ 81.320850][ T359] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 81.360959][ T108] usb 5-1: device descriptor read/64, error 18 [ 81.430883][ T359] usb 3-1: Using ep0 maxpacket: 8 [ 81.470911][ T359] usb 3-1: too many configurations: 139, using maximum allowed: 8 [ 81.600904][ T359] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 81.608468][ T359] usb 3-1: can't read configurations, error -61 [ 81.630942][ T108] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 81.737703][ T1474] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 81.762605][ T1477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.310'. [ 81.785625][ T1474] EXT4-fs (loop3): Mount option "commit=0x0000000000000005" incompatible with ext2 [ 81.879253][ T359] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 81.970974][ T359] usb 3-1: Using ep0 maxpacket: 8 [ 82.229916][ T359] usb 3-1: too many configurations: 139, using maximum allowed: 8 [ 82.290927][ T108] usb 5-1: device descriptor read/64, error 18 [ 82.350892][ T359] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 82.358513][ T359] usb 3-1: can't read configurations, error -61 [ 82.364877][ T359] usb usb3-port1: unable to enumerate USB device [ 82.633613][ T1489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.313'. [ 82.644272][ T1489] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 82.653880][ T1489] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 82.839559][ T108] usb 5-1: device descriptor read/64, error 18 [ 83.380098][ T108] usb usb5-port1: attempt power cycle [ 83.683247][ T23] kauditd_printk_skb: 23 callbacks suppressed [ 83.701611][ T23] audit: type=1400 audit(1747842531.351:502): avc: denied { execmem } for pid=1516 comm="syz.1.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 84.685279][ T1528] EXT4-fs (loop3): Ignoring removed bh option [ 84.696715][ T1528] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 84.714992][ T1528] EXT4-fs (loop3): failed to open journal device unknown-block(0,0): -6 [ 85.280836][ T1100] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 85.678591][ T1100] usb 4-1: Using ep0 maxpacket: 8 [ 85.740835][ T489] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 85.772738][ T1100] usb 4-1: too many configurations: 158, using maximum allowed: 8 [ 85.891121][ T1100] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 85.899262][ T1100] usb 4-1: can't read configurations, error -61 [ 86.080845][ T1100] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 86.200852][ T489] usb 2-1: device descriptor read/64, error 18 [ 86.360886][ T1100] usb 4-1: Using ep0 maxpacket: 8 [ 86.401283][ T1100] usb 4-1: too many configurations: 158, using maximum allowed: 8 [ 86.415153][ T103] Bluetooth: hci0: Frame reassembly failed (-90) [ 86.495335][ T103] Bluetooth: hci0: Frame reassembly failed (-84) [ 86.531005][ T1100] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 86.664766][ T1100] usb 4-1: can't read configurations, error -61 [ 86.703653][ T1100] usb usb4-port1: attempt power cycle [ 87.150894][ T1100] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 87.250879][ T1100] usb 4-1: Using ep0 maxpacket: 8 [ 87.290894][ T1100] usb 4-1: too many configurations: 158, using maximum allowed: 8 [ 87.450900][ T489] usb 2-1: device descriptor read/64, error 18 [ 87.720957][ T489] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 88.030978][ T489] usb 2-1: device descriptor read/64, error 18 [ 88.120959][ T1100] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 88.128507][ T1100] usb 4-1: can't read configurations, error -71 [ 88.361492][ T23] audit: type=1400 audit(1747842536.081:503): avc: denied { create } for pid=1574 comm="syz.0.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.400875][ T5] Bluetooth: hci0: command 0x1003 tx timeout [ 88.450885][ T489] usb 2-1: device descriptor read/64, error 18 [ 88.456888][ T1057] Bluetooth: hci0: sending frame failed (-49) [ 88.600284][ T23] audit: type=1326 audit(1747842536.321:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1581 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a5e97969 code=0x7ffc0000 [ 88.791541][ T489] usb usb2-port1: attempt power cycle [ 88.799849][ T23] audit: type=1326 audit(1747842536.321:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1581 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a5e97969 code=0x7ffc0000 [ 89.293390][ T23] audit: type=1326 audit(1747842536.321:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1581 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fd8a5e97969 code=0x7ffc0000 [ 89.407955][ T23] audit: type=1326 audit(1747842536.321:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1581 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a5e97969 code=0x7ffc0000 [ 89.458005][ T23] audit: type=1326 audit(1747842536.321:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1581 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a5e97969 code=0x7ffc0000 [ 89.481594][ T23] audit: type=1326 audit(1747842536.321:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1581 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8a5e97969 code=0x7ffc0000 [ 89.505367][ T23] audit: type=1326 audit(1747842536.321:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1581 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a5e97969 code=0x7ffc0000 [ 89.590503][ T23] audit: type=1326 audit(1747842536.321:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1581 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a5e97969 code=0x7ffc0000 [ 89.616526][ T23] audit: type=1326 audit(1747842536.321:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1581 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8a5e97969 code=0x7ffc0000 [ 89.862900][ T23] audit: type=1326 audit(1747842536.321:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1581 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a5e97969 code=0x7ffc0000 [ 89.887504][ T23] audit: type=1326 audit(1747842536.321:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1581 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a5e97969 code=0x7ffc0000 [ 90.480883][ T18] Bluetooth: hci0: command 0x1001 tx timeout [ 90.497381][ T1057] Bluetooth: hci0: sending frame failed (-49) [ 91.107081][ T18] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 92.010894][ T18] usb 2-1: Using ep0 maxpacket: 8 [ 92.022451][ T1634] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,sb=0x0000000000000003,lazytime,auto_da_alloc=0x0000000000000009,,errors=continue [ 92.050924][ T18] usb 2-1: too many configurations: 181, using maximum allowed: 8 [ 92.292557][ T18] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 92.300288][ T18] usb 2-1: can't read configurations, error -61 [ 92.352320][ T1650] netlink: 48 bytes leftover after parsing attributes in process `syz.4.362'. [ 92.470890][ T18] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 92.540741][ T1656] syz.4.364[1656] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.540982][ T1656] syz.4.364[1656] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.057723][ T1100] Bluetooth: hci0: command 0x1009 tx timeout [ 93.441455][ T18] usb 2-1: Using ep0 maxpacket: 8 [ 93.474962][ T1656] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 93.481631][ T1656] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 93.498590][ T1656] F2FS-fs (loop4): Found nat_bits in checkpoint [ 93.531504][ T1656] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 93.539256][ T1656] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 93.547324][ T18] usb 2-1: device descriptor read/all, error -71 [ 93.554177][ T18] usb usb2-port1: attempt power cycle [ 94.091900][ T1682] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 94.101523][ T1682] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 94.110749][ T1682] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 94.120151][ T1682] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a002c01c, mo2=0002] [ 94.128917][ T1682] System zones: 0-2, 18-18, 34-34 [ 94.134453][ T1682] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 94.149247][ T1682] EXT4-fs (loop4): 1 truncate cleaned up [ 94.154962][ T1682] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 94.171948][ T23] kauditd_printk_skb: 23 callbacks suppressed [ 94.171957][ T23] audit: type=1400 audit(1747842541.901:538): avc: denied { append } for pid=1681 comm="syz.4.370" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 94.204574][ T1688] netlink: 'syz.1.374': attribute type 16 has an invalid length. [ 94.212918][ T1688] netlink: 'syz.1.374': attribute type 17 has an invalid length. [ 94.228072][ T1688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.258721][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 94.268908][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.272321][ T489] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 94.277574][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 94.293843][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.302317][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.311348][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.319783][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.328358][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.483376][ T23] audit: type=1400 audit(1747842542.191:539): avc: denied { mount } for pid=1681 comm="syz.4.370" name="/" dev="pstore" ino=9969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 94.591009][ T1688] syz.1.374 (1688) used greatest stack depth: 20640 bytes left [ 94.671014][ T489] usb 1-1: Using