last executing test programs: 4m21.162107486s ago: executing program 1 (id=120): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x1, 0x8000000000005, 0x5, 0x80006, 0xfffffffe, 0x7}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@empty, 0x0, 0x4, 0x1, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4040095}, 0x40010) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 4m20.8810972s ago: executing program 1 (id=123): setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 4m18.770801027s ago: executing program 1 (id=132): r0 = syz_socket_connect_nvme_tcp() ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000380)={0x6, 0x8, 0x1, 0x3, 0x1, [0x10, 0xb8, 0x81, 0x3]}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400eeffb7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000050000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x71, 0x1, 0x401}]}, 0x10) getsockopt$sock_buf(r1, 0x1, 0x1a, 0xfffffffffffffffd, &(0x7f0000000100)=0x4d) timer_create(0x5, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 4m18.459659056s ago: executing program 1 (id=134): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_follow}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='p:mygroup/myevent ./dummy:0x2', 0x1d) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='p:mygroup/_yevent ./dummy:0x2', 0x1d) 4m18.333557479s ago: executing program 1 (id=135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r1, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80) connect(r1, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) 4m17.947630586s ago: executing program 1 (id=138): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r2, &(0x7f0000000180)="01010101", 0x4) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340), &(0x7f0000000380), 0x0) 4m17.654746842s ago: executing program 32 (id=138): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r2, &(0x7f0000000180)="01010101", 0x4) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340), &(0x7f0000000380), 0x0) 12.739037465s ago: executing program 3 (id=717): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0xc, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0xae7, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x127}}}, &(0x7f0000000300)=0x0) r9 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r6, 0x2) r10 = syz_open_pts(0xffffffffffffffff, 0x400000) futex(0x0, 0x85, 0x2000000, 0x0, 0x0, 0xa0090199) ioctl$TIOCMBIC(r10, 0x5417, &(0x7f0000000000)=0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r11 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r11, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x80002, 0x0) ioperm(0xe, 0x9, 0x20) syz_ublk_setup_queues(r9, r8, &(0x7f0000000180)={0x0, 0x3e0e, 0x400, 0x0, 0x28e}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8bf, 0x40, 0x2, 0x9a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x200, 0x0, 0x3b2, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766c, 0x800, 0x0, 0x16a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x400, 0x43, 0x201}}], 0x4, &(0x7f0000001f40)={0x2e, 0x44, 0x0, r9, 0xc0107523, 0x0, 0x0, 0x0, 0x0, {0x10}, 0x0, r7, '\x00', {0x3, 0xb59, 0x100104, 0x0}}, &(0x7f0000000280)) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040f0400001c04"], 0x7) syz_open_dev$I2C(&(0x7f0000001380), 0x200, 0x1) 11.909455192s ago: executing program 2 (id=719): io_uring_setup(0x62d2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x4) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r3, 0x1) landlock_restrict_self(0xffffffffffffffff, 0x1f) 8.90857774s ago: executing program 4 (id=725): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000001700)="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", 0x101}], 0x1}}], 0x1, 0x2090) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x2090) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) writev(r1, 0x0, 0x0) write(r1, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000300), 0x4, 0x400000) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 7.065381864s ago: executing program 0 (id=731): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0xf2, 0x4, 0x4, @empty, @empty, 0x8, 0x80, 0x4, 0x6}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl(r5, 0x4048aecb, &(0x7f0000000100)) ioctl(r5, 0xc048aeca, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0) mkdirat(r6, 0x0, 0x1ff) unlinkat(r6, &(0x7f0000000680)='nullb1\x00', 0x200) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TIOCSWINSZ(r7, 0x5414, &(0x7f0000000040)={0x1, 0x4, 0x446, 0x8}) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0xffffffffffffff0b, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000010) 6.958951039s ago: executing program 3 (id=732): socket$packet(0x11, 0x3, 0x300) openat$audio1(0xffffffffffffff9c, 0x0, 0x203a2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000940), 0x0, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4043, 0x8a, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x3, 0x1ae, 0x0, r0}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x617c, 0x80, 0x2008, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x4000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4e48, 0x400, 0x2, 0x367}}], 0x1, &(0x7f0000000840)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xffb9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, 0x0) syz_ublk_add_dev(r7, r8, r9, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x20fb87, 0x400, 0xfffffffd, 0x12b}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000380), 0x200000, 0x0) 6.109456567s ago: executing program 2 (id=733): syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x800}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7d178ce}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0xa}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xa}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1a}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x11}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x28}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000040}, 0x8014) unshare(0x26020480) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f0000000240)='ns/time_for_children\x00') r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="d800000018008105e00212ba0d8105040a020200020f108b067c55a1bc000900b80006990200000015000500fc038178a80015000338004002000c0901ac040000d67f6f947a7100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e97030000000000000000000000000081e1df1a0000008dc5fb510162", 0xd8}], 0x1}, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000001c0)) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000003c0), 0x402180, 0x0) ioctl$BLKCLOSEZONE(r4, 0x40101287, &(0x7f0000000400)={0x5, 0x4}) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x2, 0x2000) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x84, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x58, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}]}]}]}], {0x14, 0x10}}, 0x124}}, 0x0) 5.893537868s ago: executing program 0 (id=734): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') mremap(&(0x7f0000aaf000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mknod$loop(&(0x7f0000000040)='./file0\x00', 0xfff, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000002380)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f00000023c0)="3e0000000b000340000000000000400000", 0x11) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000140)={0x28, 0x5, r4, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000180)={0x18, r4}) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x80, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002300)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000053c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000073c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007480)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000074c0)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8652b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f00000094c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000009580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r6, r7, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000009600)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r8, &(0x7f0000009640)='lp\x00', 0xfffffdef) dup2(r8, r2) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000009680)=ANY=[@ANYBLOB="1201000000000010711e092000000000000109022400010000"], 0x0) write$FUSE_NOTIFY_POLL(r2, &(0x7f00000096c0)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) read$FUSE(r0, &(0x7f0000003380)={0x2020}, 0x2020) 5.790811355s ago: executing program 2 (id=735): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000200)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2800) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000019280)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000019380), 0x22242, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000193c0)={0x0, 0x0, &(0x7f0000019400)={&(0x7f0000019440)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a300000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000009608000440000000220500020089000000380001800c0001006269747769736500280002800800034000000004080001400000001408000240000000050000000000000000040005800900010073797a30"], 0x10c}, 0x1, 0x0, 0x0, 0x1}, 0x0) shutdown(r3, 0x2) r6 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000407e04ffff00000000000109022d000100"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) 5.663293257s ago: executing program 3 (id=736): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000280)="94", 0xf000}, {0x0}], 0x2) mknodat(0xffffffffffffff9c, 0x0, 0x2, 0x4) read$FUSE(0xffffffffffffffff, &(0x7f0000000840)={0x2020}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000002940), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$SOUND_MIXER_WRITE_RECSRC(0xffffffffffffffff, 0xc0044dff, &(0x7f00000003c0)=0x4) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000440)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000800)=0xe8) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0xa5) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)) 4.568339494s ago: executing program 2 (id=737): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a0103070000002cbd7000fddbdf2105001a007f00000100000000000000000000000000ffff2700108aaa56f7369ba8"], 0x38}}, 0x40004) socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./cifs\x00', &(0x7f0000000380)='cifs\x00', 0x0, &(0x7f00000004c0)='source=//127.0.0.1/test,username=root,password=root,port=12345,handletimeout=1\x00') r1 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x8e) write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000006c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000780), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f00000007c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 3.926942156s ago: executing program 4 (id=738): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000009c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@remote, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000b00), 0x2e9, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@newsa={0xfc, 0x16, 0x633, 0x0, 0x80000000, {{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@remote, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xc, 0x0, 0x5}, {0x4}, 0x2, 0x2, 0x2, 0x4, 0x18}, [@lastused={0xc, 0xf, 0xfffffffffffffe0c}]}, 0xfc}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000500)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@assoc={0x18, 0x117, 0x4, 0xffffffbb}], 0x18, 0x408d0}], 0x1, 0xc0001) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1de) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x24, 0x28, 0x2, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xffff, 0xfff1}, {0x10, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000780)={'bridge_slave_0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x28}) 3.742397172s ago: executing program 3 (id=739): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x20000) mkdir(&(0x7f0000000000)='./proc\x00', 0x1ff) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) readlinkat(0xffffffffffffff9c, 0x0, &(0x7f0000000200)=""/128, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x90) write(r3, &(0x7f00000002c0)='p:-est/event1 ./file0:0x0 @', 0x1b) ioctl$BLKGETDISKSEQ(r1, 0x80081280, &(0x7f0000000180)) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @redirect={0x8, 0x0, 0x0, @loopback, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast1}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 3.569537905s ago: executing program 3 (id=740): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, 0x0, 0x0) sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket(0x15, 0x5, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011001845d55403a090f056d020102030109021200010402905d0904"], 0x0) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(r1, r2, r3, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r5, &(0x7f0000000180)={0x0, 0x20fb89, 0x800, 0x1, 0x32c}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800002, 0x4, 0x1006, 0x15a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x400, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x871629fa8e45411f, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8a2, 0x0, 0x0}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) openat$sndseq(0xffffff9c, &(0x7f00000002c0), 0x900) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r6, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20040894) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 2.971550827s ago: executing program 5 (id=743): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = io_uring_setup(0x1f8c, &(0x7f00000003c0)={0x0, 0x8c63b, 0x1, 0x0, 0xb6}) io_uring_enter(r1, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180), 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r2, 0x40786e88, &(0x7f0000000d00)={{0x0, 0x0, 0x40, 0x3, 0x10000}, {0x0, 0x0, 0x10, 0x7, 0x4}, {&(0x7f0000000c00)=[0x4], 0x1, 0x8, 0x40, 0x800}, {&(0x7f0000000c40)=[{0x8, 0x80, 0x1, 0x6, 0x7983}, {0xe651, 0x5, 0x9, 0x1}], 0x2, 0x28, 0x0, 0x2}, {&(0x7f0000000cc0), 0x0, 0x8, 0x6, 0x6}}) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) 2.966341056s ago: executing program 4 (id=744): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x14b145, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2.702688383s ago: executing program 0 (id=745): openat$sysfs(0xffffffffffffff9c, 0x0, 0x40, 0x102) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff, 0xffffffff, 0x2000, 0xa8, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f00000003c0)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000400)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x80000000006, 0x6]}}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f0000000240)={0x11, 0x8, 0x1, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000080)=0xffffffff, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r4, 0x0) write(r4, &(0x7f0000000000)="0100", 0x2) landlock_restrict_self(r3, 0x5) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 2.699672819s ago: executing program 5 (id=746): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$inet6(r0, 0x0, 0x0, 0x20044040) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000000010000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) ioctl$COMEDI_INSNLIST(r6, 0x8010640b, &(0x7f0000000080)={0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) socket$can_raw(0x1d, 0x3, 0x1) 2.639280183s ago: executing program 4 (id=747): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) readv(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) open_by_handle_at(r2, &(0x7f00000002c0)=@ceph_nfs_confh={0x10, 0x2, {0x8, 0x6d1}}, 0x4f0a80) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000040)={0x2, 0xfffffff4, {0x0}, {0xee01}, 0x7, 0x1}) sched_setparam(r5, &(0x7f0000000180)=0x3) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x4000000000003, 0x0, 0x9, 0x800, 0x6e6a, 0x2000000000000}, 0x0, &(0x7f0000000080)={0x5, 0x3, 0x5}, 0x0, 0x0) 2.364405267s ago: executing program 5 (id=748): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000001700)="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", 0x101}], 0x1}}], 0x1, 0x2090) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x2090) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) writev(r1, 0x0, 0x0) write(r1, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000300), 0x4, 0x400000) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 2.039298662s ago: executing program 5 (id=749): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x7}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3ae, 