last executing test programs: 11.218628796s ago: executing program 2 (id=231): prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) add_key$user(&(0x7f0000001680), 0x0, 0x0, 0x0, 0xfffffffffffffffa) keyctl$dh_compute(0x17, 0x0, &(0x7f0000001780)=""/4096, 0x1000, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001e80), r3) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000240)=r2, 0x4) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_SET_OPTION(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000002000000000001"}, 0x2000000000001005, 0x19dff, 0x4}}}, 0x90) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000400)) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x0, 0x0) 10.695400181s ago: executing program 2 (id=233): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000003880)={0x9, {0x7fffffff, 0xd, 0x10001, 0x6}}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000020000100ecc2000000000000020020000000000100000000140003006c6f00"/47], 0x38}, 0x1, 0x0, 0x0, 0x4044800}, 0x20000076) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x500) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) r5 = socket(0x10, 0x3, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) readv(r6, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/104, 0x68}, {0x0}], 0x2) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x2000}, {&(0x7f0000000500)=""/84, 0x54}], 0x2, 0x4, 0x8008) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x5, 0x3}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x2008c010) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) 9.875945458s ago: executing program 4 (id=234): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x20040810) (fail_nth: 6) 9.245218276s ago: executing program 3 (id=236): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1dc}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000900), 0x10, 0x822000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000940)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000007880)=""/102400, 0x19000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000880)={{0xffffffffffffffff, &(0x7f0000000000)='fuse\x00', 0x101000, &(0x7f0000000040)={@align=0x3, {0x2, 0x4, 0x7ff, 0x6}}, 0x3, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x9}, 0x4, &(0x7f0000000800)=[{0x3, 0xfffffffb, &(0x7f0000000380)='\x00', &(0x7f00000004c0)='<', 0x1, 0x1a}, {0x3, 0x100, &(0x7f0000000500)='syz1\x00', &(0x7f0000000540)="ae450950fd05d39976dae1a75f55c54e07b451858fd275b2510d648703709c67182dcc282c3adf4273ca4b4886c7dc04dd8e456c22768e88cc970f28dac3c98a8c50c2f8155627041c6e7bbf205a85cab47e1c89f1ec3310cfc44193b8f7f7f4af0a86b275b357063783d7ff96684d734dcbdfed057691d9964b6183903081a1bf75aa8670d79f061b05ce71d4018e32d7c3326a", 0x94, 0x20}, {0x2, 0x40, &(0x7f0000000600)='/dev/cpu/#/msr\x00', &(0x7f0000000c40)="5059905c7cc6721fc066e11394dc51562e2193dd27eb79f76315cdcc148f9c650abe56866ee64b41e391bd9878e1d76302d5966a3b0d6dcc37bc57c72c87df7770d61697b72c16d5b706b80e734d323e194282b4a5c2df9b4f2a4b30e87dbd95a961d23f614d64c3f372f7d559785b3be75ab34f37cccfc2f1f9533de779e43a65a6726edc2125e41f9d5d53274557c754663179cf678cb98658dafbbcb27414c7a6bfcfb4f16d27f9b2d6", 0xab}, {0x2, 0xe08a, &(0x7f0000000700)='^\x00', &(0x7f0000000740)="b68b8e0bf205c8375dc19fd7e5a81a54fd271fe36df776d45a662e63102a45aac86f677e37a1b7a20cac2b1c6c19e89d2b8668c623fe94bc5bed464fd86a49a94058e856b1a6d09cb7299e86c3190be309fb731bb4d5d874e7cbd7fd79d6df37ef6bc7062910dfef613e10c856ebc87a29c8072b4d7e3ffb53ad42b35e17483650f9a25e6f99e28c6d910872ce4f366d1cb8eec5c59267cb57acb3a5fed4226be806d1a0cdb8ba1c84184b45e89aa7c899148ec5af54b4e64271", 0xba, 0x38}]}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000040)='hpfs\x00', 0x800, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', 0x0, 0x800, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000340)={r2, &(0x7f00000000c0)='syz1\x00', 0x303002, &(0x7f00000001c0)={@align=0x2d, {0x401, 0x3, 0x7, 0x7}}, 0x7fff, &(0x7f0000000280), &(0x7f0000000300)=0x2a}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x0, [0x806f, 0x0, 0x400000000002d5, 0x2, 0x6], [0x9d8, 0x5, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff0, 0x4a, 0x5, 0x6, 0xecf1, 0xdd, 0x5, 0x1, 0x2a6, 0x3, 0xc3c, 0x1, 0x8, 0x100000000, 0x4, 0xa51, 0x8, 0x401, 0x7ffffffffffffff, 0x7, 0x7, 0x82, 0x100, 0x5, 0x931, 0x1000000000000004, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x1, 0x9, 0x9, 0xfffffffffffffffb, 0x4, 0x0, 0x1, 0x4, 0x8, 0x8000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0x14, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x20000082c, 0x7ff, 0xe000000000000, 0xe4, 0xf, 0x0, 0x6, 0x22, 0xffffffffffffffff, 0x9, 0x401, 0x7ffffffffffffffc, 0x7, 0x7, 0x0, 0x6, 0x6, 0xb, 0x100000002, 0x4, 0x4, 0x7, 0x7, 0x7, 0x8, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0xfffffffffffffffc, 0x7, 0x4, 0x7, 0x406, 0x83, 0x6, 0x2, 0x5, 0x2000003, 0xdf, 0x7fffffff, 0x7, 0x11, 0x3]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) 8.263100997s ago: executing program 4 (id=239): socket$kcm(0x10, 0x400000002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) mprotect(&(0x7f00006b3000/0x1000)=nil, 0x1000, 0xc) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200002001000370401000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="9345050001000000"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4) clock_adjtime(0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) r2 = socket$xdp(0x2c, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000002000000000c00000000000000000000000000000000e9000000"], 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="060000000000000ec7941800"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000700)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a18fe00000000b6090800400000007b9af0ff00000000bf8610000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200c7bcf46a396c6ff700", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf980000000000003e08f0ff0000000085000000b4005400b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="00000000008c2f77c7979e0635d670020560f1aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a2c1d5100bf9e8c11e8a50dbf08f2ffbba1a118f81b50386718db31eba1993bd5647271aa7414b20e00734a6131c60f00d700068f4c4b2095522846e8cc2d3c3ac613653563ae289c6f72d289391", 0x8c}, {0x0}], 0x2}, 0x8001) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r6, 0x58, &(0x7f0000000080)={0x0, 0x0}}, 0x10) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={r7}, 0xc) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000000)={r8, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0xba, 0x0, 0x0, 0x0, 0xffffffff, 0x8, 0xfffffffffffffd3b, 0x0}}, 0x10) 7.471833562s ago: executing program 2 (id=241): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 7.417776485s ago: executing program 4 (id=242): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 7.313756111s ago: executing program 2 (id=243): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000002c0)="b8001800000f23d00f21f8353000000e0f23f83e0fae8d001000000fd8e866baf80cb84a8cce8cef66bafc0cec26640f23dbc7442400b30d45d5c744240204000000c744240600000000c4c11167600066baf80cb8dc759680ef66bafc0c66b8134266ef66ba4300ec0f0f49e4b70fbaa70a0000000d", 0x76}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0, 0x9}], 0x1, 0x1, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)}], 0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00005a4000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004054) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x400970, 0x1f280, 0xfffffffe, 0x399}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x1, 0x40, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x3}}, 0xb) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_uring_enter(r3, 0x8ae, 0xfbb9, 0x35, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) 7.186634953s ago: executing program 0 (id=244): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1dc}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000900), 0x10, 0x822000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000940)=0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000007880)=""/102400, 0x19000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000880)={{0xffffffffffffffff, &(0x7f0000000000)='fuse\x00', 0x101000, &(0x7f0000000040)={@align=0x3, {0x2, 0x4, 0x7ff, 0x6}}, 0x3, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x9}, 0x4, &(0x7f0000000800)=[{0x3, 0xfffffffb, &(0x7f0000000380)='\x00', &(0x7f00000004c0)='<', 0x1, 0x1a}, {0x3, 0x100, &(0x7f0000000500)='syz1\x00', &(0x7f0000000540)="ae450950fd05d39976dae1a75f55c54e07b451858fd275b2510d648703709c67182dcc282c3adf4273ca4b4886c7dc04dd8e456c22768e88cc970f28dac3c98a8c50c2f8155627041c6e7bbf205a85cab47e1c89f1ec3310cfc44193b8f7f7f4af0a86b275b357063783d7ff96684d734dcbdfed057691d9964b6183903081a1bf75aa8670d79f061b05ce71d4018e32d7c3326a", 0x94, 0x20}, {0x2, 0x40, &(0x7f0000000600)='/dev/cpu/#/msr\x00', &(0x7f0000000c40)="5059905c7cc6721fc066e11394dc51562e2193dd27eb79f76315cdcc148f9c650abe56866ee64b41e391bd9878e1d76302d5966a3b0d6dcc37bc57c72c87df7770d61697b72c16d5b706b80e734d323e194282b4a5c2df9b4f2a4b30e87dbd95a961d23f614d64c3f372f7d559785b3be75ab34f37cccfc2f1f9533de779e43a65a6726edc2125e41f9d5d53274557c754663179cf678cb98658dafbbcb27414c7a6bfcfb4f16d27f9b2d6", 0xab}, {0x2, 0xe08a, &(0x7f0000000700)='^\x00', &(0x7f0000000740)="b68b8e0bf205c8375dc19fd7e5a81a54fd271fe36df776d45a662e63102a45aac86f677e37a1b7a20cac2b1c6c19e89d2b8668c623fe94bc5bed464fd86a49a94058e856b1a6d09cb7299e86c3190be309fb731bb4d5d874e7cbd7fd79d6df37ef6bc7062910dfef613e10c856ebc87a29c8072b4d7e3ffb53ad42b35e17483650f9a25e6f99e28c6d910872ce4f366d1cb8eec5c59267cb57acb3a5fed4226be806d1a0cdb8ba1c84184b45e89aa7c899148ec5af54b4e64271", 0xba, 0x38}]}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000040)='hpfs\x00', 0x800, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', 0x0, 0x800, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000340)={r2, &(0x7f00000000c0)='syz1\x00', 0x303002, &(0x7f00000001c0)={@align=0x2d, {0x401, 0x3, 0x7, 0x7}}, 0x7fff, &(0x7f0000000280), &(0x7f0000000300)=0x2a}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x0, [0x806f, 0x0, 0x400000000002d5, 0x2, 0x6], [0x9d8, 0x5, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff0, 0x4a, 0x5, 0x6, 0xecf1, 0xdd, 0x5, 0x1, 0x2a6, 0x3, 0xc3c, 0x1, 0x8, 0x100000000, 0x4, 0xa51, 0x8, 0x401, 0x7ffffffffffffff, 0x7, 0x7, 0x82, 0x100, 0x5, 0x931, 0x1000000000000004, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x1, 0x9, 0x9, 0xfffffffffffffffb, 0x4, 0x0, 0x1, 0x4, 0x8, 0x8000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0x14, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x20000082c, 0x7ff, 0xe000000000000, 0xe4, 0xf, 0x0, 0x6, 0x22, 0xffffffffffffffff, 0x9, 0x401, 0x7ffffffffffffffc, 0x7, 0x7, 0x0, 0x6, 0x6, 0xb, 0x100000002, 0x4, 0x4, 0x7, 0x7, 0x7, 0x8, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0xfffffffffffffffc, 0x7, 0x4, 0x7, 0x406, 0x83, 0x6, 0x2, 0x5, 0x2000003, 0xdf, 0x7fffffff, 0x7, 0x11, 0x3]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) 7.161872415s ago: executing program 1 (id=245): syz_emit_ethernet(0x46, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf5}}}}}}, 0x0) getegid() r0 = getuid() setreuid(0xee00, r0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000280)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5, r2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002700)={{{@in=@broadcast, @in=@remote}}, {{@in6=@private2}, 0x0, @in=@multicast1}}, 0x0) fstat(0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004d80), &(0x7f0000004dc0)=0xc) syz_emit_ethernet(0x116, &(0x7f0000000080)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x2b, 0x4, 0x0, 0x0, 0x108, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@cipso={0x86, 0x32, 0x3, [{0x2, 0xe, "6097a7087de7013714ed779f"}, {0x1, 0x10, "434a5faf243b8719e78ce9391714"}, {0x6, 0x6, "0a53a98f"}, {0x7, 0x8, "9ae5e49d4d97"}]}, @rr={0x7, 0x7, 0xaf, [@remote]}, @lsrr={0x83, 0x1b, 0x9c, [@multicast1, @multicast1, @empty, @broadcast, @remote, @multicast1]}, @end, @cipso={0x86, 0x25, 0xfffffffffffffffc, [{0x0, 0x8, "fc856a6ad0be"}, {0x2, 0x8, "fcdb0c081ea5"}, {0x7, 0xf, "2c8a55cf9ee29111359c8a13dd"}]}, @timestamp_prespec={0x44, 0x1c, 0x87, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@loopback, 0xd}, {@remote, 0x4}]}]}}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x3}, @end, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@rand_addr=0x64010100}, {@remote}, {@multicast1}, {@dev}, {@empty}, {}, {@rand_addr=0x64010101}]}]}}}}}}}, 0x0) 6.937706127s ago: executing program 4 (id=246): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004000) capset(&(0x7f0000000180)={0x20071026}, 0x0) socket$unix(0x1, 0x5, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x82000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0) listen(r2, 0xc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r9, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x8000000}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="100000000000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 5.935725245s ago: executing program 0 (id=247): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4000000) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) openat$binderfs(0xffffffffffffff9c, 0x0, 0x806, 0x0) socket$inet6(0xa, 0x80002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x34004014) socket$inet6_sctp(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, 0x0, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000001d35f6c73bd883d0000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6000000}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0x3, 0x9, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7000000}}}, &(0x7f0000000680)='syzkaller\x00', 0x2, 0x1010, &(0x7f0000001880)=""/4112, 0x41100}, 0x94) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x8, 0x2008001, 0x1, 0x9, 0x0, 0xfffffe0000000001, 0xfa10, 0xffffffff}, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x355737d6d65d287a, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0xc4c85513, &(0x7f0000000040)={0x9, 0x2, 0x7, 0x0, 'syz0\x00', 0x33}) 5.364185284s ago: executing program 1 (id=248): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) syz_clone(0x11848200, &(0x7f0000000400)="e08fa9b08e", 0x5, 0x0, &(0x7f0000000340), &(0x7f00000002c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000180)={r2, r3}) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f00000011c0)={r2}) 5.106549322s ago: executing program 4 (id=249): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x2, 0xfa11, 0xffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x2141}, {r0, 0x1}], 0x2, 0x8000004) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xfbffff7f}}], 0x17fd147c801ae9af, 0xff00) 5.048026136s ago: executing program 3 (id=250): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ustat(0x801, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1e1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x5, 0x1, 0x0, 0xfdffffff, 0x120, 0x2000, 0xa8, r4, r5, 0x501, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000440)={0x50, 0xfffffffffffffff5, r3, {0x7, 0x29, 0x0, 0x686cc62, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffb}}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) ioctl$TIOCCONS(r6, 0x541d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) writev(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="857acd03", 0x4}], 0x1) 4.458135768s ago: executing program 1 (id=251): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, 0x0, 0x0, 0xfc19b39eb7bfb470, 0x0) recvmsg(r0, &(0x7f0000001d40)={&(0x7f0000001c80)=@ethernet={0x0, @dev}, 0x80, 0x0}, 0x10043) socket$can_j1939(0x1d, 0x2, 0x7) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000000100)={0x3, 0x2, 0x17, &(0x7f0000000040)=""/23}) prlimit64(0x0, 0xe, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x1ff, 0x7a, 0x0, 0x8000, 0x6, 0x3}, 0x0, &(0x7f0000000080)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x12, 0x80000003}, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000340)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, "fafc00"}, 0xfffffffd, 0x1, {0x0}}) 4.040107353s ago: executing program 0 (id=252): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x31, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300, 