last executing test programs: 7.967833832s ago: executing program 2 (id=3): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x1a1740, 0x0) (async) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000c00000/0x400000)=nil) mmap$IORING_OFF_SQ_RING(0x0, 0x1, 0x3000001, 0x810, 0xffffffffffffffff, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./debug\x00', 0x1ff) (async) mount(0x0, &(0x7f00000003c0)='./debug\x00', &(0x7f0000000480)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./debug/split_huge_pages\x00', 0x1, 0x0) openat(r2, &(0x7f00000001c0)='./file0\x00', 0xc2, 0x4d) (async) write(r2, &(0x7f0000000540)='/proc/self/cwd/test_file,0x0,0x1', 0x20) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x10000000000388, 0x100419183af) ptrace$pokeuser(0x6, r3, 0x388, 0x8) r4 = syz_kvm_add_vcpu$x86(r1, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000300)={0x1, 0x0, [{0x40000001, 0x4, 0x3, 0x31237648, 0x6, 0x2, 0x7}]}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r4, 0x4068aea3, &(0x7f0000000400)={0xc7, 0x0, 0x1}) (async, rerun: 64) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0xa0000, 0x14) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101001, 0x0) lseek(r6, 0x5, 0x4) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x800000c) r8 = syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000200)={0xc, 0x0, 0xfec00000}) (async, rerun: 64) r9 = syz_kvm_add_vcpu$x86(r8, &(0x7f0000000240)={0x0, &(0x7f0000000280)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x29, {0x0, "48b80000c0fe00000000488b18488b18f4"}}, @nested_vmlaunch={0x12f, 0x18}], 0x71}) (rerun: 64) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000040)=ANY=[]) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000c96000/0x3000)=nil, 0x3000}, 0x5}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x10800, 0x0) (async) landlock_restrict_self(r5, 0x1) 7.925223866s ago: executing program 2 (id=5): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x145b42, 0xeb) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x3, 0x4b9, 0x4f1b04e0, 0x1000}]}) (async) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x3, 0x4b9, 0x4f1b04e0, 0x1000}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) (async) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10) (async) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000300)='batadv_slave_1\x00', 0x10) r5 = socket$inet(0x2, 0x801, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000000380)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r5, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000000380)={0x2, 0x4e23, @local}, 0x10) shutdown(r5, 0x1) sendto$inet(r3, 0x0, 0x0, 0x200007bd, &(0x7f0000000580)={0x2, 0x4e23, @local}, 0x10) copy_file_range(r2, 0x0, r2, &(0x7f0000000040)=0xffffffdffffffffe, 0x2, 0x0) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="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"], 0x48}}, 0x410) (async) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="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"], 0x48}}, 0x410) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3, 0x212, 0xffffffff, {0x77359400}, {}, {}, 0x1, @can={{0x3, 0x1, 0x1}, 0x3, 0x0, 0x0, 0x0, "cd9aa05aa67029c9"}}, 0x48}, 0x1, 0x0, 0x0, 0x400c0}, 0x4001) 4.336960755s ago: executing program 3 (id=24): openat$loop_ctrl(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000001140)={0x0, 0xe179, 0x1, 0x2, 0x2c3}, &(0x7f00000011c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x54cf, 0x1000, 0x0, 0x302}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4fff, 0x0, 0x3, 0x169}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa951, 0x4000, 0x3, 0x2f4}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7f79, 0x1000, 0x3, 0x4b}}], 0x4, &(0x7f0000002ac0)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9dd}, 0x0, 0x0, '\x00', {0x3, 0xc45, 0x0, &(0x7f0000001ac0)=@buf_max_buf="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"}}, &(0x7f0000002b40)) mmap$IORING_OFF_SQ_RING(0x0, 0xef4, 0x200000a, 0x12, r0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000001a80)=[@text32={0x20, 0x0}], 0x1, 0xe, 0x0, 0x0) (async, rerun: 64) sigaltstack(&(0x7f00000000c0)={&(0x7f0000000100)=""/4096, 0x80000001, 0x1000}, 0x0) (async, rerun: 64) sigaltstack(0x0, &(0x7f0000001100)={0x0}) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) (rerun: 32) 4.156844573s ago: executing program 3 (id=26): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./dev\x00', 0x111000, 0x3) mkdirat(r0, &(0x7f0000000000)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x22401, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r2) (async) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f00000004c0)={0x2, 0x4e23, @empty}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000500)={0x1, &(0x7f0000000540)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000580)={0x2, 0x4e23, @local}, 0x10) (async) sendmmsg$inet(r3, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac47037fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5ed838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba", 0xc6}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)="32d33a47d96c", 0x6}], 0x1}}], 0x2, 0x2090) (async) write$cgroup_type(r2, &(0x7f0000000800), 0x11ffffce1) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0xffffffffffffffff) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000840)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000880)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000008c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000900)={0x44, 0x0, &(0x7f0000000940)=[@transaction={0x40406300, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000009c0)={@flat=@binder={0x70742a85, 0x0, 0x1, 0x1}, @flat=@binder={0x73622a85, 0x0, 0x2, 0x2}, @flat=@weak_binder={0x77622a85, 0x0, 0x3, 0x3}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x43, 0x0, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x4b, 0x0, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/sda\x00', 0x0, 0xa) prlimit64(0x0, 0x7, &(0x7f0000000080)={0x0, 0x100}, 0x0) (async) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r11) sendmsg$BATADV_CMD_SET_VLAN(r11, &(0x7f0000000400)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r12, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) (async) eventfd2(0x10001, 0x80800) 4.155602623s ago: executing program 0 (id=27): ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000000)={0x1, 0x2, 0x8}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fcntl$notify(r0, 0x402, 0x8000003b) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x111881, 0x0, 0x10}, 0x18) r2 = openat(r1, &(0x7f00000000c0)='./file0\x00', 0x418000, 0x120) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000100)={0x0, 0x7f, 0x2, 0x4, 0xfaa, 0x401}) statx(r2, &(0x7f0000000180)='./file0\x00', 0x800, 