0x4, 0x69b0, 0x9, 0xffffffff, 0xbb31}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) r9 = socket$unix(0x1, 0x5, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56441, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xb, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xfff, 0x7, 0x7, 0x5, 0xfffffdff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xfffd, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2400c045}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.998788388s ago: executing program 2 (id=750): kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, &(0x7f0000000140)={0x10, 0x0, "51910d7f4d9f10167183b21db562be8c"}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4044811}, 0xc080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x80) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1bf5b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 1.33707194s ago: executing program 3 (id=751): r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config\x00', 0x1ff) mount(&(0x7f0000000300), &(0x7f0000000340)='./config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/usb_gadget/naa.5001405000000001\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f0000000040), 0x402, &(0x7f0000000080)=ANY=[@ANYRES32=r0]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x800004, 0xffffffffdf310f4f, 0x9a64, 0x8000, 0x200, 0xffeffffa, 0x0, 0x0, 0x4, 0x103}}, 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x11) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/nexus\x00', 0x2, 0x0) write(r4, &(0x7f00000005c0)='naa.', 0x4) 1.336242663s ago: executing program 2 (id=752): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000001700)="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", 0x101}], 0x1}}], 0x1, 0x2090) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x2090) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) writev(r1, 0x0, 0x0) write(r1, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000300), 0x4, 0x400000) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) 1.274844612s ago: executing program 5 (id=753): epoll_create(0x9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xf, 0x204031, 0xffffffffffffffff, 0x2d5c000) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000500)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f00000005c0)=""/102392, 0x18ff8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80782, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000040)=0x1) 1.210641898s ago: executing program 4 (id=754): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000110)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/block/zram0/disksize\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000500)={'\x00', 0xaa, 0x95c1, 0x80000000, 0xffffffffffffffaa, 0x17f3, 0x0}) sched_getparam(r2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, r0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x2) write(r0, &(0x7f0000000150)='33554432\x00', 0x9) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) unshare(0x2a020400) pselect6(0x0, 0x0, 0x0, &(0x7f0000000180)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x7800, 0x40, 0x709, 0x3, {{0x6, 0x4, 0x2, 0x1, 0x18, 0x65, 0x0, 0x0, 0x2f, 0x0, @remote, @empty, {[@ra={0x94, 0x4}]}}}}}) 1.192249522s ago: executing program 0 (id=755): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x13e) socket$tipc(0x1e, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) time(&(0x7f00000002c0)) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x318, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000002, 0x2010, r0, 0xcd2e8000) open(&(0x7f00000004c0)='.\x00', 0x101480, 0x24) socket$nl_xfrm(0x10, 0x3, 0x6) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4098884, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@mcast1, @in=@private=0xa010100, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x2b}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x4000000001f, 0x2}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 397.526946ms ago: executing program 5 (id=756): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat$null(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x2, 0x103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x30) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x32400, 0x0) r5 = syz_open_dev$sg(0x0, 0x0, 0x0) setuid(0xee01) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000340)={0x53, 0xfffffffffffffffe, 0x6, 0x47, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="2a0615828890", 0x0, 0xfffffffd, 0x12, 0x0, 0x0}) fcntl$notify(r4, 0x402, 0x8000000e) openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0xc4040, 0xa0) mremap(&(0x7f00002ca000/0x2000)=nil, 0x2000, 0x3000, 0x7, &(0x7f000080b000/0x3000)=nil) shmget(0x0, 0x2000, 0x300, &(0x7f0000001000/0x2000)=nil) shmget(0x0, 0x3000, 0x4, &(0x7f0000001000/0x3000)=nil) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 143.364425ms ago: executing program 0 (id=757): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = io_uring_setup(0x1f8c, &(0x7f00000003c0)={0x0, 0x8c63b, 0x1, 0x0, 0xb6}) io_uring_enter(r1, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180), 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r2, 0x40786e88, &(0x7f0000000d00)={{0x0, 0x0, 0x40, 0x3, 0x10000}, {0x0, 0x0, 0x10, 0x7, 0x4}, {&(0x7f0000000c00)=[0x4], 0x1, 0x8, 0x40, 0x800}, {&(0x7f0000000c40)=[{0x8, 0x80, 0x1, 0x6, 0x7983}, {0xe651, 0x5, 0x9, 0x1}], 0x2, 0x28, 0x0, 0x2}, {&(0x7f0000000cc0), 0x0, 0x8, 0x6, 0x6}}) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) 457.77µs ago: executing program 0 (id=758): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = syz_open_dev$dvb_demux(&(0x7f0000000180), 0x2, 0x45200) ioctl$DVB_DEMUX_DMX_QUERYBUF(r0, 0xc0186f3d, &(0x7f0000000280)={0x4, 0xd7c, 0x0, 0x9, 0x4, 0x9}) ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, 0x0) symlinkat(&(0x7f0000000440)='./sys\x00', 0xffffffffffffff9c, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000001440)=[{{&(0x7f0000001480)={0xa, 0x4e23, 0x6, @mcast2, 0x10}, 0x1c, &(0x7f00000014c0)}}], 0x1, 0x1c010) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000001500)={0x10000000, 0x1c6a8b68, 0x6}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0}) mount(0x0, 0x0, &(0x7f0000001640)='sysfs\x00', 0x9048ef, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001680)='./file0\x00', 0x1, 0x0) write(r2, &(0x7f00000016c0)='usbip', 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000001740)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000001780)='./config\x00', &(0x7f00000017c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001880)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000018c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001940)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000001980)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f00000019c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001a80)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001ac0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001bc0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 4 (id=759): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000001700)="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", 0x101}], 0x1}}], 0x1, 0x2090) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x2090) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) writev(r1, 0x0, 0x0) write(r1, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000300), 0x4, 0x400000) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) kernel console output (not intermixed with test programs): etdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.457457][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 104.486676][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 104.492343][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 104.510058][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 104.511434][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 104.528966][ T31] audit: type=1400 audit(1791997669.042:388): avc: denied { mounton } for pid=6349 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 104.736572][ T66] bridge_slave_1: left allmulticast mode [ 104.736604][ T66] bridge_slave_1: left promiscuous mode [ 104.738360][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.777514][ T66] bridge_slave_0: left allmulticast mode [ 104.777528][ T66] bridge_slave_0: left promiscuous mode [ 104.777616][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.877034][ T5601] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 104.877163][ T5601] Bluetooth: hci1: Injecting HCI hardware error event [ 104.877945][ T52] Bluetooth: hci1: hardware error 0x00 [ 104.974763][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.976399][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.979046][ T66] bond0 (unregistering): Released all slaves [ 105.417100][ T66] hsr_slave_0: left promiscuous mode [ 105.417460][ T66] hsr_slave_1: left promiscuous mode [ 105.417851][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.417866][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.419357][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.419370][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.437047][ T66] veth1_macvtap: left promiscuous mode [ 105.437086][ T66] veth0_macvtap: left promiscuous mode [ 105.437160][ T66] veth1_vlan: left promiscuous mode [ 105.437218][ T66] veth0_vlan: left promiscuous mode [ 105.592265][ T66] team0 (unregistering): Port device team_slave_1 removed [ 105.596868][ T66] team0 (unregistering): Port device team_slave_0 removed [ 105.791507][ T6349] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.791651][ T6349] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.791742][ T6349] bridge_slave_0: entered allmulticast mode [ 105.793901][ T6349] bridge_slave_0: entered promiscuous mode [ 105.796513][ T6349] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.796630][ T6349] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.796719][ T6349] bridge_slave_1: entered allmulticast mode [ 105.798009][ T6349] bridge_slave_1: entered promiscuous mode [ 105.825134][ T6349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.827121][ T6349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.847058][ T6349] team0: Port device team_slave_0 added [ 105.849962][ T6349] team0: Port device team_slave_1 added [ 105.867057][ T6349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.867068][ T6349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.867086][ T6349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.868074][ T6349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.868083][ T6349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.868173][ T6349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.908016][ T6349] hsr_slave_0: entered promiscuous mode [ 105.911007][ T6349] hsr_slave_1: entered promiscuous mode [ 105.911453][ T6349] debugfs: 'hsr0' already exists in 'hsr' [ 105.911467][ T6349] Cannot create hsr debugfs directory [ 106.549667][ T5601] Bluetooth: hci3: command tx timeout [ 106.717231][ T6334] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 106.848017][ T6349] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 106.882214][ T6349] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.896511][ T6349] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 106.926824][ T6349] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.938568][ T52] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 106.945203][ T6349] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 106.971833][ T6349] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.977807][ T6349] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 107.032650][ T6349] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 107.253748][ T6394] ptp ptp0: new virtual clock ptp1 [ 107.253797][ T6394] ptp ptp0: guarantee physical clock free running [ 107.262450][ T6394] ptp ptp0: delete virtual clock ptp1 [ 107.650057][ T6394] ptp ptp0: only physical clock in use now [ 107.690673][ T5334] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 107.713526][ T6349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.742882][ T6349] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.751402][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.751477][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.778920][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.779007][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.849429][ T5334] usb 5-1: Using ep0 maxpacket: 16 [ 107.849973][ T5334] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 107.851931][ T5334] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.851963][ T5334] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 107.851994][ T5334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.911892][ T5334] usb 5-1: config 0 descriptor?? [ 108.166221][ T31] audit: type=1400 audit(1791997672.692:389): avc: denied { write } for pid=6390 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.291883][ T31] audit: type=1400 audit(1791997672.822:390): avc: denied { create } for pid=6433 comm="syz.0.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 108.312721][ T1221] libceph: connect (1)[c::]:6789 error -101 [ 108.312978][ T1221] libceph: mon0 (1)[c::]:6789 connect error [ 108.322698][ T1221] libceph: connect (1)[c::]:6789 error -101 [ 108.326637][ T1221] libceph: mon0 (1)[c::]:6789 connect error [ 108.338485][ T5788] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 108.338782][ T31] audit: type=1400 audit(1791997672.872:391): avc: denied { write } for pid=6432 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.384780][ T5334] HID 045e:07da: Invalid code 65791 type 1 [ 108.401631][ T6429] ceph: No mds server is up or the cluster is laggy [ 108.417690][ T5334] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0002/input/input6 [ 108.447356][ T5263] 8021q: adding VLAN 0 to HW filter on device eth1 [ 108.457288][ T6434] tc_dump_action: action bad kind [ 108.488232][ T5788] usb 4-1: Using ep0 maxpacket: 16 [ 108.489727][ T5788] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 108.497646][ T5788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.497663][ T5788] usb 4-1: Product: syz [ 108.497676][ T5788] usb 4-1: Manufacturer: syz [ 108.497689][ T5788] usb 4-1: SerialNumber: syz [ 108.563370][ T5334] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 108.590605][ T5788] usb 4-1: config 0 descriptor?? [ 108.601640][ T5788] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 108.618199][ T52] Bluetooth: hci3: command tx timeout [ 108.773385][ T6349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.825714][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.151'. [ 108.845999][ T31] audit: type=1400 audit(1791997673.372:392): avc: denied { mounton } for pid=6419 comm="syz.3.151" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 108.913815][ T5788] ssu100 4-1:0.0: probe with driver ssu100 failed with error -110 [ 108.924273][ T6449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.154'. [ 109.033537][ T9] usb 4-1: USB disconnect, device number 7 [ 109.100406][ T31] audit: type=1400 audit(1791997673.632:393): avc: denied { mounton } for pid=6455 comm="syz.0.155" path="/26/file0" dev="tmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 109.154458][ T6456] 9pnet: p9_errstr2errno: server reported unknown error 0000000 [ 109.797496][ T6472] netlink: 76 bytes leftover after parsing attributes in process `syz.0.157'. [ 109.817347][ T31] audit: type=1400 audit(1791997674.342:394): avc: denied { write } for pid=6445 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.870286][ T6349] veth0_vlan: entered promiscuous mode [ 109.891119][ T31] audit: type=1400 audit(1791997674.422:395): avc: denied { write } for pid=6475 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.892078][ T6349] veth1_vlan: entered promiscuous mode [ 109.959224][ T5334] usb 5-1: USB disconnect, device number 3 [ 109.993592][ T6349] veth0_macvtap: entered promiscuous mode [ 110.019190][ T6349] veth1_macvtap: entered promiscuous mode [ 110.039586][ T6349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.061567][ T6349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.081300][ T5826] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.081440][ T5826] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.081555][ T5826] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.124054][ T5263] 8021q: adding VLAN 0 to HW filter on device eth2 [ 110.129214][ T5825] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.143233][ T31] audit: type=1400 audit(1791997674.652:396): avc: denied { mount } for pid=6477 comm="syz.0.158" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 110.179818][ T6480] tipc: Started in network mode [ 110.179841][ T6480] tipc: Node identity ac1414aa, cluster identity 4711 [ 110.180887][ T6480] tipc: Enabling of bearer rejected, failed to enable media [ 110.182155][ T31] audit: type=1400 audit(1791997674.712:397): avc: denied { write } for pid=6481 comm="syz.3.160" name="anycast6" dev="proc" ino=4026533180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 110.183196][ T6482] 9p: Bad value for 'wfdno' [ 110.335114][ T6480] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 110.335676][ T6480] tipc: Enabled bearer , priority 10 [ 110.337025][ T5826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.337040][ T5826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.709096][ T52] Bluetooth: hci3: command tx timeout [ 110.828217][ T31] audit: type=1400 audit(1791997675.312:398): avc: denied { bind } for pid=6486 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 110.906564][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.906581][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.349761][ T10] tipc: Node number set to 2886997162 [ 112.142515][ T6509] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 112.331004][ T12] IPVS: starting estimator thread 0... [ 112.418934][ T6518] IPVS: using max 46 ests per chain, 110400 per kthread [ 112.482948][ T6522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.483023][ T6522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.494571][ T6517] SELinux: invalid class [ 112.502153][ T6522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.502169][ T6522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.587180][ T6517] SELinux: failed to load policy [ 112.705048][ T5263] 8021q: adding VLAN 0 to HW filter on device eth3 [ 112.719042][ T1221] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 112.858206][ T52] Bluetooth: hci3: command tx timeout [ 112.877403][ T1221] usb 4-1: New USB device found, idVendor=2040, idProduct=c601, bcdDevice= 0.01 [ 112.904136][ T1221] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.904326][ T1221] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.150091][ T1221] usb 4-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC' in warm state [ 113.183604][ T1221] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 113.183914][ T1221] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC) [ 113.183955][ T1221] usb 4-1: media controller created [ 113.231048][ T1221] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.265416][ T1221] usb 4-1: selecting invalid altsetting 1 [ 113.265433][ T1221] set interface failed [ 113.275214][ T1221] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 113.275685][ T1221] error writing reg: 0xff, val: 0x00 [ 113.338310][ T987] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 113.408054][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 113.408069][ T31] audit: type=1400 audit(1791997677.932:405): avc: denied { getopt } for pid=6524 comm="syz.3.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 113.444914][ T1221] dvb_usb_mxl111sf 4-1:1.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 113.473312][ T1221] usb 4-1: USB disconnect, device number 8 [ 113.493486][ T987] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 113.496906][ T987] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 113.496929][ T987] usb 6-1: config 0 has no interface number 0 [ 113.496962][ T987] usb 6-1: config 0 interface 41 has no altsetting 0 [ 113.502526][ T987] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.502546][ T987] usb 6-1: Product: syz [ 113.502559][ T987] usb 6-1: Manufacturer: syz [ 113.502570][ T987] usb 6-1: SerialNumber: syz [ 113.699239][ T987] usb 6-1: config 0 descriptor?? [ 114.186771][ T31] audit: type=1400 audit(1791997678.712:406): avc: denied { write } for pid=6536 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.290808][ T31] audit: type=1400 audit(1791997678.822:407): avc: denied { write } for pid=6560 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.292884][ T6562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.174'. [ 114.292902][ T6562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.174'. [ 114.523324][ T5263] 8021q: adding VLAN 0 to HW filter on device eth4 [ 115.492669][ T31] audit: type=1400 audit(1791997680.022:408): avc: denied { setopt } for pid=6582 comm="syz.0.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 115.521201][ T31] audit: type=1400 audit(1791997680.052:409): avc: denied { mount } for pid=6585 comm="syz.4.181" name="/" dev="autofs" ino=12048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 115.555511][ T31] audit: type=1400 audit(1791997680.082:410): avc: denied { bind } for pid=6582 comm="syz.0.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 115.735835][ T987] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 115.735854][ T987] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 115.736122][ T987] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 115.782935][ T987] usb 6-1: USB disconnect, device number 2 [ 115.992294][ T31] audit: type=1400 audit(1791997680.522:411): avc: denied { append } for pid=6597 comm="syz.3.183" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 117.432109][ T31] audit: type=1400 audit(1791997681.962:412): avc: denied { ioctl } for pid=6619 comm="syz.5.187" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 117.434710][ T31] audit: type=1400 audit(1791997681.962:413): avc: denied { create } for pid=6604 comm="syz.0.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 119.007964][ T6645] veth1_macvtap: left promiscuous mode [ 120.164461][ T31] audit: type=1400 audit(1791997684.692:414): avc: denied { append } for pid=6650 comm="syz.0.197" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 120.165170][ T6654] random: crng reseeded on system resumption [ 120.814010][ T31] audit: type=1400 audit(1791997685.342:415): avc: denied { bind } for pid=6662 comm="syz.3.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 120.814821][ T31] audit: type=1400 audit(1791997685.342:416): avc: denied { setopt } for pid=6662 comm="syz.3.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 120.994965][ T31] audit: type=1400 audit(1791997685.522:417): avc: denied { create } for pid=6671 comm="syz.4.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 121.064081][ T31] audit: type=1400 audit(1791997685.602:418): avc: denied { accept } for pid=6658 comm="syz.5.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 122.617288][ T31] audit: type=1400 audit(1791997687.142:419): avc: denied { read } for pid=6689 comm="syz.3.206" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 122.617593][ T31] audit: type=1400 audit(1791997687.142:420): avc: denied { open } for pid=6689 comm="syz.3.206" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 122.708184][ T31] audit: type=1400 audit(1791997687.222:421): avc: denied { mount } for pid=6685 comm="syz.5.205" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 123.252626][ T31] audit: type=1400 audit(1791997687.782:422): avc: denied { bind } for pid=6699 comm="syz.2.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 123.351437][ T31] audit: type=1400 audit(1791997687.882:423): avc: denied { unmount } for pid=6349 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 125.159369][ T6744] capability: warning: `syz.5.219' uses deprecated v2 capabilities in a way that may be insecure [ 125.381603][ T31] kauditd_printk_skb: 14 callbacks suppressed [ 125.381618][ T31] audit: type=1400 audit(1791997689.912:438): avc: denied { create } for pid=6747 comm="syz.5.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 127.265697][ T31] audit: type=1400 audit(1791997691.352:439): avc: denied { getopt } for pid=6761 comm="syz.3.223" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 127.319801][ T1143] IPVS: starting estimator thread 0... [ 127.343956][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.408199][ T6769] IPVS: using max 74 ests per chain, 177600 per kthread [ 128.078131][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 128.108059][ T31] audit: type=1400 audit(1791997692.632:440): avc: denied { read } for pid=6762 comm="syz.5.224" name="kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 128.108335][ T31] audit: type=1400 audit(1791997692.632:441): avc: denied { open } for pid=6762 comm="syz.5.224" path="/13/proc_mnt/kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 128.450238][ T31] audit: type=1400 audit(1791997692.982:442): avc: denied { write } for pid=6756 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.803392][ T6788] FAULT_INJECTION: forcing a failure. [ 128.803392][ T6788] name failslab, interval 1, probability 0, space 0, times 0 [ 128.803423][ T6788] CPU: 1 UID: 0 PID: 6788 Comm: syz.0.228 Not tainted syzkaller #0 PREEMPT(full) [ 128.803446][ T6788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 128.803457][ T6788] Call Trace: [ 128.803464][ T6788] [ 128.803473][ T6788] dump_stack_lvl+0x100/0x190 [ 128.803508][ T6788] should_fail_ex.cold+0x5/0xa [ 128.803535][ T6788] should_failslab+0xc2/0x120 [ 128.803565][ T6788] kmem_cache_alloc_noprof+0x92/0x6a0 [ 128.803591][ T6788] ? __kernfs_new_node+0xd2/0xa10 [ 128.803618][ T6788] __kernfs_new_node+0xd2/0xa10 [ 128.803639][ T6788] ? irqentry_exit+0x24d/0xa10 [ 128.803667][ T6788] ? __pfx___kernfs_new_node+0x10/0x10 [ 128.803694][ T6788] ? lock_acquire+0x1d1/0x380 [ 128.803710][ T6788] ? kernfs_root+0x23/0x2a0 [ 128.803725][ T6788] ? find_held_lock+0x2b/0x80 [ 128.803746][ T6788] ? kernfs_root+0xee/0x2a0 [ 128.803759][ T6788] ? kernfs_root+0xee/0x2a0 [ 128.803778][ T6788] kernfs_create_dir_ns+0xa6/0x2b0 [ 128.803799][ T6788] internal_create_group+0x36f/0xfb0 [ 128.803819][ T6788] ? __pfx_internal_create_group+0x10/0x10 [ 128.803834][ T6788] ? __pfx_internal_create_group+0x10/0x10 [ 128.803849][ T6788] ? bus_add_device+0x2e2/0x6c0 [ 128.803870][ T6788] ? __pfx_bus_add_device+0x10/0x10 [ 128.803889][ T6788] ? __pfx_dev_add_physical_location+0x10/0x10 [ 128.803910][ T6788] dpm_sysfs_add+0x80/0x280 [ 128.803927][ T6788] device_add+0x9f4/0x1970 [ 128.803945][ T6788] ? __pfx_device_add+0x10/0x10 [ 128.803960][ T6788] ? lockdep_init_map_type+0x5c/0x250 [ 128.803979][ T6788] ? __init_waitqueue_head+0xca/0x150 [ 128.804002][ T6788] netdev_register_kobject+0x1df/0x410 [ 128.804026][ T6788] register_netdevice+0x15b6/0x25a0 [ 128.804047][ T6788] ? __pfx_register_netdevice+0x10/0x10 [ 128.804064][ T6788] ? dev_addr_mod+0x14f/0x2c0 [ 128.804087][ T6788] ip6gre_newlink_common.isra.0+0x153/0x350 [ 128.804104][ T6788] ? __pfx_ip6gre_newlink_common.isra.0+0x10/0x10 [ 128.804119][ T6788] ? find_held_lock+0x2b/0x80 [ 128.804139][ T6788] ? net_generic+0xea/0x2a0 [ 128.804164][ T6788] ip6erspan_newlink+0x188/0x400 [ 128.804180][ T6788] ? __pfx_ip6erspan_newlink+0x10/0x10 [ 128.804195][ T6788] rtnl_newlink+0x1697/0x2620 [ 128.804219][ T6788] ? __pfx_rtnl_newlink+0x10/0x10 [ 128.804234][ T6788] ? avc_has_perm_noaudit+0x56/0x470 [ 128.804252][ T6788] ? find_held_lock+0x2b/0x80 [ 128.804274][ T6788] ? avc_has_perm_noaudit+0x11e/0x470 [ 128.804290][ T6788] ? avc_has_perm_noaudit+0x11e/0x470 [ 128.804321][ T6788] ? preempt_schedule_common+0x3c/0xb0 [ 128.804346][ T6788] ? lock_acquire+0x1d1/0x380 [ 128.804362][ T6788] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 128.804378][ T6788] ? find_held_lock+0x2b/0x80 [ 128.804399][ T6788] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 128.804414][ T6788] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 128.804432][ T6788] ? __pfx_rtnl_newlink+0x10/0x10 [ 128.804449][ T6788] rtnetlink_rcv_msg+0x95e/0xe90 [ 128.804467][ T6788] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 128.804494][ T6788] netlink_rcv_skb+0x159/0x420 [ 128.804516][ T6788] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 128.804534][ T6788] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 128.804564][ T6788] ? rcu_is_watching+0x13/0xc0 [ 128.804590][ T6788] netlink_unicast+0x585/0x850 [ 128.804615][ T6788] ? __pfx_netlink_unicast+0x10/0x10 [ 128.804643][ T6788] netlink_sendmsg+0x8b0/0xda0 [ 128.804669][ T6788] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.804693][ T6788] ? selinux_socket_sendmsg+0x198/0x2f0 [ 128.804716][ T6788] ____sys_sendmsg+0xa4d/0xbe0 [ 128.804734][ T6788] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.804757][ T6788] ? __pfx_____sys_sendmsg+0x10/0x10 [ 128.804785][ T6788] ___sys_sendmsg+0x190/0x1e0 [ 128.804806][ T6788] ? __pfx____sys_sendmsg+0x10/0x10 [ 128.804825][ T6788] ? futex_wait+0x11e/0x370 [ 128.804849][ T6788] ? find_held_lock+0x2b/0x80 [ 128.804883][ T6788] __sys_sendmsg+0x160/0x210 [ 128.804898][ T6788] ? __pfx___sys_sendmsg+0x10/0x10 [ 128.804925][ T6788] do_syscall_64+0x123/0x790 [ 128.804947][ T6788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.804962][ T6788] RIP: 0033:0x7f0cfbd9e2d9 [ 128.804975][ T6788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.804988][ T6788] RSP: 002b:00007f0cf9ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.805003][ T6788] RAX: ffffffffffffffda RBX: 00007f0cfc026180 RCX: 00007f0cfbd9e2d9 [ 128.805012][ T6788] RDX: 000000002800804c RSI: 0000200000000540 RDI: 0000000000000006 [ 128.805021][ T6788] RBP: 00007f0cfbe35888 R08: 0000000000000000 R09: 0000000000000000 [ 128.805029][ T6788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.805038][ T6788] R13: 00007f0cfc026218 R14: 00007f0cfc026180 R15: 00007ffcfdce1c08 [ 128.805059][ T6788] [ 129.368254][ T31] audit: type=1400 audit(1791997693.892:443): avc: denied { write } for pid=6784 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.606063][ T6789] batman_adv: batadv0: Adding interface: macvtap1 [ 129.606077][ T6789] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.606096][ T6789] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 130.917454][ T31] audit: type=1400 audit(1791997695.442:444): avc: denied { read } for pid=6815 comm="syz.0.233" name="sg0" dev="devtmpfs" ino=816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 131.078746][ T31] audit: type=1400 audit(1791997695.612:445): avc: denied { write } for pid=6795 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.124817][ T6816] program syz.0.233 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.124817][ T31] audit: type=1400 audit(1791997695.652:446): avc: denied { ioctl } for pid=6815 comm="syz.0.233" path="/dev/sg0" dev="devtmpfs" ino=816 ioctlcmd=0x6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 131.126415][ T6816] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 131.190133][ T31] audit: type=1400 audit(1791997695.722:447): avc: denied { write } for pid=6823 comm="syz.2.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 131.322181][ T31] audit: type=1400 audit(1791997695.852:448): avc: denied { write } for pid=6828 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.471426][ T31] audit: type=1400 audit(1791997696.002:449): avc: denied { connect } for pid=6833 comm="syz.3.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 131.473592][ T31] audit: type=1400 audit(1791997696.002:450): avc: denied { ioctl } for pid=6833 comm="syz.3.226" path="socket:[13371]" dev="sockfs" ino=13371 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 132.883808][ T31] audit: type=1400 audit(1791997697.412:451): avc: denied { setopt } for pid=6858 comm="syz.0.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 132.911835][ T31] audit: type=1400 audit(1791997697.442:452): avc: denied { write } for pid=6858 comm="syz.0.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 132.949715][ T31] audit: type=1400 audit(1791997697.482:453): avc: denied { write } for pid=6836 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.702510][ T6857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.499437][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 136.514137][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 136.514147][ T31] audit: type=1400 audit(1791997701.042:456): avc: denied { write } for pid=6876 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.536265][ T1143] Bluetooth: (null): Invalid header checksum [ 136.536347][ T1143] Bluetooth: (null): Invalid header checksum [ 136.536405][ T1143] Bluetooth: (null): Invalid header checksum [ 136.536451][ T1143] Bluetooth: (null): Invalid header checksum [ 136.536495][ T1143] Bluetooth: (null): Invalid header checksum [ 136.536539][ T1143] Bluetooth: (null): Invalid header checksum [ 136.536584][ T1143] Bluetooth: (null): Invalid header checksum [ 136.563005][ T1143] Bluetooth: (null): Invalid header checksum [ 136.563053][ T1143] Bluetooth: (null): Invalid header checksum [ 136.564625][ T31] audit: type=1400 audit(1791997701.092:457): avc: denied { connect } for pid=6890 comm="syz.0.