ep0 maxpacket: 32 [ 94.790946][ T489] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.801959][ T489] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.811952][ T489] usb 1-1: config 0 interface 0 has no altsetting 0 [ 94.818573][ T489] usb 1-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 94.827671][ T489] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.837950][ T489] usb 1-1: config 0 descriptor?? [ 94.850918][ T1498] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 95.110898][ T5] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 95.210967][ T1498] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.221901][ T1498] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.232159][ T1498] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 95.245422][ T1498] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 95.254726][ T1498] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.264272][ T1498] usb 4-1: config 0 descriptor?? [ 95.321994][ T489] wacom 0003:056A:00D0.0003: unbalanced collection at end of report description [ 95.331318][ T489] wacom 0003:056A:00D0.0003: parse failed [ 95.337160][ T489] wacom: probe of 0003:056A:00D0.0003 failed with error -22 [ 95.350896][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 95.390970][ T5] usb 2-1: too many configurations: 229, using maximum allowed: 8 [ 95.510914][ T5] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 95.518698][ T5] usb 2-1: can't read configurations, error -61 [ 95.529539][ T1100] usb 1-1: USB disconnect, device number 6 [ 95.670954][ T5] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 95.741723][ T1498] plantronics 0003:047F:FFFF.0004: unbalanced collection at end of report description [ 95.751431][ T1498] plantronics 0003:047F:FFFF.0004: parse failed [ 95.757695][ T1498] plantronics: probe of 0003:047F:FFFF.0004 failed with error -22 [ 95.910943][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 95.951105][ T5] usb 2-1: too many configurations: 229, using maximum allowed: 8 [ 96.088895][ T1498] usb 4-1: USB disconnect, device number 10 [ 96.095220][ T5] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 96.115138][ T5] usb 2-1: can't read configurations, error -61 [ 96.131221][ T5] usb usb2-port1: attempt power cycle [ 96.141547][ T1708] capability: warning: `syz.0.381' uses deprecated v2 capabilities in a way that may be insecure [ 96.159713][ T23] audit: type=1400 audit(1747842543.881:540): avc: denied { write } for pid=1707 comm="syz.0.381" path="socket:[21475]" dev="sockfs" ino=21475 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.560867][ T5] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 96.682081][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 96.720918][ T5] usb 2-1: too many configurations: 229, using maximum allowed: 8 [ 96.730674][ T1715] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 96.850887][ T5] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 96.859578][ T5] usb 2-1: can't read configurations, error -61 [ 97.010862][ T5] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 97.244161][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 97.281315][ T5] usb 2-1: too many configurations: 229, using maximum allowed: 8 [ 97.290444][ T23] audit: type=1400 audit(1747842545.011:541): avc: denied { execute } for pid=1726 comm="syz.0.387" path="/bus" dev="ramfs" ino=22625 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 97.375700][ T1732] xt_bpf: check failed: parse error [ 97.410925][ T5] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 97.420621][ T5] usb 2-1: can't read configurations, error -61 [ 97.438558][ T5] usb usb2-port1: unable to enumerate USB device [ 97.448923][ T1735] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 97.807043][ T1744] PF_BRIDGE: br_mdb_parse() with invalid attr [ 98.179978][ T9] Bluetooth: hci0: Frame reassembly failed (-90) [ 98.215565][ T9] Bluetooth: hci0: Frame reassembly failed (-84) [ 98.870993][ T23] audit: type=1400 audit(1747842546.591:542): avc: denied { relabelfrom } for pid=1754 comm="syz.4.396" name="TCPv6" dev="sockfs" ino=21970 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 99.063187][ T1762] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,sb=0x0000000000000003,lazytime,auto_da_alloc=0x0000000000000009,,errors=continue [ 100.829286][ T1100] Bluetooth: hci0: command 0x1003 tx timeout [ 100.835793][ T1057] Bluetooth: hci0: sending frame failed (-49) [ 101.026553][ T1780] EXT4-fs (loop2): Ignoring removed bh option [ 101.032805][ T1780] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 101.070969][ T1780] EXT4-fs (loop2): failed to open journal device unknown-block(0,0): -6 [ 101.218029][ T1792] PF_BRIDGE: br_mdb_parse() with invalid attr [ 101.265217][ T23] audit: type=1326 audit(1747842548.991:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1787 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497767d969 code=0x7ffc0000 [ 101.381132][ T23] audit: type=1326 audit(1747842548.991:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1787 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497767d969 code=0x7ffc0000 [ 101.405553][ T23] audit: type=1326 audit(1747842548.991:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1787 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f497767d969 code=0x7ffc0000 [ 101.429693][ T23] audit: type=1326 audit(1747842548.991:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1787 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497767d969 code=0x7ffc0000 [ 101.454142][ T23] audit: type=1326 audit(1747842548.991:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1787 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497767d969 code=0x7ffc0000 [ 101.478630][ T23] audit: type=1326 audit(1747842548.991:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1787 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f497767d969 code=0x7ffc0000 [ 101.503766][ T23] audit: type=1326 audit(1747842548.991:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1787 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497767d969 code=0x7ffc0000 [ 101.528857][ T23] audit: type=1326 audit(1747842548.991:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1787 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497767d969 code=0x7ffc0000 [ 101.554215][ T23] audit: type=1326 audit(1747842548.991:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1787 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f497767d969 code=0x7ffc0000 [ 101.578885][ T23] audit: type=1326 audit(1747842548.991:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1787 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497767d969 code=0x7ffc0000 [ 101.670875][ T1498] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 101.930849][ T1498] usb 3-1: Using ep0 maxpacket: 8 [ 102.223178][ T1799] netlink: 'syz.4.408': attribute type 13 has an invalid length. [ 102.232998][ T1799] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 102.497346][ T1799] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 102.521739][ T1799] gretap0: refused to change device tx_queue_len [ 102.528250][ T1799] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 102.558021][ T1498] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 102.565603][ T1805] EXT4-fs (loop3): Unrecognized mount option "nodioread_nolock" or missing value [ 102.573771][ T1498] usb 3-1: can't read configurations, error -61 [ 102.740916][ T1498] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 102.743346][ T1808] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 102.759051][ T1808] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 102.769047][ T1808] F2FS-fs (loop4): invalid crc value [ 102.775902][ T1808] F2FS-fs (loop4): Found nat_bits in checkpoint [ 102.792579][ T1811] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 102.800727][ T1811] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 102.806239][ T1808] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 102.810747][ T1811] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 102.818154][ T1808] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 102.880852][ T834] Bluetooth: hci0: command 0x1001 tx timeout [ 102.894938][ T1057] Bluetooth: hci0: sending frame failed (-49) [ 102.990829][ T1498] usb 3-1: Using ep0 maxpacket: 8 [ 103.208606][ T1820] xt_CT: No such helper "snmp_trap" [ 103.638151][ T1826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.414'. [ 103.751131][ T1498] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 103.759199][ T1498] usb 3-1: can't read configurations, error -61 [ 103.765852][ T1498] usb usb3-port1: attempt power cycle [ 103.801087][ T9] Bluetooth: hci1: Frame reassembly failed (-90) [ 103.807708][ T1828] Bluetooth: hci1: Frame reassembly failed (-84) [ 104.696200][ T1850] SELinux: policydb version 0 does not match my version range 15-31 [ 104.704457][ T1850] SELinux: failed to load policy [ 104.961376][ T125] Bluetooth: hci0: command 0x1009 tx timeout [ 105.840860][ T871] Bluetooth: hci1: command 0x1003 tx timeout [ 105.847020][ T1059] Bluetooth: hci1: sending frame failed (-49) [ 106.330383][ T23] kauditd_printk_skb: 15 callbacks suppressed [ 106.330394][ T23] audit: type=1326 audit(1747842554.051:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1876 comm="syz.2.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbf1d14969 code=0x7ffc0000 [ 106.360533][ T23] audit: type=1326 audit(1747842554.051:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1876 comm="syz.2.