last executing test programs: 13.906269395s ago: executing program 0 (id=62): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020800000000000800000524050000082407000000009ef6230700000000a3a82f07070d240701060000fd800000001a4824030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43f}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0xffffffffffffff94, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x3d, @string={0x1}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000480)={0x40, 0x18, 0x2, "aa85"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000009c0)={0x1c, &(0x7f0000000800)=ANY=[@ANYBLOB='\a\x00\b'], 0x0, 0x0}) 12.248793058s ago: executing program 0 (id=64): pwritev(0xffffffffffffffff, &(0x7f00000016c0)=[{0x0}], 0x1, 0x2, 0x1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000005580)=""/4084, 0xff4}, {0x0}, {&(0x7f0000001380)=""/118, 0x76}, {&(0x7f00000012c0)=""/189, 0xbd}, {&(0x7f0000001400)=""/166, 0xa6}], 0x5}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x31, &(0x7f00000008c0)={@broadcast, @empty, @void, {@arp={0x806, @generic={0x313, 0x806, 0x6, 0x6, 0x9, @local, "caaeb9cf029c", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, "f17eb821ee278997e7"}}}}, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000180)=0x3c1c, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=@newlink={0x74, 0x10, 0x409, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x3c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5}, @IFLA_BRPORT_VLAN_TUNNEL={0x5, 0x1d, 0x1}, @IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x2}, @IFLA_BRPORT_PRIORITY={0x6, 0x2, 0x5}, @IFLA_BRPORT_VLAN_TUNNEL={0x5}, @IFLA_BRPORT_LEARNING={0x5}, @IFLA_BRPORT_NEIGH_SUPPRESS={0x5, 0x20, 0x1}]}}}]}, 0x74}}, 0x0) sendmmsg$inet(r2, &(0x7f0000003f80), 0x0, 0x4000000) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0x2}) 11.216947267s ago: executing program 0 (id=65): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x9}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f00000003c0)=ANY=[], 0x8) 11.077920584s ago: executing program 0 (id=66): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='attr/keycreate\x00') lseek(r0, 0x20000000000a, 0x1) 10.97729157s ago: executing program 0 (id=67): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x400017e) mkdir(0x0, 0x0) inotify_init1(0x800) rmdir(&(0x7f0000000100)='./control\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x98b, &(0x7f0000000280)={0x0, 0x9bee, 0x8, 0xfffffffd, 0x25d}, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x68, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0, 0x40000020, 0x1, {0x2}}) io_uring_enter(r3, 0x52de, 0xf62e, 0x8, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000700)={&(0x7f0000000400)="c3459c2dff5dca77dcdbea79731f9e05594f163643bd37703012b1896f7547da92310d8cd049db8c21313c48421bf5dae20e41cc8ea8c7a4e07ba25204437406b2d0f25c1425cce0b26c6fdf1fd489b0509a49bca5bf3297fc96595b62aba801a9e25da62568a93d6e52243ac8cfdd6e61f57a61120930254dae1aa54841d5ce7e678a3ffed9885fca3a9d0df1cff61ca821ac6789139170ab7cf3e338130fabe9eecc27", &(0x7f0000000140)=""/49, &(0x7f0000000540), 0x0, 0x4, 0xffffffffffffffff, 0x4}, 0x38) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000f40)=ANY=[@ANYBLOB="b4000000000000003d0a000000000000630a00ff0000000095000000000000003cb61ea78be018d646ddfba75f3693c794759aa4e82bfa48b193952cf637d4596402f29abb31ff2ae4f752547c146ce3eff92d017eda25cc304233b9334d35df00a0728b9c61a6ea303195bc8b52f18f20e3f7bdfaadbe1bf4f4f495"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f00000000c0)={0xc}) 8.158752679s ago: executing program 1 (id=68): r0 = socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0xc71f, 0xfff, 0x8, 0xc4}}], 0x18, 0x48060}], 0x1, 0x200000d0) 3.608435886s ago: executing program 1 (id=69): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0x100, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xc, [0x0, 0x10, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0xff, 0x0, 0x0, 0x3], 0x0, [0x7f, 0x10, 0x2, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x106], [0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0xfffe]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x340, 0xffffffff, 0x0, 0x130, 0x0, 0xfeffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@loopback, @remote, [], [], 'erspan0\x00', 'veth1_to_bond\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 3.519418021s ago: executing program 1 (id=70): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) timer_create(0x7, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0xfc) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000100)=0x3) close_range(r1, 0xffffffffffffffff, 0x0) 3.458528935s ago: executing program 1 (id=71): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x3000000, 0x0, 0x34000040}, 0x8080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 3.147372302s ago: executing program 1 (id=72): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) setxattr$incfs_size(&(0x7f0000000040)='./file0/../file0/file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x3) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdeb176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5bd6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90cd585c5f1cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde9caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1b83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db10819af60599b5df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783fcf2c2c9fac2c3a2771dd0e2fb113cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bce1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ec47716206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362370bcc98671a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db214687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4679f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76bcf2da1d01a0f258095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc0615ca342f43ca3b3d0cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f19d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a7aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865438b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72091b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e5", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0x0, {0x0, 0x2, 0x7f, 0x1b7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.079091516s ago: executing program 1 (id=73): mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x3650b000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x2, {0x1, 0x0, 0x3}, 0xfd}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x1001}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) pselect6(0x40, &(0x7f0000000080)={0x1000000000000e, 0x9, 0x200000000009, 0x10000000, 0x6, 0x8, 0xc2db, 0x7ff}, 0x0, 0x0, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x1}], 0x1}}], 0x206c, 0x0) mmap(&(0x7f0000471000/0x3000)=nil, 0x3000, 0x100000c, 0x31, 0xffffffffffffffff, 0xffffd000) 0s ago: executing program 0 (id=74): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x8b92, 0x100, 0x0, 0x1d}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000580)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x60, 0x10, r0, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): syzkaller login: [ 34.531508][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 34.544199][ T31] audit: type=1400 audit(34.450:58): avc: denied { read write } for pid=3084 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.548084][ T31] audit: type=1400 audit(34.470:59): avc: denied { open } for pid=3084 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:48779' (ED25519) to the list of known hosts. [ 47.704541][ T31] audit: type=1400 audit(47.620:60): avc: denied { name_bind } for pid=3095 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 49.027182][ T31] audit: type=1400 audit(48.940:61): avc: denied { execute } for pid=3096 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 49.063919][ T31] audit: type=1400 audit(48.980:62): avc: denied { execute_no_trans } for pid=3096 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 51.787448][ T31] audit: type=1400 audit(51.710:63): avc: denied { mounton } for pid=3096 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 51.792541][ T31] audit: type=1400 audit(51.710:64): avc: denied { mount } for pid=3096 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 51.805586][ T3096] cgroup: Unknown subsys name 'net' [ 51.810098][ T31] audit: type=1400 audit(51.730:65): avc: denied { unmount } for pid=3096 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 51.941563][ T3096] cgroup: Unknown subsys name 'cpuset' [ 51.950397][ T3096] cgroup: Unknown subsys name 'hugetlb' [ 51.951522][ T3096] cgroup: Unknown subsys name 'rlimit' [ 52.166531][ T31] audit: type=1400 audit(52.090:66): avc: denied { setattr } for pid=3096 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.169697][ T31] audit: type=1400 audit(52.090:67): avc: denied { mounton } for pid=3096 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 52.172085][ T31] audit: type=1400 audit(52.090:68): avc: denied { mount } for pid=3096 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 52.349949][ T3098] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 52.353304][ T31] audit: type=1400 audit(52.270:69): avc: denied { relabelto } for pid=3098 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 57.115371][ T3096] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 58.584864][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 58.585240][ T31] audit: type=1400 audit(58.500:73): avc: denied { execmem } for pid=3099 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 58.644303][ T31] audit: type=1400 audit(58.560:74): avc: denied { read } for pid=3101 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 58.644726][ T31] audit: type=1400 audit(58.560:75): avc: denied { open } for pid=3101 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 58.645072][ T31] audit: type=1400 audit(58.560:76): avc: denied { mounton } for pid=3101 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 58.665145][ T31] audit: type=1400 audit(58.590:77): avc: denied { module_request } for pid=3101 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 58.714840][ T31] audit: type=1400 audit(58.640:78): avc: denied { sys_module } for pid=3101 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 59.192125][ T31] audit: type=1400 audit(59.110:79): avc: denied { ioctl } for pid=3101 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=675 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.173280][ T3101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.182886][ T3101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.418231][ T3102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.426312][ T3102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.859251][ T3101] hsr_slave_0: entered promiscuous mode [ 60.861716][ T3101] hsr_slave_1: entered promiscuous mode [ 61.092229][ T3102] hsr_slave_0: entered promiscuous mode [ 61.094681][ T3102] hsr_slave_1: entered promiscuous mode [ 61.096735][ T3102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.097904][ T3102] Cannot create hsr debugfs directory [ 61.142918][ T31] audit: type=1400 audit(61.060:80): avc: denied { create } for pid=3101 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.150999][ T31] audit: type=1400 audit(61.070:81): avc: denied { write } for pid=3101 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.152098][ T31] audit: type=1400 audit(61.070:82): avc: denied { read } for pid=3101 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.158855][ T3101] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.167577][ T3101] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.171913][ T3101] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.180969][ T3101] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.350073][ T3102] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.357591][ T3102] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.363182][ T3102] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.372822][ T3102] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.735299][ T3101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.993071][ T3102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.409518][ T3102] veth0_vlan: entered promiscuous mode [ 63.420346][ T3102] veth1_vlan: entered promiscuous mode [ 63.462637][ T3102] veth0_macvtap: entered promiscuous mode [ 63.470601][ T3102] veth1_macvtap: entered promiscuous mode [ 63.511657][ T3102] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.512151][ T3102] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.512274][ T3102] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.512360][ T3102] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.678977][ T31] audit: type=1400 audit(63.600:83): avc: denied { mount } for pid=3102 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 63.687507][ T3101] veth0_vlan: entered promiscuous mode [ 63.693037][ T31] audit: type=1400 audit(63.610:84): avc: denied { mounton } for pid=3102 comm="syz-executor" path="/syzkaller.KDogl0/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 63.699105][ T31] audit: type=1400 audit(63.620:85): avc: denied { mount } for pid=3102 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 63.703299][ T3101] veth1_vlan: entered promiscuous mode [ 63.708015][ T31] audit: type=1400 audit(63.630:86): avc: denied { mounton } for pid=3102 comm="syz-executor" path="/syzkaller.KDogl0/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 63.711863][ T31] audit: type=1400 audit(63.630:87): avc: denied { mounton } for pid=3102 comm="syz-executor" path="/syzkaller.KDogl0/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 63.732055][ T31] audit: type=1400 audit(63.650:88): avc: denied { unmount } for pid=3102 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 63.738158][ T31] audit: type=1400 audit(63.660:89): avc: denied { mounton } for pid=3102 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=763 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 63.740720][ T31] audit: type=1400 audit(63.660:90): avc: denied { mount } for pid=3102 comm="syz-executor" name="/" dev="gadgetfs" ino=2011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 63.749202][ T31] audit: type=1400 audit(63.670:91): avc: denied { mount } for pid=3102 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 63.751861][ T3101] veth0_macvtap: entered promiscuous mode [ 63.751968][ T31] audit: type=1400 audit(63.670:92): avc: denied { mounton } for pid=3102 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 63.761081][ T3101] veth1_macvtap: entered promiscuous mode [ 63.812361][ T3101] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.813089][ T3101] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.816405][ T3101] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.816784][ T3102] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 63.819011][ T3101] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.078630][ T3783] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 64.087742][ T3783] syzkaller1: entered promiscuous mode [ 64.088492][ T3783] syzkaller1: entered allmulticast mode [ 64.097094][ T3783] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 64.786701][ T11] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 64.945462][ T11] usb 1-1: Using ep0 maxpacket: 8 [ 64.958151][ T11] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 64.977394][ T11] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 64.979292][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.980588][ T11] usb 1-1: Product: syz [ 64.981421][ T11] usb 1-1: Manufacturer: syz [ 64.982397][ T11] usb 1-1: SerialNumber: syz [ 64.990162][ T11] usb 1-1: config 0 descriptor?? [ 73.297171][ T3082] usb 1-1: USB disconnect, device number 2 [ 73.724000][ T2888] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 73.885677][ T2888] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 73.887353][ T2888] usb 1-1: config 0 has no interface number 0 [ 73.888432][ T2888] usb 1-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 73.890279][ T2888] usb 1-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 73.892162][ T2888] usb 1-1: config 0 