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 136.570624][ T1143] Bluetooth: (null): Invalid header checksum [ 136.636380][ T25] kernel read not supported for file /vcsa (pid: 25 comm: kworker/1:0) [ 136.688554][ T66] Bluetooth: (null): Invalid header checksum [ 136.788401][ T4324] Bluetooth: (null): Invalid header checksum [ 136.918068][ T31] audit: type=1400 audit(1791997701.442:458): avc: denied { write } for pid=6906 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.487250][ T31] audit: type=1400 audit(1791997703.012:459): avc: denied { create } for pid=6914 comm="syz.0.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 138.517181][ T31] audit: type=1400 audit(1791997703.042:460): avc: denied { bind } for pid=6914 comm="syz.0.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 138.537359][ T31] audit: type=1400 audit(1791997703.052:461): avc: denied { write } for pid=6914 comm="syz.0.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 138.768386][ T5725] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 138.930863][ T5725] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 138.931756][ T5725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.931772][ T5725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.931790][ T5725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.938641][ T5725] usb 4-1: config 0 descriptor?? [ 139.172868][ T6922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.173291][ T6922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.209139][ T6922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.209463][ T6922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.340280][ T31] audit: type=1400 audit(1791997703.872:462): avc: denied { write } for pid=6929 comm="syz.4.249" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 140.168112][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 140.268115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 140.497718][ T6922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.498076][ T6922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.536624][ T5725] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 140.536649][ T5725] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 140.536662][ T5725] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 140.536674][ T5725] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 140.536686][ T5725] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 140.589871][ T5725] playstation 0003:054C:0DF2.0003: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 141.171959][ T5725] playstation 0003:054C:0DF2.0003: Failed to retrieve feature with reportID 5: -71 [ 141.171987][ T5725] playstation 0003:054C:0DF2.0003: Failed to retrieve DualSense calibration info: -71 [ 141.172032][ T5725] playstation 0003:054C:0DF2.0003: Failed to get calibration data from DualSense [ 141.172048][ T5725] playstation 0003:054C:0DF2.0003: Failed to create dualsense. [ 141.176536][ T5725] playstation 0003:054C:0DF2.0003: probe with driver playstation failed with error -71 [ 141.180947][ T5725] usb 4-1: USB disconnect, device number 9 [ 141.648271][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 142.130711][ T31] audit: type=1400 audit(1791997706.662:463): avc: denied { execute } for pid=6950 comm="syz.2.261" path=2F6D656D66643AF365099F9138C07901631F6E7578202864656C6574656429 dev="tmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 142.408916][ T6956] tmpfs: Using encoding : utf8-12.1.0 [ 144.017594][ T6962] syzkaller0: entered promiscuous mode [ 144.017607][ T6962] syzkaller0: entered allmulticast mode [ 144.531246][ T31] audit: type=1400 audit(1791997708.612:464): avc: denied { read } for pid=6963 comm="syz.4.264" name="usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 144.531279][ T31] audit: type=1400 audit(1791997708.612:465): avc: denied { open } for pid=6963 comm="syz.4.264" path="/dev/usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 144.623742][ T31] audit: type=1400 audit(1791997709.152:466): avc: denied { mount } for pid=6966 comm="syz.2.265" name="/" dev="ramfs" ino=13472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 144.669995][ T31] audit: type=1804 audit(1791997709.202:467): pid=6968 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.265" name="bus" dev="ramfs" ino=13473 res=1 errno=0 [ 144.673880][ T31] audit: type=1804 audit(1791997709.202:468): pid=6968 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.265" name="bus" dev="ramfs" ino=13473 res=1 errno=0 [ 145.088210][ T31] audit: type=1400 audit(1791997709.602:469): avc: denied { ioctl } for pid=6974 comm="syz.4.267" path="socket:[14515]" dev="sockfs" ino=14515 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 145.895509][ T6982] syzkaller0: entered promiscuous mode [ 145.895522][ T6982] syzkaller0: entered allmulticast mode [ 146.484150][ T31] audit: type=1400 audit(1791997711.012:470): avc: denied { ioctl } for pid=6988 comm="syz.4.271" path="/43/trace/events/sched/sched_switch/trigger" dev="tracefs" ino=19680823 ioctlcmd=0x7451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 147.943165][ T7016] syz_tun: entered promiscuous mode [ 147.946867][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.276'. [ 147.946889][ T7016] syz_tun: left promiscuous mode [ 148.484353][ T31] audit: type=1400 audit(1791997713.020:471): avc: denied { append } for pid=7017 comm="syz.4.280" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 149.327178][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 149.566763][ T7026] syzkaller0: entered promiscuous mode [ 149.566783][ T7026] syzkaller0: entered allmulticast mode [ 150.872564][ T31] audit: type=1400 audit(1791997715.401:472): avc: denied { listen } for pid=7041 comm="syz.3.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 152.063444][ T31] audit: type=1400 audit(1791997716.582:473): avc: denied { create } for pid=7037 comm="syz.2.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 152.063485][ T31] audit: type=1400 audit(1791997716.582:474): avc: denied { sys_admin } for pid=7037 comm="syz.2.285" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 152.236068][ T7055] syzkaller0: entered promiscuous mode [ 152.236087][ T7055] syzkaller0: entered allmulticast mode [ 152.238457][ T7055] tipc: Started in network mode [ 152.238479][ T7055] tipc: Node identity 8a529901ac2c, cluster identity 4711 [ 152.239507][ T7055] tipc: Enabled bearer , priority 0 [ 152.332765][ T7056] tipc: Resetting bearer [ 152.359594][ T7054] tipc: Resetting bearer [ 152.403492][ T7054] tipc: Disabling bearer [ 152.422976][ T31] audit: type=1400 audit(1791997716.952:475): avc: denied { create } for pid=7061 comm="syz.2.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 152.427177][ T31] audit: type=1400 audit(1791997716.962:476): avc: denied { setopt } for pid=7061 comm="syz.2.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 152.454134][ T31] audit: type=1400 audit(1791997716.982:477): avc: denied { bind } for pid=7061 comm="syz.2.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 152.517011][ T7058] tipc: Started in network mode [ 152.517032][ T7058] tipc: Node identity 3a7e7cf0789, cluster identity 4711 [ 152.522914][ T7058] tipc: Enabled bearer , priority 0 [ 152.542143][ T7058] syzkaller0: entered promiscuous mode [ 152.542158][ T7058] syzkaller0: entered allmulticast mode [ 152.583373][ T7058] tipc: Resetting bearer [ 152.595499][ T31] audit: type=1400 audit(1791997717.122:478): avc: denied { write } for pid=7068 comm="syz.3.293" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 152.706251][ T7057] tipc: Resetting bearer [ 152.802333][ T7057] tipc: Disabling bearer [ 153.402383][ T7075] mmap: syz.0.294 (7075) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 153.991892][ T31] audit: type=1326 audit(1791997717.983:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.0.294" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0cfbd9e2d9 code=0x0 [ 153.992025][ T31] audit: type=1400 audit(1791997718.043:480): avc: denied { write } for pid=7071 comm="syz.0.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 158.074164][ T7104] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 158.074184][ T7104] overlayfs: overlapping lowerdir path [ 159.262233][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 159.321383][ T31] audit: type=1400 audit(1791997723.856:481): avc: denied { read write } for pid=7111 comm="syz.4.306" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 159.321411][ T31] audit: type=1400 audit(1791997723.856:482): avc: denied { open } for pid=7111 comm="syz.4.306" path="/dev/rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 161.284049][ T7137] FAULT_INJECTION: forcing a failure. [ 161.284049][ T7137] name failslab, interval 1, probability 0, space 0, times 0 [ 161.284080][ T7137] CPU: 0 UID: 60928 PID: 7137 Comm: syz.4.311 Tainted: G L syzkaller #0 PREEMPT(full) [ 161.284104][ T7137] Tainted: [L]=SOFTLOCKUP [ 161.284111][ T7137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 161.284121][ T7137] Call Trace: [ 161.284128][ T7137] [ 161.284135][ T7137] dump_stack_lvl+0x100/0x190 [ 161.284165][ T7137] should_fail_ex.cold+0x5/0xa [ 161.284193][ T7137] should_failslab+0xc2/0x120 [ 161.284221][ T7137] __kmalloc_cache_noprof+0x91/0x6d0 [ 161.284242][ T7137] ? assoc_array_insert+0x10b/0x32c0 [ 161.284275][ T7137] assoc_array_insert+0x10b/0x32c0 [ 161.284301][ T7137] ? __mutex_lock+0x26c/0x1bd0 [ 161.284328][ T7137] ? __key_link_lock+0x92/0xb0 [ 161.284354][ T7137] ? __pfx___mutex_lock+0x10/0x10 [ 161.284386][ T7137] ? __pfx_assoc_array_insert+0x10/0x10 [ 161.284418][ T7137] ? down_write+0x146/0x1f0 [ 161.284446][ T7137] ? __pfx_down_write+0x10/0x10 [ 161.284478][ T7137] __key_link_begin+0xf5/0x260 [ 161.284497][ T7137] key_instantiate_and_link+0x201/0x4b0 [ 161.284528][ T7137] ? __pfx_key_instantiate_and_link+0x10/0x10 [ 161.284560][ T7137] ? __pfx_keyring_search_iterator+0x10/0x10 [ 161.284580][ T7137] keyring_alloc+0x7a/0xc0 [ 161.284597][ T7137] look_up_user_keyrings+0x465/0x790 [ 161.284621][ T7137] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 161.284644][ T7137] ? find_held_lock+0x2b/0x80 [ 161.284670][ T7137] lookup_user_key+0xbb1/0x1300 [ 161.284694][ T7137] ? __pfx_lookup_user_key+0x10/0x10 [ 161.284713][ T7137] ? futex_wait+0x11e/0x370 [ 161.284735][ T7137] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 161.284757][ T7137] ? ksys_write+0x190/0x250 [ 161.284781][ T7137] keyctl_get_persistent+0x197/0x940 [ 161.284811][ T7137] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 161.284831][ T7137] ? __x64_sys_futex+0x34f/0x4d0 [ 161.284855][ T7137] ? __x64_sys_futex+0x358/0x4d0 [ 161.284880][ T7137] ? xfd_validate_state+0x129/0x190 [ 161.284903][ T7137] __do_sys_keyctl+0x3b2/0x5a0 [ 161.284929][ T7137] do_syscall_64+0x123/0x790 [ 161.284960][ T7137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.284979][ T7137] RIP: 0033:0x7f7e9519e2d9 [ 161.284994][ T7137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.285011][ T7137] RSP: 002b:00007f7e95f7e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 161.285029][ T7137] RAX: ffffffffffffffda RBX: 00007f7e95425fa0 RCX: 00007f7e9519e2d9 [ 161.285040][ T7137] RDX: fffffffffffffffd RSI: ffffffffffffffff RDI: 0000000000000016 [ 161.285050][ T7137] RBP: 00007f7e95235888 R08: 0000000000000000 R09: 0000000000000000 [ 161.285061][ T7137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.285072][ T7137] R13: 00007f7e95426038 R14: 00007f7e95425fa0 R15: 00007ffe65ace7e8 [ 161.285100][ T7137] [ 161.321512][ T30] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 161.555532][ T30] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 161.580126][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.620982][ T30] usb 6-1: config 0 descriptor?? [ 161.874582][ T30] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 161.995124][ T31] audit: type=1400 audit(1791997726.537:483): avc: denied { ioctl } for pid=7144 comm="syz.4.315" path="socket:[14929]" dev="sockfs" ino=14929 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 162.042192][ T31] audit: type=1400 audit(1791997726.587:484): avc: denied { read } for pid=7144 comm="syz.4.315" path="socket:[14929]" dev="sockfs" ino=14929 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 162.117673][ T30] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 162.117694][ T30] [drm] Initialized udl on minor 1 [ 162.118044][ T7148] syzkaller1: entered promiscuous mode [ 162.118060][ T7148] syzkaller1: entered allmulticast mode [ 162.119396][ T31] audit: type=1400 audit(1791997726.657:485): avc: denied { ioctl } for pid=7144 comm="syz.4.315" path="socket:[13788]" dev="sockfs" ino=13788 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 162.128855][ T7147] netlink: 24 bytes leftover after parsing attributes in process `syz.0.314'. [ 162.435848][ T7147] netlink: 148 bytes leftover after parsing attributes in process `syz.0.314'. [ 162.908420][ T30] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 162.929549][ T30] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 163.884412][ T30] usb 6-1: USB disconnect, device number 3 [ 163.951985][ T31] audit: type=1400 audit(1791997728.498:486): avc: denied { connect } for pid=7156 comm="syz.2.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 163.953405][ T31] audit: type=1400 audit(1791997728.498:487): avc: denied { name_connect } for pid=7156 comm="syz.2.318" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 164.072033][ T31] audit: type=1400 audit(1791997728.618:488): avc: denied { connect } for pid=7165 comm="syz.3.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 164.300346][ T7170] netlink: 72 bytes leftover after parsing attributes in process `syz.3.321'. [ 164.307315][ T31] audit: type=1400 audit(1791997728.838:489): avc: denied { create } for pid=7165 comm="syz.3.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 164.307444][ T31] audit: type=1400 audit(1791997728.838:490): avc: denied { write } for pid=7165 comm="syz.3.321" path="socket:[13817]" dev="sockfs" ino=13817 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 166.419011][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 166.809988][ T7182] netlink: 60 bytes leftover after parsing attributes in process `syz.0.325'. [ 167.352448][ T7187] loop9: detected capacity change from 0 to 2640 [ 167.358806][ T7187] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.359013][ T7187] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.359121][ T7187] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.359240][ T7187] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.359360][ T7187] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.359576][ T7187] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.359786][ T7187] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.360248][ T7187] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.360298][ T7187] ldm_validate_partition_table(): Disk read failed. [ 167.360484][ T7187] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.360627][ T7187] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.360847][ T7187] Dev loop9: unable to read RDB block 0 [ 167.361588][ T7187] loop9: unable to read partition table [ 167.362648][ T7187] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 168.092782][ T7194] syzkaller0: entered promiscuous mode [ 168.092802][ T7194] syzkaller0: entered allmulticast mode [ 168.287740][ T31] audit: type=1804 audit(1791997732.800:491): pid=7204 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.329" name="bus" dev="ramfs" ino=15168 res=1 errno=0 [ 168.287783][ T31] audit: type=1804 audit(1791997732.810:492): pid=7204 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.329" name="bus" dev="ramfs" ino=15168 res=1 errno=0 [ 168.486647][ T7209] syzkaller0: entered promiscuous mode [ 168.486660][ T7209] syzkaller0: entered allmulticast mode [ 168.842546][ T7223] ip_tables: iptables: counters copy to user failed while replacing table [ 169.162805][ T7231] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 169.195292][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 169.368677][ T10] usb 6-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 169.371337][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 169.371389][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 169.468862][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 169.468932][ T10] usb 6-1: Product: syz [ 169.468972][ T10] usb 6-1: Manufacturer: syz [ 169.780839][ T10] mos7840 6-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 170.346662][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 171.066294][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 172.120901][ T31] audit: type=1400 audit(1791997736.662:493): avc: denied { read write } for pid=7245 comm="syz.4.341" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 172.121500][ T31] audit: type=1400 audit(1791997736.662:494): avc: denied { open } for pid=7245 comm="syz.4.341" path="/60/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 172.133390][ T31] audit: type=1400 audit(1791997736.672:495): avc: denied { read append } for pid=7245 comm="syz.4.341" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 172.133427][ T31] audit: type=1400 audit(1791997736.672:496): avc: denied { open } for pid=7245 comm="syz.4.341" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 172.145824][ T31] audit: type=1400 audit(1791997736.672:497): avc: denied { ioctl } for pid=7245 comm="syz.4.341" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 172.154257][ T31] audit: type=1400 audit(1791997736.702:498): avc: denied { ioctl } for pid=7245 comm="syz.4.341" path="/60/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd08 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 172.462554][ T7248] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 172.590258][ T7252] bridge0: port 3(netdevsim0) entered blocking state [ 172.590347][ T7252] bridge0: port 3(netdevsim0) entered disabled state [ 172.590535][ T7252] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 172.593296][ T7252] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 172.593896][ T7252] bridge0: port 3(netdevsim0) entered blocking state [ 172.593983][ T7252] bridge0: port 3(netdevsim0) entered forwarding state [ 173.399113][ T10] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 173.436894][ T10] usb 6-1: USB disconnect, device number 4 [ 173.472258][ T10] mos7840 6-1:1.0: device disconnected [ 175.714211][ T31] audit: type=1400 audit(1791997740.244:499): avc: denied { create } for pid=7274 comm="syz.4.