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbf1d14969 code=0x7ffc0000 [ 106.383980][ T23] audit: type=1326 audit(1747842554.061:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1876 comm="syz.2.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffbf1d14969 code=0x7ffc0000 [ 106.407378][ T23] audit: type=1326 audit(1747842554.061:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1876 comm="syz.2.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbf1d14969 code=0x7ffc0000 [ 106.432453][ T23] audit: type=1326 audit(1747842554.061:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1876 comm="syz.2.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbf1d14969 code=0x7ffc0000 [ 106.463928][ T23] audit: type=1326 audit(1747842554.061:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1876 comm="syz.2.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffbf1d14969 code=0x7ffc0000 [ 106.487351][ T23] audit: type=1326 audit(1747842554.061:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1876 comm="syz.2.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbf1d14969 code=0x7ffc0000 [ 106.510895][ T23] audit: type=1326 audit(1747842554.061:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1876 comm="syz.2.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbf1d14969 code=0x7ffc0000 [ 106.534677][ T23] audit: type=1326 audit(1747842554.061:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1876 comm="syz.2.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffbf1d132d0 code=0x7ffc0000 [ 106.558237][ T23] audit: type=1326 audit(1747842554.061:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1876 comm="syz.2.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbf1d14969 code=0x7ffc0000 [ 106.850325][ T1884] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 108.462806][ T1498] Bluetooth: hci1: command 0x1001 tx timeout [ 108.468846][ T1059] Bluetooth: hci1: sending frame failed (-49) [ 108.876788][ T7] Bluetooth: hci0: Frame reassembly failed (-90) [ 110.709158][ T1100] Bluetooth: hci1: command 0x1009 tx timeout [ 110.880849][ T1100] Bluetooth: hci0: command 0x1003 tx timeout [ 110.886949][ T96] Bluetooth: hci0: sending frame failed (-49) [ 111.466986][ T1955] netlink: 24 bytes leftover after parsing attributes in process `syz.3.452'. [ 111.663029][ T1955] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1955 comm=syz.3.452 [ 111.769103][ T103] Bluetooth: hci2: Frame reassembly failed (-90) [ 111.781678][ T103] Bluetooth: hci2: Frame reassembly failed (-84) [ 112.291523][ T1962] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1962 comm=syz.0.453 [ 112.960832][ T834] Bluetooth: hci0: command 0x1001 tx timeout [ 112.966872][ T1956] Bluetooth: hci0: sending frame failed (-49) [ 113.673085][ T1994] xt_CT: No such helper "snmp_trap" [ 113.840862][ T834] Bluetooth: hci2: command 0x1003 tx timeout [ 113.846963][ T1956] Bluetooth: hci2: sending frame failed (-49) [ 114.421395][ T2009] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2009 comm=syz.0.470 [ 114.863422][ T23] kauditd_printk_skb: 31 callbacks suppressed [ 114.863432][ T23] audit: type=1400 audit(1747842562.591:609): avc: denied { mount } for pid=2020 comm="syz.3.475" name="/" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 114.891857][ T23] audit: type=1400 audit(1747842562.591:610): avc: denied { mounton } for pid=2020 comm="syz.3.475" path="/109/file0" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 115.040871][ T834] Bluetooth: hci0: command 0x1009 tx timeout [ 115.058695][ T23] audit: type=1400 audit(1747842562.781:611): avc: denied { ioctl } for pid=2020 comm="syz.3.475" path="socket:[24069]" dev="sockfs" ino=24069 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 115.745177][ T23] audit: type=1400 audit(1747842563.471:612): avc: denied { unmount } for pid=340 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 116.076269][ T489] Bluetooth: hci2: command 0x1001 tx timeout [ 116.085733][ T1057] Bluetooth: hci2: sending frame failed (-49) [ 116.660146][ T23] audit: type=1400 audit(1747842564.381:613): avc: denied { setattr } for pid=2048 comm="syz.4.483" name="tty28" dev="devtmpfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 117.352512][ T2058] IPv6: sit1: Disabled Multicast RS [ 117.598335][ T23] audit: type=1400 audit(1747842565.321:614): avc: denied { read } for pid=2064 comm="syz.3.488" name=".log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 117.690435][ T2067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.486'. [ 117.707303][ T2067] IPv6: sit2: Disabled Multicast RS [ 117.941119][ T23] audit: type=1400 audit(1747842565.671:615): avc: denied { unlink } for pid=2068 comm="syz.3.489" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 118.160824][ T1498] Bluetooth: hci2: command 0x1009 tx timeout [ 118.774352][ T23] audit: type=1400 audit(1747842566.501:616): avc: denied { create } for pid=2090 comm="syz.4.496" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 120.212258][ T23] audit: type=1326 audit(1747842567.941:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2115 comm="syz.3.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7641be3969 code=0x7ffc0000 [ 120.235841][ T23] audit: type=1326 audit(1747842567.951:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2115 comm="syz.3.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7641be3969 code=0x7ffc0000 [ 120.260155][ T23] audit: type=1326 audit(1747842567.961:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2115 comm="syz.3.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7641be3969 code=0x7ffc0000 [ 120.283763][ T23] audit: type=1326 audit(1747842567.961:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2115 comm="syz.3.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7641be3969 code=0x7ffc0000 [ 120.307901][ T23] audit: type=1326 audit(1747842567.961:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2115 comm="syz.3.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7641be3969 code=0x7ffc0000 [ 120.393269][ T23] audit: type=1326 audit(1747842567.961:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2115 comm="syz.3.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7641be3969 code=0x7ffc0000 [ 120.417783][ T23] audit: type=1326 audit(1747842567.961:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2115 comm="syz.3.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7641be3969 code=0x7ffc0000 [ 120.441521][ T23] audit: type=1326 audit(1747842567.961:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2115 comm="syz.3.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7641be3969 code=0x7ffc0000 [ 120.465581][ T23] audit: type=1326 audit(1747842567.961:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2115 comm="syz.3.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7641be3969 code=0x7ffc0000 [ 120.505507][ T23] audit: type=1326 audit(1747842567.961:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2115 comm="syz.3.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7641be3969 code=0x7ffc0000 [ 120.671231][ T2121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.506'. [ 120.929956][ T2128] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,nogrpid,nodelalloc,acl,noinit_itable,,errors=continue [ 121.215129][ T2137] EXT4-fs (loop3): Ignoring removed bh option [ 121.224396][ T2137] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 121.233143][ T2137] EXT4-fs (loop3): failed to open journal device unknown-block(0,0): -6 [ 121.910688][ T2151] syz.1.513[2151] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.910843][ T2151] syz.1.513[2151] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.143422][ T125] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 122.904275][ T2164] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 123.790060][ T125] usb 4-1: Using ep0 maxpacket: 8 [ 124.002330][ T125] usb 4-1: too many configurations: 169, using maximum allowed: 8 [ 124.148533][ T125] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 124.156370][ T125] usb 4-1: can't read configurations, error -61 [ 124.432500][ T103] Bluetooth: hci0: Frame reassembly failed (-84) [ 124.651784][ T103] Bluetooth: hci1: Frame reassembly failed (-90) [ 124.672112][ T103] Bluetooth: hci1: Frame reassembly failed (-84) [ 125.180874][ T2198] usb usb8: usbfs: process 2198 (syz.0.530) did not claim interface 0 before use [ 125.449229][ T23] kauditd_printk_skb: 35 callbacks suppressed [ 125.449238][ T23] audit: type=1400 audit(1747842573.171:662): avc: denied { setopt } for pid=2201 comm="syz.1.