interface 230 has no altsetting 0 [ 73.906592][ T2888] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 73.907714][ T2888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.908710][ T2888] usb 1-1: Product: syz [ 73.909414][ T2888] usb 1-1: Manufacturer: syz [ 73.910125][ T2888] usb 1-1: SerialNumber: syz [ 73.915232][ T2888] usb 1-1: config 0 descriptor?? [ 73.922799][ T3817] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 73.927895][ T3817] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 73.932939][ T2888] ums-usbat 1-1:0.230: USB Mass Storage device detected [ 73.939302][ T2888] ums-usbat 1-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 76.877255][ T2888] ums-usbat 1-1:0.230: probe with driver ums-usbat failed with error -5 [ 76.882731][ T2888] usb 1-1: USB disconnect, device number 3 [ 76.930721][ T31] kauditd_printk_skb: 22 callbacks suppressed [ 76.931155][ T31] audit: type=1400 audit(76.850:115): avc: denied { create } for pid=3835 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.937674][ T31] audit: type=1400 audit(76.860:116): avc: denied { write } for pid=3835 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.938956][ T31] audit: type=1400 audit(76.860:117): avc: denied { nlmsg_write } for pid=3835 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 77.030441][ T31] audit: type=1400 audit(76.950:118): avc: denied { create } for pid=3837 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 77.040374][ T31] audit: type=1400 audit(76.960:119): avc: denied { write } for pid=3837 comm="syz.0.10" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 77.647921][ T31] audit: type=1400 audit(77.570:120): avc: denied { create } for pid=3839 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.944343][ T2888] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 80.094767][ T2888] usb 2-1: Using ep0 maxpacket: 32 [ 80.104075][ T2888] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 80.104622][ T2888] usb 2-1: config 0 has no interface number 0 [ 80.104772][ T2888] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 80.105013][ T2888] usb 2-1: config 0 interface 1 has no altsetting 0 [ 80.117954][ T2888] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 80.118253][ T2888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.118412][ T2888] usb 2-1: Product: syz [ 80.118456][ T2888] usb 2-1: Manufacturer: syz [ 80.118520][ T2888] usb 2-1: SerialNumber: syz [ 80.123122][ T2888] usb 2-1: config 0 descriptor?? [ 80.344368][ T2888] usb 2-1: USB disconnect, device number 2 [ 80.804500][ T3082] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 80.954506][ T3082] usb 2-1: Using ep0 maxpacket: 32 [ 80.960409][ T3082] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 80.960674][ T3082] usb 2-1: config 0 has no interface number 0 [ 80.960811][ T3082] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 80.960931][ T3082] usb 2-1: config 0 interface 1 has no altsetting 0 [ 80.977583][ T3082] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 80.978330][ T3082] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.978931][ T3082] usb 2-1: Product: syz [ 80.979306][ T3082] usb 2-1: Manufacturer: syz [ 80.979713][ T3082] usb 2-1: SerialNumber: syz [ 80.984638][ T3082] usb 2-1: config 0 descriptor?? [ 81.114054][ T2888] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 81.394545][ T2888] usb 1-1: config 0 has no interfaces? [ 81.405726][ T2888] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 81.406077][ T2888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.406369][ T2888] usb 1-1: Product: syz [ 81.406451][ T2888] usb 1-1: Manufacturer: syz [ 81.406518][ T2888] usb 1-1: SerialNumber: syz [ 81.414834][ T2888] usb 1-1: config 0 descriptor?? [ 81.645775][ T31] audit: type=1400 audit(81.570:121): avc: denied { create } for pid=3849 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.652185][ T31] audit: type=1400 audit(81.570:122): avc: denied { bind } for pid=3849 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.671513][ T31] audit: type=1400 audit(81.590:123): avc: denied { accept } for pid=3849 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.700539][ T31] audit: type=1400 audit(81.620:124): avc: denied { ioctl } for pid=3849 comm="syz.0.14" path="socket:[3099]" dev="sockfs" ino=3099 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 82.968534][ C1] vcan0: j1939_tp_rxtimer: 0x8559d500: rx timeout, send abort [ 82.978895][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 82.979231][ T31] audit: type=1400 audit(82.900:126): avc: denied { read } for pid=2909 comm="syslogd" name="log" dev="vda" ino=795 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 82.979410][ T31] audit: type=1400 audit(82.900:127): avc: denied { search } for pid=2909 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.979539][ T31] audit: type=1400 audit(82.900:128): avc: denied { write } for pid=2909 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.979662][ T31] audit: type=1400 audit(82.900:129): avc: denied { add_name } for pid=2909 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.979782][ T31] audit: type=1400 audit(82.900:130): avc: denied { create } for pid=2909 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 82.979901][ T31] audit: type=1400 audit(82.900:131): avc: denied { append open } for pid=2909 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 82.980023][ T31] audit: type=1400 audit(82.900:132): avc: denied { getattr } for pid=2909 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.469427][ C1] vcan0: j1939_tp_rxtimer: 0x8559d500: abort rx timeout. Force session deactivation [ 91.231177][ T51] usb 2-1: USB disconnect, device number 3 [ 92.467698][ T31] audit: type=1400 audit(92.390:133): avc: denied { prog_load } for pid=3883 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 92.468075][ T31] audit: type=1400 audit(92.390:134): avc: denied { bpf } for pid=3883 comm="syz.1.15" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 93.616820][ T31] audit: type=1400 audit(93.540:135): avc: denied { connect } for pid=3887 comm="syz.1.16" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.134551][ T3082] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 94.296781][ T3082] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.297374][ T3082] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 94.297728][ T3082] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.307268][ T3082] usb 2-1: config 0 descriptor?? [ 94.847997][ T3082] usb 1-1: USB disconnect, device number 4 [ 95.284269][ T2888] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 95.434992][ T2888] usb 1-1: Using ep0 maxpacket: 16 [ 95.446645][ T2888] usb 1-1: config 0 has no interfaces? [ 95.460158][ T2888] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 95.460580][ T2888] usb 1-1: New USB device strings: Mfr=12, Product=190, SerialNumber=3 [ 95.460679][ T2888] usb 1-1: Product: syz [ 95.460747][ T2888] usb 1-1: Manufacturer: syz [ 95.460813][ T2888] usb 1-1: SerialNumber: syz [ 95.475532][ T2888] r8152-cfgselector 1-1: Unknown version 0x0000 [ 95.476026][ T2888] r8152-cfgselector 1-1: config 0 descriptor?? [ 95.696846][ T3082] r8152-cfgselector 1-1: USB disconnect, device number 5 [ 95.796863][ T31] audit: type=1400 audit(95.710:136): avc: denied { watch watch_reads } for pid=3925 comm="syz.0.22" path="/11" dev="tmpfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 95.812092][ T31] audit: type=1400 audit(95.730:137): avc: denied { execute } for pid=3925 comm="syz.0.22" path="/11/bus" dev="tmpfs" ino=73 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 95.919954][ T31] audit: type=1400 audit(95.840:138): avc: denied { perfmon } for pid=3927 comm="syz.0.23" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 96.029316][ T3930] fuse: Bad value for 'fd' [ 96.119859][ T31] audit: type=1400 audit(96.040:139): avc: denied { create } for pid=3931 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 96.128618][ T31] audit: type=1400 audit(96.050:140): avc: denied { ioctl } for pid=3931 comm="syz.0.25" path="socket:[2333]" dev="sockfs" ino=2333 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 96.594387][ T3082] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 96.766186][ T3082] usb 1-1: unable to get BOS descriptor or descriptor too short [ 96.770824][ T3082] usb 1-1: not running at top speed; connect to a high speed hub [ 96.777479][ T3082] usb 1-1: config 1 interface 0 has no altsetting 0 [ 96.788927][ T3082] usb 1-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 96.789305][ T3082] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.789643][ T3082] usb 1-1: Product: syz [ 96.789769][ T3082] usb 1-1: Manufacturer: 㴱抬휍㉬ঁ웄쇭फ़뿛灃職ಒ柫獡쏿ళﳏ﹖爫鉵굌鴶屺ᇅ騳럭힇騻嗝篱㗌峜宩笗碗ꞟࢧ족枴쵈뀴潵㧴㡥 [ 96.789856][ T3082] usb 1-1: SerialNumber: syz [ 97.025780][ T3082] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input3 [ 97.046794][ T3082] usb 1-1: USB disconnect, device number 6 [ 97.642378][ T31] audit: type=1400 audit(97.560:141): avc: denied { ioctl } for pid=3960 comm="syz.0.28" path="socket:[2347]" dev="sockfs" ino=2347 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 97.665798][ T3964] syzkaller0: entered promiscuous mode [ 97.666309][ T3964] syzkaller0: entered allmulticast mode [ 97.816405][ T3968] fuse: Bad value for 'fd' [ 98.374247][ T31] audit: type=1400 audit(98.290:142): avc: denied { allowed } for pid=3969 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 98.384364][ T31] audit: type=1400 audit(98.300:143): avc: denied { create } for pid=3969 comm="syz.0.30" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 98.384750][ T31] audit: type=1400 audit(98.300:144): avc: denied { map } for pid=3969 comm="syz.0.30" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 98.385046][ T31] audit: type=1400 audit(98.300:145): avc: denied { read write } for pid=3969 comm="syz.0.30" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 98.399288][ T31] audit: type=1400 audit(98.320:146): avc: denied { getopt } for pid=3969 comm="syz.0.30" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.440998][ T31] audit: type=1400 audit(101.360:147): avc: denied { create } for pid=3978 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 101.460397][ T31] audit: type=1400 audit(101.380:148): avc: denied { accept } for pid=3978 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 101.660613][ T31] audit: type=1400 audit(101.580:149): avc: denied { mounton } for pid=3981 comm="syz.0.33" path="/22/file0" dev="tmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 104.533005][ T3826] usb 2-1: USB disconnect, device number 4 [ 104.625252][ T3992] fuse: Bad value for 'fd' [ 104.750861][ T31] audit: type=1400 audit(104.670:150): avc: denied { bind } for pid=3995 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 104.848959][ T31] audit: type=1400 audit(104.770:151): avc: denied { setopt } for