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 177.122071][ T7281] syzkaller0: entered promiscuous mode [ 177.122084][ T7281] syzkaller0: entered allmulticast mode [ 177.963490][ T31] audit: type=1400 audit(1791997742.515:500): avc: denied { create } for pid=7296 comm="syz.5.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 178.003802][ T31] audit: type=1400 audit(1791997742.555:501): avc: denied { create } for pid=7296 comm="syz.5.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 178.219183][ T7299] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 178.219220][ T7299] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 178.219260][ T7299] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 178.240699][ T7299] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 178.367700][ T7299] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 181.000717][ T31] audit: type=1400 audit(1791997745.546:502): avc: denied { ioctl } for pid=7323 comm="syz.2.365" path="socket:[14012]" dev="sockfs" ino=14012 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 181.037772][ T31] audit: type=1400 audit(1791997745.586:503): avc: denied { read write } for pid=7326 comm="syz.0.353" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 181.037942][ T31] audit: type=1400 audit(1791997745.586:504): avc: denied { read } for pid=7323 comm="syz.2.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 181.038307][ T31] audit: type=1400 audit(1791997745.586:505): avc: denied { open } for pid=7326 comm="syz.0.353" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 181.085209][ T1221] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 181.133096][ T1221] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 181.134379][ T31] audit: type=1400 audit(1791997745.686:506): avc: denied { allowed } for pid=7322 comm="syz.5.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 182.759389][ T7347] netlink: 16 bytes leftover after parsing attributes in process `syz.3.362'. [ 183.558268][ T31] audit: type=1400 audit(1791997748.108:507): avc: denied { name_bind } for pid=7346 comm="syz.3.362" src=20259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 183.558311][ T31] audit: type=1400 audit(1791997748.108:508): avc: denied { node_bind } for pid=7346 comm="syz.3.362" saddr=::e0:0:0:0:1 src=20259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 183.772623][ T31] audit: type=1400 audit(1791997748.318:509): avc: denied { create } for pid=7358 comm="syz.2.371" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 183.909352][ T7359] Invalid source name [ 183.909364][ T7359] UBIFS error (pid: 7359): cannot open "./file0", error -22 [ 184.434301][ T31] audit: type=1400 audit(1791997748.458:510): avc: denied { mounton } for pid=7358 comm="syz.2.371" path="/82/file0" dev="tmpfs" ino=450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 184.506900][ T7363] FAULT_INJECTION: forcing a failure. [ 184.506900][ T7363] name failslab, interval 1, probability 5, space 0, times 10000 [ 184.506940][ T7363] CPU: 0 UID: 0 PID: 7363 Comm: syz.3.373 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.506968][ T7363] Tainted: [L]=SOFTLOCKUP [ 184.506975][ T7363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 184.506988][ T7363] Call Trace: [ 184.506995][ T7363] [ 184.507003][ T7363] dump_stack_lvl+0x100/0x190 [ 184.507035][ T7363] should_fail_ex.cold+0x5/0xa [ 184.507062][ T7363] should_failslab+0xc2/0x120 [ 184.507089][ T7363] kmem_cache_alloc_noprof+0x92/0x6a0 [ 184.507115][ T7363] ? seq_open+0x55/0x170 [ 184.507138][ T7363] ? __pfx_seq_show+0x10/0x10 [ 184.507167][ T7363] seq_open+0x55/0x170 [ 184.507188][ T7363] ? __pfx_seq_show+0x10/0x10 [ 184.507215][ T7363] single_open+0xfc/0x1d0 [ 184.507238][ T7363] do_dentry_open+0x6ab/0x14d0 [ 184.507261][ T7363] ? __pfx_seq_fdinfo_open+0x10/0x10 [ 184.507295][ T7363] vfs_open+0x82/0x3f0 [ 184.507328][ T7363] path_openat+0x19fa/0x2440 [ 184.507361][ T7363] ? __pfx_path_openat+0x10/0x10 [ 184.507396][ T7363] do_file_open+0x20e/0x430 [ 184.507425][ T7363] ? __pfx_do_file_open+0x10/0x10 [ 184.507461][ T7363] ? __pfx_kfree_link+0x10/0x10 [ 184.507494][ T7363] ? _raw_spin_unlock+0x28/0x50 [ 184.507518][ T7363] ? alloc_fd+0x471/0x7a0 [ 184.507553][ T7363] do_sys_openat2+0x10f/0x1e0 [ 184.507571][ T7363] ? __pfx_do_sys_openat2+0x10/0x10 [ 184.507590][ T7363] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 184.507628][ T7363] __x64_sys_openat+0x12d/0x210 [ 184.507647][ T7363] ? __pfx___x64_sys_openat+0x10/0x10 [ 184.507677][ T7363] do_syscall_64+0x123/0x790 [ 184.507709][ T7363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.507729][ T7363] RIP: 0033:0x7ff99a15eb0e [ 184.507744][ T7363] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 184.507763][ T7363] RSP: 002b:00007ff99af8cec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 184.507781][ T7363] RAX: ffffffffffffffda RBX: 00007ff99af8d6c0 RCX: 00007ff99a15eb0e [ 184.507794][ T7363] RDX: 0000000000000002 RSI: 00007ff99af8cf90 RDI: ffffffffffffff9c [ 184.507806][ T7363] RBP: 00007ff99a235888 R08: 0000000000000000 R09: 0000000000000000 [ 184.507818][ T7363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.507829][ T7363] R13: 00007ff99a426038 R14: 00007ff99a425fa0 R15: 00007ffe73c7e9f8 [ 184.507856][ T7363] [ 184.574901][ T31] audit: type=1400 audit(1791997749.128:511): avc: denied { connect } for pid=7365 comm="syz.5.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 186.244915][ T7384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.379'. [ 186.758632][ T5334] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 187.028367][ T5334] usb 6-1: Using ep0 maxpacket: 32 [ 187.031576][ T7387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.380'. [ 187.214370][ T5334] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 187.224970][ T5334] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 187.224992][ T5334] usb 6-1: config 0 has no interface number 0 [ 187.279473][ T5334] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.279495][ T5334] usb 6-1: Product: syz [ 187.279510][ T5334] usb 6-1: Manufacturer: syz [ 187.279524][ T5334] usb 6-1: SerialNumber: syz [ 187.602108][ T5334] usb 6-1: config 0 descriptor?? [ 187.786503][ T5334] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 187.786530][ T5334] usb 6-1: selecting invalid altsetting 1 [ 187.786545][ T5334] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 187.793491][ T5334] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 187.793695][ T5334] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 187.793725][ T5334] usb 6-1: media controller created [ 187.801178][ T5334] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 187.853068][ T5334] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 187.853130][ T5334] zl10353_read_register: readreg error (reg=127, ret==-71) [ 187.858094][ T5334] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 187.955941][ T5334] usb 6-1: USB disconnect, device number 5 [ 188.940576][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.258415][ T7401] tipc: Enabled bearer , priority 1 [ 191.840524][ T5604] Bluetooth: hci4: command 0x0406 tx timeout [ 191.840531][ T4919] Bluetooth: hci2: command 0x0406 tx timeout [ 193.646251][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 193.646268][ T31] audit: type=1400 audit(1791997758.183:514): avc: denied { create } for pid=7435 comm="syz.2.393" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 194.509844][ T31] audit: type=1400 audit(1791997759.063:515): avc: denied { unlink } for pid=5597 comm="syz-executor" name="file0" dev="tmpfs" ino=476 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 194.728616][ T7451] hugetlbfs: syz.3.396 (7451): Using mlock ulimits for SHM_HUGETLB is obsolete [ 194.743465][ T1221] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 195.312590][ T31] audit: type=1400 audit(1791997759.864:516): avc: denied { write } for pid=7453 comm="syz.3.397" name="functions" dev="configfs" ino=9846 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 195.317851][ T31] audit: type=1400 audit(1791997759.874:517): avc: denied { write } for pid=7453 comm="syz.3.397" name="interface.ncm" dev="configfs" ino=15500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 195.399813][ T1221] usb 6-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 195.400695][ T1221] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.400721][ T1221] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 195.400745][ T1221] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.400769][ T1221] usb 6-1: config 0 interface 0 has no altsetting 0 [ 195.400795][ T1221] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.405120][ T1221] usb 6-1: config 0 descriptor?? [ 195.425373][ T7434] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 195.432090][ T31] audit: type=1400 audit(1791997759.984:518): avc: denied { write } for pid=7453 comm="syz.3.397" name="functions" dev="configfs" ino=9846 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 195.475754][ T31] audit: type=1400 audit(1791997760.034:519): avc: denied { write } for pid=7453 comm="syz.3.397" name="interface.rndis" dev="configfs" ino=15512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 198.057039][ T7468] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 198.194571][ T1221] usbhid 6-1:0.0: can't add hid device: -71 [ 198.194655][ T1221] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 198.422113][ T1221] usb 6-1: USB disconnect, device number 6 [ 199.808573][ T31] audit: type=1400 audit(1791997764.296:520): avc: denied { read } for pid=7476 comm="syz.0.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 199.808618][ T31] audit: type=1400 audit(1791997764.346:521): avc: denied { read write } for pid=7476 comm="syz.0.405" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 199.808653][ T31] audit: type=1400 audit(1791997764.346:522): avc: denied { open } for pid=7476 comm="syz.0.405" path="/74/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 199.808687][ T31] audit: type=1400 audit(1791997764.346:523): avc: denied { ioctl } for pid=7476 comm="syz.0.405" path="/74/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 202.147303][ T31] audit: type=1400 audit(1791997765.947:524): avc: denied { read } for pid=7481 comm="syz.5.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 202.249522][ T31] audit: type=1400 audit(1791997766.807:525): avc: denied { ioctl } for pid=7490 comm="syz.0.409" path="pid:[4026532782]" dev="nsfs" ino=4026532782 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 202.594725][ T7497] syzkaller0: entered promiscuous mode [ 202.594745][ T7497] syzkaller0: entered allmulticast mode [ 202.598775][ T7497] netlink: 28 bytes leftover after parsing attributes in process `syz.0.410'. [ 202.598794][ T7497] netlink: 28 bytes leftover after parsing attributes in process `syz.0.410'. [ 207.274713][ T987] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 207.691333][ T987] usb 4-1: Using ep0 maxpacket: 32 [ 207.706138][ T987] usb 4-1: unable to get BOS descriptor or descriptor too short [ 207.706176][ T987] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 207.707068][ T987] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 207.707089][ T987] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 207.708334][ T987] usb 4-1: config 14 has no interface number 0 [ 207.708351][ T987] usb 4-1: config 14 has no interface number 1 [ 207.708401][ T987] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 207.708423][ T987] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 207.708443][ T987] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 207.708466][ T987] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 207.708499][ T987] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 207.708519][ T987] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.708538][ T987] usb 4-1: config 14 interface 57 has no altsetting 0 [ 207.708553][ T987] usb 4-1: config 14 interface 228 has no altsetting 0 [ 207.726409][ T987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.726428][ T987] usb 4-1: Product: syz [ 207.726441][ T987] usb 4-1: Manufacturer: syz [ 207.726452][ T987] usb 4-1: SerialNumber: syz [ 208.592390][ T987] legousbtower 4-1:14.57: interrupt endpoints not found [ 208.844928][ T7529] ip_tables: iptables: counters copy to user failed while replacing table [ 208.857360][ T31] audit: type=1400 audit(1791997773.410:526): avc: denied { associate } for pid=7528 comm="syz.5.419" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 209.983303][ T987] legousbtower 4-1:14.228: get version request failed: -110 [ 209.983436][ T987] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -110 [ 210.070030][ T10] usb 4-1: USB disconnect, device number 10 [ 210.098276][ T7542] syzkaller0: entered promiscuous mode [ 210.098294][ T7542] syzkaller0: entered allmulticast mode [ 210.102316][ T7542] tipc: Started in network mode [ 210.102338][ T7542] tipc: Node identity 0a328c5d672, cluster identity 4711 [ 210.102617][ T7542] tipc: Enabled bearer , priority 0 [ 210.105155][ T7542] tipc: Resetting bearer [ 210.213605][ T7541] tipc: Resetting bearer [ 211.215779][ T7541] tipc: Disabling bearer [ 211.227215][ T5725] tipc: Node number set to 1829932125 [ 212.730297][ T31] audit: type=1400 audit(1791997777.272:527): avc: denied { bind } for pid=7551 comm="syz.0.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 212.730339][ T31] audit: type=1400 audit(1791997777.272:528): avc: denied { name_bind } for pid=7551 comm="syz.0.421" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 212.730375][ T31] audit: type=1400 audit(1791997777.272:529): avc: denied { node_bind } for pid=7551 comm="syz.0.421" saddr=224.0.0.1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 212.730409][ T31] audit: type=1400 audit(1791997777.272:530): avc: denied { write } for pid=7551 comm="syz.0.