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 125.532397][ T2208] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 125.626372][ T2210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.533'. [ 125.689435][ T23] audit: type=1326 audit(1747842573.411:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2206 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbf1d14969 code=0x7ffc0000 [ 125.712970][ T23] audit: type=1326 audit(1747842573.411:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2206 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffbf1d14969 code=0x7ffc0000 [ 125.736350][ T23] audit: type=1326 audit(1747842573.411:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2206 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbf1d14969 code=0x7ffc0000 [ 125.760536][ T23] audit: type=1326 audit(1747842573.411:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2206 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffbf1d14969 code=0x7ffc0000 [ 125.783917][ T23] audit: type=1326 audit(1747842573.411:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2206 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbf1d14969 code=0x7ffc0000 [ 125.807358][ T23] audit: type=1326 audit(1747842573.411:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2206 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7ffbf1d14969 code=0x7ffc0000 [ 125.830651][ T23] audit: type=1326 audit(1747842573.411:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2206 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbf1d14969 code=0x7ffc0000 [ 125.854067][ T23] audit: type=1326 audit(1747842573.411:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2206 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7ffbf1d14969 code=0x7ffc0000 [ 125.877385][ T23] audit: type=1326 audit(1747842573.411:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2206 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbf1d14969 code=0x7ffc0000 [ 126.731218][ T1100] Bluetooth: hci0: command 0x1003 tx timeout [ 126.733314][ T489] Bluetooth: hci1: command 0x1003 tx timeout [ 126.750025][ T1057] Bluetooth: hci1: sending frame failed (-49) [ 126.809060][ T1057] Bluetooth: hci0: sending frame failed (-49) [ 127.130219][ T1100] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 127.380879][ T1100] usb 2-1: Using ep0 maxpacket: 8 [ 127.420916][ T1100] usb 2-1: too many configurations: 171, using maximum allowed: 8 [ 127.540899][ T1100] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 127.548518][ T1100] usb 2-1: can't read configurations, error -61 [ 127.700886][ T1100] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 127.954717][ T1100] usb 2-1: Using ep0 maxpacket: 8 [ 127.990963][ T1100] usb 2-1: too many configurations: 171, using maximum allowed: 8 [ 128.110905][ T1100] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 128.118478][ T1100] usb 2-1: can't read configurations, error -61 [ 128.124920][ T1100] usb usb2-port1: attempt power cycle [ 128.530943][ T1100] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 128.650956][ T1100] usb 2-1: Using ep0 maxpacket: 8 [ 128.694801][ T2245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.546'. [ 128.823847][ T1498] Bluetooth: hci1: command 0x1001 tx timeout [ 128.829947][ T1057] Bluetooth: hci1: sending frame failed (-49) [ 128.854580][ T1100] usb 2-1: too many configurations: 171, using maximum allowed: 8 [ 128.880825][ T489] Bluetooth: hci0: command 0x1001 tx timeout [ 128.887231][ T1057] Bluetooth: hci0: sending frame failed (-49) [ 128.888536][ T2249] kvm: emulating exchange as write [ 128.980944][ T1100] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 128.988602][ T1100] usb 2-1: can't read configurations, error -61 [ 129.140909][ T1100] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 129.231031][ T1100] usb 2-1: Using ep0 maxpacket: 8 [ 129.270966][ T1100] usb 2-1: too many configurations: 171, using maximum allowed: 8 [ 129.390941][ T1100] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 129.398663][ T1100] usb 2-1: can't read configurations, error -61 [ 129.405028][ T1100] usb usb2-port1: unable to enumerate USB device [ 129.475667][ T2256] overlayfs: failed to resolve './file1': -2 [ 130.880897][ T489] Bluetooth: hci1: command 0x1009 tx timeout [ 130.960849][ T489] Bluetooth: hci0: command 0x1009 tx timeout [ 131.258176][ T2288] xt_CT: No such helper "snmp_trap" [ 132.000887][ T125] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 132.634632][ T125] usb 2-1: Using ep0 maxpacket: 8 [ 132.697052][ T125] usb 2-1: too many configurations: 193, using maximum allowed: 8 [ 132.987932][ T125] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 132.995687][ T125] usb 2-1: can't read configurations, error -61 [ 133.150888][ T125] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 133.229939][ T23] kauditd_printk_skb: 5 callbacks suppressed [ 133.229949][ T23] audit: type=1400 audit(1747842580.951:677): avc: denied { setattr } for pid=2311 comm="syz.0.567" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.295038][ T23] audit: type=1400 audit(1747842581.021:678): avc: granted { setsecparam } for pid=2313 comm="syz.0.568" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 133.390831][ T125] usb 2-1: Using ep0 maxpacket: 8 [ 133.567917][ T125] usb 2-1: too many configurations: 193, using maximum allowed: 8 [ 133.690864][ T125] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 133.698488][ T125] usb 2-1: can't read configurations, error -61 [ 133.704842][ T125] usb usb2-port1: attempt power cycle [ 134.110837][ T125] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 134.220962][ T125] usb 2-1: Using ep0 maxpacket: 8 [ 134.260904][ T125] usb 2-1: too many configurations: 193, using maximum allowed: 8 [ 134.380958][ T125] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 134.389993][ T125] usb 2-1: can't read configurations, error -61 [ 134.540829][ T125] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 134.641513][ T125] usb 2-1: Using ep0 maxpacket: 8 [ 134.690928][ T125] usb 2-1: too many configurations: 193, using maximum allowed: 8 [ 134.780890][ T125] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 134.788635][ T125] usb 2-1: can't read configurations, error -71 [ 134.795298][ T125] usb usb2-port1: unable to enumerate USB device [ 136.153466][ T2346] netlink: 24 bytes leftover after parsing attributes in process `syz.0.579'. [ 136.386098][ T2345] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2345 comm=syz.0.579 [ 136.744748][ T2354] EXT4-fs (loop3): Ignoring removed bh option [ 136.757129][ T2354] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 136.765610][ T2354] EXT4-fs (loop3): failed to open journal device unknown-block(0,0): -6 [ 136.864707][ T2364] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2364 comm=syz.1.583 [ 137.190830][ T415] Bluetooth: hci0: Frame reassembly failed (-90) [ 137.197968][ T103] Bluetooth: hci0: Frame reassembly failed (-84) [ 137.320908][ T125] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 137.589937][ T125] usb 4-1: Using ep0 maxpacket: 8 [ 137.630879][ T125] usb 4-1: too many configurations: 254, using maximum allowed: 8 [ 138.000953][ T125] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 138.009230][ T125] usb 4-1: can't read configurations, error -61 [ 138.160819][ T125] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 138.410821][ T125] usb 4-1: Using ep0 maxpacket: 8 [ 138.450897][ T125] usb 4-1: too many configurations: 254, using maximum allowed: 8 [ 138.580943][ T125] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 138.588603][ T125] usb 4-1: can't read configurations, error -61 [ 138.595072][ T125] usb usb4-port1: attempt power cycle [ 139.000821][ T125] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 139.091347][ T125] usb 4-1: Using ep0 maxpacket: 8 [ 139.131075][ T125] usb 4-1: too many configurations: 254, using maximum allowed: 8 [ 139.231643][ T871] Bluetooth: hci0: command 0x1003 tx timeout [ 139.237734][ T1059] Bluetooth: hci0: sending frame failed (-49) [ 139.290890][ T125] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 139.298630][ T125] usb 4-1: can't read configurations, error -61 [ 139.497073][ T2396] netlink: 16 bytes leftover after parsing attributes in process `syz.0.593'. [ 139.630827][ T125] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 139.773675][ T125] usb 4-1: device descriptor read/8, error -71 [ 140.378442][ T125] usb 4-1: device descriptor read/8, error -71 [ 140.473602][ T2415] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2415 comm=syz.1.598 [ 140.486687][ T2416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.597'. [ 140.553196][ T125] usb usb4-port1: unable to enumerate USB device [ 141.263677][ T23] audit: type=1400 audit(1747842588.991:679): avc: denied { read } for pid=2425 comm="syz.2.603" path="socket:[26344]" dev="sockfs" ino=26344 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 141.290854][ T125] Bluetooth: hci0: command 0x1001 tx timeout [ 141.296936][ T1059] Bluetooth: hci0: sending frame failed (-49) [ 141.649901][ T23] audit: type=1400 audit(1747842589.361:680): avc: denied { bind } for pid=2431 comm="syz.3.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 141.670549][ T23] audit: type=1400 audit(1747842589.371:681): avc: denied { mount } for pid=2431 comm="syz.3.604" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 141.928078][ T125] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 142.692391][ T23] audit: type=1400 audit(1747842590.421:682): avc: denied { nlmsg_read } for pid=2437 comm="syz.0.