pid=3995 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 106.046432][ T31] audit: type=1326 audit(105.960:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4010 comm="syz.1.42" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x0 [ 111.496317][ T4024] bond0: (slave bond_slave_0): Releasing backup interface [ 111.519223][ T4024] bond0: (slave bond_slave_1): Releasing backup interface [ 112.616198][ T31] audit: type=1400 audit(112.540:153): avc: denied { name_bind } for pid=4025 comm="syz.1.47" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 112.619834][ T31] audit: type=1400 audit(112.540:154): avc: denied { node_bind } for pid=4025 comm="syz.1.47" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 114.338195][ T31] audit: type=1400 audit(114.260:155): avc: denied { unmount } for pid=3101 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 114.786384][ T31] audit: type=1400 audit(114.710:156): avc: denied { setopt } for pid=4046 comm="syz.0.52" lport=136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.824290][ T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 114.973864][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 114.980646][ T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 114.989829][ T23] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 114.990060][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.990193][ T23] usb 2-1: Product: syz [ 114.990377][ T23] usb 2-1: Manufacturer: syz [ 114.990417][ T23] usb 2-1: SerialNumber: syz [ 115.001643][ T23] usb 2-1: config 0 descriptor?? [ 117.454566][ T4057] netlink: 16 bytes leftover after parsing attributes in process `syz.0.54'. [ 122.287223][ T31] audit: type=1400 audit(122.210:157): avc: denied { create } for pid=4064 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 122.827391][ T31] audit: type=1400 audit(122.750:158): avc: denied { create } for pid=4064 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 123.263865][ T31] audit: type=1400 audit(123.180:159): avc: denied { shutdown } for pid=4067 comm="syz.0.57" lport=42002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.764026][ T2888] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 123.913865][ T2888] usb 1-1: Using ep0 maxpacket: 32 [ 123.921327][ T2888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.921603][ T2888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.921714][ T2888] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 123.921758][ T2888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.949122][ T2888] usb 1-1: config 0 descriptor?? [ 123.963988][ T2888] hub 1-1:0.0: USB hub found [ 124.162428][ T2888] hub 1-1:0.0: 1 port detected [ 125.114025][ T25] hub 1-1:0.0: activate --> -90 [ 125.254561][ T2888] usb 2-1: USB disconnect, device number 5 [ 125.431125][ T23] usb 1-1: USB disconnect, device number 7 [ 125.644221][ T11] usb 1-1-port1: config error [ 126.359903][ T3082] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 126.655132][ T3082] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 126.659542][ T3082] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 126.681383][ T3082] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 126.683295][ T3082] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 126.684871][ T3082] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 126.707203][ T3082] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 126.708416][ T3082] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 126.709375][ T3082] usb 1-1: Product: syz [ 126.710491][ T3082] usb 1-1: Manufacturer: syz [ 126.775094][ T3082] cdc_wdm 1-1:1.0: skipping garbage [ 126.785597][ T3082] cdc_wdm 1-1:1.0: skipping garbage [ 126.833243][ T3082] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 127.009766][ T51] usb 1-1: USB disconnect, device number 8 [ 127.424395][ T51] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 127.582612][ T51] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.590643][ T51] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 127.592164][ T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.593149][ T51] usb 1-1: Product: syz [ 127.594304][ T51] usb 1-1: Manufacturer: syz [ 127.594985][ T51] usb 1-1: SerialNumber: syz [ 127.601349][ T51] usb 1-1: config 0 descriptor?? [ 127.612595][ T51] ims_pcu 1-1:0.0: Missing CDC union descriptor [ 127.615507][ T51] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22 [ 127.812431][ T3826] usb 1-1: USB disconnect, device number 9 [ 128.214576][ T3826] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 128.374251][ T3826] usb 1-1: Using ep0 maxpacket: 16 [ 128.380327][ T3826] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 128.380708][ T3826] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.380797][ T3826] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 128.392834][ T3826] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 128.393213][ T3826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.394134][ T3826] usb 1-1: Product: syz [ 128.394251][ T3826] usb 1-1: Manufacturer: syz [ 128.394324][ T3826] usb 1-1: SerialNumber: syz [ 128.827136][ T3826] usb 1-1: 0:2 : does not exist [ 129.437265][ T31] audit: type=1400 audit(129.360:160): avc: denied { listen } for pid=4136 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 129.448204][ T31] audit: type=1400 audit(129.370:161): avc: denied { accept } for pid=4136 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 