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 212.730443][ T31] audit: type=1400 audit(1791997777.272:531): avc: denied { ioctl } for pid=7551 comm="syz.0.421" path="socket:[16397]" dev="sockfs" ino=16397 ioctlcmd=0x5530 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 214.101298][ T31] audit: type=1400 audit(1791997778.663:532): avc: denied { read } for pid=7554 comm="syz.3.425" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 214.102568][ T31] audit: type=1400 audit(1791997778.663:533): avc: denied { open } for pid=7554 comm="syz.3.425" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 214.435272][ T1221] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 214.635254][ T1221] usb 6-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 214.636793][ T1221] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 214.636816][ T1221] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 214.636848][ T1221] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.415798][ T1221] usb-storage 6-1:1.0: USB Mass Storage device detected [ 215.439629][ T1221] scsi host1: usb-storage 6-1:1.0 [ 215.466434][ T7583] netlink: 76 bytes leftover after parsing attributes in process `syz.3.433'. [ 215.730023][ T7590] netlink: 256 bytes leftover after parsing attributes in process `syz.0.434'. [ 216.298836][ T7571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.299183][ T7571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.516151][ T7571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.516468][ T7571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.524795][ T7571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.525104][ T7571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.768226][ T7571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.788482][ T7571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.813597][ T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 216.965162][ T5725] usb 6-1: USB disconnect, device number 7 [ 217.024499][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 217.090789][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 217.090826][ T25] usb 5-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=23.bb [ 217.114634][ T25] usb 5-1: config 4 has an invalid interface number: 86 but max is 0 [ 217.114650][ T25] usb 5-1: config 4 has no interface number 0 [ 217.114668][ T25] usb 5-1: config 4 interface 86 altsetting 11 endpoint 0x3 has an invalid bInterval 127, changing to 10 [ 217.114684][ T25] usb 5-1: config 4 interface 86 altsetting 11 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 217.114697][ T25] usb 5-1: config 4 interface 86 altsetting 11 endpoint 0x8B has invalid wMaxPacketSize 0 [ 217.114710][ T25] usb 5-1: config 4 interface 86 has no altsetting 0 [ 217.118737][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.118750][ T25] usb 5-1: Product: syz [ 217.118758][ T25] usb 5-1: Manufacturer: syz [ 217.118766][ T25] usb 5-1: SerialNumber: syz [ 218.477745][ T25] cypress_m8 5-1:4.86: DeLorme Earthmate USB converter detected [ 218.507208][ T25] usb 5-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 218.533938][ T25] usb 5-1: USB disconnect, device number 4 [ 218.572355][ T25] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 218.587142][ T25] cypress_m8 5-1:4.86: device disconnected [ 219.309493][ T5725] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 219.414388][ T7617] netlink: 24 bytes leftover after parsing attributes in process `syz.4.442'. [ 219.482241][ T5725] usb 6-1: Using ep0 maxpacket: 32 [ 219.482868][ T5725] usb 6-1: New USB device found, idVendor=05ac, idProduct=120a, bcdDevice=7b.2d [ 219.483981][ T5725] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 219.484002][ T5725] usb 6-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 219.485874][ T5725] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.485895][ T5725] usb 6-1: Product: syz [ 219.485909][ T5725] usb 6-1: Manufacturer: syz [ 219.485923][ T5725] usb 6-1: SerialNumber: syz [ 219.521881][ T31] audit: type=1400 audit(1791997784.086:534): avc: denied { connect } for pid=7618 comm="syz.2.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 219.530958][ T31] audit: type=1400 audit(1791997784.096:535): avc: denied { setopt } for pid=7618 comm="syz.2.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 219.619365][ T7617] netlink: 76 bytes leftover after parsing attributes in process `syz.4.442'. [ 220.644532][ T31] audit: type=1400 audit(1791997785.216:536): avc: denied { open } for pid=7622 comm="syz.3.439" path="/dev/ptyqb" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 220.691980][ T31] audit: type=1400 audit(1791997785.256:537): avc: denied { ioctl } for pid=7622 comm="syz.3.439" path="/dev/ptyqb" dev="devtmpfs" ino=130 ioctlcmd=0x5429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 224.302902][ T1490] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.696226][ T7674] netlink: 24 bytes leftover after parsing attributes in process `syz.0.458'. [ 226.709681][ T7675] jffs2: notice: (7675) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 227.773109][ T7678] netlink: 76 bytes leftover after parsing attributes in process `syz.0.458'. [ 227.788300][ T1221] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 227.938374][ T1221] usb 4-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00 [ 227.939374][ T1221] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 227.939403][ T1221] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.939436][ T1221] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.029115][ T1221] usb 4-1: config 0 descriptor?? [ 228.113886][ T7700] xt_l2tp: wrong L2TP version: 6 [ 229.904021][ T1221] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 229.904041][ T1221] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 229.904054][ T1221] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 229.904065][ T1221] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 229.904077][ T1221] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 229.904089][ T1221] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 229.904101][ T1221] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 229.904112][ T1221] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 229.904124][ T1221] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 229.904135][ T1221] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 229.909265][ T1221] wacom 0003:056A:5012.0005: collection stack underflow [ 229.909284][ T1221] wacom 0003:056A:5012.0005: item 0 0 0 12 parsing failed [ 229.909745][ T1221] wacom 0003:056A:5012.0005: parse failed [ 229.909811][ T1221] wacom 0003:056A:5012.0005: probe with driver wacom failed with error -22 [ 230.096839][ T7711] comedi comedi0: No hardware detected at I/O base 0x300 [ 230.714024][ T1221] usb 4-1: USB disconnect, device number 11 [ 237.161882][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 237.311989][ T987] apple-mfi-fastcharge 6-1: USB disconnect, device number 8 [ 237.334767][ T9] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 237.335633][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.335668][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.377580][ T9] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 237.377675][ T9] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 237.377705][ T9] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 237.378265][ T9] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 237.384932][ T9] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 237.389699][ T9] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 237.390802][ T9] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 237.390857][ T9] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 237.433898][ T9] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 238.672999][ T987] usb 5-1: USB disconnect, device number 5 [ 238.692181][ T987] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 238.734929][ T987] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 238.735434][ T987] keyspan 5-1:1.0: device disconnected [ 239.669600][ T7768] FAULT_INJECTION: forcing a failure. [ 239.669600][ T7768] name failslab, interval 1, probability 5, space 0, times 9994 [ 239.669637][ T7768] CPU: 1 UID: 0 PID: 7768 Comm: syz.0.471 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.669665][ T7768] Tainted: [L]=SOFTLOCKUP [ 239.669672][ T7768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 239.669683][ T7768] Call Trace: [ 239.669690][ T7768] [ 239.669698][ T7768] dump_stack_lvl+0x100/0x190 [ 239.669733][ T7768] should_fail_ex.cold+0x5/0xa [ 239.669761][ T7768] should_failslab+0xc2/0x120 [ 239.669790][ T7768] __kmalloc_cache_noprof+0x91/0x6d0 [ 239.669810][ T7768] ? alloc_fs_context+0x65a/0xf40 [ 239.669832][ T7768] ? fscontext_alloc_log+0x4a/0x1b0 [ 239.669863][ T7768] fscontext_alloc_log+0x4a/0x1b0 [ 239.669887][ T7768] __x64_sys_fspick+0x2b8/0x3a0 [ 239.669911][ T7768] ? __pfx___x64_sys_fspick+0x10/0x10 [ 239.669942][ T7768] do_syscall_64+0x123/0x790 [ 239.669975][ T7768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.669994][ T7768] RIP: 0033:0x7f0cfbd9e2d9 [ 239.670010][ T7768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.670028][ T7768] RSP: 002b:00007f0cfcba7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1 [ 239.670046][ T7768] RAX: ffffffffffffffda RBX: 00007f0cfc025fa0 RCX: 00007f0cfbd9e2d9 [ 239.670059][ T7768] RDX: 0000000000000000 RSI: 0000200000000840 RDI: ffffffffffffff9c [ 239.670070][ T7768] RBP: 00007f0cfbe35888 R08: 0000000000000000 R09: 0000000000000000 [ 239.670082][ T7768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.670092][ T7768] R13: 00007f0cfc026038 R14: 00007f0cfc025fa0 R15: 00007ffcfdce1c08 [ 239.670119][ T7768] [ 239.944775][ T31] audit: type=1400 audit(1791997804.526:538): avc: denied { audit_write } for pid=7771 comm="syz.5.482" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 239.945720][ T31] audit: type=1400 audit(1791997804.526:539): avc: denied { watch } for pid=7771 comm="syz.5.482" path="/58/bus" dev="tmpfs" ino=346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 240.123747][ T7775] tc action pedit offset 0 out of bounds [ 240.123765][ T7775] tc action pedit offset 0 out of bounds [ 240.123774][ T7775] tc action pedit offset 0 out of bounds [ 240.123782][ T7775] tc action pedit offset 0 out of bounds [ 240.123791][ T7775] tc action pedit offset 0 out of bounds [ 240.123800][ T7775] tc action pedit offset 0 out of bounds [ 240.123809][ T7775] tc action pedit offset 0 out of bounds [ 240.123819][ T7775] tc action pedit offset 0 out of bounds [ 240.123828][ T7775] tc action pedit offset 0 out of bounds [ 240.123837][ T7775] tc action pedit offset 0 out of bounds [ 240.123856][ T7775] 0: reclassify loop, rule prio 0, protocol 800 [ 241.042158][ T7784] netlink: 32 bytes leftover after parsing attributes in process `syz.2.478'. [ 242.299076][ T7810] Invalid ELF header type: 3 != 1 [ 242.299139][ T31] audit: type=1400 audit(1791997806.877:540): avc: denied { module_load } for pid=7809 comm="syz.5.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 243.145753][ T7815] ceph: No mds server is up or the cluster is laggy [ 244.299100][ T7820] tps6598x 0-0020: failed to read vendor ID: -5, vid: 0x0 [ 244.352069][ T7820] i2c i2c-0: new_device: Instantiated device tps6598x at 0x20 [ 244.464278][ T31] audit: type=1400 audit(1791997809.048:541): avc: denied { ioctl } for pid=7822 comm="syz.0.490" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 244.587756][ T7835] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 244.587936][ T7835] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 246.176698][ T31] audit: type=1400 audit(1791997810.759:542): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 247.398708][ T7845] 9p: Could not find request transport: fd.rfdno=0xffffffffffffffff00000000000000000000 [ 248.263607][ T5601] Bluetooth: hci4: command 0x0406 tx timeout [ 249.217789][ T7857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.495'. [ 250.170333][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.649216][ T7870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.500'. [ 252.117292][ T1221] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 252.406106][ T5601] Bluetooth: hci4: command 0x0406 tx timeout [ 252.422398][ T1221] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 252.424726][ T1221] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 252.424748][ T1221] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.424764][ T1221] usb 5-1: config 0 has no interface number 0 [ 252.588629][ T1221] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.588654][ T1221] usb 5-1: Product: syz [ 252.588668][ T1221] usb 5-1: Manufacturer: syz [ 252.588681][ T1221] usb 5-1: SerialNumber: syz [ 252.630421][ T1221] usb 5-1: config 0 descriptor?? [ 252.634805][ T1221] yurex 5-1:0.50: Could not find endpoints [ 253.349323][ T12] IPVS: starting estimator thread 0... [ 253.380706][ T7888] bridge_slave_0: left allmulticast mode [ 253.380763][ T7888] bridge_slave_0: left promiscuous mode [ 253.381931][ T7888] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.397925][ T7892] netlink: 'syz.5.492': attribute type 10 has an invalid length. [ 253.435266][ T7891] IPVS: using max 43 ests per chain, 103200 per kthread [ 253.458808][ T31] audit: type=1400 audit(1791997818.043:543): avc: denied { map } for pid=7886 comm="syz.3.502" path="socket:[16949]" dev="sockfs" ino=16949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 253.979199][ T5738] usb 5-1: USB disconnect, device number 6 [ 254.744394][ T7888] bridge_slave_1: left allmulticast mode [ 254.744464][ T7888] bridge_slave_1: left promiscuous mode [ 254.744638][ T7888] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.200860][ T7888] bond0: (slave bond_slave_0): Releasing backup interface [ 255.224015][ T7888] bond0: (slave bond_slave_1): Releasing backup interface [ 255.314958][ T7888] team0: Port device team_slave_0 removed [ 255.378659][ T7888] team0: Port device team_slave_1 removed [ 255.379305][ T7888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.379317][ T7888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.382641][ T7888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.382653][ T7888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.429291][ T7888] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 255.508768][ T7892] team0: Port device dummy0 added [ 255.553449][ T7903] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 255.553470][ T7903] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 255.553606][ T7903] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 255.610231][ T31] audit: type=1800 audit(1791997820.134:544): pid=7903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t op=collect_data cause=failed comm="syz.2.504" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 255.610273][ T31] audit: type=1400 audit(1791997820.134:545): avc: denied { firmware_load } for pid=7897 comm="syz.2.504" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 255.610307][ T31] audit: type=1400 audit(1791997820.134:546): avc: denied { firmware_load } for pid=7897 comm="syz.2.504" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 256.323336][ T7914] overlayfs: failed to clone upperpath [ 258.153250][ T31] audit: type=1400 audit(1791997822.745:547): avc: denied { write } for pid=7929 comm="syz.5.513" name="cluster" dev="configfs" ino=1203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 258.156847][ T31] audit: type=1400 audit(1791997822.745:548): avc: denied { write } for pid=7929 comm="syz.5.513" name="node" dev="configfs" ino=17155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 258.224998][ T31] audit: type=1400 audit(1791997822.815:549): avc: denied { write } for pid=7929 comm="syz.5.513" name="heartbeat" dev="configfs" ino=17156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 260.686646][ T7937] netlink: 20 bytes leftover after parsing attributes in process `syz.5.514'. [ 262.211965][ T7958] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0015 with DS=0x19 [ 262.480700][ T5601] Bluetooth: hci3: command 0x0406 tx timeout [ 265.459363][ T7976] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 265.459463][ T7976] block device autoloading is deprecated and will be removed. [ 267.843598][ T31] audit: type=1400 audit(1791997832.440:550): avc: denied { name_connect } for pid=7986 comm="syz.5.525" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 268.040355][ T7998] capability: warning: `syz.4.523' uses 32-bit capabilities (legacy support in use) [ 268.040704][ T7998] VFS: file-max limit 0 reached [ 271.257709][ T31] audit: type=1800 audit(1791997835.852:551): pid=8027 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.537" name="syzkaller0" dev="sda1" ino=2051 res=0 errno=0 [ 272.255234][ T31] audit: type=1400 audit(1791997836.412:552): avc: denied { write } for pid=8028 comm="syz.3.527" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 273.975289][ T31] audit: type=1400 audit(1791997838.573:553): avc: denied { ioctl } for pid=8049 comm="syz.4.546" path="/dev/uinput" dev="devtmpfs" ino=919 ioctlcmd=0x5566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 274.101561][ T8050] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 274.101580][ T8050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.329949][ T8051] input: syz1 as /devices/virtual/input/input8 [ 274.970582][ T8051] input: failed to attach handler evdev to device input8, error: -4 [ 275.128988][ T8054] program syz.5.547 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.377279][ T31] audit: type=1400 audit(1791997839.974:554): avc: denied { read } for pid=8060 comm="syz.4.548" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 276.590575][ T8064] ovs-dp0: entered promiscuous mode [ 276.675776][ T31] audit: type=1400 audit(1791997841.274:555): avc: denied { write } for pid=8065 comm="syz.4.