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 142.740868][ T125] usb 3-1: Using ep0 maxpacket: 8 [ 142.781039][ T125] usb 3-1: too many configurations: 241, using maximum allowed: 8 [ 142.898318][ T2447] netlink: 24 bytes leftover after parsing attributes in process `syz.3.608'. [ 142.956325][ T2447] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2447 comm=syz.3.608 [ 142.987662][ T125] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 142.996796][ T125] usb 3-1: can't read configurations, error -61 [ 143.160840][ T125] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 143.360818][ T1498] Bluetooth: hci0: command 0x1009 tx timeout [ 143.530901][ T125] usb 3-1: Using ep0 maxpacket: 8 [ 143.571062][ T125] usb 3-1: too many configurations: 241, using maximum allowed: 8 [ 143.811165][ T125] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 143.822961][ T125] usb 3-1: can't read configurations, error -61 [ 143.830297][ T125] usb usb3-port1: attempt power cycle [ 143.890320][ T2459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.611'. [ 144.109085][ T23] audit: type=1326 audit(1747842591.831:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2460 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497767d969 code=0x7ffc0000 [ 144.134449][ T23] audit: type=1326 audit(1747842591.861:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2460 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497767d969 code=0x7ffc0000 [ 144.158905][ T23] audit: type=1326 audit(1747842591.861:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2460 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f497767d969 code=0x7ffc0000 [ 144.185929][ T23] audit: type=1326 audit(1747842591.861:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2460 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497767d969 code=0x7ffc0000 [ 144.209711][ T23] audit: type=1326 audit(1747842591.861:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2460 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497767d969 code=0x7ffc0000 [ 144.234348][ T23] audit: type=1326 audit(1747842591.861:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2460 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f497767d969 code=0x7ffc0000 [ 144.367475][ T2467] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2467 comm=syz.1.613 [ 144.380317][ T125] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 144.470897][ T125] usb 3-1: Using ep0 maxpacket: 8 [ 144.640939][ T125] usb 3-1: device descriptor read/all, error -71 [ 145.244632][ T2477] SELinux: failed to load policy [ 146.193202][ T2508] input: syz0 as /devices/virtual/input/input4 [ 146.254294][ T2513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.627'. [ 146.550852][ T125] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 146.800845][ T125] usb 2-1: Using ep0 maxpacket: 8 [ 146.840860][ T125] usb 2-1: too many configurations: 254, using maximum allowed: 8 [ 146.989749][ T125] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 146.997652][ T125] usb 2-1: can't read configurations, error -61 [ 147.214120][ T125] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 147.848733][ T23] kauditd_printk_skb: 2 callbacks suppressed [ 147.848744][ T23] audit: type=1326 audit(1747842595.571:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2538 comm="syz.0.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497767d969 code=0x7ffc0000 [ 147.879051][ T23] audit: type=1326 audit(1747842595.581:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2538 comm="syz.0.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497767d969 code=0x7ffc0000 [ 147.902700][ T125] usb 2-1: Using ep0 maxpacket: 8 [ 147.902839][ T23] audit: type=1326 audit(1747842595.581:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2538 comm="syz.0.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f497767d969 code=0x7ffc0000 [ 147.931255][ T23] audit: type=1326 audit(1747842595.581:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2538 comm="syz.0.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497767d969 code=0x7ffc0000 [ 147.972474][ T23] audit: type=1326 audit(1747842595.581:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2538 comm="syz.0.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497767d969 code=0x7ffc0000 [ 148.000899][ T23] audit: type=1326 audit(1747842595.581:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2538 comm="syz.0.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f497767d969 code=0x7ffc0000 [ 148.010928][ T125] usb 2-1: too many configurations: 254, using maximum allowed: 8 [ 148.024439][ T23] audit: type=1326 audit(1747842595.581:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2538 comm="syz.0.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497767d969 code=0x7ffc0000 [ 148.366837][ T23] audit: type=1326 audit(1747842595.581:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2538 comm="syz.0.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497767d969 code=0x7ffc0000 [ 148.407102][ T23] audit: type=1326 audit(1747842595.581:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2538 comm="syz.0.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f497767d969 code=0x7ffc0000 [ 148.438193][ T2549] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,nogrpid,nodelalloc,acl,noinit_itable,,errors=continue [ 148.535067][ T23] audit: type=1326 audit(1747842595.581:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2538 comm="syz.0.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497767d969 code=0x7ffc0000 [ 149.225572][ T2563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.642'. [ 149.330840][ T125] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 149.389235][ T125] usb 2-1: can't read configurations, error -71 [ 149.396259][ T125] usb usb2-port1: attempt power cycle [ 151.125834][ T2608] EXT4-fs (loop4): Ignoring removed bh option [ 151.138176][ T2608] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 151.155428][ T2608] EXT4-fs (loop4): failed to open journal device unknown-block(0,0): -6 [ 151.414948][ T2617] syz.2.660 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 151.913665][ T2631] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 154.566382][ T2665] EXT4-fs (loop3): Ignoring removed bh option [ 154.582840][ T2665] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 154.605250][ T2665] EXT4-fs (loop3): failed to open journal device unknown-block(0,0): -6 [ 155.437434][ T23] kauditd_printk_skb: 2 callbacks suppressed [ 155.437451][ T23] audit: type=1400 audit(1747842603.161:703): avc: denied { mount } for pid=2677 comm="syz.4.677" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 155.794750][ T23] audit: type=1400 audit(1747842603.301:704): avc: denied { unmount } for pid=342 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 156.291202][ T367] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 156.471632][ T2692] netlink: 24 bytes leftover after parsing attributes in process `syz.1.679'. [ 156.531030][ T2692] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2692 comm=syz.1.679 [ 156.940816][ T367] usb 4-1: Using ep0 maxpacket: 8 [ 156.991219][ T367] usb 4-1: too many configurations: 11, using maximum allowed: 8 [ 157.160914][ T367] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 157.169921][ T367] usb 4-1: can't read configurations, error -61 [ 157.420817][ T367] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 158.118331][ T23] audit: type=1400 audit(1747842605.841:705): avc: denied { connect } for pid=2741 comm="syz.0.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 158.140201][ T23] audit: type=1400 audit(1747842605.871:706): avc: denied { write } for pid=2741 comm="syz.0.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 158.213213][ T2748] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 158.222838][ T2748] EXT4-fs (loop4): Mount option "commit=0x0000000000000005" incompatible with ext2 [ 158.325713][ T2753] netlink: 24 bytes leftover after parsing attributes in process `syz.1.698'. [ 158.468022][ T2753] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2753 comm=syz.1.698 [ 159.176811][ T23] audit: type=1400 audit(1747842606.901:707): avc: denied { setopt } for pid=2770 comm="syz.0.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 159.859663][ T2781] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 159.883881][ T2781] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 159.906145][ T2781] F2FS-fs (loop3): invalid crc value [ 159.913019][ T2781] F2FS-fs (loop3): Found nat_bits in checkpoint [ 159.975096][ T2781] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 159.982414][ T2781] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 160.158172][ T2792] xt_CT: No such helper "snmp_trap" [ 160.580935][ T1498] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 160.800893][ T23] audit: type=1400 audit(1747842608.521:708): avc: denied { write } for pid=2805 comm="syz.2.717" laddr=fe80::a8aa:aaff:feaa:aa10 lport=3 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 160.830871][ T1498] usb 1-1: Using ep0 maxpacket: 8 [ 160.850055][ T2810] mmap: syz.2.718 (2810) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 160.948252][ T2813] netlink: 24 bytes leftover after parsing attributes in process `syz.3.716'. [ 160.962447][ T2813] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2813 comm=syz.3.716 [ 161.020910][ T1498] usb 1-1: unable to get BOS descriptor or descriptor too short [ 161.483683][ T1498] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 161.492381][ T1498] usb 1-1: config 0 has no interface number 0 [ 161.498547][ T1498] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 161.509578][ T1498] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 161.519634][ T1498] usb 1-1: config 0 interface 88 has no altsetting 0 [ 162.110211][ T1498] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 162.175502][ T1498] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 162.372733][ T1498] usb 1-1: Product: syz [ 162.396636][ T1498] usb 1-1: Manufacturer: syz [ 162.407611][ T1498] usb 1-1: SerialNumber: syz [ 162.439819][ T1498] usb 1-1: config 0 descriptor?? [ 163.161520][ T23] audit: type=1400 audit(1747842610.741:709): avc: denied { append } for pid=2836 comm="syz.1.726" name="ppp" dev="devtmpfs" ino=10422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 163.231440][ T23] audit: type=1400 audit(1747842610.761:710): avc: denied { bind } for pid=2836 comm="syz.1.