0x0, 0x4}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000002140)=0x1) prlimit64(0x0, 0xe, 0x0, 0x0) 3.782384052s ago: executing program 3 (id=253): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000004c0)={0x0, 0x76, "1487da1b8130e041e609a79bc33c057a9f0f3164cf8215174f96777ea4833a680d6bfe009e7b4696ab41d4eb6b592dc0b02710d537d4a352815f32724e27bb017bc7c64abeffe3b87e93e6e53bda6a9e82658f3a052b2a0ab06b47dffcd7a2ffbc76f2b35983afc15717f0f16bdd295ce6a4359fdd7d"}, &(0x7f00000005c0)=0x7e) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000000c0)='ip6gretap0\x00') r2 = socket(0x10, 0x80002, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) 3.606529167s ago: executing program 3 (id=254): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) lseek(r0, 0xffffffffffffff52, 0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r2 = syz_open_dev$admmidi(&(0x7f0000000140), 0x2, 0x2002) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10000) read$midi(r2, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x14e203, 0x0) r3 = socket(0x2, 0x3, 0x6) bind$inet(r3, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r3, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='ufs\x00', 0x210818, 0x0) sendto$inet(r3, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) r5 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffff9c, r5, 0x41, 0x1ff) 3.103496951s ago: executing program 1 (id=255): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setuid(0xee01) syz_clone3(&(0x7f0000000080)={0x901400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r1 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x100000000000000, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 2.992575311s ago: executing program 0 (id=256): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.871266603s ago: executing program 0 (id=257): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 2.633895757s ago: executing program 4 (id=258): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1dc}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000900), 0x10, 0x822000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000940)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000007880)=""/102400, 0x19000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000880)={{0xffffffffffffffff, &(0x7f0000000000)='fuse\x00', 0x101000, &(0x7f0000000040)={@align=0x3, {0x2, 0x4, 0x7ff, 0x6}}, 0x3, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x9}, 0x4, &(0x7f0000000800)=[{0x3, 0xfffffffb, &(0x7f0000000380)='\x00', &(0x7f00000004c0)='<', 0x1, 0x1a}, {0x3, 0x100, &(0x7f0000000500)='syz1\x00', &(0x7f0000000540)="ae450950fd05d39976dae1a75f55c54e07b451858fd275b2510d648703709c67182dcc282c3adf4273ca4b4886c7dc04dd8e456c22768e88cc970f28dac3c98a8c50c2f8155627041c6e7bbf205a85cab47e1c89f1ec3310cfc44193b8f7f7f4af0a86b275b357063783d7ff96684d734dcbdfed057691d9964b6183903081a1bf75aa8670d79f061b05ce71d4018e32d7c3326a", 0x94, 0x20}, {0x2, 0x40, &(0x7f0000000600)='/dev/cpu/#/msr\x00', &(0x7f0000000c40)="5059905c7cc6721fc066e11394dc51562e2193dd27eb79f76315cdcc148f9c650abe56866ee64b41e391bd9878e1d76302d5966a3b0d6dcc37bc57c72c87df7770d61697b72c16d5b706b80e734d323e194282b4a5c2df9b4f2a4b30e87dbd95a961d23f614d64c3f372f7d559785b3be75ab34f37cccfc2f1f9533de779e43a65a6726edc2125e41f9d5d53274557c754663179cf678cb98658dafbbcb27414c7a6bfcfb4f16d27f9b2d6", 0xab}, {0x2, 0xe08a, &(0x7f0000000700)='^\x00', &(0x7f0000000740)="b68b8e0bf205c8375dc19fd7e5a81a54fd271fe36df776d45a662e63102a45aac86f677e37a1b7a20cac2b1c6c19e89d2b8668c623fe94bc5bed464fd86a49a94058e856b1a6d09cb7299e86c3190be309fb731bb4d5d874e7cbd7fd79d6df37ef6bc7062910dfef613e10c856ebc87a29c8072b4d7e3ffb53ad42b35e17483650f9a25e6f99e28c6d910872ce4f366d1cb8eec5c59267cb57acb3a5fed4226be806d1a0cdb8ba1c84184b45e89aa7c899148ec5af54b4e64271", 0xba, 0x38}]}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000040)='hpfs\x00', 0x800, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', 0x0, 0x800, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000340)={r2, &(0x7f00000000c0)='syz1\x00', 0x303002, &(0x7f00000001c0)={@align=0x2d, {0x401, 0x3, 0x7, 0x7}}, 0x7fff, &(0x7f0000000280), &(0x7f0000000300)=0x2a}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x0, [0x806f, 0x0, 0x400000000002d5, 0x2, 0x6], [0x9d8, 0x5, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff0, 0x4a, 0x5, 0x6, 0xecf1, 0xdd, 0x5, 0x1, 0x2a6, 0x3, 0xc3c, 0x1, 0x8, 0x100000000, 0x4, 0xa51, 0x8, 0x401, 0x7ffffffffffffff, 0x7, 0x7, 0x82, 0x100, 0x5, 0x931, 0x1000000000000004, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x1, 0x9, 0x9, 0xfffffffffffffffb, 0x4, 0x0, 0x1, 0x4, 0x8, 0x8000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0x14, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x20000082c, 0x7ff, 0xe000000000000, 0xe4, 0xf, 0x0, 0x6, 0x22, 0xffffffffffffffff, 0x9, 0x401, 0x7ffffffffffffffc, 0x7, 0x7, 0x0, 0x6, 0x6, 0xb, 0x100000002, 0x4, 0x4, 0x7, 0x7, 0x7, 0x8, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0xfffffffffffffffc, 0x7, 0x4, 0x7, 0x406, 0x83, 0x6, 0x2, 0x5, 0x2000003, 0xdf, 0x7fffffff, 0x7, 0x11, 0x3]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) 2.532819424s ago: executing program 3 (id=259): syz_emit_ethernet(0x3a, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240), 0x22a00, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0xe8242, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x0, 0x1a77, 0x0, 0x1, 0x1ec}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x205c, 0x40, 0x2, 0x1ea}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9911, 0x80, 0x2, 0x1d5}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xce35, 0x400, 0x2, 0x296}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x437c, 0x800, 0x3, 0x3c3}}], 0x4, &(0x7f0000001780)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, '\x00', {0x1, 0x7a4, 0x0, &(0x7f0000000780)=@buf_512="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"}}, &(0x7f0000001800)) r5 = syz_io_uring_setup(0x2aee, &(0x7f0000001840)={0x0, 0x2521, 0x400, 0x2, 0x2f5}, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000001980)={0x0, 0x46fe, 0x40000, 0x1, 0x393}, &(0x7f0000001a00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1c58, 0x8000, 0x3, 0x42}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x50e6, 0x40, 0x0, 0x17e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcd55, 0x200, 0x1, 0x1a0}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3741, 0x1000, 0x3, 0x34f}}], 0x4, &(0x7f0000002c80)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, '\x00', {0x3, 0x846, 0x0, &(0x7f0000001c80)=@buf_max_buf="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"}}, &(0x7f0000002d00)) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r7, 0x5408, &(0x7f00000000c0)={0xf642, 0x20, 0x6, 0x9dfe, 0x11}) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0xfffffff9, 0x6, 0x16, "0062007d8200f7ffffff00"}) r8 = syz_open_pts(r7, 0x0) r9 = dup3(r8, r7, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000200)=0x17) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x0, 0x1c68, 0x0, 0x1, 0x29f, 0x0, r2}, &(0x7f0000002d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe6de, 0x0, 0x2, 0x199, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x907c, 0x4000, 0x2, 0x31b, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9349, 0xd37075ecce3a373, 0x2, 0x20b, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x434, 0x20000, 0x3, 0x212, 0x0, r6}}], 0x4, &(0x7f0000003fc0)={0x2e, 0x76, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x31}, 0x0, r10, '\x00', {0x3, 0x366, 0x0, &(0x7f0000002fc0)=@buf_512="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"}}, &(0x7f0000004040)) syz_usbip_server_init(0x1) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {}, 0x2}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 2.458763024s ago: executing program 2 (id=260): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4000000) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) openat$binderfs(0xffffffffffffff9c, 0x0, 0x806, 0x0) socket$inet6(0xa, 0x80002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet6_sctp(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, 0x0, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) 2.090639172s ago: executing program 1 (id=261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) syz_clone(0x11848200, &(0x7f0000000400)="e08fa9b08e", 0x5, 0x0, &(0x7f0000000340), &(0x7f00000002c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000180)={r2, r3}) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f00000011c0)={r2}) 1.521039662s ago: executing program 1 (id=262): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4000000) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) openat$binderfs(0xffffffffffffff9c, 0x0, 0x806, 0x0) socket$inet6(0xa, 0x80002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x34004014) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000001d35f6c73bd883d0000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6000000}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0x3, 0x9, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7000000}}}, &(0x7f0000000680)='syzkaller\x00', 0x2, 0x1010, &(0x7f0000001880)=""/4112, 0x41100}, 0x94) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x8, 0x2008001, 0x1, 0x9, 0x0, 0xfffffe0000000001, 0xfa10, 0xffffffff}, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x355737d6d65d287a, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0xc4c85513, &(0x7f0000000040)={0x9, 0x2, 0x7, 0x0, 'syz0\x00', 0x33}) 757.56684ms ago: executing program 0 (id=263): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1abe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x11, &(0x7f0000000200)=@string={0x11, 0x3, "6bfa2a2051712bba2077bcaf3bf885"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') 87.195243ms ago: executing program 3 (id=264): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) syz_emit_ethernet(0xca, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local, {[@lsrr={0x83, 0x3}, @generic={0x0, 0xd, "ee0dd9de36ed4bcc5b4e23"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@loopback=0x7f00002f}]}, @ssrr={0x89, 0xf, 0x0, [@private, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {}, {@broadcast}, {@loopback}, {@private}, {@multicast2}, {@broadcast}, {@empty}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) mknod$loop(0x0, 0xfff, 0x1) syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r3) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)={0x14, r4, 0xb1b, 0x70bd2a, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000780)={r5, 0xfffffffd, 0x4, 0x0, 0x2, [], [0x0, 0x0, 0x400, 0x9], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]}) 0s ago: executing program 2 (id=265): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000000204010100000000000000000c00000905000100040000004c54b3952d265909b2069771b36342d2db266e8ee24bb3e980f9bf6e39537ca36260c8a1d0dbf6b26bc7332c7415bface5cfb188525cea9c7e659478d58d3c6eb7e066eb8b2e0362f8536ffc27197869d4fa02de85ca2f6673a1cb84838c7d9641fbacb17f00325d480599aa135588e90ece3cba55e808e69c00"/165], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004804) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010428bd7000240004004400000008000300", @ANYRES32=r4, @ANYBLOB="0a001800030303030303020008005a"], 0x30}, 0x1, 0x0, 0x0, 0x44040800}, 0x0) r6 = syz_open_procfs(0x0, 0x0) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000070000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004400e1f000005000700880000004996bd3ee703b62a145bd6de802fea14bba80c26e8c14ef842b6082e76eb2dc96a92d5fd6645b74acb4a9ae19b2f7b6a95e1f4d99b3192f435fee37ce014c02ac04d60756626aecd7bcb92131a139d061fa2467a244c80392cbeaab2f95c760fb5f2003cf9ccc47b886a7856ef98d86da8fecd0499022b236daa37723e76ea79ca8d7b"], 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000000314010027bd7810fedbdf250900020073797a32000000000800410072786500140033006c6f00000000000000000000000000008c7e50774513da9e844de76dda4d28f11d8b54e677cae45ece15d009e4294609e3360116de070000000adb2f8991732caa131ab6a3814e9bb907b7281604cb57af34f3e9d35c58760f9ae784800645fba8811a5bfe6d23bc9870f6f6c13321fee3d63f534d71e812c9d3e20ce26de4e3aed8a223c2aa3b4074d42fda9daf1f27058b0000000019a95adc714a90232c744e62f28ae6a882dd1dba47128e"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet(0x2, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) setsockopt$inet_msfilter(r9, 0x0, 0x29, 0x0, 0x57) pipe2(&(0x7f0000000040), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000480)={0x14, 0x0, 0x0}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r10 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r10, 0x2219, 0x7721, 0x16, 0x0, 0x0) close(r8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x280100, 0x0) kernel console output (not intermixed with test programs): [ 54.045125][ T30] audit: type=1400 audit(1784467992.254:111): avc: denied { write } for pid=5461 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.091330][ T30] audit: type=1400 audit(1784467992.304:112): avc: denied { write } for pid=5472 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.851457][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 54.851472][ T30] audit: type=1400 audit(1784467993.064:119): avc: denied { write } for pid=5517 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.904914][ T30] audit: type=1400 audit(1784467993.114:120): avc: denied { write } for pid=5528 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.076067][ T30] audit: type=1400 audit(1784467993.294:121): avc: denied { write } for pid=5531 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.117931][ T30] audit: type=1400 audit(1784467993.334:122): avc: denied { write } for pid=5542 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.291589][ T30] audit: type=1400 audit(1784467993.504:123): avc: denied { write } for pid=5545 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.337882][ T30] audit: type=1400 audit(1784467993.554:124): avc: denied { write } for pid=5556 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.508827][ T30] audit: type=1400 audit(1784467993.724:125): avc: denied { write } for pid=5559 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.555814][ T30] audit: type=1400 audit(1784467993.764:126): avc: denied { write } for pid=5570 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.655193][ T30] audit: type=1400 audit(1784467994.864:127): avc: denied { write } for pid=5574 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.702980][ T30] audit: type=1400 audit(1784467994.914:128): avc: denied { write } for pid=5585 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.10.15' (ED25519) to the list of known hosts. [ 59.931372][ T30] audit: type=1400 audit(1784467998.144:129): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 59.955145][ T30] audit: type=1400 audit(1784467998.164:130): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.958315][ T5596] cgroup: Unknown subsys name 'net' [ 59.984190][ T30] audit: type=1400 audit(1784467998.194:131): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 60.119022][ T5596] cgroup: Unknown subsys name 'cpuset' [ 60.126703][ T5596] cgroup: Unknown subsys name 'rlimit' [ 60.235490][ T30] audit: type=1400 audit(1784467998.444:132): avc: denied { setattr } for pid=5596 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.269686][ T30] audit: type=1400 audit(1784467998.444:133): avc: denied { create } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.290477][ T30] audit: type=1400 audit(1784467998.454:134): avc: denied { write } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.311349][ T30] audit: type=1400 audit(1784467998.454:135): avc: denied { read } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.337958][ T30] audit: type=1400 audit(1784467998.464:136): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 60.358879][ T5598] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 60.367046][ T30] audit: type=1400 audit(1784467998.464:137): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 60.395369][ T30] audit: type=1400 audit(1784467998.584:138): avc: denied { relabelto } for pid=5598 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 61.335442][ T5596] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.465310][ T5612] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.475814][ T5619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.484366][ T5619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.493326][ T5619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.502196][ T5619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.503732][ T5624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.510074][ T5619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.517560][ T5624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.527026][ T5619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.531954][ T5624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.539558][ T5619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.550965][ T5627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.555024][ T5619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.559686][ T5627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.567090][ T5619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.577531][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.581826][ T5619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.587914][ T5627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.595272][ T5619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.601776][ T5624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.613578][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.620119][ T5627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.630688][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.638256][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.646491][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.582216][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.589820][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.597013][ T5608] bridge_slave_0: entered allmulticast mode [ 64.603741][ T5608] bridge_slave_0: entered promiscuous mode [ 64.612276][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.619478][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.626956][ T5608] bridge_slave_1: entered allmulticast mode [ 64.633621][ T5608] bridge_slave_1: entered promiscuous mode [ 64.687656][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.699287][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.778760][ T5608] team0: Port device team_slave_0 added [ 64.818344][ T5608] team0: Port device team_slave_1 added [ 64.863933][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.872230][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.898230][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.942833][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.950047][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.976752][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.094696][ T5608] hsr_slave_0: entered promiscuous mode [ 65.101466][ T5608] hsr_slave_1: entered promiscuous mode [ 65.174729][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.182374][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.189968][ T5610] bridge_slave_0: entered allmulticast mode [ 65.196796][ T5610] bridge_slave_0: entered promiscuous mode [ 65.209622][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.216907][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.224018][ T5622] bridge_slave_0: entered allmulticast mode [ 65.231023][ T5622] bridge_slave_0: entered promiscuous mode [ 65.255361][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.262644][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.270077][ T5610] bridge_slave_1: entered allmulticast mode [ 65.276892][ T5610] bridge_slave_1: entered promiscuous mode [ 65.287310][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.294414][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.302352][ T5622] bridge_slave_1: entered allmulticast mode [ 65.309179][ T5622] bridge_slave_1: entered promiscuous mode [ 65.341108][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.348318][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.355414][ T5609] bridge_slave_0: entered allmulticast mode [ 65.362267][ T5609] bridge_slave_0: entered promiscuous mode [ 65.393165][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.400376][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.407640][ T5609] bridge_slave_1: entered allmulticast mode [ 65.414277][ T5609] bridge_slave_1: entered promiscuous mode [ 65.428181][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.445613][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.466385][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.489633][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.510244][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.517577][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.524711][ T5623] bridge_slave_0: entered allmulticast mode [ 65.534767][ T5623] bridge_slave_0: entered promiscuous mode [ 65.543523][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.554352][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.579118][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.586652][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.593755][ T5623] bridge_slave_1: entered allmulticast mode [ 65.600865][ T5623] bridge_slave_1: entered promiscuous mode [ 65.628090][ T5610] team0: Port device team_slave_0 added [ 65.649349][ T5622] team0: Port device team_slave_0 added [ 65.662089][ T5610] team0: Port device team_slave_1 added [ 65.675429][ T5609] team0: Port device team_slave_0 added [ 65.682851][ T5609] team0: Port device team_slave_1 added [ 65.686705][ T5627] Bluetooth: hci1: command tx timeout [ 65.690286][ T5622] team0: Port device team_slave_1 added [ 65.694298][ T50] Bluetooth: hci4: command tx timeout [ 65.705387][ T5620] Bluetooth: hci2: command tx timeout [ 65.711257][ T5629] Bluetooth: hci0: command tx timeout [ 65.717217][ T5620] Bluetooth: hci3: command tx timeout [ 65.725434][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.758391][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.774563][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.782116][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.808032][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.824488][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.831498][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.848164][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.857551][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.859513][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.864435][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.874692][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.913746][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.932230][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.939870][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.966015][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.977421][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.984395][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.010755][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.039943][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.047157][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.073248][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.095377][ T5623] team0: Port device team_slave_0 added [ 66.128828][ T5623] team0: Port device team_slave_1 added [ 66.152373][ T5609] hsr_slave_0: entered promiscuous mode [ 66.158614][ T5609] hsr_slave_1: entered promiscuous mode [ 66.164905][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 66.170741][ T5609] Cannot create hsr debugfs directory [ 66.205865][ T5622] hsr_slave_0: entered promiscuous mode [ 66.212262][ T5622] hsr_slave_1: entered promiscuous mode [ 66.218435][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 66.224158][ T5622] Cannot create hsr debugfs directory [ 66.233161][ T5610] hsr_slave_0: entered promiscuous mode [ 66.239394][ T5610] hsr_slave_1: entered promiscuous mode [ 66.245252][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 66.251034][ T5610] Cannot create hsr debugfs directory [ 66.257938][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.264951][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.291009][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.315654][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.322781][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.349430][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.441076][ T5608] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.451521][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.477941][ T5608] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.490411][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.501166][ T5623] hsr_slave_0: entered promiscuous mode [ 66.508127][ T5623] hsr_slave_1: entered promiscuous mode [ 66.514090][ T5623] debugfs: 'hsr0' already exists in 'hsr' [ 66.519871][ T5623] Cannot create hsr debugfs directory [ 66.538373][ T5608] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.548563][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.568422][ T5608] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.579172][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.813748][ T5622] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.823256][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.831491][ T5622] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.840242][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.851616][ T5622] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.861368][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.877755][ T5622] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.888215][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.944767][ T5609] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.954449][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.967810][ T5609] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.979353][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.989718][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.005768][ T5609] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.014647][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.023033][ T5609] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.031676][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.090320][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.102264][ T5610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.112192][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.120009][ T5610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.129092][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.137389][ T5610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.145592][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.153902][ T5610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.162617][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.183991][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.191458][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.243545][ T1042] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.250698][ T1042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.308136][ T5623] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.318832][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.334468][ T5623] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.343691][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.351516][ T5623] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.360189][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.374159][ T5623] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.383554][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.410037][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.453423][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.482223][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.494388][ T1025] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.501492][ T1025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.523257][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.540702][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.555522][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.562628][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.584393][ T1025] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.591553][ T1025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.623413][ T1025] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.630584][ T1025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.651470][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.690175][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.697271][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.729137][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.736302][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.770829][ T5627] Bluetooth: hci1: command tx timeout [ 67.777257][ T5627] Bluetooth: hci3: command tx timeout [ 67.778685][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.783065][ T5620] Bluetooth: hci0: command tx timeout [ 67.792954][ T5629] Bluetooth: hci4: command tx timeout [ 67.795697][ T50] Bluetooth: hci2: command tx timeout [ 67.865241][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.914171][ T1025] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.921344][ T1025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.958648][ T1025] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.965792][ T1025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.189726][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.349080][ T5608] veth0_vlan: entered promiscuous mode [ 68.411436][ T5608] veth1_vlan: entered promiscuous mode [ 68.512562][ T5608] veth0_macvtap: entered promiscuous mode [ 68.544698][ T5608] veth1_macvtap: entered promiscuous mode [ 68.604603][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.651053][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.673412][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.684474][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.723204][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.768592][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.781142][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.806440][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.850081][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.905498][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.994285][ T5622] veth0_vlan: entered promiscuous mode [ 69.021424][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.021471][ T5622] veth1_vlan: entered promiscuous mode [ 69.033826][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.081533][ T5623] veth0_vlan: entered promiscuous mode [ 69.093645][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.102698][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.114686][ T5623] veth1_vlan: entered promiscuous mode [ 69.132206][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 69.132222][ T30] audit: type=1400 audit(1784468007.344:152): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/root/syzkaller.HrTlng/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 69.160392][ T5609] veth0_vlan: entered promiscuous mode [ 69.168091][ T30] audit: type=1400 audit(1784468007.344:153): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.195584][ T30] audit: type=1400 audit(1784468007.344:154): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/root/syzkaller.HrTlng/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 69.229447][ T30] audit: type=1400 audit(1784468007.344:155): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 69.235231][ T5610] veth0_vlan: entered promiscuous mode [ 69.253406][ T30] audit: type=1400 audit(1784468007.344:156): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/root/syzkaller.HrTlng/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 69.260251][ T5608] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.285138][ T30] audit: type=1400 audit(1784468007.354:157): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/root/syzkaller.HrTlng/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 69.327410][ T30] audit: type=1400 audit(1784468007.354:158): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 69.334469][ T5622] veth0_macvtap: entered promiscuous mode [ 69.347357][ T30] audit: type=1400 audit(1784468007.384:159): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 69.378002][ T30] audit: type=1400 audit(1784468007.384:160): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="gadgetfs" ino=6846 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 69.386313][ T5610] veth1_vlan: entered promiscuous mode [ 69.402396][ T30] audit: type=1400 audit(1784468007.384:161): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 69.438397][ T5622] veth1_macvtap: entered promiscuous mode [ 69.454963][ T5609] veth1_vlan: entered promiscuous mode [ 69.490289][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.511902][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.531535][ T5623] veth0_macvtap: entered promiscuous mode [ 69.546731][ T1120] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.557458][ T1120] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.569874][ T1120] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.583987][ T1120] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.595023][ T5610] veth0_macvtap: entered promiscuous mode [ 69.603165][ T5623] veth1_macvtap: entered promiscuous mode [ 69.603926][ T5801] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 69.619488][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.638600][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.659941][ T5610] veth1_macvtap: entered promiscuous mode [ 69.685106][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.729222][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.741055][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.751429][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.768225][ T5609] veth0_macvtap: entered promiscuous mode [ 69.814255][ T5609] veth1_macvtap: entered promiscuous mode [ 69.839304][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.846624][ T50] Bluetooth: hci4: command tx timeout [ 69.852039][ T5620] Bluetooth: hci1: command tx timeout [ 69.857927][ T5627] Bluetooth: hci2: command tx timeout [ 69.863362][ T4929] Bluetooth: hci0: command tx timeout [ 69.863383][ T5629] Bluetooth: hci3: command tx timeout [ 69.875493][ T1120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.888593][ T1120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.892445][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.948235][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.957707][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.967075][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.984984][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.994341][ T1120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.005123][ T1120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.005357][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.050945][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.090742][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.103643][ T1120] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.112586][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.124076][ T1120] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.155295][ T1120] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.174194][ T1120] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.204883][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.231152][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.316189][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.342561][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.450686][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.472384][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.560617][ T1120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.587098][ T1120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.640275][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.679844][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.778879][ T5796] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 71.452801][ T5816] vivid-008: disconnect [ 71.461417][ T5796] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 71.475537][ T5796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.485074][ T5796] usb 4-1: Product: syz [ 71.491650][ T5796] usb 4-1: Manufacturer: syz [ 71.496305][ T5796] usb 4-1: SerialNumber: syz [ 71.506079][ T187] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 71.981394][ T5629] Bluetooth: hci3: command tx timeout [ 71.981426][ T5620] Bluetooth: hci1: command tx timeout [ 71.987065][ T5627] Bluetooth: hci2: command tx timeout [ 71.992433][ T50] Bluetooth: hci4: command tx timeout [ 71.992460][ T50] Bluetooth: hci0: command tx timeout [ 72.022570][ T5796] usb 4-1: config 0 descriptor?? [ 72.118571][ T187] usb 3-1: unable to get BOS descriptor or descriptor too short [ 72.139523][ T5796] usb 4-1: Waiting for MOTU Microbook II to boot up... [ 72.148367][ T187] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.159102][ T5796] usb 4-1: failed setting the sample rate for Motu MicroBook II: -22 [ 72.167623][ T187] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 72.177931][ T5796] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 72.189718][ T187] usb 3-1: string descriptor 0 read error: -22 [ 72.197400][ T187] usb 3-1: New USB device found, idVendor=1235, idProduct=8208, bcdDevice= 0.40 [ 72.216892][ T187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.403265][ T5811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.403861][ T5615] usb 4-1: USB disconnect, device number 2 [ 73.440379][ T5828] FAULT_INJECTION: forcing a failure. [ 73.440379][ T5828] name failslab, interval 1, probability 0, space 0, times 1 [ 73.461895][ T5814] vivid-008: reconnect [ 73.476280][ T187] usb 3-1: Focusrite Clarett USB Mixer Driver enabled (pid=0x8208); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 73.494849][ T5811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.546758][ T187] usb 3-1: Error initialising Clarett USB Mixer Driver: -22 [ 73.583000][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: syz.0.9 Not tainted syzkaller #0 PREEMPT(full) [ 73.583026][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 73.583035][ T5828] Call Trace: [ 73.583041][ T5828] [ 73.583047][ T5828] dump_stack_lvl+0x100/0x190 [ 73.583074][ T5828] should_fail_ex.cold+0x5/0xa [ 73.583096][ T5828] should_failslab+0xc2/0x120 [ 73.583117][ T5828] __kmalloc_noprof+0xfc/0x820 [ 73.583134][ T5828] ? rcu_is_watching+0x12/0xc0 [ 73.583159][ T5828] ? tomoyo_realpath_from_path+0xb6/0x690 [ 73.583193][ T5828] tomoyo_realpath_from_path+0xb6/0x690 [ 73.583223][ T5828] tomoyo_mount_acl+0x1b6/0x8b0 [ 73.583245][ T5828] ? is_bpf_text_address+0x8a/0x1a0 [ 73.583265][ T5828] ? bpf_ksym_find+0x128/0x1c0 [ 73.583288][ T5828] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 73.583315][ T5828] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 73.583336][ T5828] ? kernel_text_address+0x8d/0x100 [ 73.583354][ T5828] ? unwind_get_return_address+0x59/0xa0 [ 73.583399][ T5828] ? tomoyo_domain+0xb2/0x150 [ 73.583415][ T5828] ? tomoyo_profile+0x47/0x60 [ 73.583432][ T5828] tomoyo_mount_permission+0x214/0x460 [ 73.583453][ T5828] ? tomoyo_mount_permission+0x1f6/0x460 [ 73.583477][ T5828] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 73.583513][ T5828] security_sb_mount+0xdd/0x270 [ 73.583537][ T5828] path_mount+0x158/0x23d0 [ 73.583563][ T5828] ? __pfx_path_mount+0x10/0x10 [ 73.583580][ T5828] ? lockdep_hardirqs_on+0x78/0x100 [ 73.583607][ T5828] ? putname+0xb1/0x110 [ 73.583621][ T5828] ? kmem_cache_free+0x127/0x6b0 [ 73.583653][ T5828] ? __x64_sys_mount+0x293/0x310 [ 73.583669][ T5828] __x64_sys_mount+0x293/0x310 [ 73.583690][ T5828] ? __pfx___x64_sys_mount+0x10/0x10 [ 73.583723][ T5828] do_syscall_64+0x115/0x870 [ 73.583738][ T5828] ? clear_bhb_loop+0x40/0x90 [ 73.583758][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.583774][ T5828] RIP: 0033:0x7f3fbf19de99 [ 73.583789][ T5828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.583804][ T5828] RSP: 002b:00007f3fc005d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 73.583821][ T5828] RAX: ffffffffffffffda RBX: 00007f3fbf425fa0 RCX: 00007f3fbf19de99 [ 73.583831][ T5828] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 73.583841][ T5828] RBP: 00007f3fc005d090 R08: 0000200000000100 R09: 0000000000000000 [ 73.583851][ T5828] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000001 [ 73.583861][ T5828] R13: 00007f3fbf426038 R14: 00007f3fbf425fa0 R15: 00007ffd69186568 [ 73.583884][ T5828] [ 73.584022][ T5828] ERROR: Out of memory at tomoyo_realpath_from_path. [ 73.836761][ T187] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 73.890588][ T187] usb 3-1: USB disconnect, device number 2 [ 74.147687][ T30] kauditd_printk_skb: 136 callbacks suppressed [ 74.147703][ T30] audit: type=1400 audit(1784468012.344:298): avc: denied { map } for pid=5836 comm="syz.1.12" path="socket:[8666]" dev="sockfs" ino=8666 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 74.320389][ T30] audit: type=1400 audit(1784468012.534:299): avc: denied { create } for pid=5845 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 74.519942][ T5850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15'. [ 74.658495][ T30] audit: type=1400 audit(1784468012.684:300): avc: denied { read write } for pid=5845 comm="syz.0.15" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 74.704275][ T30] audit: type=1400 audit(1784468012.694:301): avc: denied { open } for pid=5845 comm="syz.0.15" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 74.746812][ T30] audit: type=1400 audit(1784468012.914:302): avc: denied { read } for pid=5845 comm="syz.0.15" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 74.837534][ T30] audit: type=1400 audit(1784468012.914:303): avc: denied { open } for pid=5845 comm="syz.0.15" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 74.909664][ T30] audit: type=1400 audit(1784468013.024:304): avc: denied { create } for pid=5834 comm="syz.4.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.976411][ T30] audit: type=1400 audit(1784468013.054:305): avc: denied { bind } for pid=5834 comm="syz.4.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 75.026063][ T30] audit: type=1400 audit(1784468013.174:306): avc: denied { create } for pid=5852 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 75.069491][ T30] audit: type=1400 audit(1784468013.174:307): avc: denied { write } for pid=5852 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 75.899374][ T5861] process 'syz.0.18' launched './file2' with NULL argv: empty string added [ 75.972625][ T5864] hpfs: Bad magic ... probably not HPFS [ 76.370360][ T5874] comedi comedi0: 8255: I/O base address not correctly aligned [ 76.440957][ T187] IPVS: starting estimator thread 0... [ 76.576832][ T5876] IPVS: using max 45 ests per chain, 108000 per kthread [ 78.114674][ T5887] Zero length message leads to an empty skb [ 78.438526][ T5900] hpfs: Bad magic ... probably not HPFS [ 78.456165][ T187] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.649800][ T187] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.673538][ T187] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.696566][ T187] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 78.723629][ T187] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 78.739758][ T5906] binder_alloc: 5905: pid 5905 spamming oneway? 1 buffers allocated for a total size of 4096 [ 78.762051][ T187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.799737][ T187] usb 5-1: config 0 descriptor?? [ 79.308470][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 79.308487][ T30] audit: type=1400 audit(1784468017.524:350): avc: denied { setopt } for pid=5882 comm="syz.4.24" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.412371][ T5915] netlink: 'syz.3.33': attribute type 5 has an invalid length. [ 79.784778][ T187] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 79.981185][ T5923] __vm_enough_memory: pid: 5923, comm: syz.1.34, bytes: 21200135512064 not enough memory for the allocation [ 80.091302][ T5925] netlink: 56 bytes leftover after parsing attributes in process `syz.2.36'. [ 80.104741][ T30] audit: type=1400 audit(1784468018.304:351): avc: denied { write } for pid=5921 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.194048][ T30] audit: type=1400 audit(1784468018.304:352): avc: denied { nlmsg_write } for pid=5921 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.237250][ T5720] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.320635][ T804] usb 5-1: USB disconnect, device number 2 [ 80.427543][ T5720] usb 1-1: Using ep0 maxpacket: 8 [ 80.443053][ T5720] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 80.458532][ T5720] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 80.472606][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.481957][ T5720] usb 1-1: Product: syz [ 80.501061][ T5720] usb 1-1: Manufacturer: syz [ 80.511891][ T5720] usb 1-1: SerialNumber: syz [ 80.533311][ T5720] usb 1-1: config 0 descriptor?? [ 80.555594][ T30] audit: type=1400 audit(1784468018.764:353): avc: denied { watch_mount watch_reads } for pid=5933 comm="syz.2.40" path="/proc/30/stat" dev="proc" ino=9451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 80.555599][ T5720] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 80.662399][ T5720] usb 1-1: setting power ON [ 80.679196][ T5720] dvb-usb: bulk message failed: -22 (2/0) [ 80.707963][ T5720] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 80.743228][ T5720] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 80.762070][ T30] audit: type=1400 audit(1784468018.974:354): avc: denied { append } for pid=5919 comm="syz.0.35" name="i2c-1" dev="devtmpfs" ino=2805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 80.785785][ T5720] usb 1-1: media controller created [ 80.800148][ T30] audit: type=1400 audit(1784468019.014:355): avc: denied { mount } for pid=5919 comm="syz.0.35" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 80.821195][ T5720] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 80.838296][ T30] audit: type=1400 audit(1784468019.044:356): avc: denied { unlink } for pid=5919 comm="syz.0.35" name="#1" dev="tmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 80.865486][ T5920] dvb-usb: bulk message failed: -22 (3/0) [ 80.872275][ T5920] dvb-usb: bulk message failed: -22 (3/0) [ 80.890394][ T30] audit: type=1400 audit(1784468019.054:357): avc: denied { mount } for pid=5919 comm="syz.0.35" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 80.990903][ T5720] usb 1-1: selecting invalid altsetting 6 [ 81.008046][ T5720] usb 1-1: digital interface selection failed (-22) [ 81.025721][ T5720] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 81.079223][ T5720] usb 1-1: setting power OFF [ 81.107358][ T5920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.118305][ T5720] dvb-usb: bulk message failed: -22 (2/0) [ 81.131189][ T5720] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 81.154746][ T5920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.180968][ T5720] (NULL device *): no alternate interface [ 81.185628][ T5943] capability: warning: `syz.1.42' uses deprecated v2 capabilities in a way that may be insecure [ 81.204781][ T30] audit: type=1400 audit(1784468019.384:358): avc: denied { read write } for pid=5939 comm="syz.1.42" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 81.290421][ T30] audit: type=1400 audit(1784468019.384:359): avc: denied { open } for pid=5939 comm="syz.1.42" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 81.502805][ T5720] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 81.560537][ T5720] usb 1-1: USB disconnect, device number 2 [ 82.079369][ T5956] random: crng reseeded on system resumption [ 82.108282][ T5627] Bluetooth: hci0: Malformed LE Event: 0x0d [ 84.329340][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 84.329355][ T30] audit: type=1400 audit(1784468022.544:375): avc: denied { relabelto } for pid=5976 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 84.676112][ T5615] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.856178][ T5615] usb 2-1: Using ep0 maxpacket: 8 [ 84.878117][ T5615] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 84.900208][ T5615] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.913762][ T5615] usb 2-1: Product: syz [ 84.935992][ T5615] usb 2-1: Manufacturer: syz [ 84.951319][ T5615] usb 2-1: SerialNumber: syz [ 84.981664][ T5615] usb 2-1: config 0 descriptor?? [ 85.015000][ T5615] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 85.486247][ T30] audit: type=1400 audit(1784468023.464:376): avc: denied { create } for pid=5984 comm="syz.0.