0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000140)=@sg0, r3, &(0x7f00000002c0)='./file0\x00') close(r1) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x602200, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r2, 0x50009401, &(0x7f0000000340)={{}, "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"}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BTRFS_IOC_ENCODED_WRITE(r5, 0x40809440, &(0x7f0000002380)={&(0x7f0000002340)=[{&(0x7f0000001340)="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", 0x1000}], 0x1, 0x1, 0x0, 0x1, 0x10001, 0x626, 0x4, 0xe}) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$P9_RWALK(r2, &(0x7f0000002400)={0x30, 0x6f, 0x1, {0x3, [{0x4, 0x1}, {0x12, 0x3}, {0x4, 0x4, 0x3}]}}, 0x30) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$XFS_IOC_FSGETXATTRA(r4, 0x801c582d, &(0x7f0000002440)) write$P9_RVERSION(r2, &(0x7f0000002480)={0x15, 0x65, 0xffff, 0x2, 0x8, '9P2000.u'}, 0x15) r6 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000024c0), 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x9) ioctl$int_in(r1, 0x5452, &(0x7f0000002500)) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000002540), &(0x7f0000002580)=0xc) write$P9_RVERSION(r2, &(0x7f00000025c0)={0x15, 0x65, 0xffff, 0x1, 0x8, '9P2000.L'}, 0x15) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000002600)=0x8000) openat$kvm(0xffffffffffffff9c, &(0x7f0000002640), 0x200000, 0x0) dup3(r1, r7, 0x0) bind$inet(r2, &(0x7f0000002680)={0x2, 0x4e22, @multicast2}, 0x10) read(r6, &(0x7f00000026c0)=""/130, 0x82) 4.120319967s ago: executing program 0 (id=28): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='rdma.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x1000) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000001c0)={0xa, 0x1, {0x2, @struct={0x9}, 0x0, 0x0, 0x9, 0x1, 0x401, 0x9, 0x41f, @usage=0x7, 0x10, 0xd, [0x9, 0x24, 0x8, 0x4, 0x1, 0xbcf]}, {0x8000, @usage=0x100000001, 0x0, 0x0, 0x7972, 0x9, 0xe20, 0x8001, 0x90, @struct={0x1, 0x3}, 0x401, 0x7, [0x8a, 0x8dac, 0x3a8, 0x4, 0x1]}, {0x6, @struct={0x1000, 0x7fffffff}, 0x0, 0x1, 0x200, 0x7, 0x1, 0x9d, 0x0, @usage=0x5, 0x4, 0x1, [0xc8, 0x73, 0x7, 0xfffffffffffff1cb, 0x4, 0x8]}, {0x1, 0x6, 0xa}}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000700)=ANY=[@ANYRES32=r1, @ANYBLOB="000000004a1f9dcbcfff22e69840f352d3f01f8fea623f911e9042436e4b06b684e890827a171c0a529284859cae7b971905263bf816f9d1f81d48088da004d2d2b7936ea6593a727dfc0c3d2d7e7e4e838e1a4a7cebb77ceb0d1c33d4f2f6e44cb89f1edde993df41f5b7ff9b3b6f0455cb5e", @ANYRESDEC=r2, @ANYBLOB=':-00000000000000000002g']) r3 = socket$can_raw(0x1d, 0x3, 0x1) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000a40)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0xffffffffe1110f4f, 0xd, 0xe000, 0xf, 0x2, 0x0, 0x0, 0x80, 0x5}}, 0x50) syz_ublk_add_dev(r1, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000940)=@new_dev={0x1, 0xa01, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1}}}, &(0x7f0000000a00)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000ac0), 0x100, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x4002c0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000b40)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000b80)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) ioctl(0xffffffffffffffff, 0x3, 0x0) write(r8, &(0x7f0000000c00)='0', 0x1) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000c40)={[0x9, 0x0, 0xe9b, 0x22, 0x20000008, 0x7, 0x911d, 0x7, 0x8, 0xafa, 0x5, 0x1006, 0xc, 0x8, 0x8000, 0xffffffffffffffff], 0x1000, 0x200}) ioctl$KVM_RUN(r7, 0xae80, 0x0) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00'}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200440c4}, 0xa4) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x8000, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/fscaps', 0x0, 0x42) 4.096728819s ago: executing program 0 (id=29): ftruncate(0xffffffffffffffff, 0xffff) getpid() prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000f80)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000fc0)='./dev\x00', &(0x7f0000001000)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001040)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r4, 0xc938fd0d, &(0x7f0000001080)="0400000000000000000055000038") 3.968307783s ago: executing program 3 (id=30): r0 = syz_usb_connect(0x0, 0x17d, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$tipc(r1, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x10, 0x800) (async) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000200)={0x14, 0x0, 0x0}, 0x0) 3.188967882s ago: executing program 0 (id=33): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) (async) r1 = landlock_create_ruleset(&(0x7f0000000400)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = landlock_create_ruleset(&(0x7f0000000440)={0x19a1, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) (async) bind$unix(r3, &(0x7f0000000480)=@file={0x1}, 0x6e) (async) listen(r3, 0x0) (async) connect$unix(r2, &(0x7f0000000580)=@file={0x1}, 0x6e) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@dev={0xac, 0x14, 0x14, 0x11}, 0x0, 0x33}, @in6=@mcast1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, {0x4}, {0x0, 0x10000}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20}, [@algo_auth_trunc={0x4c, 0x14, {{'rmd160\x00'}}}]}, 0x13c}}, 0x0) r6 = syz_usb_connect$cdc_ncm(0x6, 0x8f, &(0x7f0000000300)=ANY=[@ANYRES64=r5, @ANYRESOCT=r5, @ANYBLOB="a622726d6ea6710adeb101c910dbad2fb0430eb248ade558be92f26defabed7ce9aa508cac134b6268f7127d55461fdce991095b07cb50b60324c0767f8178f568406446fb6d50f445a7ddd67788384b18a2d501b822040a40ef564e1b2e741785f255064512c7d8744b020af6257842fdbad1fe39f6cad633dfd019754a532e0d954f384eff8c9a2cb5d9c742c0e23339b1558787f0ff66c8330618b77a9437913838f1d0a68f4130b3", @ANYRES8=r5], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x8, 0x70, 0xab8, 0xfef9, 0x4, 0x8001, 0x9, 0xffffffff, 0x8, 0x9, 0x1000, 0xfb}}, 0x0, 0x0, 0x0, 0x0}) ioctl$int_in(r2, 0x5452, &(0x7f0000000500)=0x5) (async) syz_usb_control_io(r6, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 2.018793553s ago: executing program 1 (id=39): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x27c, 0x20000000007fff, 0x400}}, @nested_vmlaunch={0x12f, 0x18}], 0x80}) ioctl$XFS_IOC_SCRUB_METADATA(r1, 0xc040583c, &(0x7f0000000100)={0x3, 0x86, 0x9, 0xfffffff1, 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.900981865s ago: executing program 1 (id=40): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x206382, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000200)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0xaaaaaaaaaaaaaf6, 0x10, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)={0x1, 0x0, [{0xd, 0x6, 0x0, 0x256, 0x3ff, 0x0, 0x5}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.900589035s ago: executing program 1 (id=41): syz_usb_connect(0x3, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="120110033b5a3d40e1d30f000056010203010902120001c00c400e92d15713708f0752de2152fc80cfc61d88373fec494abadf75d4b681f846d88ace643b794b58b3fbc24306c8671e71ee0e549dbb3770b1f64a10dc9fd73ab7f6f71ee0e4a0513391178d42"], &(0x7f00000004c0)={0x0, 0x0, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="050f05000b"]}) syz_usb_connect$uac1(0x3, 0xb1, &(0x7f0000000800)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000cb689316b00030000000000092406000601"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000900)={0x3000, 0x0, 0x1}) socket$inet(0x2, 0x80001, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000940)={0x2, 0x34000, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe2$9p(&(0x7f0000000980)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./file0\x00', 0x1ff) mount$9p_fd(0x0, &(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40), 0x0, &(0x7f0000000a80)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000b00)={0xeeee8000, 0x102000, 0x40000001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, r6, 0x1}, 0x1c}}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, &(0x7f0000000500)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000040)={@mcast1, 0x0}, &(0x7f0000000080)=0x14) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x2c, 0x2, r8, 0xa}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000100)="5565dd8ad51f222badd6e834af569884e0c6e043225947ee8e77fc3ade07e5fe2ddf454f39c118c9301b5eac8bd60fea49a60bc848423a231b8d5b0a45154923ef561c904ec3f0", 0x47}, {&(0x7f0000000180)="fdd9d397b945b5e637ef3a28d471edb9a37fb2abe7d09c6e15bb378ff0e1f7a0d84444e9af", 0x25}, {&(0x7f00000001c0)="ae431ea81563046d58832f252b73b2574ff648679743", 0x16}, {&(0x7f0000000200)="db870015cac0e3ae6d8d81ccafe8d5556fde1768bfbbe739e35a6c6277db8c84323448bc171757813537c4d608bd60404631336c8058cbcf37208d", 0x3b}, {&(0x7f0000000240)="c6b068744016938a53393bd97c12d76874fea18e648e87d92b0dc22545da222c80079e7c9063048878173cb0", 0x2c}], 0x5, 0x0, 0x0, 0x4010}, 0x1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x275a, 0x0) write$tun(r9, &(0x7f0000000580)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000580)={'syzkaller1\x00', 0xc201}) socket$inet6_tcp(0xa, 0x1, 0x0) 1.010102446s ago: executing program 3 (id=42): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000200)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x0, 0x0, 0x14, 0xa}, @ipv4=@tcp={{0x5, 0x4, 0x2, 0x1a, 0x28, 0x64, 0x0, 0xb, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @local}, {{0x4e20, 0x4ea4, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x105, 0x0, 0xffff}}}}, 0x36) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2d, &(0x7f0000000000)=0x567ffffc, 0x4) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x8003}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x0, 0x2, 0xf5ff}, 0x10) sendmsg$tipc(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x1, {{0x43, 0x3}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) close(0x3) getsockopt$inet_tcp_int(r0, 0x6, 0x7, 0x0, &(0x7f00000003c0)) 602.016988ms ago: executing program 1 (id=43): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r0 = fsopen(&(0x7f0000000140)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='fuseblk\x00', &(0x7f0000000340)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x9b\x9bO\x88/\t\xcf\x9b\x9f\b\xb6\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcd\x89F\xd0#\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88\x1d\bn\x7f\x0e\x85\xa5\xb4\x05?_\xc9\xef\xe0Q\xdb\xb6\x935\xf1\x18\xac\xe0\x15\xf3\xde\xbd\xb5\xa1\x06\xfd7\x87\xe1\f\x0f\xf8\xc5\x8a\xdc!\x00\x00@\x00'/119, 0x0) read(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='devices.list\x00', 0x275a, 0x0) fsmount(r1, 0x0, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r2, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xa0}, 0x80) pipe2(0x0, 0x0) fsetxattr$trusted_overlay_upper(r8, &(0x7f0000000400), &(0x7f0000000440)={0x0, 0xfb, 0x1f, 0x5, 0x4, "fece2ad90a0e1aaef297f6c2ca7a3bc7", "1721ac08c25bdeffb1d7"}, 0x1f, 0x1) syz_ublk_add_dev(r7, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230, 0x0, r5}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x8091, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 468.991172ms ago: executing program 1 (id=44): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0x4, 0x1}}) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000180)={0x0, 0x0, 0x1000, 0x240002, 0x1e8}, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000002c0)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000340)=@new_dev={0x2, 0x7a1, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x3}}}, &(0x7f0000000380)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000003c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r1, r6, &(0x7f0000000400)={0x0, 0x14e1, 0x10, 0x3, 0x400b2}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4481, 0x440d, 0x1, 0x31c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9406, 0x1000, 0xfffffffe, 0x2000004, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x2, 0x1, 0x34e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc696, 0x1000, 0x3, 0x5b, 0x0, r1}}], 0x4, &(0x7f0000000700)={0x2e, 0x18, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r5, '\x00', {0x3, 0xc8b, 0x0, 0x0}}, 0x0) syz_clone3(&(0x7f0000000780)={0x1000000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, &(0x7f0000000800)=[0x0], 0x1}, 0x58) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='vxfs\x00', 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) bind$inet6(r7, &(0x7f0000000840)={0xa, 0x4e20, 0x8, @private0, 0x5}, 0x1c) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000) 419.520517ms ago: executing program 1 (id=45): r0 = creat(&(0x7f0000000180)='./file0\x00', 0xc7) close(r0) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x4440, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) (async) r3 = fcntl$dupfd(r2, 0x0, r2) write$cgroup_pid(r3, &(0x7f0000000080), 0xb375) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') lseek(r4, 0x800000004, 0x0) (async) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f00000000c0), 0x4) (async) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000100)=0x2, 0x4) read$FUSE(r3, &(0x7f0000001880)={0x2020}, 0x2020) prlimit64(0x0, 0xe, 0x0, 0x0) (async) r5 = socket$packet(0x11, 0x3, 0x300) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$packet_int(r5, 0x107, 0x6, &(0x7f0000001840)=0xc99, 0x4) 215.843318ms ago: executing program 0 (id=46): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r0 = openat$binderfs(0xffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x2, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1, &(0x7f0000000000), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f00000005c0)=[@acquire, @enter_looper], 0x53}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000600)={0x20, 0x0, &(0x7f0000000640)=[@request_death, @clear_death]}) 