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 277.795314][ T31] audit: type=1400 audit(1791997842.395:556): avc: denied { setopt } for pid=8075 comm="syz.4.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 277.934202][ T31] audit: type=1400 audit(1791997842.535:557): avc: denied { append } for pid=8077 comm="syz.0.544" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 279.259205][ T31] audit: type=1800 audit(1791997843.856:558): pid=8083 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.555" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 279.613782][ T31] audit: type=1400 audit(1791997844.216:559): avc: denied { module_request } for pid=8085 comm="syz.0.556" kmod="tcp-ulp-espin" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 280.519277][ T8104] NILFS (nullb0): couldn't find nilfs on the device [ 280.551849][ T8104] netlink: 11 bytes leftover after parsing attributes in process `syz.4.560'. [ 283.008509][ T31] audit: type=1400 audit(1791997847.607:560): avc: denied { ioctl } for pid=8126 comm="syz.5.566" path="socket:[17689]" dev="sockfs" ino=17689 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 283.112121][ T5725] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 283.345537][ T5725] usb 4-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 283.345562][ T5725] usb 4-1: too many configurations: 253, using maximum allowed: 8 [ 283.389031][ T5725] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.389046][ T5725] usb 4-1: config 0 has no interfaces? [ 283.456978][ T5725] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.457002][ T5725] usb 4-1: config 0 has no interfaces? [ 283.457835][ T5725] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.457857][ T5725] usb 4-1: config 0 has no interfaces? [ 283.459244][ T5725] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.459264][ T5725] usb 4-1: config 0 has no interfaces? [ 283.491913][ T5725] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.491928][ T5725] usb 4-1: config 0 has no interfaces? [ 283.518392][ T5725] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.518406][ T5725] usb 4-1: config 0 has no interfaces? [ 283.540589][ T5725] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.540603][ T5725] usb 4-1: config 0 has no interfaces? [ 283.544453][ T5725] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.544473][ T5725] usb 4-1: config 0 has no interfaces? [ 283.544499][ T5725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.545866][ T5725] usb 4-1: config 0 descriptor?? [ 285.535971][ T31] audit: type=1400 audit(1791997850.139:561): avc: denied { view } for pid=8149 comm="syz.4.573" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 285.959626][ T8155] syzkaller0: entered promiscuous mode [ 285.959640][ T8155] syzkaller0: entered allmulticast mode [ 286.308789][ T5601] Bluetooth: hci4: command 0x0406 tx timeout [ 286.428677][ T5717] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 286.628959][ T5717] usb 5-1: Using ep0 maxpacket: 32 [ 286.629519][ T5717] usb 5-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=71.fa [ 286.631913][ T5717] usb 5-1: config 9 has an invalid interface number: 27 but max is 0 [ 286.631936][ T5717] usb 5-1: config 9 has no interface number 0 [ 286.631961][ T5717] usb 5-1: config 9 interface 27 has no altsetting 0 [ 286.635138][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.635160][ T5717] usb 5-1: Product: syz [ 286.635173][ T5717] usb 5-1: Manufacturer: syz [ 286.635187][ T5717] usb 5-1: SerialNumber: syz [ 286.698905][ T5788] usb 4-1: USB disconnect, device number 12 [ 287.134785][ T5717] qmi_wwan 5-1:9.27: bogus CDC Union: master=0, slave=1 [ 287.134956][ T5717] qmi_wwan 5-1:9.27: probe with driver qmi_wwan failed with error -22 [ 287.153765][ T5738] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 287.166863][ T5717] usb 5-1: USB disconnect, device number 7 [ 288.032056][ T5738] usb 6-1: device descriptor read/64, error -71 [ 288.277777][ T5738] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 288.350312][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.581'. [ 288.417692][ T5738] usb 6-1: device descriptor read/64, error -71 [ 288.489528][ T31] audit: type=1400 audit(1791997853.100:562): avc: denied { bind } for pid=8176 comm="syz.4.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 288.516817][ T31] audit: type=1400 audit(1791997853.100:563): avc: denied { write } for pid=8176 comm="syz.4.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 288.567067][ T5738] usb usb6-port1: attempt power cycle [ 290.190402][ T5738] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 290.300365][ T8190] futex_wake_op: syz.0.585 tries to shift op by 144; fix this program [ 290.406634][ T5738] usb 6-1: device not accepting address 11, error -71 [ 290.714399][ T8194] tmpfs: Bad value for 'mpol' [ 291.516128][ T5738] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 291.547473][ T5738] usb 6-1: Using ep0 maxpacket: 32 [ 291.548526][ T5738] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 291.550948][ T5738] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.550969][ T5738] usb 6-1: config 0 has no interfaces? [ 291.550994][ T5738] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.558501][ T5738] usb 6-1: config 0 descriptor?? [ 292.083965][ T5717] usb 6-1: USB disconnect, device number 12 [ 292.715652][ T8204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.591'. [ 295.329170][ T31] audit: type=1400 audit(1791997859.934:564): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 296.050090][ T8227] netlink: 20 bytes leftover after parsing attributes in process `syz.0.596'. [ 296.619010][ T31] audit: type=1400 audit(1791997861.224:565): avc: denied { ioctl } for pid=8229 comm="syz.4.595" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x640b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 297.096270][ T8237] evm: overlay not supported [ 299.421762][ T8244] raw_sendmsg: syz.4.595 forgot to set AF_INET. Fix it! [ 299.509201][ T8235] xt_CT: No such helper "netbios-ns" [ 299.815809][ T8247] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 300.197002][ T8258] netlink: Conntrack attr has 8 unknown bytes [ 300.197126][ T8258] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.203703][ T8258] netlink: 56 bytes leftover after parsing attributes in process `syz.4.604'. [ 300.261876][ T31] audit: type=1400 audit(1791997864.786:566): avc: denied { read write } for pid=8251 comm="syz.3.603" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 300.261923][ T31] audit: type=1400 audit(1791997864.786:567): avc: denied { open } for pid=8251 comm="syz.3.603" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 301.129398][ T8263] virtio-fs: tag not found [ 303.208673][ T5725] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 303.678609][ T8268] random: crng reseeded on system resumption [ 303.803525][ T8268] jffs2: notice: (8268) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 303.828017][ T31] audit: type=1400 audit(1791997868.448:568): avc: denied { write } for pid=8265 comm="syz.3.607" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 303.828137][ T31] audit: type=1400 audit(1791997868.448:569): avc: denied { add_name } for pid=8265 comm="syz.3.607" name="fillfile" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 303.905874][ T5725] usb 4-1: unable to get BOS descriptor or descriptor too short [ 303.905920][ T5725] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 303.908105][ T5725] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 303.908134][ T5725] usb 4-1: can't read configurations, error -71 [ 304.095592][ T8288] netlink: Conntrack attr has 8 unknown bytes [ 304.095706][ T8288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.519912][ T8304] netlink: 16 bytes leftover after parsing attributes in process `syz.5.600'. [ 306.712548][ T5725] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 306.743004][ T8294] ceph: No mds server is up or the cluster is laggy [ 306.983723][ T5725] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 308.217903][ T31] audit: type=1400 audit(1791997872.820:570): avc: denied { remount } for pid=8312 comm="syz.3.621" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 311.271677][ T31] audit: type=1400 audit(1791997875.882:571): avc: denied { name_bind } for pid=8332 comm="syz.4.626" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 311.273767][ T31] audit: type=1400 audit(1791997875.882:572): avc: denied { append } for pid=8332 comm="syz.4.626" name="nbd4" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 311.661352][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.845601][ T31] audit: type=1400 audit(1791997876.452:573): avc: denied { sqpoll } for pid=8340 comm="syz.3.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 312.058690][ T8344] trusted_key: encrypted_key: insufficient parameters specified [ 315.419121][ T8360] jffs2: notice: (8360) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 315.433049][ T31] audit: type=1400 audit(1791997880.044:574): avc: denied { write } for pid=8358 comm="syz.0.633" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 315.456055][ T31] audit: type=1400 audit(1791997880.064:575): avc: denied { create } for pid=8358 comm="syz.0.633" name="mnt" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 315.499439][ T8364] jffs2: warning: (8364) jffs2_sum_write_data: Not enough space for summary, padsize = -6 [ 315.500903][ T31] audit: type=1400 audit(1791997880.114:576): avc: denied { write } for pid=8358 comm="syz.0.633" name="mnt" dev="jffs2" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 315.500946][ T31] audit: type=1400 audit(1791997880.114:577): avc: denied { setattr } for pid=8358 comm="syz.0.633" name="mnt" dev="jffs2" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 315.579074][ T31] audit: type=1326 audit(1791997880.194:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8366 comm="syz.2.636" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb78d19e2d9 code=0x7ffc0000 [ 315.579121][ T31] audit: type=1326 audit(1791997880.194:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8366 comm="syz.2.636" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb78d19e2d9 code=0x7ffc0000 [ 315.581977][ T31] audit: type=1326 audit(1791997880.194:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8366 comm="syz.2.636" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb78d19e2d9 code=0x7ffc0000 [ 315.695178][ T8367] overlayfs: failed to clone upperpath [ 315.828336][ T8369] ip_tables: iptables: counters copy to user failed while replacing table [ 316.585598][ T31] kauditd_printk_skb: 66 callbacks suppressed [ 316.585616][ T31] audit: type=1400 audit(1791997881.204:647): avc: denied { name_bind } for pid=8370 comm="syz.2.639" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 316.649629][ T8373] netlink: 48 bytes leftover after parsing attributes in process `syz.5.637'. [ 316.774687][ T8382] netlink: 32 bytes leftover after parsing attributes in process `syz.4.629'. [ 318.331311][ T31] audit: type=1400 audit(1791997882.945:648): avc: denied { connect } for pid=8414 comm="syz.4.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 318.397575][ T8419] netlink: 'syz.2.644': attribute type 7 has an invalid length. [ 318.412934][ T52] Bluetooth: hci0: unexpected event for opcode 0x0c5a [ 322.617921][ T31] audit: type=1400 audit(1791997887.237:649): avc: denied { map } for pid=8447 comm="syz.3.653" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 322.701243][ T31] audit: type=1400 audit(1791997887.327:650): avc: denied { mounton } for pid=8447 comm="syz.3.653" path="/130/dev/mtdblock0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 322.786556][ T8451] VFS: Can't find a romfs filesystem on dev mtdblock0. [ 322.786556][ T8451] [ 324.733803][ T31] audit: type=1400 audit(1791997889.358:651): avc: denied { getopt } for pid=8473 comm="syz.0.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 324.763452][ T8474] VFS: file-max limit 0 reached [ 324.777792][ T31] audit: type=1400 audit(1791997889.398:652): avc: denied { append } for pid=8476 comm="syz.4.655" name="001" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 324.860284][ T52] Bluetooth: hci4: unexpected event for opcode 0x0411 [ 324.986547][ T8480] process 'syz.5.648' launched './file2' with NULL argv: empty string added [ 324.987787][ T31] audit: type=1400 audit(1791997889.608:653): avc: denied { execute_no_trans } for pid=8479 comm="syz.5.648" path="/90/file2" dev="tmpfs" ino=528 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 325.134368][ T31] audit: type=1400 audit(1791997889.758:654): avc: denied { map } for pid=8484 comm="syz.2.656" path="socket:[19567]" dev="sockfs" ino=19567 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 325.661806][ T31] audit: type=1400 audit(1791997890.239:655): avc: denied { mount } for pid=8491 comm="syz.0.658" name="/" dev="mqueue" ino=4817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 327.213901][ T8534] netlink: 76 bytes leftover after parsing attributes in process `syz.4.662'. [ 329.683043][ T52] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 329.683095][ T52] Bluetooth: hci4: Injecting HCI hardware error event [ 329.685112][ T5601] Bluetooth: hci4: hardware error 0x00 [ 331.064949][ T8560] netlink: 20 bytes leftover after parsing attributes in process `syz.2.671'. [ 331.081877][ T8560] bond0: (slave bond_slave_0): Releasing backup interface [ 331.168893][ T8560] bond_slave_0: entered promiscuous mode [ 331.168913][ T8560] bond_slave_0: entered allmulticast mode [ 331.745030][ T8567] syzkaller0: entered promiscuous mode [ 331.745052][ T8567] syzkaller0: entered allmulticast mode [ 331.774581][ T8567] tipc: Enabled bearer , priority 0 [ 331.790218][ T8567] tipc: Resetting bearer [ 331.808496][ T8566] tipc: Resetting bearer [ 331.853633][ T8566] tipc: Disabling bearer [ 331.879559][ T8573] syzkaller0: entered promiscuous mode [ 331.879577][ T8573] syzkaller0: entered allmulticast mode [ 331.888152][ T5601] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 331.914247][ T31] audit: type=1400 audit(1791997896.532:656): avc: denied { setopt } for pid=8572 comm="syz.3.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 332.066607][ T31] audit: type=1400 audit(1791997896.692:657): avc: denied { write } for pid=8569 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 333.738988][ T8597] lo: entered allmulticast mode [ 334.328557][ T31] audit: type=1400 audit(1791997898.953:658): avc: denied { write } for pid=8595 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 337.849108][ T31] audit: type=1400 audit(1791997902.475:659): avc: denied { write } for pid=8622 comm="syz.5.679" name="functions" dev="configfs" ino=9846 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 337.879342][ T8623] netlink: 'syz.5.679': attribute type 13 has an invalid length. [ 337.892341][ T31] audit: type=1400 audit(1791997902.515:660): avc: denied { write } for pid=8622 comm="syz.5.679" name="configs" dev="configfs" ino=9847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 337.914873][ T31] audit: type=1400 audit(1791997902.515:661): avc: denied { write } for pid=8622 comm="syz.5.679" name="c.1" dev="configfs" ino=19728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 337.914916][ T31] audit: type=1400 audit(1791997902.515:662): avc: denied { create } for pid=8622 comm="syz.5.679" name="midi.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 337.914950][ T31] audit: type=1400 audit(1791997902.515:663): avc: denied { write } for pid=8622 comm="syz.5.679" name="c.1" dev="configfs" ino=19728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 338.155208][ T31] audit: type=1800 audit(1791997902.775:664): pid=8630 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.689" name="syzkaller0" dev="sda1" ino=2051 res=0 errno=0 [ 339.698702][ T31] audit: type=1400 audit(1791997903.946:665): avc: denied { shutdown } for pid=8638 comm="syz.5.691" lport=51325 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 340.533138][ T5601] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 340.755886][ T31] audit: type=1400 audit(1791997905.386:666): avc: denied { write } for pid=8647 comm="syz.4.