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 163.271783][ T1498] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input5 [ 163.287172][ T1498] usb 1-1: USB disconnect, device number 7 [ 163.648889][ T2852] netlink: 16 bytes leftover after parsing attributes in process `syz.0.729'. [ 164.003314][ T2858] netlink: 24 bytes leftover after parsing attributes in process `syz.3.731'. [ 164.018236][ T2858] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2858 comm=syz.3.731 [ 165.165926][ T23] audit: type=1400 audit(1747842612.891:711): avc: denied { connect } for pid=2879 comm="syz.2.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 165.230275][ T23] audit: type=1400 audit(1747842612.921:712): avc: denied { write } for pid=2879 comm="syz.2.737" path="socket:[29133]" dev="sockfs" ino=29133 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 165.737345][ T23] audit: type=1400 audit(1747842613.301:713): avc: denied { setopt } for pid=2887 comm="syz.2.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 165.881810][ T2899] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,nogrpid,nodelalloc,acl,noinit_itable,,errors=continue [ 166.277551][ T2910] netlink: 16 bytes leftover after parsing attributes in process `syz.1.745'. [ 166.745866][ T2920] syz.3.747[2920] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.745998][ T2920] syz.3.747[2920] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.226601][ T2923] netlink: 24 bytes leftover after parsing attributes in process `syz.1.749'. [ 167.253751][ T2923] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2923 comm=syz.1.749 [ 168.144622][ T2925] xt_CT: No such helper "snmp_trap" [ 169.464680][ T2957] device wg2 entered promiscuous mode [ 170.106193][ T2977] netlink: 24 bytes leftover after parsing attributes in process `syz.4.765'. [ 170.120263][ T2977] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2977 comm=syz.4.765 [ 171.175044][ T3005] netlink: 32 bytes leftover after parsing attributes in process `syz.4.774'. [ 171.183947][ T3005] PF_BRIDGE: br_mdb_parse() with unknown ifindex [ 173.001081][ T3051] IPv6: sit1: Disabled Multicast RS [ 173.040046][ T3060] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,sb=0x0000000000000003,lazytime,auto_da_alloc=0x0000000000000009,,errors=continue [ 173.077897][ T3046] xt_CT: No such helper "snmp_trap" [ 175.079338][ T3097] xt_CT: No such helper "snmp_trap" [ 180.375586][ T3127] sched: RT throttling activated [ 180.491082][ T489] Bluetooth: hci0: command 0x1003 tx timeout [ 180.500247][ T1059] Bluetooth: hci0: sending frame failed (-49) [ 180.839728][ T23] audit: type=1400 audit(1747842628.551:714): avc: denied { write } for pid=3150 comm="syz.1.820" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 182.132501][ T3164] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 182.149450][ T3164] EXT4-fs (loop3): Mount option "commit=0x0000000000000005" incompatible with ext2 [ 182.560839][ T1498] Bluetooth: hci0: command 0x1001 tx timeout [ 182.572937][ T1059] Bluetooth: hci0: sending frame failed (-49) [ 183.653742][ T3194] syz.0.830[3194] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.653980][ T3194] syz.0.830[3194] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.726062][ T108] Bluetooth: hci0: command 0x1009 tx timeout [ 185.158184][ T23] audit: type=1400 audit(1747842632.721:715): avc: denied { connect } for pid=3209 comm="syz.0.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 185.195821][ T3213] xt_bpf: check failed: parse error [ 187.757533][ T3255] bridge0: port 3(gretap0) entered blocking state [ 187.764117][ T3255] bridge0: port 3(gretap0) entered disabled state [ 187.771359][ T3255] device gretap0 entered promiscuous mode [ 187.777189][ T3255] bridge0: port 3(gretap0) entered blocking state [ 187.783638][ T3255] bridge0: port 3(gretap0) entered forwarding state [ 188.356439][ T3268] netlink: 60 bytes leftover after parsing attributes in process `syz.2.851'. [ 188.640823][ T108] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 189.010985][ T108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.022188][ T108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.032042][ T108] usb 5-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00 [ 189.044803][ T108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.056342][ T108] usb 5-1: config 0 descriptor?? [ 190.177044][ T108] wacom 0003:056A:002A.0005: Unknown device_type for 'HID 056a:002a'. Assuming pen. [ 190.187560][ T108] wacom 0003:056A:002A.0005: hidraw0: USB HID vff.fe Device [HID 056a:002a] on usb-dummy_hcd.4-1/input0 [ 190.200000][ T108] input: Wacom Intuos5 M Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:002A.0005/input/input6 [ 191.166322][ T108] usb 5-1: USB disconnect, device number 8 [ 191.253248][ T3309] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 191.262172][ T3309] FAT-fs (loop3): Filesystem has been set read-only [ 191.400713][ T3315] syz.1.865[3315] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.400830][ T3315] syz.1.865[3315] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.166084][ T23] audit: type=1326 audit(1747842639.891:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3319 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7641be3969 code=0x7ffc0000 [ 192.261786][ T23] audit: type=1326 audit(1747842639.931:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3319 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7641be3969 code=0x7ffc0000 [ 192.305726][ T23] audit: type=1326 audit(1747842639.931:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3319 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7641be3969 code=0x7ffc0000 [ 192.357831][ T23] audit: type=1326 audit(1747842639.931:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3319 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7641be3969 code=0x7ffc0000 [ 192.381480][ T23] audit: type=1326 audit(1747842639.931:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3319 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7641be3969 code=0x7ffc0000 [ 192.410350][ T489] Bluetooth: hci0: command 0x1003 tx timeout [ 192.416412][ T23] audit: type=1326 audit(1747842639.931:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3319 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f7641be3969 code=0x7ffc0000 [ 192.446448][ T1059] Bluetooth: hci0: sending frame failed (-49) [ 192.454029][ T23] audit: type=1326 audit(1747842639.931:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3319 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7641be3969 code=0x7ffc0000 [ 192.479820][ T23] audit: type=1326 audit(1747842639.931:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3319 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7641be3969 code=0x7ffc0000 [ 193.400827][ T23] audit: type=1400 audit(1747842641.111:724): avc: denied { write } for pid=3341 comm="syz.4.875" name="ptype" dev="proc" ino=4026532552 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 194.487729][ T1498] Bluetooth: hci0: command 0x1001 tx timeout [ 194.495921][ T1059] Bluetooth: hci0: sending frame failed (-49) [ 194.505792][ T3373] syz.4.883[3373] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.506030][ T3373] syz.4.883[3373] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.705629][ T1498] Bluetooth: hci0: command 0x1009 tx timeout [ 197.498268][ T3417] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 197.661609][ T3428] syz.3.899[3428] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.661823][ T3428] syz.3.899[3428] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.911976][ T3424] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 199.440204][ T3450] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 200.260821][ T489] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 200.660840][ T489] usb 4-1: Using ep0 maxpacket: 32 [ 200.791083][ T489] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.802383][ T489] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.941113][ T489] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 200.950632][ T489] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 200.959924][ T489] usb 4-1: Product: syz [ 200.968209][ T489] usb 4-1: Manufacturer: syz [ 201.161266][ T489] hub 4-1:4.0: USB hub found [ 201.349009][ T3481] syz.1.913[3481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.349256][ T3481] syz.1.913[3481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.108430][ T489] hub 4-1:4.0: 2 ports detected [ 202.312664][ T3494] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 202.323287][ T3494] SELinux: failed to load policy [ 202.668409][ T23] audit: type=1400 audit(1747842650.391:725): avc: denied { mounton } for pid=3456 comm="syz.3.907" path="/192/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 202.669414][ T3457] incfs_lookup_dentry err:-14 [ 202.695482][ T3457] incfs: Can't find or create .incomplete dir in ./file0 [ 202.703089][ T3457] incfs: mount failed -14 [ 202.708537][ T23] audit: type=1400 audit(1747842650.431:726): avc: denied { remove_name } for pid=3456 comm="syz.3.907" name=".index" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 202.744598][ T23] audit: type=1400 audit(1747842650.431:727): avc: denied { rmdir } for pid=3456 comm="syz.3.907" name=".index" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 202.827845][ T489] hub 4-1:4.0: set hub depth failed [ 202.834088][ T3498] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 202.873841][ T489] usb 4-1: USB disconnect, device number 19 [ 202.953892][ T3505] xt_CT: No such helper "snmp_trap" [ 203.531345][ T9] Bluetooth: hci0: Frame reassembly failed (-90) [ 203.541716][ T9] Bluetooth: hci0: Frame reassembly failed (-84) [ 204.776823][ T3529] syz.3.925[3529] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.777141][ T3529] syz.3.925[3529] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.737833][ T5] Bluetooth: hci0: command 0x1003 tx timeout [ 205.772937][ T1059] Bluetooth: hci0: sending frame failed (-49) [ 207.416619][ T3573] syz.2.940[3573] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.416699][ T3573] syz.2.940[3573] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.502333][ T1498] Bluetooth: hci0: command 0x1001 tx timeout [ 208.587365][ T3581] netlink: 16 bytes leftover after parsing attributes in process `syz.0.942'. [ 208.740005][ T1059] Bluetooth: hci0: sending frame failed (-49) [ 210.315861][ T3612] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 210.454804][ T3614] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 210.464552][ T3614] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 210.800774][ T489] Bluetooth: hci0: command 0x1009 tx timeout [ 212.173687][ T3638] netlink: 16 bytes leftover after parsing attributes in process `syz.0.958'. [ 212.993109][ T103] Bluetooth: hci1: Frame reassembly failed (-84) [ 213.484816][ T3663] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 213.996212][ T23] audit: type=1400 audit(1747842661.721:728): avc: denied { write } for pid=3667 comm="syz.1.970" name="file0" dev="tmpfs" ino=33893 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 214.024827][ T23] audit: type=1400 audit(1747842661.721:729): avc: denied { open } for pid=3667 comm="syz.1.970" path="/167/file0" dev="tmpfs" ino=33893 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 214.057299][ T3675] 9pnet: Insufficient options for proto=fd [ 214.068786][ T23] audit: type=1400 audit(1747842661.721:730): avc: denied { ioctl } for pid=3667 comm="syz.1.970" path="/167/file0" dev="tmpfs" ino=33893 ioctlcmd=0x127e scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 214.865214][ T3691] netlink: 16 bytes leftover after parsing attributes in process `syz.4.974'. [ 215.205678][ T103] Bluetooth: hci0: Frame reassembly failed (-90) [ 215.215436][ T489] Bluetooth: hci1: command 0x1003 tx timeout [ 215.228783][ T1057] Bluetooth: hci1: sending frame failed (-49) [ 216.003604][ T3704] @0Ù: renamed from bond_slave_1 [ 217.290579][ T1498] Bluetooth: hci0: command 0x1003 tx timeout [ 217.302854][ T1956] Bluetooth: hci0: sending frame failed (-49) [ 217.342162][ T5] Bluetooth: hci1: command 0x1001 tx timeout [ 217.359839][ T1956] Bluetooth: hci1: sending frame failed (-49) [ 218.560840][ T489] Bluetooth: hci2: command 0x1003 tx timeout [ 218.567163][ T1956] Bluetooth: hci2: sending frame failed (-49) [ 218.830324][ T3743] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 219.405632][ T489] Bluetooth: hci0: command 0x1001 tx timeout [ 219.415453][ T1956] Bluetooth: hci0: sending frame failed (-49) [ 219.440806][ T489] Bluetooth: hci1: command 0x1009 tx timeout [ 220.578044][ T3761] syz.3.996[3761] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.578262][ T3761] syz.3.996[3761] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.757855][ T367] Bluetooth: hci2: command 0x1001 tx timeout [ 220.780131][ T1956] Bluetooth: hci2: sending frame failed (-49) [ 221.443045][ T367] Bluetooth: hci0: command 0x1009 tx timeout [ 221.683774][ T3770] EXT4-fs (loop4): Ignoring removed nobh option [ 221.691274][ T3770] EXT4-fs (loop4): can't mount with dioread_nolock if block size != PAGE_SIZE [ 222.800803][ T367] Bluetooth: hci2: command 0x1009 tx timeout [ 223.321601][ T3790] cgroup: syz.3.1004 (3790) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 223.338004][ T3790] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 223.452280][ T23] audit: type=1400 audit(1747842671.240:731): avc: denied { read write } for pid=3787 comm="syz.3.1004" name="uhid" dev="devtmpfs" ino=9850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 223.477232][ T489] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 223.485133][ T489] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 223.493095][ T489] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 223.501375][ T489] hid-generic 0000:0004:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 223.511163][ T23] audit: type=1400 audit(1747842671.240:732): avc: denied { open } for pid=3787 comm="syz.3.1004" path="/dev/uhid" dev="devtmpfs" ino=9850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 224.226836][ T3805] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1009'. [ 224.365558][ T23] audit: type=1400 audit(1747842672.150:733): avc: denied { mount } for pid=3806 comm="syz.2.1010" name="/" dev="configfs" ino=10424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 224.389248][ T23] audit: type=1400 audit(1747842672.150:734): avc: denied { search } for pid=3806 comm="syz.2.1010" name="/" dev="configfs" ino=10424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 224.411556][ T23] audit: type=1400 audit(1747842672.150:735): avc: denied { mounton } for pid=3806 comm="syz.2.1010" path="/" dev="configfs" ino=10424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 224.434083][ T23] audit: type=1400 audit(1747842672.180:736): avc: denied { read open } for pid=3806 comm="syz.2.1010" path="/" dev="configfs" ino=10424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 224.461978][ T23] audit: type=1400 audit(1747842672.250:737): avc: denied { unmount } for pid=343 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 225.328125][ T23] audit: type=1400 audit(1747842673.110:738): avc: denied { view } for pid=3824 comm="syz.0.1016" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 225.597613][ T3839] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3839 comm=syz.4.1019 [ 226.400677][ T18] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 226.431951][ T9] Bluetooth: hci0: Frame reassembly failed (-90) [ 226.464225][ T9] Bluetooth: hci0: Frame reassembly failed (-84) [ 227.238308][ T18] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.252204][ T18] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 227.340879][ T18] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 227.350007][ T18] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 227.358248][ T18] usb 4-1: SerialNumber: syz [ 227.631375][ T18] usb 4-1: 0:2 : does not exist [ 227.638974][ T18] usb 4-1: USB disconnect, device number 20 [ 227.863325][ T338] udevd[338]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 228.245832][ T5] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 228.533409][ T18] Bluetooth: hci0: command 0x1003 tx timeout [ 228.540547][ T1057] Bluetooth: hci0: sending frame failed (-49) [ 228.603756][ T3886] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 228.710784][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 228.750919][ T5] usb 2-1: too many configurations: 39, using maximum allowed: 8 [ 228.870883][ T5] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 228.878758][ T5] usb 2-1: can't read configurations, error -61 [ 229.230902][ T5] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 229.472032][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 229.514830][ T3905] Bluetooth: hci1: Frame reassembly failed (-84) [ 229.524291][ T3905] Bluetooth: hci1: Frame reassembly failed (-84) [ 229.556322][ T415] Bluetooth: hci1: Frame reassembly failed (-84) [ 229.570590][ T415] Bluetooth: hci1: Frame reassembly failed (-84) [ 229.578751][ T415] Bluetooth: hci1: Frame reassembly failed (-84) [ 229.590073][ T415] Bluetooth: hci1: Frame reassembly failed (-84) [ 229.604505][ T415] Bluetooth: hci1: Frame reassembly failed (-84) [ 229.611920][ T415] Bluetooth: hci1: Frame reassembly failed (-84) [ 229.638252][ T5] usb 2-1: too many configurations: 39, using maximum allowed: 8 [ 230.380882][ T5] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 230.391744][ T5] usb 2-1: can't read configurations, error -61 [ 230.398363][ T5] usb usb2-port1: attempt power cycle [ 230.672306][ T74] Bluetooth: hci0: command 0x1001 tx timeout [ 230.687644][ T1059] Bluetooth: hci0: sending frame failed (-49) [ 231.142595][ T23] audit: type=1326 audit(1747842678.920:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3914 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff091764969 code=0x7ffc0000 [ 231.575860][ T23] audit: type=1326 audit(1747842678.920:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3914 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff091764969 code=0x7ffc0000 [ 231.599923][ T23] audit: type=1326 audit(1747842678.920:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3914 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7ff091764969 code=0x7ffc0000 [ 231.623790][ T74] Bluetooth: hci1: command 0x1003 tx timeout [ 231.629837][ T23] audit: type=1326 audit(1747842678.920:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3914 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff091764969 code=0x7ffc0000 [ 231.653373][ T23] audit: type=1326 audit(1747842678.920:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3914 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff091764969 code=0x7ffc0000 [ 231.677107][ T1059] Bluetooth: hci1: sending frame failed (-49) [ 231.684267][ T23] audit: type=1326 audit(1747842678.920:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3914 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff091764969 code=0x7ffc0000 [ 231.729257][ T23] audit: type=1326 