128.930437ms ago: executing program 0 (id=47): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000900)={'sit0\x00', &(0x7f0000000940)=@ethtool_cmd={0x41, 0x5, 0x0, 0x4, 0x7, 0x2, 0x5, 0xfc, 0x57, 0x8, 0xfffffffd, 0x2, 0x8, 0xff, 0x0, 0x45}}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async) r3 = fsopen(&(0x7f0000000580)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) (async) r5 = creat(&(0x7f00000005c0)='./file0\x00', 0xdafbe5d6891b6e4) write$binfmt_elf32(r5, &(0x7f0000000600)=ANY=[@ANYBLOB="42785e11"], 0x4f) (async) close(r5) (async) execve(&(0x7f0000000640)='./file0\x00', 0x0, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000209000/0x400000)=nil) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000180)={0x0, &(0x7f00000002c0)=[@code={0xa, 0x6e, {"488d054900000048c7c30052020066890348c1e8106689430648c1e810894308b91b0000000f320d000c00000f30b90f08000031d2b8ff0100000f30b93008000031d2b8200000000f30fb90909090f4b90b08000031d231c00f3048cf"}}], 0x6e}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000340)={0x2, 0x0, @ioapic={0x0, 0x5, 0x46, 0x7fff, 0x0, [{0x80, 0xff, 0x5, '\x00', 0x7}, {0xa, 0x2, 0xf9, '\x00', 0x6}, {0xa0, 0xa, 0x9, '\x00', 0x1}, {0x4, 0x0, 0x6, '\x00', 0xe6}, {0x4, 0x4, 0x6, '\x00', 0x4}, {0xff, 0xc, 0x4, '\x00', 0xfc}, {0x16, 0x80}, {0x2, 0xb, 0xcd, '\x00', 0xe4}, {0xfd, 0x8, 0x4, '\x00', 0xc9}, {0xbe, 0x62, 0x9, '\x00', 0x7d}, {0x8, 0x40, 0xe6, '\x00', 0xd}, {0x7, 0xc, 0x80, '\x00', 0xb}, {0x0, 0x9, 0x10, '\x00', 0x7}, {0x1, 0x1a, 0x6, '\x00', 0xc}, {0xa, 0x0, 0x3, '\x00', 0xfb}, {0x7, 0x4, 0x7f, '\x00', 0x40}, {0xc3, 0x37, 0x5, '\x00', 0x7e}, {0x1, 0x4, 0x1, '\x00', 0x2}, {0x0, 0x26, 0x6, '\x00', 0x9}, {0x6, 0x8, 0x16, '\x00', 0x5}, {0x7, 0x5, 0x1, '\x00', 0x4}, {0x9, 0x5, 0x6, '\x00', 0x81}, {0x4, 0x0, 0x16, '\x00', 0x6}, {0x10, 0x28, 0x34, '\x00', 0x95}]}}) (async) ioctl$KVM_TDX_CAPABILITIES(r6, 0xc008aeba, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/2000, {0x6, 0x0, [{}, {}, {}, {}, {}, {}]}}}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r10, 0x4020aeb2, &(0x7f00000006c0)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001a0001002abd70000000000081ff80003a2a5e247b0000005c001b80570000007d00c62617dde4c88fa60f1a5475dac613fca9b5f031064f062d48b3fbd7d0e710a64f92e3ddb658cdc79152e500e300a36a444abd29d8f02663fffffffffffffff9de83d225ad0900faa67687dbf9770101e000328ea7a498b277033d8c58c12ac860f1f3c0c3c2a7fe68502a8f3907c523d7d4d7a2ed8d9ccacc1ed9c37815a124877581b9a41bed739a0f953959e16d20b9a5900adcddcc72a8eef259f1f643bd7d70333911e9a5aa686b91b7f8f080bfa2f74108d086038f203b0de94cb8ba"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000d00)={'veth0\x00', &(0x7f0000000cc0)=@ethtool_stats}) (async) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r12, &(0x7f0000000080)='cpu.max.burst\x00', 0x2, 0x0) 79.885352ms ago: executing program 3 (id=48): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) socketpair(0x26, 0x1, 0x80000000, &(0x7f0000000080)) 0s ago: executing program 3 (id=49): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) unshare(0x22020600) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) (async) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/51, 0x33}, {&(0x7f0000000500)=""/4110, 0x100e}], 0x2}}], 0x1, 0x40030002, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0xf39, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000480)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0xe1}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x5d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r1, '\x00', {0xfff7, 0x4, 0x0, 0x0}}, 0x0) 0s ago: executing program 0 (id=50): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x883, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x138, 0xffffffffffffff65, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}, @uuid={'LVM-syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000240)={0x4, 0x0, 0x0, 0x1a0, 0x138, 0x1, 0x0, 0x1000, 0x0, 0x0, @by_dev={r1}, [@snapshot={0x0, 0x1808, 0x0, 0x68, 'snapshot\x00', {@ram_num={'1:', 0x1}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, 'n', 0x20, '16', ' 1 discard_zeroes_cow'}}]}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) fsopen(&(0x7f0000000400)='securityfs\x00', 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000004c0)={0x2, 0x4e23, @local}, 0x10) r3 = socket$inet(0x2, 0x801, 0x0) bind$inet(r3, &(0x7f0000000500)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000000540)={0x2, 0x4e23, @local}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000580)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000418e00000004fcff", 0x58}], 0x1) r5 = add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000780), &(0x7f00000007c0)={'fscrypt:', @desc4}, &(0x7f0000000800)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r6) add_key$fscrypt_v1(&(0x7f0000000880), &(0x7f00000008c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x62, 0x30, 0x4, 0x63, 0x52, 0x38, 0x32]}, &(0x7f0000000900)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r6) add_key$fscrypt_v1(&(0x7f0000000980), &(0x7f00000009c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x34]}, &(0x7f0000000a00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r6) add_key$fscrypt_v1(&(0x7f0000000a80), &(0x7f0000000ac0)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x65, 0x30, 0x62, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000b00)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r6) add_key$fscrypt_v1(&(0x7f0000000b80), &(0x7f0000000bc0)={'fscrypt:', @desc3}, &(0x7f0000000c00)={0x0, "fbffdcd87757478a9f081cc7d71c43a5797bb658a4ec89c05ea7a598944e8918cbb65222f7e7f3fe32e81f51e152bfee64224d1746ce333dc9cd9d2e4ff6ce3f", 0x13}, 0x48, r6) add_key$fscrypt_v1(&(0x7f0000000c80), &(0x7f0000000cc0)={'fscrypt:', @auto=[0x30, 0x37, 0x30, 0x35, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000040)={0x0, "00112233445566778899aabbccdddeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r6) add_key$fscrypt_v1(&(0x7f0000000d80), &(0x7f0000000dc0)={'fscrypt:', @auto=[0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000e00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r6) add_key$fscrypt_v1(&(0x7f0000000e80), &(0x7f0000000ec0)={'fscrypt:', @desc2}, &(0x7f0000000f00)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r6) add_key$fscrypt_v1(&(0x7f0000000f80), &(0x7f0000000fc0)={'fscrypt:', @auto=[0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x34, 0x61]}, &(0x7f0000001000)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r6) add_key$keyring(&(0x7f0000001080), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, r5) add_key$fscrypt_v1(&(0x7f0000001100), &(0x7f0000001140)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x62]}, &(0x7f0000001180)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r6) add_key$keyring(&(0x7f0000001200), &(0x7f0000001240)={'syz', 0x2}, 0x0, 