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 85.564486][ T30] audit: type=1400 audit(1784468023.474:377): avc: denied { setopt } for pid=5984 comm="syz.0.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 85.628259][ T30] audit: type=1400 audit(1784468023.754:378): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 85.954739][ T30] audit: type=1400 audit(1784468024.164:379): avc: denied { create } for pid=5991 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 85.991312][ T30] audit: type=1400 audit(1784468024.164:380): avc: denied { connect } for pid=5991 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 86.029096][ T30] audit: type=1400 audit(1784468024.184:382): avc: denied { name_bind } for pid=5996 comm="syz.2.58" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 86.050727][ T5748] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 86.062971][ T5998] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 86.212076][ T30] audit: type=1400 audit(1784468024.164:381): avc: denied { write } for pid=5991 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 86.381548][ T24] cfg80211: failed to load regulatory.db [ 86.403342][ T5748] usb 5-1: not running at top speed; connect to a high speed hub [ 86.459743][ T5748] usb 5-1: config 45 has an invalid interface number: 2 but max is 0 [ 86.517387][ T6003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.59'. [ 86.628348][ T30] audit: type=1400 audit(1784468024.424:383): avc: denied { read write } for pid=5622 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.717013][ T5979] ======================================================= [ 86.717013][ T5979] WARNING: The mand mount option has been deprecated and [ 86.717013][ T5979] and is ignored by this kernel. Remove the mand [ 86.717013][ T5979] option from the mount to silence this warning. [ 86.717013][ T5979] ======================================================= [ 86.755203][ T30] audit: type=1400 audit(1784468024.424:384): avc: denied { open } for pid=5622 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.867093][ T5748] usb 5-1: config 45 has no interface number 0 [ 86.878338][ T5748] usb 5-1: config 45 interface 2 has no altsetting 0 [ 86.899481][ T5748] usb 5-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=30.eb [ 86.916188][ T5615] gspca_sonixj: i2c_w8 err -110 [ 86.936232][ T5748] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.953116][ T5748] usb 5-1: Product: syz [ 86.961411][ T5748] usb 5-1: Manufacturer: syz [ 86.980729][ T5748] usb 5-1: SerialNumber: syz [ 87.006047][ T5615] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 87.052440][ T5615] usb 2-1: USB disconnect, device number 2 [ 87.295115][ T5748] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 87.315026][ T5748] dvb-usb: bulk message failed: -22 (3/0) [ 87.358712][ T5748] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 87.391663][ T5748] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 87.418056][ T5748] usb 5-1: media controller created [ 87.430715][ T5748] dvb-usb: bulk message failed: -22 (5/0) [ 87.446862][ T5748] dvb-usb: MAC address reading failed. [ 87.457708][ T5748] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 87.502507][ T5748] dvb-usb: bulk message failed: -22 (6/0) [ 87.524033][ T5748] dvb-usb: bulk message failed: -22 (6/0) [ 87.539229][ T5748] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 87.567987][ T5748] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 87.627878][ T5748] dvb-usb: schedule remote query interval to 100 msecs. [ 87.651441][ T5748] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 87.685766][ T5748] usb 5-1: USB disconnect, device number 3 [ 87.820864][ T5748] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 88.747683][ T6042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.71'. [ 89.113681][ T6043] Bluetooth: MGMT ver 1.23 [ 89.223237][ T6050] comedi comedi0: 8255: I/O base address not correctly aligned [ 89.268684][ T5615] IPVS: starting estimator thread 0... [ 89.426928][ T6051] IPVS: using max 42 ests per chain, 100800 per kthread [ 90.321992][ T6060] netlink: 20 bytes leftover after parsing attributes in process `syz.1.77'. [ 90.398730][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 90.398782][ T30] audit: type=1400 audit(1784468028.583:406): avc: denied { checkpoint_restore } for pid=6052 comm="syz.4.75" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 90.456240][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 91.154174][ T30] audit: type=1400 audit(1784468028.583:407): avc: denied { execute } for pid=6052 comm="syz.4.75" name="file0" dev="tmpfs" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.240518][ T30] audit: type=1400 audit(1784468029.023:408): avc: denied { write } for pid=6052 comm="syz.4.75" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 92.410589][ T6012] udevd[6012]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 92.475768][ T6012] udevd[6012]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 92.585997][ T5720] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.671556][ T30] audit: type=1400 audit(1784468030.883:409): avc: denied { mount } for pid=6084 comm="syz.3.84" name="/" dev="ramfs" ino=9174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 92.726908][ T30] audit: type=1400 audit(1784468030.943:410): avc: denied { mounton } for pid=6084 comm="syz.3.84" path="/" dev="ramfs" ino=9174 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 92.755421][ T5720] usb 2-1: Using ep0 maxpacket: 16 [ 92.771520][ T5720] usb 2-1: config 0 has no interfaces? [ 92.781519][ T5720] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 92.801349][ T30] audit: type=1400 audit(1784468030.983:411): avc: denied { create } for pid=6080 comm="syz.2.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 92.834653][ T5720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.857647][ T5720] usb 2-1: config 0 descriptor?? [ 92.905637][ T30] audit: type=1400 audit(1784468030.983:412): avc: denied { ioctl } for pid=6080 comm="syz.2.79" path="socket:[9783]" dev="sockfs" ino=9783 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 93.003503][ T30] audit: type=1400 audit(1784468031.213:413): avc: denied { create } for pid=6091 comm="syz.0.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 93.026029][ T6092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.86'. [ 93.041847][ T6092] syz.0.86 uses obsolete (PF_INET,SOCK_PACKET) [ 93.144559][ T30] audit: type=1400 audit(1784468031.243:414): avc: denied { setopt } for pid=6091 comm="syz.0.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 93.179536][ T30] audit: type=1400 audit(1784468031.243:415): avc: denied { write } for pid=6091 comm="syz.0.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 93.809197][ T6098] comedi comedi0: 8255: I/O base address not correctly aligned [ 95.415644][ T5713] usb 2-1: USB disconnect, device number 3 [ 96.644312][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 96.644331][ T30] audit: type=1400 audit(1784468034.853:424): avc: denied { append } for pid=6124 comm="syz.0.97" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 96.781740][ T6130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.99'. [ 96.984765][ T6134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.107209][ T6133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.612650][ T6136] 9p: Bad value for 'port' [ 97.617265][ T30] audit: type=1400 audit(1784468035.823:425): avc: denied { mounton } for pid=6135 comm="syz.1.100" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 98.878124][ T6139] netlink: 88 bytes leftover after parsing attributes in process `syz.1.101'. [ 98.916356][ T30] audit: type=1400 audit(1784468037.123:426): avc: denied { sqpoll } for pid=6141 comm="syz.2.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 99.199713][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.101'. [ 99.592910][ T30] audit: type=1400 audit(1784468037.803:427): avc: denied { map } for pid=6144 comm="syz.0.104" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 99.636115][ T5748] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 99.885355][ T30] audit: type=1400 audit(1784468038.093:428): avc: denied { ioctl } for pid=6144 comm="syz.0.104" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x5609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 99.916000][ T5748] usb 5-1: Using ep0 maxpacket: 16 [ 99.934238][ T5748] usb 5-1: config 0 has no interfaces? [ 99.952725][ T5748] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 100.025289][ T6158] netlink: 260 bytes leftover after parsing attributes in process `syz.3.105'. [ 100.457785][ T5748] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.495851][ T5748] usb 5-1: config 0 descriptor?? [ 100.556083][ T5615] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 100.607123][ T30] audit: type=1400 audit(1784468038.823:429): avc: denied { setopt } for pid=6159 comm="syz.1.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.696338][ T6162] xt_NFQUEUE: number of total queues is 0 [ 100.708640][ T30] audit: type=1400 audit(1784468038.843:430): avc: denied { ioctl } for pid=6159 comm="syz.1.107" path="socket:[10506]" dev="sockfs" ino=10506 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.736676][ T5615] usb 1-1: Using ep0 maxpacket: 32 [ 100.747461][ T5615] usb 1-1: config 3 has an invalid interface number: 79 but max is 0 [ 100.757710][ T5615] usb 1-1: config 3 has no interface number 0 [ 100.824149][ T5615] usb 1-1: config 3 interface 79 altsetting 5 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 100.825197][ T6163] batadv_slave_1: entered promiscuous mode [ 101.103879][ T5615] usb 1-1: config 3 interface 79 has no altsetting 0 [ 101.117923][ T6161] batadv_slave_1: left promiscuous mode [ 101.129457][ T5615] usb 1-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=fc.21 [ 101.143577][ T5615] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.156012][ T5615] usb 1-1: Product: syz [ 101.160278][ T5615] usb 1-1: Manufacturer: syz [ 101.165127][ T5615] usb 1-1: SerialNumber: syz [ 101.299300][ T30] audit: type=1400 audit(1784468039.513:431): avc: denied { write } for pid=6169 comm="syz.2.110" laddr=fe80::940f:7fff:fe8e:bccc lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.525448][ T6174] comedi comedi0: 8255: I/O base address not correctly aligned [ 101.594646][ T5713] IPVS: starting estimator thread 0... [ 101.655560][ T6177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.113'. [ 101.705935][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.736154][ T6176] IPVS: using max 48 ests per chain, 115200 per kthread [ 102.438019][ T5615] kobil_sct 1-1:3.79: KOBIL USB smart card terminal converter detected [ 102.454452][ T5713] usb 5-1: USB disconnect, device number 4 [ 102.464454][ T5615] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 102.490140][ T5615] usb 1-1: USB disconnect, device number 3 [ 102.520209][ T5615] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 102.534001][ T5615] kobil_sct 1-1:3.79: device disconnected [ 102.846255][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 103.106302][ T5713] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 103.253772][ T30] audit: type=1400 audit(1784468041.463:432): avc: denied { read write } for pid=6192 comm="syz.3.118" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 103.257023][ T5713] usb 3-1: Using ep0 maxpacket: 16 [ 103.395185][ T30] audit: type=1400 audit(1784468041.493:433): avc: denied { open } for pid=6192 comm="syz.3.118" path="/dev/uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 103.503410][ T6195] warning: `syz.3.118' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.055048][ T5713] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 104.063679][ T5713] usb 3-1: config 0 has no interface number 0 [ 104.069864][ T5713] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 104.083415][ T5713] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 104.196855][ T5713] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 104.298148][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.326064][ T5713] usb 3-1: Product: syz [ 104.339123][ T5713] usb 3-1: Manufacturer: syz [ 104.409502][ T5713] usb 3-1: SerialNumber: syz [ 104.413677][ T5627] Bluetooth: hci2: Malformed LE Event: 0x0d [ 104.417667][ T6202] random: crng reseeded on system resumption [ 104.684972][ T5713] usb 3-1: config 0 descriptor?? [ 104.706252][ T6185] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 104.713497][ T6185] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 104.922394][ T6185] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 104.929792][ T6185] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 105.076597][ T6198] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 106.583690][ T5713] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 106.663040][ T5713] asix 3-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 106.682461][ T5720] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 106.745271][ T5713] asix 3-1:0.34: probe with driver asix failed with error -71 [ 106.753317][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.126'. [ 106.827754][ T5713] usb 3-1: USB disconnect, device number 3 [ 106.889054][ T5720] usb 4-1: Using ep0 maxpacket: 16 [ 106.933287][ T5720] usb 4-1: config 0 has no interfaces? [ 106.945976][ T5720] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 106.959745][ T5720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.080306][ T5720] usb 4-1: config 0 descriptor?? [ 108.318140][ T30] audit: type=1400 audit(1784468046.523:434): avc: denied { map } for pid=6247 comm="syz.4.129" path="socket:[11308]" dev="sockfs" ino=11308 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 108.364694][ T30] audit: type=1400 audit(1784468046.523:435): avc: denied { accept } for pid=6247 comm="syz.4.129" path="socket:[11308]" dev="sockfs" ino=11308 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 109.151851][ T24] usb 4-1: USB disconnect, device number 3 [ 109.264132][ T6254] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8208 sclass=netlink_route_socket pid=6254 comm=syz.4.131 [ 109.315976][ T30] audit: type=1400 audit(1784468047.493:436): avc: denied { create } for pid=6251 comm="syz.2.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 109.493403][ T30] audit: type=1400 audit(1784468047.493:437): avc: denied { bind } for pid=6251 comm="syz.2.