audit(1747842678.920:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3914 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff091764969 code=0x7ffc0000 [ 231.759700][ T23] audit: type=1326 audit(1747842678.920:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3914 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff091764969 code=0x7ffc0000 [ 231.785660][ T3919] EXT4-fs (loop3): Unrecognized mount option "uid<00000000000000060929" or missing value [ 231.804355][ T23] audit: type=1326 audit(1747842678.920:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3914 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff091764969 code=0x7ffc0000 [ 231.828833][ T23] audit: type=1326 audit(1747842678.930:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3914 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff091764969 code=0x7ffc0000 [ 232.026959][ T3931] xt_bpf: check failed: parse error [ 232.206145][ T3932] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 232.219096][ T3932] EXT4-fs (loop3): invalid journal inode [ 232.224997][ T3932] EXT4-fs (loop3): can't get journal size [ 232.342639][ T3932] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 232.351135][ T3932] System zones: 1-13 [ 232.405463][ T3932] EXT4-fs (loop3): 1 truncate cleaned up [ 232.411306][ T3932] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,grpquota,debug,discard,,errors=continue [ 232.800972][ T5] Bluetooth: hci0: command 0x1009 tx timeout [ 233.760808][ T367] Bluetooth: hci1: command 0x1001 tx timeout [ 233.766832][ T1059] Bluetooth: hci1: sending frame failed (-49) [ 234.588106][ T3964] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,nogrpid,nodelalloc,acl,noinit_itable,,errors=continue [ 234.730800][ T367] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 235.110991][ T367] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 235.120168][ T367] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 235.129123][ T367] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 235.139382][ T367] usb 2-1: config 220 has no interface number 2 [ 235.145919][ T367] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 235.159232][ T367] usb 2-1: config 220 interface 0 has no altsetting 0 [ 235.166036][ T367] usb 2-1: config 220 interface 76 has no altsetting 0 [ 235.172908][ T367] usb 2-1: config 220 interface 1 has no altsetting 0 [ 235.330892][ T367] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 235.339966][ T367] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.348098][ T367] usb 2-1: Product: syz [ 235.352389][ T367] usb 2-1: Manufacturer: syz [ 235.357056][ T367] usb 2-1: SerialNumber: syz [ 235.692017][ T3981] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 235.746174][ T3980] xt_bpf: check failed: parse error [ 235.780929][ T367] usb 2-1: selecting invalid altsetting 0 [ 235.786779][ T367] uvcvideo: Found UVC 7.01 device syz (8086:0b07) [ 235.793667][ T367] uvcvideo: No valid video chain found. [ 235.840788][ T5] Bluetooth: hci1: command 0x1009 tx timeout [ 235.885890][ T367] usb 2-1: USB disconnect, device number 27 [ 236.609331][ T3996] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1066'. [ 236.623273][ T3996] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3996 comm=syz.3.1066 [ 237.502008][ T4011] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,nogrpid,nodelalloc,acl,noinit_itable,,errors=continue [ 238.285467][ T4031] xt_bpf: check failed: parse error [ 239.969307][ T4055] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1082'. [ 240.015688][ T4055] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4055 comm=syz.1.1082 [ 240.798251][ T23] kauditd_printk_skb: 3 callbacks suppressed [ 240.798260][ T23] audit: type=1326 audit(1747842688.646:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4076 comm="syz.2.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbf1d14969 code=0x7ffc0000 [ 240.840431][ T23] audit: type=1326 audit(1747842688.656:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4076 comm="syz.2.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbf1d14969 code=0x7ffc0000 [ 240.872546][ T23] audit: type=1326 audit(1747842688.656:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4076 comm="syz.2.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7ffbf1d14969 code=0x7ffc0000 [ 240.965067][ T23] audit: type=1326 audit(1747842688.656:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4076 comm="syz.2.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbf1d14969 code=0x7ffc0000 [ 244.049577][ T4119] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1103'. [ 244.072235][ T4119] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4119 comm=syz.3.1103 [ 244.969701][ T4144] netlink: 536 bytes leftover after parsing attributes in process `syz.2.1110'. [ 245.085353][ T4156] kasan: CONFIG_KASAN_INLINE enabled [ 245.090683][ T4156] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 245.098883][ T4156] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 245.105823][ T4156] CPU: 1 PID: 4156 Comm: syz.2.1115 Tainted: G W 5.4.292-syzkaller-00021-gcd8e74fa0fa3 #0 [ 245.117078][ T4156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 245.127138][ T4156] RIP: 0010:bpf_skb_ancestor_cgroup_id+0x11d/0x280 [ 245.133636][ T4156] Code: 02 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 94 42 26 fe 4d 8b 36 49 8d be 1c 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 3b 01 00 00 45 8b be 1c 01 00 00 44 89 [ 245.153457][ T4156] RSP: 0018:ffff8881cc90f978 EFLAGS: 00010203 [ 245.159504][ T4156] RAX: 0000000000000023 RBX: 0000000000000000 RCX: 0000000000000002 [ 245.167487][ T4156] RDX: ffff8881cb896e40 RSI: 0000000000000080 RDI: 000000000000011c [ 245.175434][ T4156] RBP: ffff8881cc90f998 R08: 0000000000000040 R09: ffffed103d2fc6a9 [ 245.183392][ T4156] R10: ffffed103d2fc6a9 R11: 1ffff1103d2fc6a6 R12: dffffc0000000000 [ 245.191339][ T4156] R13: ffffc9000066d020 R14: 0000000000000000 R15: 0000000000000080 [ 245.199309][ T4156] FS: 00007ffbf037d6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 245.208265][ T4156] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 245.214927][ T4156] CR2: 0000001b30f1fffc CR3: 00000001df5e5000 CR4: 00000000003406a0 [ 245.222890][ T4156] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 245.230838][ T4156] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 245.238787][ T4156] Call Trace: [ 245.242070][ T4156] bpf_prog_3845441c11a73078+0x8bd/0x1000 [ 245.247863][ T4156] ? trace_event_raw_event_xdp_bulk_tx+0x1f0/0x350 [ 245.254336][ T4156] ? __x64_sys_bpf+0x7b/0x90 [ 245.258902][ T4156] ? do_syscall_64+0xcf/0x170 [ 245.263583][ T4156] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 245.269642][ T4156] ? ktime_get+0x10d/0x140 [ 245.274053][ T4156] bpf_test_run+0x1ea/0x5d0 [ 245.278625][ T4156] ? eth_type_trans+0x2c2/0x5e0 [ 245.283456][ T4156] ? bpf_ctx_init+0x1b0/0x1b0 [ 245.288288][ T4156] ? eth_get_headlen+0x1f0/0x1f0 [ 245.293286][ T4156] ? __kasan_check_write+0x14/0x20 [ 245.298453][ T4156] bpf_prog_test_run_skb+0x721/0xdc0 [ 245.303732][ T4156] ? __bpf_trace_bpf_test_finish+0x30/0x30 [ 245.309522][ T4156] bpf_prog_test_run+0x21a/0x2a0 [ 245.314432][ T4156] __se_sys_bpf+0x49a/0x570 [ 245.318915][ T4156] ? __x64_sys_bpf+0x90/0x90 [ 245.323586][ T4156] ? fpu__clear+0x3b0/0x3b0 [ 245.328161][ T4156] ? __kasan_check_read+0x11/0x20 [ 245.333420][ T4156] __x64_sys_bpf+0x7b/0x90 [ 245.337828][ T4156] do_syscall_64+0xcf/0x170 [ 245.342393][ T4156] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 245.348284][ T4156] RIP: 0033:0x7ffbf1d14969 [ 245.352687][ T4156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.372436][ T4156] RSP: 002b:00007ffbf037d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 245.380820][ T4156] RAX: ffffffffffffffda RBX: 00007ffbf1f3bfa0 RCX: 00007ffbf1d14969 [ 245.388782][ T4156] RDX: 0000000000000040 RSI: 0000200000000280 RDI: 000000000000000a [ 245.396732][ T4156] RBP: 00007ffbf1d96ab1 R08: 0000000000000000 R09: 0000000000000000 [ 245.404706][ T4156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.412748][ T4156] R13: 0000000000000000 R14: 00007ffbf1f3bfa0 R15: 00007ffe544a5668 [ 245.420847][ T4156] Modules linked in: [ 245.424834][ T4156] ---[ end trace 14d4b596f1af46ad ]--- [ 245.430305][ T4156] RIP: 0010:bpf_skb_ancestor_cgroup_id+0x11d/0x280 [ 245.436829][ T4156] Code: 02 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 94 42 26 fe 4d 8b 36 49 8d be 1c 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 3b 01 00 00 45 8b be 1c 01 00 00 44 89 [ 245.456749][ T4156] RSP: 0018:ffff8881cc90f978 EFLAGS: 00010203 [ 245.462835][ T4156] RAX: 0000000000000023 RBX: 0000000000000000 RCX: 0000000000000002 [ 245.470908][ T4156] RDX: ffff8881cb896e40 RSI: 0000000000000080 RDI: 000000000000011c [ 245.478873][ T4156] RBP: ffff8881cc90f998 R08: 0000000000000040 R09: ffffed103d2fc6a9 [ 245.486948][ T4156] R10: ffffed103d2fc6a9 R11: 1ffff1103d2fc6a6 R12: dffffc0000000000 [ 245.494985][ T4156] R13: ffffc9000066d020 R14: 0000000000000000 R15: 0000000000000080 [ 245.502976][ T4156] FS: 00007ffbf037d6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 245.511950][ T4156] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 245.518762][ T4156] CR2: 0000001b30f1fffc CR3: 00000001df5e5000 CR4: 00000000003406a0 [ 245.527179][ T4156] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 245.535533][ T4156] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 245.543536][ T4156] Kernel panic - not syncing: Fatal exception [ 245.550016][ T4156] Kernel Offset: disabled [ 245.554323][ T4156] Rebooting in 86400 seconds..