0x0, r6) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000012c0)={'fscrypt:', @auto=[0x39, 0x35, 0x62, 0x66, 0x35, 0x30, 0x66, 0x65, 0x30, 0x30, 0x37, 0x30, 0x36, 0x30, 0x37, 0x34]}, &(0x7f0000001300)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x31}, 0x48, r6) add_key$fscrypt_v1(&(0x7f0000001380), &(0x7f00000013c0)={'fscrypt:', @auto=[0x35, 0x30, 0x32, 0x36, 0x30, 0x31, 0x65, 0x30, 0x37, 0x30, 0x36, 0x2e, 0x35, 0x30, 0x30, 0x64]}, &(0x7f0000001400)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.143' (ED25519) to the list of known hosts. [ 21.497418][ T36] audit: type=1400 audit(1794168988.810:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.520382][ T36] audit: type=1400 audit(1794168988.840:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.521311][ T287] cgroup: Unknown subsys name 'net' [ 21.548275][ T36] audit: type=1400 audit(1794168988.870:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.548399][ T287] cgroup: Unknown subsys name 'devices' [ 21.669792][ T287] cgroup: Unknown subsys name 'hugetlb' [ 21.675399][ T287] cgroup: Unknown subsys name 'rlimit' [ 21.798058][ T36] audit: type=1400 audit(1794168989.120:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.821265][ T36] audit: type=1400 audit(1794168989.120:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.834756][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.846142][ T36] audit: type=1400 audit(1794168989.120:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.877918][ T36] audit: type=1400 audit(1794168989.180:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.896037][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.903286][ T36] audit: type=1400 audit(1794168989.180:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.937593][ T36] audit: type=1400 audit(1794168989.210:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.963146][ T36] audit: type=1400 audit(1794168989.210:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.374409][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.381491][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.388630][ T294] bridge_slave_0: entered allmulticast mode [ 23.395000][ T294] bridge_slave_0: entered promiscuous mode [ 23.401668][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.408722][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.415809][ T294] bridge_slave_1: entered allmulticast mode [ 23.422216][ T294] bridge_slave_1: entered promiscuous mode [ 23.459372][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.466437][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.473585][ T296] bridge_slave_0: entered allmulticast mode [ 23.479952][ T296] bridge_slave_0: entered promiscuous mode [ 23.486276][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.493630][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.500923][ T295] bridge_slave_0: entered allmulticast mode [ 23.507089][ T295] bridge_slave_0: entered promiscuous mode [ 23.516549][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.523631][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.530756][ T295] bridge_slave_1: entered allmulticast mode [ 23.536952][ T295] bridge_slave_1: entered promiscuous mode [ 23.548814][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.555856][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.563142][ T296] bridge_slave_1: entered allmulticast mode [ 23.569364][ T296] bridge_slave_1: entered promiscuous mode [ 23.589578][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.596629][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.603986][ T297] bridge_slave_0: entered allmulticast mode [ 23.610441][ T297] bridge_slave_0: entered promiscuous mode [ 23.649077][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.656120][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.663439][ T297] bridge_slave_1: entered allmulticast mode [ 23.670031][ T297] bridge_slave_1: entered promiscuous mode [ 23.787691][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.794825][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.802142][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.809176][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.832316][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.839401][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.846670][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.853748][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.864819][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.871918][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.879219][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.886238][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.895183][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.902247][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.909539][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.916642][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.939902][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.947177][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.954518][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.962391][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.969658][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.976829][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.984298][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.991551][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.032420][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.039498][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.047515][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.054567][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.063009][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.070060][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.077537][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.084601][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.093295][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.100366][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.113651][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.120805][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.139117][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.146162][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.160563][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.167592][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.185423][ T295] veth0_vlan: entered promiscuous mode [ 24.207608][ T295] veth1_macvtap: entered promiscuous mode [ 24.220793][ T297] veth0_vlan: entered promiscuous mode [ 24.244775][ T297] veth1_macvtap: entered promiscuous mode [ 24.261504][ T294] veth0_vlan: entered promiscuous mode [ 24.272330][ T296] veth0_vlan: entered promiscuous mode [ 24.292593][ T294] veth1_macvtap: entered promiscuous mode [ 24.300291][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.321836][ T296] veth1_macvtap: entered promiscuous mode [ 24.376150][ T321] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.394662][ T320] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1'. [ 24.647936][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.798896][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.820427][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 24.840865][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.859052][ T10] usb 2-1: config 0 descriptor?? [ 25.073579][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 25.085115][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 25.102116][ T10] usb 2-1: USB disconnect, device number 2 [ 25.207897][ T311] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.358641][ T311] usb 1-1: Using ep0 maxpacket: 32 [ 25.367095][ T311] usb 1-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 25.389126][ T311] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 25.398294][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.413267][ T311] usb 1-1: Product: syz [ 25.417672][ T311] usb 1-1: Manufacturer: syz [ 25.425227][ T311] usb 1-1: SerialNumber: syz [ 25.434695][ T355] netlink: 5892 bytes leftover after parsing attributes in process `syz.3.11'. [ 25.446305][ T311] usb 1-1: config 0 descriptor?? [ 25.454881][ T311] usb 1-1: bad CDC descriptors [ 25.460082][ T311] usb 1-1: unsupported MDLM descriptors [ 25.470009][ T355] FAULT_INJECTION: forcing a failure. [ 25.470009][ T355] name failslab, interval 1, probability 0, space 0, times 1 [ 25.482649][ T355] CPU: 0 UID: 0 PID: 355 Comm: syz.3.11 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 25.482680][ T355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 25.482699][ T355] Call Trace: [ 25.482705][ T355] [ 25.482712][ T355] __dump_stack+0x21/0x30 [ 25.482737][ T355] dump_stack_lvl+0x140/0x1c0 [ 25.482753][ T355] ? __cfi_dump_stack_lvl+0x10/0x10 [ 25.482772][ T355] ? kasan_save_alloc_info+0x3a/0x50 [ 25.482800][ T355] dump_stack+0x19/0x20 [ 25.482816][ T355] should_fail_ex+0x3c2/0x510 [ 25.482835][ T355] should_failslab+0xac/0x100 [ 25.482855][ T355] kmem_cache_alloc_noprof+0x42/0x410 [ 25.482880][ T355] ? anon_vma_fork+0xf4/0x610 [ 25.482907][ T355] anon_vma_fork+0xf4/0x610 [ 25.482930][ T355] ? dup_userfaultfd+0xaa/0x700 [ 25.482955][ T355] copy_mm+0xc14/0x1da0 [ 25.482982][ T355] ? copy_signal+0x6c0/0x6c0 [ 25.483005][ T355] ? _raw_spin_lock+0x92/0x120 [ 25.483024][ T355] ? __asan_memset+0x39/0x50 [ 25.483047][ T355] ? __init_rwsem+0x110/0x1f0 [ 25.483068][ T355] ? copy_signal+0x4ef/0x6c0 [ 25.483091][ T355] copy_process+0x12d1/0x33a0 [ 25.483117][ T355] ? __cfi_copy_process+0x10/0x10 [ 25.483142][ T355] kernel_clone+0x233/0x810 [ 25.483165][ T355] ? __cfi_kernel_clone+0x10/0x10 [ 25.483188][ T355] ? do_futex+0x32a/0x510 [ 25.483210][ T355] __x64_sys_clone+0x1b7/0x230 [ 25.483235][ T355] ? __cfi___x64_sys_clone+0x10/0x10 [ 25.483261][ T355] ? __kasan_check_write+0x18/0x20 [ 25.483285][ T355] ? fpregs_restore_userregs+0x11c/0x260 [ 25.483310][ T355] ? switch_fpu_return+0x12/0x20 [ 25.483333][ T355] x64_sys_call+0x2b3c/0x2ee0 [ 25.483353][ T355] do_syscall_64+0x57/0xf0 [ 25.483372][ T355] ? clear_bhb_loop+0x50/0xa0 [ 25.483395][ T355] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.483418][ T355] RIP: 0033:0x7f127c19fb19 [ 25.483443][ T355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.483458][ T355] RSP: 002b:00007f127d12dfd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 25.483483][ T355] RAX: ffffffffffffffda RBX: 00007f127c425fa0 RCX: 00007f127c19fb19 [ 25.483498][ T355] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 25.483510][ T355] RBP: 00007f127c237b70 R08: 0000000000000000 R09: 0000000000000000 [ 25.483522][ T355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 25.483534][ T355] R13: 00007f127c426038 R14: 00007f127c425fa0 R15: 00007fffe96b39c8 [ 25.483551][ T355] [ 25.654335][ T311] usb 1-1: USB disconnect, device number 2 [ 25.717929][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 25.768895][ T357] syz.3.12 (357) used obsolete PPPIOCDETACH ioctl [ 25.779340][ T343] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.910579][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.921886][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 25.931058][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.952584][ T10] usb 2-1: config 0 descriptor?? [ 26.172847][ T363] netlink: 'syz.0.13': attribute type 3 has an invalid length. [ 26.449749][ T379] kvm: kvm [378]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010004) = 0x8000 [ 26.462496][ T379] kvm: kvm [378]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010004) = 0x8000 [ 26.475350][ T379] kvm: kvm [378]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010000) = 0x8000 [ 26.484652][ T379] kvm: kvm [378]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010002) = 0x8000 [ 26.501977][ T379] kvm: kvm [378]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010004) = 0x8000 [ 26.514574][ T36] kauditd_printk_skb: 70 callbacks suppressed [ 26.514589][ T36] audit: type=1400 audit(1794168993.830:144): avc: denied { write } for pid=384 comm="syz.3.19" name="001" dev="devtmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 26.543846][ T379] kvm: kvm [378]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010000) = 0x8000 [ 26.568799][ T379] kvm: kvm [378]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010002) = 0x8000 [ 26.591929][ T379] kvm: kvm [378]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010004) = 0x8000 [ 26.601494][ T379] kvm: kvm [378]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010000) = 0x8000 [ 26.611005][ T379] kvm: kvm [378]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010002) = 0x8000 [ 26.878741][ T36] audit: type=1400 audit(1794168994.200:145): avc: denied { create } for pid=388 comm="syz.0.