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 109.536919][ T5615] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 109.574897][ T6261] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 109.608193][ T30] audit: type=1400 audit(1784468047.633:438): avc: denied { ioctl } for pid=6259 comm="syz.3.132" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 109.677187][ T30] audit: type=1400 audit(1784468047.783:439): avc: denied { read } for pid=6259 comm="syz.3.132" path="socket:[10746]" dev="sockfs" ino=10746 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 109.754423][ T5615] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 109.792715][ T5615] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.930352][ T5615] usb 1-1: Product: syz [ 109.950370][ T5615] usb 1-1: Manufacturer: syz [ 110.022948][ T30] audit: type=1400 audit(1784468048.223:440): avc: denied { create } for pid=6265 comm="syz.1.135" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 110.432307][ T5615] usb 1-1: SerialNumber: syz [ 110.474671][ T30] audit: type=1400 audit(1784468048.303:441): avc: denied { read } for pid=6265 comm="syz.1.135" name="file0" dev="tmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 110.502293][ T30] audit: type=1400 audit(1784468048.303:442): avc: denied { open } for pid=6265 comm="syz.1.135" path="/25/file0" dev="tmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 110.533523][ T5615] usb 1-1: config 0 descriptor?? [ 110.587428][ T5615] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 110.819295][ T30] audit: type=1400 audit(1784468049.013:443): avc: denied { unlink } for pid=5608 comm="syz-executor" name="file0" dev="tmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 110.862359][ T5615] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 111.406718][ T5615] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 111.445666][ T5615] usb 1-1: media controller created [ 111.500337][ T5615] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 111.526466][ T5720] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 111.862495][ T5615] DVB: Unable to find symbol mt352_attach() [ 111.974502][ T5615] DVB: Unable to find symbol nxt6000_attach() [ 111.984832][ T5615] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 112.010940][ T5615] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 112.053693][ T5615] dvb-usb: schedule remote query interval to 1000 msecs. [ 112.066375][ T5615] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 112.086043][ T5615] dvb-usb: bulk message failed: -22 (7/0) [ 112.106061][ T5615] dvb-usb: bulk message failed: -22 (7/0) [ 112.126256][ T5713] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 112.208696][ T5615] usb 1-1: USB disconnect, device number 4 [ 112.238533][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.140'. [ 112.390189][ T5713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.419569][ T5713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.430646][ T5713] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 112.453766][ T5713] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 112.465410][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.492598][ T5713] usb 4-1: config 0 descriptor?? [ 112.543486][ T5615] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 113.324877][ T5713] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 113.608067][ T5713] usb 4-1: USB disconnect, device number 4 [ 113.650705][ T6298] fido_id[6298]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 113.676935][ T5615] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 113.807421][ T5720] usb 5-1: unable to get BOS descriptor or descriptor too short [ 113.818517][ T5720] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 113.829295][ T5720] usb 5-1: can't read configurations, error -71 [ 113.916194][ T5615] usb 1-1: Using ep0 maxpacket: 16 [ 114.021678][ T5615] usb 1-1: config 0 has no interfaces? [ 114.027826][ T5615] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 114.046679][ T5627] Bluetooth: hci0: Malformed LE Event: 0x0d [ 114.047025][ T6307] random: crng reseeded on system resumption [ 114.052853][ T5615] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.237967][ T5615] usb 1-1: config 0 descriptor?? [ 114.392719][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 114.392735][ T30] audit: type=1400 audit(1784468052.603:446): avc: denied { connect } for pid=6310 comm="syz.1.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 114.421033][ T6311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.146'. [ 114.785997][ T5615] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 114.928596][ T30] audit: type=1400 audit(1784468053.143:447): avc: denied { ioctl } for pid=6320 comm="syz.4.148" path="socket:[11434]" dev="sockfs" ino=11434 ioctlcmd=0x42c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.967494][ T5615] usb 2-1: Using ep0 maxpacket: 16 [ 114.993363][ T5615] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.994863][ T30] audit: type=1400 audit(1784468053.203:448): avc: denied { mount } for pid=6320 comm="syz.4.148" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 115.030888][ T30] audit: type=1400 audit(1784468053.243:449): avc: denied { unmount } for pid=6320 comm="syz.4.148" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 115.052054][ T6321] netlink: 28 bytes leftover after parsing attributes in process `syz.4.148'. [ 115.077593][ T5615] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 115.116879][ T5615] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 115.147218][ T5615] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 115.170394][ T5615] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 115.200415][ T5615] usb 2-1: Manufacturer: syz [ 115.231889][ T5615] usb 2-1: config 0 descriptor?? [ 115.297332][ T30] audit: type=1400 audit(1784468053.513:450): avc: denied { read } for pid=6325 comm="syz.4.150" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 115.327653][ T30] audit: type=1400 audit(1784468053.513:451): avc: denied { open } for pid=6325 comm="syz.4.150" path="/27/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 115.329270][ T6327] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 115.361670][ T6327] block device autoloading is deprecated and will be removed. [ 115.458700][ T6311] binder: 6310:6311 ioctl c0306201 200000000040 returned -22 [ 115.483048][ T30] audit: type=1400 audit(1784468053.673:452): avc: denied { write } for pid=6310 comm="syz.1.146" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 115.546033][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.152'. [ 115.876174][ T30] audit: type=1400 audit(1784468053.903:453): avc: denied { create } for pid=6332 comm="syz.3.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 115.975637][ T30] audit: type=1400 audit(1784468053.913:454): avc: denied { getopt } for pid=6332 comm="syz.3.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 116.027757][ T5748] usb 1-1: USB disconnect, device number 5 [ 117.314965][ T5713] usb 2-1: USB disconnect, device number 4 [ 117.958961][ T6356] syzkaller0: entered promiscuous mode [ 117.965282][ T6356] syzkaller0: entered allmulticast mode [ 117.977332][ T30] audit: type=1400 audit(1784468056.193:455): avc: denied { write } for pid=6355 comm="syz.1.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 118.365660][ T6362] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: 1 [ 118.368159][ T6366] No such timeout policy "syz1" [ 118.379577][ T5615] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 118.387886][ T6362] ref_ctr increment failed for inode: 0xbf offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807a456600 [ 118.389571][ T6362] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: -1 [ 118.431820][ T6365] netlink: 'syz.1.162': attribute type 10 has an invalid length. [ 118.458827][ T6362] ref_ctr decrement failed for inode: 0xbf offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807a456600 [ 118.471523][ T6365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.482086][ T6365] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 118.491137][ T6362] uprobe: syz.4.163:6362 failed to unregister, leaking uprobe [ 118.532584][ T6367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.547631][ T5615] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.558809][ T5615] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.573931][ T6367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.585386][ T5615] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 118.612943][ T6367] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 118.618669][ T5615] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.651676][ T5615] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.681677][ T5615] usb 4-1: config 0 descriptor?? [ 118.686071][ T6367] bond0 (unregistering): Released all slaves [ 119.007796][ T6375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.166'. [ 119.076174][ T5720] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 119.219686][ T5615] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 119.233574][ T5720] usb 3-1: Using ep0 maxpacket: 16 [ 119.243293][ T5720] usb 3-1: config 0 has no interfaces? [ 119.251597][ T5720] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 119.270915][ T5720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.290975][ T5720] usb 3-1: config 0 descriptor?? [ 119.429289][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 119.429303][ T30] audit: type=1400 audit(1784468057.643:460): avc: denied { bind } for pid=6379 comm="syz.4.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 119.459084][ T6380] netlink: 68 bytes leftover after parsing attributes in process `syz.4.167'. [ 119.807131][ T5748] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 119.925734][ T30] audit: type=1400 audit(1784468058.133:461): avc: denied { setopt } for pid=6388 comm="syz.0.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 119.947395][ T5629] Bluetooth: hci5: sending frame failed (-49) [ 119.955367][ T5627] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 119.976963][ T5748] usb 5-1: Using ep0 maxpacket: 16 [ 119.984793][ T5748] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 120.004845][ T5748] usb 5-1: config 0 has no interface number 0 [ 120.017680][ T5748] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.029019][ T5748] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.039715][ T5748] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 120.050605][ T5748] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.075846][ T5748] usb 5-1: config 0 descriptor?? [ 120.246149][ T5713] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 120.416804][ T5713] usb 1-1: Using ep0 maxpacket: 32 [ 120.435424][ T5713] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 120.446291][ T5713] usb 1-1: config 0 has no interface number 0 [ 120.490492][ T5713] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 120.541960][ T6392] kernel profiling enabled (shift: 9) [ 120.724538][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.748673][ T5713] usb 1-1: Product: syz [ 120.758652][ T5713] usb 1-1: Manufacturer: syz [ 120.769495][ T5713] usb 1-1: SerialNumber: syz [ 120.783940][ T5713] usb 1-1: config 0 descriptor?? [ 120.803499][ T5713] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 120.824573][ T5713] usb 1-1: selecting invalid altsetting 1 [ 120.836284][ T5713] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 120.850763][ T6380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.860593][ T6380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.871190][ T5748] usbhid 5-1:0.1: can't add hid device: -71 [ 120.881954][ T5748] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 120.901680][ T5713] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 120.935482][ T5748] usb 5-1: USB disconnect, device number 7 [ 120.943698][ T5713] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 120.966830][ T5713] usb 1-1: media controller created [ 120.987791][ T5713] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.327339][ T5713] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 121.349312][ T5713] zl10353_read_register: readreg error (reg=127, ret==-71) [ 121.373763][ T5713] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 121.434909][ T5713] usb 1-1: USB disconnect, device number 6 [ 121.550827][ T6409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.177'. [ 121.692584][ T5796] usb 4-1: USB disconnect, device number 5 [ 121.786087][ T5720] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 121.849322][ T5615] usb 3-1: USB disconnect, device number 4 [ 121.977502][ T5720] usb 2-1: Using ep0 maxpacket: 8 [ 121.990896][ T6418] syzkaller0: entered promiscuous mode [ 122.001946][ T30] audit: type=1400 audit(1784468060.213:462): avc: denied { read } for pid=6420 comm="syz.0.181" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 122.027652][ T6418] syzkaller0: entered allmulticast mode [ 122.059295][ T5720] usb 2-1: unable to get BOS descriptor or descriptor too short [ 122.090705][ T30] audit: type=1400 audit(1784468060.213:463): avc: denied { open } for pid=6420 comm="syz.0.181" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 122.090868][ T5720] usb 2-1: config 4 interface 0 has no altsetting 0 [ 122.169580][ T5720] usb 2-1: string descriptor 0 read error: -22 [ 122.178531][ T5720] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 122.194507][ T30] audit: type=1400 audit(1784468060.263:464): avc: denied { accept } for pid=6415 comm="syz.3.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 122.225147][ T5720] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 122.274215][ T5720] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 122.295734][ T5720] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 122.319762][ T5720] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 122.353822][ T5720] usb 2-1: media controller created [ 122.421253][ T5720] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 122.549960][ T5720] zl10353_read_register: readreg error (reg=127, ret==0) [ 123.047523][ T6433] netlink: 20 bytes leftover after parsing attributes in process `syz.3.182'. [ 123.129606][ T5796] usb 2-1: USB disconnect, device number 5 [ 123.183672][ T30] audit: type=1400 audit(1784468061.393:465): avc: denied { name_connect } for pid=6436 comm="syz.3.184" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 123.321136][ T6437] netlink: 248 bytes leftover after parsing attributes in process `syz.3.184'. [ 123.470034][ T6443] mmap: syz.2.185 (6443) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 123.886016][ T5720] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 124.105084][ T5720] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.117259][ T5720] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.192273][ T6450] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 124.201093][ T6450] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 124.209912][ T6450] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 124.215092][ T30] audit: type=1400 audit(1784468062.403:466): avc: denied { mounton } for pid=6445 comm="syz.3.186" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 124.241318][ T6450] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 124.551960][ T5720] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 124.599902][ T5720] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 124.601372][ T5796] IPVS: starting estimator thread 0... [ 124.631689][ T5720] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.658565][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.189'. [ 124.668325][ T5720] usb 5-1: config 0 descriptor?? [ 124.736624][ T6456] IPVS: using max 42 ests per chain, 100800 per kthread [ 124.926033][ T5796] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 124.935025][ T30] audit: type=1400 audit(1784468063.143:467): avc: denied { read } for pid=6462 comm="syz.3.191" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 124.966292][ T30] audit: type=1400 audit(1784468063.143:468): avc: denied { open } for pid=6462 comm="syz.3.191" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 124.991727][ T30] audit: type=1400 audit(1784468063.173:469): avc: denied { ioctl } for pid=6462 comm="syz.3.191" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 125.190757][ T5796] usb 3-1: LPM exit latency is zeroed, disabling LPM. [ 125.365579][ T5720] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 125.384308][ T5796] usb 3-1: config 129 has an invalid interface number: 176 but max is 0 [ 125.399673][ T5796] usb 3-1: config 129 has no interface number 0 [ 125.406210][ T30] audit: type=1400 audit(1784468063.293:470): avc: denied { watch watch_reads } for pid=6462 comm="syz.3.191" path="/46" dev="tmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 125.431829][ T5796] usb 3-1: config 129 interface 176 has no altsetting 0 [ 125.452033][ T5796] usb 3-1: string descriptor 0 read error: -22 [ 125.458572][ T5796] usb 3-1: New USB device found, idVendor=19d2, idProduct=0412, bcdDevice=69.83 [ 125.480240][ T5796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.543092][ T5796] option 3-1:129.176: GSM modem (1-port) converter detected [ 125.745859][ T5796] usb 3-1: USB disconnect, device number 5 [ 125.754337][ T5796] option 3-1:129.176: device disconnected [ 127.056223][ T5720] usb 5-1: reset high-speed USB device number 8 using dummy_hcd [ 127.077569][ T30] audit: type=1400 audit(1784468065.253:471): avc: denied { ioctl } for pid=6487 comm="syz.3.196" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 127.318359][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.348421][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.434049][ T30] audit: type=1400 audit(1784468065.473:472): avc: denied { read } for pid=6487 comm="syz.3.196" name="mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 127.743640][ T30] audit: type=1400 audit(1784468065.473:473): avc: denied { open } for pid=6487 comm="syz.3.196" path="/dev/input/mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 127.946381][ T5344] usb 5-1: USB disconnect, device number 8 [ 128.000715][ T6494] netlink: 68 bytes leftover after parsing attributes in process `syz.1.198'. [ 128.077404][ T30] audit: type=1400 audit(1784468066.283:474): avc: denied { read append } for pid=6495 comm="syz.4.200" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 128.421070][ T30] audit: type=1400 audit(1784468066.283:475): avc: denied { ioctl open } for pid=6495 comm="syz.4.200" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 128.493762][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.202'. [ 128.706039][ T5796] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 128.706098][ T5344] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 128.783994][ T30] audit: type=1400 audit(1784468066.993:476): avc: denied { name_connect } for pid=6500 comm="syz.0.201" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 128.897298][ T5344] usb 5-1: Using ep0 maxpacket: 16 [ 128.907998][ T5344] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.935351][ T5344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 128.936554][ T5796] usb 2-1: Using ep0 maxpacket: 16 [ 129.002518][ T5344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 129.054716][ T5344] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 129.171738][ T5796] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 129.201323][ T5796] usb 2-1: config 0 has no interface number 0 [ 129.215758][ T5344] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.253200][ T5344] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 129.265711][ T5796] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.290222][ T5344] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 129.290236][ T5796] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.290273][ T5796] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 129.324609][ T5796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.339368][ T5796] usb 2-1: config 0 descriptor?? [ 129.346382][ T5344] usb 5-1: Manufacturer: syz [ 129.372497][ T5344] usb 5-1: config 0 descriptor?? [ 130.261966][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 130.261985][ T30] audit: type=1400 audit(1784468068.143:486): avc: denied { write } for pid=6510 comm="syz.0.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 130.445974][ T5344] rc_core: IR keymap rc-hauppauge not found [ 130.510928][ T5344] Registered IR keymap rc-empty [ 130.549991][ T6494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.558705][ T6494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.572224][ T5796] usbhid 2-1:0.1: can't add hid device: -71 [ 130.587600][ T5344] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 130.607640][ T5796] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 130.631880][ T5344] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 130.639760][ T5796] usb 2-1: USB disconnect, device number 6 [ 130.685051][ T5344] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 130.724110][ T5344] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input7 [ 130.759130][ T30] audit: type=1400 audit(1784468068.973:487): avc: denied { read } for pid=4963 comm="acpid" name="event4" dev="devtmpfs" ino=2893 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 130.785234][ T5344] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 130.816164][ T5344] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 130.824621][ T30] audit: type=1400 audit(1784468068.973:488): avc: denied { open } for pid=4963 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2893 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 130.856017][ T5720] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 130.866020][ T5344] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 130.896070][ T5344] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 130.910213][ T30] audit: type=1400 audit(1784468068.973:489): avc: denied { ioctl } for pid=4963 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2893 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 130.937347][ T30] audit: type=1400 audit(1784468069.013:490): avc: denied { bind } for pid=6524 comm="syz.3.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 130.956808][ T5344] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 130.966902][ T30] audit: type=1400 audit(1784468069.013:491): avc: denied { node_bind } for pid=6524 comm="syz.3.208" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 130.986948][ T5344] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 131.006677][ T5344] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 131.026041][ T5344] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 131.039740][ T5720] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 131.050965][ T5720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.063310][ T5344] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 131.070611][ T5720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.080927][ T5720] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 131.094102][ T5344] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 131.104425][ T5720] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 131.133048][ T5344] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 131.142413][ T5720] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 131.152640][ T5720] usb 1-1: Manufacturer: syz [ 131.158057][ T5344] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 131.201303][ T5720] usb 1-1: config 0 descriptor?? [ 131.219616][ T5344] usb 5-1: USB disconnect, device number 9 [ 132.144571][ T6522] xt_hashlimit: size too large, truncated to 1048576 [ 132.233036][ T5720] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 132.309457][ T5720] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 132.523564][ T187] usb 1-1: USB disconnect, device number 7 [ 132.721454][ T6541] fido_id[6541]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 132.816162][ T5748] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 132.998578][ T5748] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.019468][ T5748] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.037902][ T5748] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 133.053002][ T5748] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.064890][ T5748] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.206316][ T5748] usb 5-1: config 0 descriptor?? [ 133.319483][ T6554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.213'. [ 133.502158][ T6556] random: crng reseeded on system resumption [ 133.507122][ T5627] Bluetooth: hci4: Malformed LE Event: 0x0d [ 133.821446][ T5748] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 134.683619][ T30] audit: type=1400 audit(1784468072.893:492): avc: denied { setopt } for pid=6563 comm="syz.0.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 134.760627][ T30] audit: type=1400 audit(1784468072.923:493): avc: denied { ioctl } for pid=6563 comm="syz.0.217" path="socket:[12462]" dev="sockfs" ino=12462 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 134.803328][ T6564] sd 0:0:1:0: PR command failed: 1026 [ 134.840536][ T6564] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 134.858465][ T30] audit: type=1400 audit(1784468073.013:494): avc: denied { ioctl } for pid=6563 comm="syz.0.217" path="/40/file0/file0" dev="fuse" ino=288230376151711744 ioctlcmd=0x70ce scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 134.922359][ T6564] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 135.848510][ T5720] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 135.938059][ T5344] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 135.967810][ T6586] FAULT_INJECTION: forcing a failure. [ 135.967810][ T6586] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 136.016055][ T5720] usb 1-1: device descriptor read/64, error -71 [ 136.022366][ T6586] CPU: 1 UID: 0 PID: 6586 Comm: syz.4.224 Not tainted syzkaller #0 PREEMPT(full) [ 136.022382][ T6586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 136.022389][ T6586] Call Trace: [ 136.022393][ T6586] [ 136.022398][ T6586] dump_stack_lvl+0x100/0x190 [ 136.022414][ T6586] should_fail_ex.cold+0x5/0xa [ 136.022428][ T6586] _copy_from_user+0x2e/0xd0 [ 136.022443][ T6586] copy_mount_options+0x76/0x190 [ 136.022458][ T6586] __x64_sys_mount+0x1ab/0x310 [ 136.022471][ T6586] ? __pfx___x64_sys_mount+0x10/0x10 [ 136.022487][ T6586] do_syscall_64+0x115/0x870 [ 136.022497][ T6586] ? clear_bhb_loop+0x40/0x90 [ 136.022510][ T6586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.022521][ T6586] RIP: 0033:0x7f8715f9de99 [ 136.022530][ T6586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.022540][ T6586] RSP: 002b:00007f8716e60028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 136.022550][ T6586] RAX: ffffffffffffffda RBX: 00007f8716225fa0 RCX: 00007f8715f9de99 [ 136.022557][ T6586] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 136.022563][ T6586] RBP: 00007f8716e60090 R08: 00002000000000c0 R09: 0000000000000000 [ 136.022569][ T6586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.022575][ T6586] R13: 00007f8716226038 R14: 00007f8716225fa0 R15: 00007fff06b61b18 [ 136.022588][ T6586] [ 136.024531][ T6586] tmpfs: Bad value for 'size' [ 136.107011][ T5796] usb 5-1: USB disconnect, device number 10 [ 136.216929][ T5344] usb 3-1: not running at top speed; connect to a high speed hub [ 136.230020][ T5344] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 136.245419][ T5344] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 4 [ 136.257835][ T5344] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 19391, setting to 1023 [ 136.271705][ T5344] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 136.289038][ T5344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.307975][ T5344] usb 3-1: Product: ࠚ [ 136.312563][ T5344] usb 3-1: Manufacturer: 퇋焨荖&ೝ㯥㪳佼ঋⲗ궚맖ಲ䘌Ꙋ鯵끭ᒘ᧝ꇨﰆᱺᴑﵴ䆮侤䕰ꪢꉱ㱕㏔橊ﲇ竑磸훕覺竵붺↊桴᭬唝톘듍珡릿䐍쎫ȹ䏺股톅舏ꈥ䑁蠐╛꤂橾癈䤄釡릭㷚 [ 136.338505][ T5344] usb 3-1: SerialNumber: 、 [ 136.348396][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.225'. [ 136.443742][ T5720] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 136.612868][ T5720] usb 1-1: device descriptor read/64, error -71 [ 136.664500][ T30] audit: type=1400 audit(1784468074.873:495): avc: denied { map } for pid=6581 comm="syz.2.222" path="socket:[12555]" dev="sockfs" ino=12555 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 136.708444][ T5344] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 136.736419][ T5720] usb usb1-port1: attempt power cycle [ 136.777675][ T5344] usb 3-1: USB disconnect, device number 6 [ 137.113283][ T6603] Can't find a SQUASHFS superblock on nullb0 [ 137.156103][ T5720] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 137.297345][ T5720] usb 1-1: device descriptor read/8, error -71 [ 137.461005][ T6607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.233'. [ 137.536037][ T5720] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 138.126893][ T6596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.228'. [ 138.176376][ T5720] usb 1-1: device descriptor read/8, error -71 [ 138.286440][ T5720] usb usb1-port1: unable to enumerate USB device [ 138.585100][ T6612] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 138.794660][ T30] audit: type=1400 audit(1784468077.003:496): avc: denied { read } for pid=6606 comm="syz.2.233" path="socket:[11981]" dev="sockfs" ino=11981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 139.366965][ T6625] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 139.377285][ T6626] hpfs: Bad magic ... probably not HPFS [ 139.383311][ T30] audit: type=1400 audit(1784468077.583:497): avc: denied { execute_no_trans } for pid=6621 comm="syz.3.236" path="/55/file2" dev="tmpfs" ino=307 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 139.452758][ T6628] FAULT_INJECTION: forcing a failure. [ 139.452758][ T6628] name failslab, interval 1, probability 0, space 0, times 0 [ 139.501197][ T6628] CPU: 1 UID: 0 PID: 6628 Comm: syz.4.234 Not tainted syzkaller #0 PREEMPT(full) [ 139.501222][ T6628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 139.501231][ T6628] Call Trace: [ 139.501236][ T6628] [ 139.501241][ T6628] dump_stack_lvl+0x100/0x190 [ 139.501266][ T6628] should_fail_ex.cold+0x5/0xa [ 139.501285][ T6628] should_failslab+0xc2/0x120 [ 139.501305][ T6628] __kmalloc_noprof+0xfc/0x820 [ 139.501322][ T6628] ? rcu_is_watching+0x12/0xc0 [ 139.501345][ T6628] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 139.501369][ T6628] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 139.501391][ T6628] genl_family_rcv_msg_doit+0xc7/0x300 [ 139.501410][ T6628] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 139.501427][ T6628] ? genl_get_cmd+0x3e7/0x760 [ 139.501458][ T6628] ? __dev_queue_xmit+0xa33/0x4970 [ 139.501483][ T6628] ? __radix_tree_lookup+0x217/0x2b0 [ 139.501512][ T6628] genl_rcv_msg+0x560/0x800 [ 139.501531][ T6628] ? __pfx_genl_rcv_msg+0x10/0x10 [ 139.501546][ T6628] ? __pfx_psp_device_get_locked+0x10/0x10 [ 139.501566][ T6628] ? __pfx_psp_nl_get_stats_doit+0x10/0x10 [ 139.501584][ T6628] ? __pfx_psp_device_unlock+0x10/0x10 [ 139.501614][ T6628] netlink_rcv_skb+0x159/0x420 [ 139.501639][ T6628] ? __pfx_genl_rcv_msg+0x10/0x10 [ 139.501656][ T6628] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 139.501692][ T6628] ? netlink_deliver_tap+0x1ae/0xcc0 [ 139.501720][ T6628] genl_rcv+0x28/0x40 [ 139.501735][ T6628] netlink_unicast+0x585/0x850 [ 139.501764][ T6628] ? __pfx_netlink_unicast+0x10/0x10 [ 139.501797][ T6628] netlink_sendmsg+0x8b0/0xda0 [ 139.501827][ T6628] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.501855][ T6628] ? selinux_socket_sendmsg+0x198/0x2f0 [ 139.501883][ T6628] ____sys_sendmsg+0xa4d/0xbe0 [ 139.501906][ T6628] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.501937][ T6628] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.501970][ T6628] ___sys_sendmsg+0x190/0x1e0 [ 139.501995][ T6628] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.502014][ T6628] ? __lock_acquire+0x49f/0x1a40 [ 139.502032][ T6628] ? get_pid_task+0x106/0x250 [ 139.502083][ T6628] __sys_sendmsg+0x160/0x210 [ 139.502102][ T6628] ? __pfx___sys_sendmsg+0x10/0x10 [ 139.502132][ T6628] do_syscall_64+0x115/0x870 [ 139.502147][ T6628] ? clear_bhb_loop+0x40/0x90 [ 139.502167][ T6628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.502185][ T6628] RIP: 0033:0x7f8715f9de99 [ 139.502201][ T6628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.502216][ T6628] RSP: 002b:00007f8716e60028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.502232][ T6628] RAX: ffffffffffffffda RBX: 00007f8716225fa0 RCX: 00007f8715f9de99 [ 139.502243][ T6628] RDX: 0000000020040810 RSI: 0000200000000240 RDI: 0000000000000003 [ 139.502253][ T6628] RBP: 00007f8716e60090 R08: 0000000000000000 R09: 0000000000000000 [ 139.502263][ T6628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.502279][ T6628] R13: 00007f8716226038 R14: 00007f8716225fa0 R15: 00007fff06b61b18 [ 139.502303][ T6628] [ 140.303827][ T30] audit: type=1400 audit(1784468078.313:498): avc: denied { bind } for pid=6637 comm="syz.4.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 140.446211][ T30] audit: type=1400 audit(1784468078.313:499): avc: denied { write } for pid=6637 comm="syz.4.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 140.730333][ T30] audit: type=1400 audit(1784468078.623:500): avc: denied { read } for pid=6640 comm="syz.0.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 141.122395][ T6661] hpfs: Bad magic ... probably not HPFS [ 143.950116][ T30] audit: type=1400 audit(1784468082.113:501): avc: denied { read } for pid=6687 comm="syz.1.