129.486314][ T3826] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 129.574046][ T3826] usb 1-1: USB disconnect, device number 10 [ 129.934196][ T3826] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 130.084425][ T3826] usb 1-1: Using ep0 maxpacket: 32 [ 130.099156][ T3826] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 130.102504][ T3826] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 130.104234][ T3826] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 130.104295][ T3826] usb 1-1: config 1 has no interface number 0 [ 130.104349][ T3826] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 130.104474][ T3826] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 130.104560][ T3826] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 130.104605][ T3826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.117819][ T3826] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 130.484000][ T3826] snd_usb_pod 1-1:1.1: set_interface failed [ 130.484705][ T3826] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 130.485106][ T3826] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 130.487797][ T3826] usb 1-1: USB disconnect, device number 11 [ 130.844899][ T31] audit: type=1400 audit(130.770:162): avc: denied { map } for pid=4176 comm="syz.0.67" path="/dev/dsp" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 138.185495][ T4185] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 138.690967][ T31] audit: type=1400 audit(138.610:163): avc: denied { ioctl } for pid=4197 comm="syz.1.73" path="socket:[3586]" dev="sockfs" ino=3586 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 140.003954][ T3826] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 140.189622][ T3826] usb 2-1: config 0 has no interfaces? [ 140.211675][ T3826] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 140.211904][ T3826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.212998][ T3826] usb 2-1: Product: syz [ 140.213171][ T3826] usb 2-1: Manufacturer: syz [ 140.213282][ T3826] usb 2-1: SerialNumber: syz [ 140.217252][ T3826] usb 2-1: config 0 descriptor?? [ 141.719356][ C0] vcan0: j1939_tp_rxtimer: 0x855e5400: rx timeout, send abort [ 141.866189][ T4207] 8<--- cut here --- [ 141.866516][ T4207] Unable to handle kernel NULL pointer dereference at virtual address 0000000e when read [ 141.869861][ T4207] [0000000e] *pgd=857ec003, *pmd=df78b003 [ 141.871566][ T4207] Internal error: Oops: 205 [#1] SMP ARM [ 141.872286][ T4207] Modules linked in: [ 141.872852][ T4207] CPU: 0 UID: 0 PID: 4207 Comm: syz.0.74 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 141.873227][ T4207] Hardware name: ARM-Versatile Express [ 141.873764][ T4207] PC is at io_ring_buffers_peek+0x24/0x258 [ 141.874524][ T4207] LR is at io_buffers_peek+0x68/0x8c [ 141.874682][ T4207] pc : [<80889660>] lr : [<80889da4>] psr: 20000013 [ 141.874889][ T4207] sp : dfdedd90 ip : dfdeddd8 fp : dfdeddd4 [ 141.875087][ T4207] r10: 00000240 r9 : 00000000 r8 : 8555f4c0 [ 141.875399][ T4207] r7 : 855dcb0c r6 : 855dcb00 r5 : dfdede14 r4 : 8579e000 [ 141.875703][ T4207] r3 : 00000001 r2 : 855dcb0c r1 : dfdede14 r0 : 8579e000 [ 141.876173][ T4207] Flags: nzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 141.876528][ T4207] Control: 30c5387d Table: 850de440 DAC: fffffffd [ 141.876768][ T4207] Register r0 information: slab io_kiocb start 8579e000 pointer offset 0 size 192 [ 141.877590][ T4207] Register r1 information: 2-page vmalloc region starting at 0xdfdec000 allocated at kernel_clone+0xac/0x3e4 [ 141.878167][ T4207] Register r2 information: slab kmalloc-256 start 855dcb00 pointer offset 12 size 256 [ 141.878577][ T4207] Register r3 information: non-paged memory [ 141.878855][ T4207] Register r4 information: slab io_kiocb start 8579e000 pointer offset 0 size 192 [ 141.879181][ T4207] Register r5 information: 2-page vmalloc region starting at 0xdfdec000 allocated at kernel_clone+0xac/0x3e4 [ 141.879507][ T4207] Register r6 information: slab kmalloc-256 start 855dcb00 pointer offset 0 size 256 [ 141.879833][ T4207] Register r7 information: slab kmalloc-256 start 855dcb00 pointer offset 12 size 256 [ 141.880161][ T4207] Register r8 information: slab kmalloc-64 start 8555f4c0 pointer offset 0 size 64 [ 141.880549][ T4207] Register r9 information: NULL pointer [ 141.880734][ T4207] Register r10 information: non-paged memory [ 141.880938][ T4207] Register r11 information: 2-page vmalloc region starting at 0xdfdec000 allocated at kernel_clone+0xac/0x3e4 [ 141.881276][ T4207] Register r12 information: 2-page vmalloc region starting at 0xdfdec000 allocated at kernel_clone+0xac/0x3e4 [ 141.881639][ T4207] Process syz.0.74 (pid: 4207, stack limit = 0xdfdec000) [ 141.881881][ T4207] Stack: (0xdfdedd90 to 0xdfdee000) [ 141.882164][ T4207] dd80: 81a4c354 8030cb14 84c17100 00000001 [ 141.882514][ T4207] dda0: 00010000 855dcb0c 00000000 8579e000 dfdede14 855dcb00 855dcb0c 00000000 [ 141.882766][ T4207] ddc0: 80000001 00000240 dfdeddec dfdeddd8 80889da4 80889648 83638000 8579e000 [ 141.883023][ T4207] dde0: dfdede54 dfdeddf0 808932d4 80889d48 00000000 dfdeddd8 855dcb00 4f55579a [ 141.883268][ T4207] de00: 00010001 00000001 84c17128 00000000 00000000 855dcb0c 00000000 00000000 [ 141.883810][ T4207] de20: 00010001 4f55579a dfdede54 8579e000 81cf0ca0 00000000 00000000 00000000 [ 141.884250][ T4207] de40: 80000001 85241800 dfdede7c dfdede58 808822b4 8089302c 8579e000 80000001 [ 141.884550][ T4207] de60: 0000001b 