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 26.898304][ T10] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 26.898980][ T10] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input4 [ 26.911863][ T36] audit: type=1400 audit(1794168994.220:146): avc: denied { ioctl } for pid=388 comm="syz.0.20" path="socket:[4507]" dev="sockfs" ino=4507 ioctlcmd=0x52c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 26.960408][ T36] audit: type=1400 audit(1794168994.260:147): avc: denied { mount } for pid=388 comm="syz.0.20" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 27.007849][ T36] audit: type=1400 audit(1794168994.320:148): avc: denied { write } for pid=388 comm="syz.0.20" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.047863][ T36] audit: type=1400 audit(1794168994.320:149): avc: denied { read } for pid=388 comm="syz.0.20" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.087876][ T36] audit: type=1326 audit(1794168994.380:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=388 comm="syz.0.20" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd3de99fb19 code=0x0 [ 27.114172][ T393] input: syz0 as /devices/virtual/input/input5 [ 27.135998][ T36] audit: type=1400 audit(1794168994.440:151): avc: denied { read } for pid=95 comm="acpid" name="event4" dev="devtmpfs" ino=449 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.180723][ T36] audit: type=1400 audit(1794168994.440:152): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=449 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.247868][ T36] audit: type=1400 audit(1794168994.440:153): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=449 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.282888][ T395] fuse: Bad value for 'rootmode' [ 27.528502][ T311] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 27.803412][ T401] ======================================================= [ 27.803412][ T401] WARNING: The mand mount option has been deprecated and [ 27.803412][ T401] and is ignored by this kernel. Remove the mand [ 27.803412][ T401] option from the mount to silence this warning. [ 27.803412][ T401] ======================================================= [ 27.838708][ T358] Bluetooth: hci0: command 0x1003 tx timeout [ 27.845084][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 27.856895][ T399] rust_binder: 398:399 transaction call to 398:0 failed ENOSPC, code 1 size 0-65400 line process.rs:1093 [ 27.898853][ T400] SELinux: security_context_str_to_sid (syt|v\{‹) failed with errno=-22 [ 27.919879][ T10] rust_binder: 398: undelivered TRANSACTION_ERROR: 29201 [ 28.053075][ T410] overlay: ./file0 is not a directory [ 28.213142][ T313] rust_binder: 414: undelivered TRANSACTION_ERROR: 29189 [ 28.358975][ T9] usb 2-1: USB disconnect, device number 3 [ 28.359026][ C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 28.553393][ T435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32'. [ 28.564184][ T435] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=435 comm=syz.1.32 [ 28.576868][ T435] x_tables: duplicate underflow at hook 1 [ 28.677879][ T311] usb 4-1: device descriptor read/64, error -71 [ 28.937871][ T311] usb 4-1: Using ep0 maxpacket: 16 [ 28.943514][ T311] usb 4-1: too many configurations: 118, using maximum allowed: 8 [ 28.952654][ T311] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 28.960329][ T311] usb 4-1: can't read configurations, error -61 [ 29.087882][ T311] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 29.237875][ T311] usb 4-1: Using ep0 maxpacket: 16 [ 29.243479][ T311] usb 4-1: too many configurations: 118, using maximum allowed: 8 [ 29.252646][ T311] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 29.260290][ T311] usb 4-1: can't read configurations, error -61 [ 29.266774][ T311] usb usb4-port1: attempt power cycle [ 29.617931][ T311] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 29.638224][ T311] usb 4-1: Using ep0 maxpacket: 16 [ 29.643822][ T311] usb 4-1: too many configurations: 118, using maximum allowed: 8 [ 29.653051][ T311] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 29.660724][ T311] usb 4-1: can't read configurations, error -61 [ 29.787997][ T311] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 29.808240][ T311] usb 4-1: Using ep0 maxpacket: 16 [ 29.814284][ T311] usb 4-1: too many configurations: 118, using maximum allowed: 8 [ 29.823456][ T311] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 29.831522][ T311] usb 4-1: can't read configurations, error -61 [ 29.838234][ T311] usb usb4-port1: unable to enumerate USB device [ 30.247760][ T456] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=456 comm=syz.1.37 [ 30.607874][ T311] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 30.759694][ T311] usb 2-1: config 192 has an invalid descriptor of length 146, skipping remainder of the config [ 30.770270][ T311] usb 2-1: config 192 has 0 interfaces, different from the descriptor's value: 1 [ 30.781019][ T311] usb 2-1: New USB device found, idVendor=d3e1, idProduct=000f, bcdDevice=56.00 [ 30.790167][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.798527][ T311] usb 2-1: Product: syz [ 30.802742][ T311] usb 2-1: Manufacturer: syz [ 30.807383][ T311] usb 2-1: SerialNumber: syz [ 31.016337][ T466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.025565][ T466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.188328][ T311] usb 2-1: USB disconnect, device number 4 [ 31.705303][ T36] kauditd_printk_skb: 47 callbacks suppressed [ 31.705319][ T36] audit: type=1400 audit(1794168999.020:201): avc: denied { create } for pid=473 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 31.756043][ T36] audit: type=1400 audit(1794168999.050:202): avc: denied { setattr } for pid=473 comm="syz.1.43" name="" dev="pipefs" ino=2873 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 31.858178][ T36] audit: type=1400 audit(1794168999.180:203): avc: denied { connect } for pid=475 comm="syz.1.44" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.879847][ T36] audit: type=1400 audit(1794168999.180:204): avc: denied { bind } for pid=475 comm="syz.1.44" laddr=fe80::102c:4eff:fe66:755e lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.908464][ T36] audit: type=1400 audit(1794168999.180:205): avc: denied { name_bind } for pid=475 comm="syz.1.44" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 31.929230][ T36] audit: type=1400 audit(1794168999.180:206): avc: denied { node_bind } for pid=475 comm="syz.1.44" saddr=fc00:: src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 31.967916][ T479] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.980993][ T36] audit: type=1400 audit(1794168999.300:207): avc: denied { setopt } for pid=477 comm="syz.1.45" laddr=::ffff:127.0.0.1 lport=20001 faddr=::ffff:127.0.0.1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.089220][ T36] audit: type=1400 audit(1794168999.410:208): avc: denied { write } for pid=482 comm="syz.0.46" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 32.132384][ T488] IPv6: A: Disabled Multicast RS [ 32.132497][ T36] audit: type=1400 audit(1794168999.450:209): avc: denied { mount } for pid=487 comm="syz.0.47" name="/" dev="ramfs" ino=5051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 32.229023][ T495] netlink: 'syz.3.48': attribute type 4 has an invalid length. [ 32.248886][ T495] netlink: 'syz.3.48': attribute type 4 has an invalid length. [ 32.265735][ T36] audit: type=1400 audit(1794168999.580:210): avc: denied { create } for pid=494 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 32.332355][ T501] ================================================================== [ 32.340463][ T501] BUG: KASAN: slab-use-after-free in snapshot_ctr+0x586/0x1350 [ 32.348029][ T501] Read of size 8 at addr ffff88811e73b018 by task syz.0.50/501 [ 32.355576][ T501] [ 32.357900][ T501] CPU: 1 UID: 0 PID: 501 Comm: syz.0.50 