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.180615][ T30] audit: type=1400 audit(1784468082.393:502): avc: denied { write } for pid=6684 comm="syz.3.250" path="socket:[12791]" dev="sockfs" ino=12791 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 144.711685][ T6702] ufs: You didn't specify the type of your ufs filesystem [ 144.711685][ T6702] [ 144.711685][ T6702] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 144.711685][ T6702] [ 144.711685][ T6702] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 144.745333][ T6702] ufs: ufstype=old is supported read-only [ 144.760179][ T6702] ufs: ufs_fill_super(): bad magic number [ 144.891280][ T30] audit: type=1400 audit(1784468082.883:503): avc: denied { name_bind } for pid=6699 comm="syz.3.254" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 145.678498][ T30] audit: type=1400 audit(1784468083.893:504): avc: denied { read write } for pid=6712 comm="syz.3.259" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 145.883826][ T6719] hpfs: Bad magic ... probably not HPFS [ 145.912843][ T30] audit: type=1400 audit(1784468083.923:505): avc: denied { open } for pid=6712 comm="syz.3.259" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 146.047907][ T6718] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 146.054695][ T6718] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 146.111190][ T30] audit: type=1400 audit(1784468084.223:506): avc: denied { bind } for pid=6712 comm="syz.3.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 146.377599][ T6718] vhci_hcd vhci_hcd.0: Device attached [ 146.476419][ T30] audit: type=1400 audit(1784468084.233:507): avc: denied { module_request } for pid=6710 comm="syz.4.258" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 146.695078][ T30] audit: type=1400 audit(1784468084.243:508): avc: denied { write } for pid=6712 comm="syz.3.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 146.920378][ T30] audit: type=1400 audit(1784468084.243:509): avc: denied { read } for pid=6712 comm="syz.3.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 146.962614][ T6724] vhci_hcd: connection closed [ 147.106443][ T57] vhci_hcd vhci_hcd.3: stop threads [ 147.158963][ T57] vhci_hcd vhci_hcd.3: release socket [ 147.199725][ T57] vhci_hcd vhci_hcd.3: disconnect device [ 147.246009][ T10] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 148.048761][ T804] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 148.165982][ C1] ================================================================== [ 148.174056][ C1] BUG: KASAN: slab-use-after-free in llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470 [ 148.183431][ C1] Read of size 1 at addr ffff888034e5a010 by task kworker/u8:6/1025 [ 148.191388][ C1] [ 148.193695][ C1] CPU: 1 UID: 0 PID: 1025 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 148.193709][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 148.193717][ C1] Workqueue: iou_exit io_ring_exit_work [ 148.193737][ C1] Call Trace: [ 148.193743][ C1] [ 148.193748][ C1] dump_stack_lvl+0x100/0x190 [ 148.193763][ C1] print_report+0x13d/0x4b0 [ 148.193778][ C1] ? __virt_addr_valid+0x239/0x430 [ 148.193791][ C1] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470 [ 148.193807][ C1] kasan_report+0xdf/0x1c0 [ 148.193820][ C1] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470 [ 148.193837][ C1] llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470 [ 148.193852][ C1] ? __pfx_llc_conn_ac_send_sabme_cmd_p_set_x+0x10/0x10 [ 148.193867][ C1] llc_conn_state_process+0x3ec/0x1480 [ 148.193885][ C1] llc_conn_tmr_common_cb+0x2d4/0x880 [ 148.193898][ C1] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 148.193914][ C1] call_timer_fn+0x19a/0x610 [ 148.193925][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 148.193936][ C1] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 148.193952][ C1] ? mark_held_locks+0x40/0x70 [ 148.193965][ C1] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 148.193980][ C1] __run_timers+0x757/0xb00 [ 148.193993][ C1] ? __pfx___run_timers+0x10/0x10 [ 148.194005][ C1] ? ktime_get+0x9f/0x320 [ 148.194016][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 148.194033][ C1] run_timer_base+0x114/0x190 [ 148.194044][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 148.194056][ C1] run_timer_softirq+0x1a/0x50 [ 148.194067][ C1] handle_softirqs+0x1ea/0x9b0 [ 148.194081][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 148.194093][ C1] ? _raw_spin_unlock+0x28/0x50 [ 148.194107][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 148.194123][ C1] __irq_exit_rcu+0x162/0x210 [ 148.194136][ C1] irq_exit_rcu+0x9/0x30 [ 148.194148][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 148.194166][ C1] [ 148.194170][ C1] [ 148.194174][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 148.194186][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 148.194202][ C1] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 ba a0 28 f6 48 89 df e8 42 f0 28 f6 e8 2d 54 55 f6 fb bf 01 00 00 00 12 00 18 f6 65 8b 05 5b b9 a6 08 85 c0 74 06 5b e9 81 4a 00 00 [ 148.194213][ C1] RSP: 0018:ffffc90005627930 EFLAGS: 00000202 [ 148.194222][ C1] RAX: 00000000000b140b RBX: ffff88804dc64380 RCX: 0000000000000040 [ 148.194229][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a4788 RDI: 0000000000000001 [ 148.194236][ C1] RBP: 1ffff92000ac4f2a R08: 0000000000000001 R09: 0000000000000000 [ 148.194242][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888059134c98 [ 148.194249][ C1] R13: ffff88804dc643c0 R14: ffff888059cf6d00 R15: ffff88804dc643c0 [ 148.194259][ C1] io_timeout_complete+0x3a6/0x450 [ 148.194279][ C1] ? __pfx_io_timeout_complete+0x10/0x10 [ 148.194294][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 148.194309][ C1] io_cancel_local_task_work+0x263/0x350 [ 148.194321][ C1] ? __pfx_io_cancel_local_task_work+0x10/0x10 [ 148.194339][ C1] ? __io_req_caches_free+0x20c/0x220 [ 148.194355][ C1] io_ring_exit_work+0x249/0xd7a [ 148.194369][ C1] ? do_raw_spin_lock+0x128/0x260 [ 148.194384][ C1] ? __pfx_io_ring_exit_work+0x10/0x10 [ 148.194401][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 148.194416][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 148.194431][ C1] ? rcu_is_watching+0x12/0xc0 [ 148.194447][ C1] process_one_work+0xa23/0x1940 [ 148.194461][ C1] ? __pfx_process_one_work+0x10/0x10 [ 148.194473][ C1] ? __pfx_io_ring_exit_work+0x10/0x10 [ 148.194489][ C1] worker_thread+0x5ef/0xe50 [ 148.194501][ C1] ? kthread+0x13a/0x450 [ 148.194517][ C1] ? __pfx_worker_thread+0x10/0x10 [ 148.194526][ C1] kthread+0x370/0x450 [ 148.194542][ C1] ? __pfx_kthread+0x10/0x10 [ 148.194558][ C1] ret_from_fork+0x72b/0xd50 [ 148.194572][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 148.194586][ C1] ? __switch_to+0x800/0x10f0 [ 148.194595][ C1] ? __pfx_kthread+0x10/0x10 [ 148.194611][ C1] ret_from_fork_asm+0x1a/0x30 [ 148.194629][ C1] [ 148.194633][ C1] [ 148.595025][ C1] Allocated by task 6734: [ 148.599331][ C1] kasan_save_stack+0x30/0x50 [ 148.604004][ C1] kasan_save_track+0x14/0x30 [ 148.608670][ C1] __kasan_kmalloc+0xaa/0xb0 [ 148.613261][ C1] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 148.618643][ C1] llc_sap_open+0x120/0x3b0 [ 148.623153][ C1] llc_ui_autobind.isra.0+0x2ae/0x580 [ 148.628514][ C1] llc_ui_connect+0x582/0xdb0 [ 148.633173][ C1] __sys_connect_file+0x141/0x1a0 [ 148.638176][ C1] __sys_connect+0x141/0x170 [ 148.642752][ C1] __x64_sys_connect+0x72/0xb0 [ 148.647494][ C1] do_syscall_64+0x115/0x870 [ 148.652065][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.657928][ C1] [ 148.660225][ C1] Freed by task 6260: [ 148.664174][ C1] kasan_save_stack+0x30/0x50 [ 148.668842][ C1] kasan_save_track+0x14/0x30 [ 148.673501][ C1] kasan_save_free_info+0x3b/0x70 [ 148.678514][ C1] __kasan_slab_free+0x5f/0x80 [ 148.683268][ C1] __rcu_free_sheaf_prepare+0x5d/0x2f0 [ 148.688711][ C1] rcu_free_sheaf+0x1a/0xe0 [ 148.693191][ C1] rcu_core+0x5a2/0x10d0 [ 148.697413][ C1] handle_softirqs+0x1ea/0x9b0 [ 148.702163][ C1] __irq_exit_rcu+0x162/0x210 [ 148.706811][ C1] irq_exit_rcu+0x9/0x30 [ 148.711034][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 148.716644][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 148.722597][ C1] [ 148.724904][ C1] The buggy address belongs to the object at ffff888034e5a000 [ 148.724904][ C1] which belongs to the cache kmalloc-2k of size 2048 [ 148.738942][ C1] The buggy address is located 16 bytes inside of [ 148.738942][ C1] freed 2048-byte region [ffff888034e5a000, ffff888034e5a800) [ 148.752719][ C1] [ 148.755020][ C1] The buggy address belongs to the physical page: [ 148.761842][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888034e59000 pfn:0x34e58 [ 148.771882][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 148.780366][ C1] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 148.788842][ C1] page_type: f5(slab) [ 148.792796][ C1] raw: 00fff00000000240 ffff88813fe22000 ffffea00006f6810 ffffea000081a010 [ 148.801350][ C1] raw: ffff888034e59000 0000000800080005 00000000f5000000 0000000000000000 [ 148.809931][ C1] head: 00fff00000000240 ffff88813fe22000 ffffea00006f6810 ffffea000081a010 [ 148.818597][ C1] head: ffff888034e59000 0000000800080005 00000000f5000000 0000000000000000 [ 148.827259][ C1] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 148.835919][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 148.844571][ C1] page dumped because: kasan: bad access detected [ 148.850964][ C1] page_owner tracks the page as allocated [ 148.856659][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1042, tgid 1042 (kworker/u8:7), ts 66432918072, free_ts 42938458107 [ 148.877841][ C1] post_alloc_hook+0xfd/0x120 [ 148.882507][ C1] get_page_from_freelist+0xf48/0x3530 [ 148.887944][ C1] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 148.893816][ C1] new_slab+0xa2/0x650 [ 148.897875][ C1] refill_objects+0xe3/0x410 [ 148.902454][ C1] __pcs_replace_empty_main+0x376/0x680 [ 148.907987][ C1] __kmalloc_node_track_caller_noprof+0x679/0x830 [ 148.914374][ C1] kmalloc_reserve+0xe8/0x350 [ 148.919026][ C1] pskb_expand_head+0x249/0x10e0 [ 148.923950][ C1] netlink_trim+0x22d/0x2f0 [ 148.926013][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 148.928428][ C1] netlink_broadcast_filtered+0x6d/0xf20 [ 148.942182][ C1] nlmsg_notify+0xb1/0x290 [ 148.946578][ C1] rtmsg_ifinfo+0x177/0x1b0 [ 148.951066][ C1] netif_state_change+0x17f/0x380 [ 148.956073][ C1] linkwatch_do_dev+0xe0/0x120 [ 148.960821][ C1] __linkwatch_run_queue+0x3a9/0x900 [ 148.966093][ C1] page last free pid 5361 tgid 5361 stack trace: [ 148.972387][ C1] __free_frozen_pages+0x79f/0x1090 [ 148.977587][ C1] qlist_free_all+0x47/0xf0 [ 148.982075][ C1] kasan_quarantine_reduce+0x1a0/0x1f0 [ 148.987507][ C1] __kasan_slab_alloc+0x69/0x90 [ 148.992338][ C1] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 148.997766][ C1] mas_preallocate+0x1105/0x14a0 [ 149.002679][ C1] commit_merge+0x3e3/0xbd0 [ 149.007155][ C1] vma_expand+0xac5/0xea0 [ 149.011459][ C1] vma_merge_new_range+0x516/0xc00 [ 149.016556][ C1] __mmap_region+0xa86/0x2db0 [ 149.021214][ C1] mmap_region+0x35d/0x620 [ 149.025606][ C1] do_mmap+0xc63/0x12f0 [ 149.029735][ C1] vm_mmap_pgoff+0x29e/0x470 [ 149.034556][ C1] ksys_mmap_pgoff+0xe4/0x610 [ 149.039202][ C1] __x64_sys_mmap+0x125/0x190 [ 149.043851][ C1] do_syscall_64+0x115/0x870 [ 149.048418][ C1] [ 149.050713][ C1] Memory state around the buggy address: [ 149.056330][ C1] ffff888034e59f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 149.064362][ C1] ffff888034e59f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 149.072397][ C1] >ffff888034e5a000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 149.080511][ C1] ^ [ 149.085065][ C1] ffff888034e5a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 149.093102][ C1] ffff888034e5a100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 149.101128][ C1] ================================================================== [ 149.109218][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 149.116383][ C1] CPU: 1 UID: 0 PID: 1025 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 149.125806][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 149.135844][ C1] Workqueue: iou_exit io_ring_exit_work [ 149.141379][ C1] Call Trace: [ 149.144637][ C1] [ 149.147462][ C1] dump_stack_lvl+0x100/0x190 [ 149.152114][ C1] vpanic+0x552/0x970 [ 149.156074][ C1] ? __pfx_vpanic+0x10/0x10 [ 149.160552][ C1] ? mark_held_locks+0x40/0x70 [ 149.165292][ C1] ? irqentry_exit+0x24d/0xa00 [ 149.170029][ C1] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470 [ 149.176600][ C1] panic+0xd1/0xe0 [ 149.180303][ C1] ? __pfx_panic+0x10/0x10 [ 149.184696][ C1] ? check_panic_on_warn+0x1f/0x90 [ 149.189783][ C1] check_panic_on_warn.cold+0x19/0x34 [ 149.195123][ C1] end_report.part.0+0x3a/0x90 [ 149.199872][ C1] kasan_report.cold+0xe/0x18 [ 149.204547][ C1] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470 [ 149.211128][ C1] llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470 [ 149.217533][ C1] ? __pfx_llc_conn_ac_send_sabme_cmd_p_set_x+0x10/0x10 [ 149.224445][ C1] llc_conn_state_process+0x3ec/0x1480 [ 149.229894][ C1] llc_conn_tmr_common_cb+0x2d4/0x880 [ 149.235249][ C1] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 149.240862][ C1] call_timer_fn+0x19a/0x610 [ 149.245435][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 149.250548][ C1] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 149.256174][ C1] ? mark_held_locks+0x40/0x70 [ 149.260927][ C1] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 149.266552][ C1] __run_timers+0x757/0xb00 [ 149.271041][ C1] ? __pfx___run_timers+0x10/0x10 [ 149.276046][ C1] ? ktime_get+0x9f/0x320 [ 149.280353][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 149.285351][ C1] run_timer_base+0x114/0x190 [ 149.290000][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 149.295168][ C1] run_timer_softirq+0x1a/0x50 [ 149.299905][ C1] handle_softirqs+0x1ea/0x9b0 [ 149.304669][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 149.309951][ C1] ? _raw_spin_unlock+0x28/0x50 [ 149.314785][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 149.320411][ C1] __irq_exit_rcu+0x162/0x210 [ 149.325082][ C1] irq_exit_rcu+0x9/0x30 [ 149.329324][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 149.334962][ C1] [ 149.337876][ C1] [ 149.340810][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 149.346773][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 149.352571][ C1] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 ba a0 28 f6 48 89 df e8 42 f0 28 f6 e8 2d 54 55 f6 fb bf 01 00 00 00 12 00 18 f6 65 8b 05 5b b9 a6 08 85 c0 74 06 5b e9 81 4a 00 00 [ 149.372172][ C1] RSP: 0018:ffffc90005627930 EFLAGS: 00000202 [ 149.378247][ C1] RAX: 00000000000b140b RBX: ffff88804dc64380 RCX: 0000000000000040 [ 149.386201][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a4788 RDI: 0000000000000001 [ 149.394158][ C1] RBP: 1ffff92000ac4f2a R08: 0000000000000001 R09: 0000000000000000 [ 149.402112][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888059134c98 [ 149.410066][ C1] R13: ffff88804dc643c0 R14: ffff888059cf6d00 R15: ffff88804dc643c0 [ 149.418030][ C1] io_timeout_complete+0x3a6/0x450 [ 149.423133][ C1] ? __pfx_io_timeout_complete+0x10/0x10 [ 149.428755][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 149.433934][ C1] io_cancel_local_task_work+0x263/0x350 [ 149.439557][ C1] ? __pfx_io_cancel_local_task_work+0x10/0x10 [ 149.445715][ C1] ? __io_req_caches_free+0x20c/0x220 [ 149.451066][ C1] io_ring_exit_work+0x249/0xd7a [ 149.455988][ C1] ? do_raw_spin_lock+0x128/0x260 [ 149.460989][ C1] ? __pfx_io_ring_exit_work+0x10/0x10 [ 149.466425][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 149.472207][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 149.477812][ C1] ? rcu_is_watching+0x12/0xc0 [ 149.482562][ C1] process_one_work+0xa23/0x1940 [ 149.487474][ C1] ? __pfx_process_one_work+0x10/0x10 [ 149.492816][ C1] ? __pfx_io_ring_exit_work+0x10/0x10 [ 149.498250][ C1] worker_thread+0x5ef/0xe50 [ 149.502811][ C1] ? kthread+0x13a/0x450 [ 149.507038][ C1] ? __pfx_worker_thread+0x10/0x10 [ 149.512120][ C1] kthread+0x370/0x450 [ 149.516164][ C1] ? __pfx_kthread+0x10/0x10 [ 149.520728][ C1] ret_from_fork+0x72b/0xd50 [ 149.525291][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 149.530373][ C1] ? __switch_to+0x800/0x10f0 [ 149.535019][ C1] ? __pfx_kthread+0x10/0x10 [ 149.539592][ C1] ret_from_fork_asm+0x1a/0x30 [ 149.544338][ C1] [ 149.547543][ C1] Kernel Offset: disabled [ 149.551852][ C1] Rebooting in 86400 seconds..