81cf0b5c 85799840 00000000 dfdedebc dfdede80 80886d84 80882274 [ 141.884790][ T4207] de80: 8579e240 8579e300 8579e3c0 81cf0ca0 8579e540 84c17000 8579e06c 8579e000 [ 141.885021][ T4207] dea0: 85660000 00000000 00000000 85241800 dfdedf14 dfdedec0 8088789c 80886d48 [ 141.885398][ T4207] dec0: 8088e258 81a4c2f8 00000000 00000000 00000800 00000800 81cf0b5c 00000800 [ 141.885640][ T4207] dee0: 84c17000 4f55579a 85799c00 00000000 84c17000 00003516 85799c00 00000000 [ 141.885920][ T4207] df00: 85241800 00000000 dfdedfa4 dfdedf18 80888344 8088769c ecac8b10 84c17040 [ 141.886237][ T4207] df20: 00000000 00000000 81a500d0 81a4ffa0 dfdedf54 dfdedf40 8026b438 8029ce24 [ 141.886507][ T4207] df40: dfdedfb0 40000000 dfdedf84 dfdedf58 802229dc 8026b3f4 00000000 8281d05c [ 141.886739][ T4207] df60: dfdedfb0 0014c490 ecac8b10 80222930 00000000 4f55579a dfdedfac 00000000 [ 141.886969][ T4207] df80: 00000000 002e630c 000001aa 8020029c 85241800 000001aa 00000000 dfdedfa8 [ 141.887233][ T4207] dfa0: 80200060 80888218 00000000 00000000 00000004 00003516 00000000 00000000 [ 141.887482][ T4207] dfc0: 00000000 00000000 002e630c 000001aa 002d0000 00000000 00006364 76b710bc [ 141.887714][ T4207] dfe0: 76b70ec0 76b70eb0 0001939c 00131f30 60000010 00000004 00000000 00000000 [ 141.888017][ T4207] Call trace: [ 141.888272][ T4207] [<8088963c>] (io_ring_buffers_peek) from [<80889da4>] (io_buffers_peek+0x68/0x8c) [ 141.888941][ T4207] r10:00000240 r9:80000001 r8:00000000 r7:855dcb0c r6:855dcb00 r5:dfdede14 [ 141.889187][ T4207] r4:8579e000 [ 141.889361][ T4207] [<80889d3c>] (io_buffers_peek) from [<808932d4>] (io_recv+0x2b4/0x46c) [ 141.889624][ T4207] r5:8579e000 r4:83638000 [ 141.889785][ T4207] [<80893020>] (io_recv) from [<808822b4>] (__io_issue_sqe+0x4c/0x1c0) [ 141.890102][ T4207] r10:85241800 r9:80000001 r8:00000000 r7:00000000 r6:00000000 r5:81cf0ca0 [ 141.890394][ T4207] r4:8579e000 [ 141.890545][ T4207] [<80882268>] (__io_issue_sqe) from [<80886d84>] (io_issue_sqe+0x48/0x59c) [ 141.890872][ T4207] r9:00000000 r8:85799840 r7:81cf0b5c r6:0000001b r5:80000001 r4:8579e000 [ 141.891200][ T4207] [<80886d3c>] (io_issue_sqe) from [<8088789c>] (io_submit_sqes+0x20c/0x938) [ 141.891529][ T4207] r10:85241800 r9:00000000 r8:00000000 r7:85660000 r6:8579e000 r5:8579e06c [ 141.891793][ T4207] r4:84c17000 [ 141.892162][ T4207] [<80887690>] (io_submit_sqes) from [<80888344>] (sys_io_uring_enter+0x138/0x780) [ 141.892540][ T4207] r10:00000000 r9:85241800 r8:00000000 r7:85799c00 r6:00003516 r5:84c17000 [ 141.892822][ T4207] r4:00000000 [ 141.892929][ T4207] [<8088820c>] (sys_io_uring_enter) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 141.893401][ T4207] Exception stack(0xdfdedfa8 to 0xdfdedff0) [ 141.893631][ T4207] dfa0: 00000000 00000000 00000004 00003516 00000000 00000000 [ 141.893895][ T4207] dfc0: 00000000 00000000 002e630c 000001aa 002d0000 00000000 00006364 76b710bc [ 141.894150][ T4207] dfe0: 76b70ec0 76b70eb0 0001939c 00131f30 [ 141.894381][ T4207] r10:000001aa r9:85241800 r8:8020029c r7:000001aa r6:002e630c r5:00000000 [ 141.894613][ T4207] r4:00000000 [ 141.894993][ T4207] Code: e1a08002 e5912000 e50b2030 e1a05001 (e1d920be) [ 141.896658][ T4207] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 141.931808][ T4207] Kernel panic - not syncing: Fatal exception [ 141.933544][ T4207] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:22:05 Registers: info registers vcpu 0 CPU#0 R00=00000000 R01=82257d44 R02=00000000 R03=81a50908 R04=00000006 R05=828fac48 R06=00000000 R07=828fac40 R08=85241800 R09=00000028 R10=828fac48 R11=dfdedad4 R12=dfdedad8 R13=dfdedac8 R14=803480f4 R15=81a50918 PSR=80000093 N--- A S svc32 s00=72656820 s01=2d2d2065 d00=2d2d206572656820 s02=69742078 s03=756f656d d01=756f656d69742078 s04=6e73205d s05=73755f64 d02=73755f646e73205d s06=6f705f62 s07=2d312064 d03=2d3120646f705f62 s08=2e313a31 s09=70203a31 d04=70203a312e313a31 s10=65626f72 s11=74697720 d05=7469772065626f72 s12=72642068 s13=72657669 d06=7265766972642068 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=ffffffff R01=00000000 R02=04e26572 R03=00000011 R04=843ddb00 R05=84468f80 R06=00000000 R07=00000000 R08=844693dc R09=84469008 R10=00000000 R11=df981d94 R12=00000001 R13=df981d08 R14=00000004 R15=81714800 PSR=60000013 -ZC- A S svc32 s00=0016c403 s01=c8030204 d00=c80302040016c403 s02=0e020016 s03=0016d003 d01=0016d0030e020016 s04=86032802 s05=f6020017 d02=f602001786032802 s06=09880302 s07=01880800 d03=0188080009880302 s08=08001803 s09=00200302 d04=0020030208001803 s10=28030008 s11=03000800 d05=0300080028030008 s12=f3080030 s13=94f9ef8a d06=94f9ef8af3080030 s14=5bb0d9aa s15=060156b4 d07=060156b45bb0d9aa s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=020016ee s33=16f00376 d16=16f00376020016ee s34=03180400 s35=840016f4 d17=840016f403180400 s36=01e08080 s37=16f60328 d18=16f6032801e08080 s38=b0808400 s39=f6030010 d19=f6030010b0808400 s40=80840016 s41=030210b8 d20=030210b880840016 s42=040016f8 s43=16fc0310 d21=16fc0310040016f8 s44=80808400 s45=030201e0 d22=030201e080808400 s46=840016fe s47=0210b080 d23=0210b080840016fe s48=00000001 s49=00000000 d24=0000000000000001 s50=00000000 s51=00000000 d25=0000000000000000 s52=07d56355 s53=72ecbe49 d26=72ecbe4907d56355 s54=561994b6 s55=be1d1777 d27=be1d1777561994b6 s56=3a87c262 s57=a44f5e38 d28=a44f5e383a87c262 s58=27d9a475 s59=629f9eef d29=629f9eef27d9a475 s60=53fca129 s61=1ef9d1c8 d30=1ef9d1c853fca129 s62=94472344 s63=a903f485 d31=a903f48594472344 FPSCR: 00000000