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 32.357927][ T501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 32.357940][ T501] Call Trace: [ 32.357946][ T501] [ 32.357954][ T501] __dump_stack+0x21/0x30 [ 32.357975][ T501] dump_stack_lvl+0x140/0x1c0 [ 32.357993][ T501] ? __cfi_dump_stack_lvl+0x10/0x10 [ 32.358011][ T501] ? __cfi__printk+0x10/0x10 [ 32.358040][ T501] print_address_description+0x71/0x210 [ 32.358060][ T501] print_report+0x4a/0x70 [ 32.358076][ T501] kasan_report+0x162/0x1a0 [ 32.358098][ T501] ? snapshot_ctr+0x586/0x1350 [ 32.358119][ T501] ? snapshot_ctr+0x586/0x1350 [ 32.358141][ T501] __asan_report_load8_noabort+0x18/0x20 [ 32.358166][ T501] snapshot_ctr+0x586/0x1350 [ 32.358187][ T501] ? dm_split_args+0xa1/0x740 [ 32.358204][ T501] ? __cfi_snapshot_ctr+0x10/0x10 [ 32.358223][ T501] ? dm_split_args+0x5d0/0x740 [ 32.358242][ T501] dm_table_add_target+0x59f/0xcb0 [ 32.358262][ T501] table_load+0x2eb/0x7d0 [ 32.358286][ T501] ? __check_object_size+0x99/0x870 [ 32.358312][ T501] ? __cfi_table_load+0x10/0x10 [ 32.358336][ T501] ? __kasan_check_write+0x18/0x20 [ 32.358360][ T501] ? __cfi_table_load+0x10/0x10 [ 32.358383][ T501] dm_ctl_ioctl+0x8f3/0xde0 [ 32.358408][ T501] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 32.358435][ T501] ? __fget_files+0x2bc/0x330 [ 32.358455][ T501] ? bpf_lsm_file_ioctl+0xd/0x20 [ 32.358475][ T501] ? security_file_ioctl+0x3e/0x110 [ 32.358501][ T501] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 32.358524][ T501] __se_sys_ioctl+0x123/0x1b0 [ 32.358544][ T501] __x64_sys_ioctl+0x7f/0xa0 [ 32.358563][ T501] x64_sys_call+0x1878/0x2ee0 [ 32.358582][ T501] do_syscall_64+0x57/0xf0 [ 32.358601][ T501] ? clear_bhb_loop+0x50/0xa0 [ 32.358625][ T501] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.358649][ T501] RIP: 0033:0x7fd3de99fb19 [ 32.358674][ T501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.358690][ T501] RSP: 002b:00007fd3df804028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 32.358712][ T501] RAX: ffffffffffffffda RBX: 00007fd3dec25fa0 RCX: 00007fd3de99fb19 [ 32.358727][ T501] RDX: 0000200000000240 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 32.358740][ T501] RBP: 00007fd3dea37b70 R08: 0000000000000000 R09: 0000000000000000 [ 32.358754][ T501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.358766][ T501] R13: 00007fd3dec26038 R14: 00007fd3dec25fa0 R15: 00007fffc1f804b8 [ 32.358783][ T501] [ 32.358790][ T501] [ 32.619012][ T501] Allocated by task 501: [ 32.623254][ T501] kasan_save_track+0x3e/0x80 [ 32.627941][ T501] kasan_save_alloc_info+0x3a/0x50 [ 32.633064][ T501] __kasan_kmalloc+0x96/0xb0 [ 32.637662][ T501] __kmalloc_cache_node_noprof+0x225/0x430 [ 32.643487][ T501] dm_get_table_device+0x1e3/0x6c0 [ 32.648608][ T501] dm_get_device+0x32b/0x7f0 [ 32.653209][ T501] snapshot_ctr+0x292/0x1350 [ 32.657808][ T501] dm_table_add_target+0x59f/0xcb0 [ 32.662925][ T501] table_load+0x2eb/0x7d0 [ 32.667266][ T501] dm_ctl_ioctl+0x8f3/0xde0 [ 32.671780][ T501] __se_sys_ioctl+0x123/0x1b0 [ 32.676463][ T501] __x64_sys_ioctl+0x7f/0xa0 [ 32.681056][ T501] x64_sys_call+0x1878/0x2ee0 [ 32.685743][ T501] do_syscall_64+0x57/0xf0 [ 32.690176][ T501] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.696083][ T501] [ 32.698409][ T501] Freed by task 501: [ 32.702298][ T501] kasan_save_track+0x3e/0x80 [ 32.706980][ T501] kasan_save_free_info+0x44/0x50 [ 32.712019][ T501] __kasan_slab_free+0x5f/0x80 [ 32.716792][ T501] kfree+0x158/0x440 [ 32.720697][ T501] dm_put_table_device+0x298/0x2e0 [ 32.725816][ T501] dm_get_device+0x571/0x7f0 [ 32.730407][ T501] snapshot_ctr+0x435/0x1350 [ 32.735009][ T501] dm_table_add_target+0x59f/0xcb0 [ 32.740128][ T501] table_load+0x2eb/0x7d0 [ 32.744470][ T501] dm_ctl_ioctl+0x8f3/0xde0 [ 32.748981][ T501] __se_sys_ioctl+0x123/0x1b0 [ 32.753669][ T501] __x64_sys_ioctl+0x7f/0xa0 [ 32.758268][ T501] x64_sys_call+0x1878/0x2ee0 [ 32.762953][ T501] do_syscall_64+0x57/0xf0 [ 32.767374][ T501] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.773274][ T501] [ 32.775592][ T501] The buggy address belongs to the object at ffff88811e73b000 [ 32.775592][ T501] which belongs to the cache kmalloc-96 of size 96 [ 32.789473][ T501] The buggy address is located 24 bytes inside of [ 32.789473][ T501] freed 96-byte region [ffff88811e73b000, ffff88811e73b060) [ 32.803108][ T501] [ 32.805437][ T501] The buggy address belongs to the physical page: [ 32.811857][ T501] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11e73b [ 32.820709][ T501] anon flags: 0x4000000000000000(zone=1) [ 32.826341][ T501] page_type: f5(slab) [ 32.830328][ T501] raw: 4000000000000000 ffff888100041280 0000000000000000 dead000000000001 [ 32.839003][ T501] raw: 0000000000000000 0000000080200020 00000001f5000000 0000000000000000 [ 32.847586][ T501] page dumped because: kasan: bad access detected [ 32.854006][ T501] page_owner tracks the page as allocated [ 32.859722][ T501] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 150, tgid 150 (dhcpcd), ts 5545416389, free_ts 0 [ 32.877357][ T501] post_alloc_hook+0x37d/0x3b0 [ 32.882141][ T501] prep_new_page+0x2d/0x180 [ 32.886661][ T501] get_page_from_freelist+0x4aea/0x4ba0 [ 32.892222][ T501] __alloc_pages_noprof+0x35a/0x7e0 [ 32.897432][ T501] alloc_slab_page+0x6b/0x1e0 [ 32.902116][ T501] allocate_slab+0x69/0x430 [ 32.906623][ T501] ___slab_alloc+0x591/0x8c0 [ 32.911221][ T501] __kmalloc_cache_noprof+0x2cd/0x470 [ 32.916609][ T501] kernfs_fop_open+0x716/0xd50 [ 32.921382][ T501] do_dentry_open+0x97c/0x1510 [ 32.926160][ T501] vfs_open+0x86/0x240 [ 32.930241][ T501] path_openat+0x2c49/0x35a0 [ 32.934836][ T501] do_filp_open+0x1f2/0x440 [ 32.939348][ T501] do_sys_openat2+0x134/0x1d0 [ 32.944032][ T501] __x64_sys_openat+0x13a/0x170 [ 32.948888][ T501] x64_sys_call+0xe69/0x2ee0 [ 32.953484][ T501] page_owner free stack trace missing [ 32.958855][ T501] [ 32.961179][ T501] Memory state around the buggy address: [ 32.966803][ T501] ffff88811e73af00: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 32.974868][ T501] ffff88811e73af80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 32.982933][ T501] >ffff88811e73b000: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 32.990990][ T501] ^ [ 32.995835][ T501] ffff88811e73b080: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 33.003896][ T501] ffff88811e73b100: 00 00 00 00 00 00 00 00 03 fc fc fc fc fc fc fc [ 33.011956][ T501] ================================================================== [ 33.029599][ T501] Disabling lock debugging due to kernel taint [ 33.040196][ T501] device-mapper: table: 252:0: device 1:1 not in table devices list [ 33.057848][ T501] device-mapper: table: 252:0: snapshot: COW device cannot be the same as origin device (-EINVAL) [ 33.089100][ T501] device-mapper: ioctl: error adding target to table [ 33.103469][ T501] device-mapper: table: 252:0: dm_table_destroy: dm_put_device call missing for 1:1