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 341.134273][ T8655] syz_tun: entered allmulticast mode [ 341.149635][ T8654] syz_tun: left allmulticast mode [ 341.567054][ T5334] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 341.762962][ T5334] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 341.764160][ T5334] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 341.764179][ T5334] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 169, setting to 64 [ 341.764193][ T5334] usb 5-1: config 0 interface 0 has no altsetting 0 [ 341.765761][ T5334] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 341.765782][ T5334] usb 5-1: Product: syz [ 341.765795][ T5334] usb 5-1: Manufacturer: syz [ 341.765808][ T5334] usb 5-1: SerialNumber: syz [ 341.768382][ T5334] usb 5-1: config 0 descriptor?? [ 341.769135][ T8662] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 341.784709][ T5334] usb 5-1: selecting invalid altsetting 0 [ 341.981669][ T31] audit: type=1400 audit(1791997906.617:667): avc: denied { read } for pid=8677 comm="syz.2.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 341.993950][ T8662] usb 5-1: BOGUS urb xfer, pipe 0 != type 1 [ 342.084898][ T31] audit: type=1400 audit(1791997906.717:668): avc: denied { bind } for pid=8660 comm="syz.4.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 342.194344][ T8678] vxlan0: entered allmulticast mode [ 342.295408][ T5334] usb 5-1: USB disconnect, device number 8 [ 342.295947][ T8662] usb 5-1: cannot submit urb 0, error -19: no device [ 342.296129][ T8662] usb 5-1: cannot submit urb 0, error -19: no device [ 342.299191][ T8662] usb 5-1: cannot submit urb 0, error -19: no device [ 342.299342][ T8662] usb 5-1: cannot submit urb 0, error -19: no device [ 342.314277][ T8662] usb 5-1: cannot submit urb 0, error -19: no device [ 342.314431][ T8662] usb 5-1: cannot submit urb 0, error -19: no device [ 342.314575][ T8662] usb 5-1: cannot submit urb 0, error -19: no device [ 342.314718][ T8662] usb 5-1: cannot submit urb 0, error -19: no device [ 342.314862][ T8662] usb 5-1: cannot submit urb 0, error -19: no device [ 342.315008][ T8662] usb 5-1: cannot submit urb 0, error -19: no device [ 342.361219][ T8662] usb 5-1: cannot submit urb 0, error -19: no device [ 342.361445][ T8662] usb 5-1: cannot submit urb 0, error -19: no device [ 342.532271][ T45] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.532298][ T45] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.532316][ T45] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.532333][ T45] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.552269][ T8664] udevd[8664]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 345.199415][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 345.199433][ T31] audit: type=1326 audit(1791997909.268:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8692 comm="syz.5.693" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff17c79e2d9 code=0x0 [ 345.914215][ T31] audit: type=1400 audit(1791997910.549:671): avc: denied { getopt } for pid=8700 comm="syz.5.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 345.940290][ T8705] netlink: 12 bytes leftover after parsing attributes in process `syz.5.708'. [ 346.936686][ T8717] comedi comedi1: Minor 4 specified more than once! [ 348.700773][ T8732] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 348.863711][ T31] audit: type=1400 audit(1791997913.500:672): avc: denied { write } for pid=8699 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.026807][ T31] audit: type=1400 audit(1791997914.661:673): avc: denied { remount } for pid=8736 comm="syz.4.715" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 350.588143][ T31] audit: type=1400 audit(1791997915.231:674): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 350.673685][ T31] audit: type=1400 audit(1791997915.311:675): avc: denied { write } for pid=8744 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.765675][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.721'. [ 353.429526][ T8775] futex_wake_op: syz.3.717 tries to shift op by 144; fix this program [ 353.509588][ T31] audit: type=1400 audit(1791997918.143:676): avc: denied { cmd } for pid=8772 comm="iou-wrk-8773" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 356.283710][ T8806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.735'. [ 356.941774][ T31] audit: type=1400 audit(1791997921.574:677): avc: denied { write } for pid=8781 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 357.617858][ T31] audit: type=1400 audit(1791997922.255:678): avc: denied { write } for pid=8823 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 357.657211][ T52] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 357.657358][ T52] Bluetooth: hci2: Injecting HCI hardware error event [ 357.659070][ T5601] Bluetooth: hci2: hardware error 0x00 [ 358.128914][ T31] audit: type=1400 audit(1791997922.765:679): avc: denied { bind } for pid=8825 comm="syz.4.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 358.189205][ T8829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.738'. [ 358.191840][ T31] audit: type=1400 audit(1791997922.825:680): avc: denied { append } for pid=8827 comm="syz.3.739" name="uprobe_events" dev="tracefs" ino=1070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 358.217445][ T8828] FAULT_INJECTION: forcing a failure. [ 358.217445][ T8828] name failslab, interval 1, probability 5, space 0, times 9993 [ 358.217471][ T8828] CPU: 1 UID: 0 PID: 8828 Comm: syz.3.739 Tainted: G L syzkaller #0 PREEMPT(full) [ 358.217493][ T8828] Tainted: [L]=SOFTLOCKUP [ 358.217499][ T8828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 358.217509][ T8828] Call Trace: [ 358.217515][ T8828] [ 358.217521][ T8828] dump_stack_lvl+0x100/0x190 [ 358.217550][ T8828] should_fail_ex.cold+0x5/0xa [ 358.217574][ T8828] should_failslab+0xc2/0x120 [ 358.217598][ T8828] kmem_cache_alloc_noprof+0x92/0x6a0 [ 358.217621][ T8828] ? mempool_init_node+0x2f7/0x6f0 [ 358.217641][ T8828] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 358.217664][ T8828] mempool_init_node+0x2f7/0x6f0 [ 358.217687][ T8828] ? __pfx_mempool_free_slab+0x10/0x10 [ 358.217704][ T8828] mempool_create_node_noprof+0xe9/0x1b0 [ 358.217723][ T8828] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 358.217743][ T8828] ceph_osdc_init+0x48b/0xa00 [ 358.217765][ T8828] ceph_create_client+0x281/0x370 [ 358.217785][ T8828] ceph_get_tree+0x1a4/0x1fd0 [ 358.217804][ T8828] ? bpf_lsm_capable+0x9/0x10 [ 358.217820][ T8828] ? security_capable+0x80/0x260 [ 358.217842][ T8828] vfs_get_tree+0x92/0x320 [ 358.217860][ T8828] vfs_cmd_create+0xd7/0x2a0 [ 358.217882][ T8828] __do_sys_fsconfig+0x55a/0xcb0 [ 358.217903][ T8828] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 358.217935][ T8828] do_syscall_64+0x123/0x790 [ 358.217960][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.217976][ T8828] RIP: 0033:0x7ff99a19e2d9 [ 358.217990][ T8828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.218005][ T8828] RSP: 002b:00007ff99af8d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 358.218022][ T8828] RAX: ffffffffffffffda RBX: 00007ff99a425fa0 RCX: 00007ff99a19e2d9 [ 358.218032][ T8828] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 358.218042][ T8828] RBP: 00007ff99a235888 R08: 0000000000000000 R09: 0000000000000000 [ 358.218051][ T8828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.218061][ T8828] R13: 00007ff99a426038 R14: 00007ff99a425fa0 R15: 00007ffe73c7e9f8 [ 358.218084][ T8828] [ 358.226504][ T31] audit: type=1400 audit(1791997922.845:681): avc: denied { mounton } for pid=8827 comm="syz.3.739" path="/147/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 358.842635][ T5738] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 359.003606][ T5738] usb 4-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice= 2.6d [ 359.007620][ T5738] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.007641][ T5738] usb 4-1: Product: syz [ 359.007654][ T5738] usb 4-1: Manufacturer: syz [ 359.007668][ T5738] usb 4-1: SerialNumber: syz [ 359.052089][ T8845] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 359.080677][ T8845] CIFS: Attempting to mount //127.0.0.1/test [ 359.091318][ T8845] CIFS: VFS: Error connecting to socket. Aborting operation. [ 359.091404][ T8845] CIFS: VFS: cifs_mount failed w/return code = -111 [ 359.299572][ T8851] loop5: detected capacity change from 0 to 7 [ 359.327688][ T8851] Dev loop5: unable to read RDB block 7 [ 359.327715][ T8851] loop5: AHDI p1 p3 p4 [ 359.327734][ T8851] loop5: partition table partially beyond EOD, truncated [ 359.327888][ T8851] loop5: p1 size 100663296 extends beyond EOD, truncated [ 359.417895][ T8851] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 359.638279][ T5738] gspca_main: mars-2.14.0 probing 093a:050f [ 359.729335][ T5738] usb 4-1: USB disconnect, device number 15 [ 359.775528][ T8851] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-16) [ 359.863364][ T8867] syzkaller0: entered promiscuous mode [ 359.863383][ T8867] syzkaller0: entered allmulticast mode [ 359.867516][ T8867] tipc: Enabled bearer , priority 0 [ 359.871150][ T8867] tipc: Resetting bearer [ 359.900169][ T8866] tipc: Resetting bearer [ 359.918600][ T8866] tipc: Disabling bearer [ 360.498373][ T8869] bridge2: entered promiscuous mode [ 360.498388][ T8869] bridge2: entered allmulticast mode [ 360.538368][ T5601] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 360.653912][ T31] audit: type=1400 audit(1791997925.296:682): avc: denied { mounton } for pid=8872 comm="syz.3.751" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 360.653919][ T8873] binder: Unknown parameter 'ÿÿÿÿ' [ 361.480919][ T8878] zram0: detected capacity change from 0 to 65536 [ 361.649058][ T31] audit: type=1400 audit(1791997926.287:683): avc: denied { write } for pid=8884 comm="syz.0.755" name="file0" dev="tmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 361.649393][ T31] audit: type=1400 audit(1791997926.287:684): avc: denied { open } for pid=8884 comm="syz.0.755" path="/142/file0" dev="tmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 361.709177][ T31] audit: type=1400 audit(1791997926.337:685): avc: denied { map } for pid=8884 comm="syz.0.755" path="socket:[21263]" dev="sockfs" ino=21263 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 361.922481][ T31] audit: type=1400 audit(1791997926.567:686): avc: denied { write } for pid=8889 comm="syz.0.758" name="functions" dev="configfs" ino=9846 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 361.954897][ T31] audit: type=1400 audit(1791997926.597:687): avc: denied { write } for pid=8889 comm="syz.0.758" name="uncompressed" dev="configfs" ino=20172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 361.958561][ T8890] [ 361.960796][ T31] audit: type=1400 audit(1791997926.597:688): avc: denied { write } for pid=8889 comm="syz.0.758" name="header" dev="configfs" ino=20171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 361.960827][ T31] audit: type=1400 audit(1791997926.597:689): avc: denied { write } for pid=8889 comm="syz.0.758" name="h" dev="configfs" ino=20182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 361.960851][ T31] audit: type=1400 audit(1791997926.597:690): avc: denied { write } for pid=8889 comm="syz.0.758" name="h" dev="configfs" ino=20182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 362.049963][ T8890] ====================================================== [ 362.056957][ T8890] WARNING: possible circular locking dependency detected [ 362.063953][ T8890] syzkaller #0 Tainted: G L [ 362.069908][ T8890] ------------------------------------------------------ [ 362.076901][ T8890] syz.0.758/8890 is trying to acquire lock: [ 362.082768][ T8890] ffffffff913ff8c8 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_streaming_header_allow_link+0x7c/0x650 [ 362.093967][ T8890] [ 362.093967][ T8890] but task is already holding lock: [ 362.101305][ T8890] ffff888055d84140 (&sb->s_type->i_mutex_key#26){++++}-{4:4}, at: configfs_symlink+0x452/0x1340 [ 362.111723][ T8890] [ 362.111723][ T8890] which lock already depends on the new lock. [ 362.111723][ T8890] [ 362.122101][ T8890] [ 362.122101][ T8890] the existing dependency chain (in reverse order) is: [ 362.131091][ T8890] [ 362.131091][ T8890] -> #3 (&sb->s_type->i_mutex_key#26){++++}-{4:4}: [ 362.139762][ T8890] lock_acquire+0x1d1/0x380 [ 362.144770][ T8890] down_write+0x8b/0x1f0 [ 362.149520][ T8890] configfs_depend_item_unlocked+0xf3/0x6a0 [ 362.155912][ T8890] usbg_make_tpg+0x251/0x610 [ 362.161004][ T8890] target_fabric_make_tpg+0xab/0x8c0 [ 362.166790][ T8890] configfs_mkdir+0x525/0xd40 [ 362.171970][ T8890] vfs_mkdir+0x364/0x850 [ 362.176710][ T8890] filename_mkdirat+0x48b/0x5e0 [ 362.182066][ T8890] __x64_sys_mkdirat+0x89/0xc0 [ 362.187336][ T8890] do_syscall_64+0x123/0x790 [ 362.192427][ T8890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.198818][ T8890] [ 362.198818][ T8890] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 362.206697][ T8890] lock_acquire+0x1d1/0x380 [ 362.211700][ T8890] __mutex_lock+0x1a4/0x1bd0 [ 362.216795][ T8890] tcm_alloc_inst+0x5f/0x1e0 [ 362.221885][ T8890] try_get_usb_function_instance+0x136/0x1f0 [ 362.228367][ T8890] usb_get_function_instance+0x16/0x70 [ 362.234328][ T8890] function_make+0x18c/0x3f0 [ 362.239417][ T8890] configfs_mkdir+0x525/0xd40 [ 362.244597][ T8890] vfs_mkdir+0x364/0x850 [ 362.249340][ T8890] filename_mkdirat+0x48b/0x5e0 [ 362.254694][ T8890] __x64_sys_mkdirat+0x89/0xc0 [ 362.259961][ T8890] do_syscall_64+0x123/0x790 [ 362.265057][ T8890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.271448][ T8890] [ 362.271448][ T8890] -> #1 (func_lock){+.+.}-{4:4}: [ 362.278543][ T8890] lock_acquire+0x1d1/0x380 [ 362.283544][ T8890] __mutex_lock+0x1a4/0x1bd0 [ 362.288637][ T8890] try_get_usb_function_instance+0x26/0x1f0 [ 362.295033][ T8890] usb_get_function_instance+0x16/0x70 [ 362.300993][ T8890] function_make+0x18c/0x3f0 [ 362.306084][ T8890] configfs_mkdir+0x525/0xd40 [ 362.311266][ T8890] vfs_mkdir+0x364/0x850 [ 362.316007][ T8890] filename_mkdirat+0x48b/0x5e0 [ 362.321362][ T8890] __x64_sys_mkdirat+0x89/0xc0 [ 362.326630][ T8890] do_syscall_64+0x123/0x790 [ 362.331724][ T8890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.338119][ T8890] [ 362.338119][ T8890] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 362.346345][ T8890] check_prev_add+0xeb/0xe60 [ 362.351436][ T8890] __lock_acquire+0x1528/0x1f40 [ 362.356789][ T8890] lock_acquire+0x1d1/0x380 [ 362.361791][ T8890] __mutex_lock+0x1a4/0x1bd0 [ 362.366886][ T8890] uvcg_streaming_header_allow_link+0x7c/0x650 [ 362.373538][ T8890] configfs_symlink+0x695/0x1340 [ 362.378976][ T8890] vfs_symlink+0x178/0x4d0 [ 362.383894][ T8890] filename_symlinkat+0x2a6/0x560 [ 362.389416][ T8890] __x64_sys_symlinkat+0x9c/0xe0 [ 362.394851][ T8890] do_syscall_64+0x123/0x790 [ 362.399942][ T8890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.406333][ T8890] [ 362.406333][ T8890] other info that might help us debug this: [ 362.406333][ T8890] [ 362.416535][ T8890] Chain exists of: [ 362.416535][ T8890] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#26 [ 362.416535][ T8890] [ 362.431474][ T8890] Possible unsafe locking scenario: [ 362.431474][ T8890] [ 362.438898][ T8890] CPU0 CPU1 [ 362.444236][ T8890] ---- ---- [ 362.449575][ T8890] lock(&sb->s_type->i_mutex_key#26); [ 362.455016][ T8890] lock(tpg_instances_lock); [ 362.462189][ T8890] lock(&sb->s_type->i_mutex_key#26); [ 362.470150][ T8890] lock(gadget_subsys.su_mutex); [ 362.475151][ T8890] [ 362.475151][ T8890] *** DEADLOCK *** [ 362.475151][ T8890] [ 362.483269][ T8890] locks held by syz.0.758/8890: 2, last CPU#1: [ 362.489398][ T8890] #0: ffff88801f3ca460 (sb_writers#14){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 362.498862][ T8890] #1: ffff888055d84140 (&sb->s_type->i_mutex_key#26){++++}-{4:4}, at: configfs_symlink+0x452/0x1340 [ 362.509716][ T8890] [ 362.509716][ T8890] stack backtrace: [ 362.515586][ T8890] CPU: 1 UID: 0 PID: 8890 Comm: syz.0.758 Tainted: G L syzkaller #0 PREEMPT(full) [ 362.526325][ T8890] Tainted: [L]=SOFTLOCKUP [ 362.530626][ T8890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 362.540658][ T8890] Call Trace: [ 362.543914][ T8890] [ 362.546823][ T8890] dump_stack_lvl+0x100/0x190 [ 362.551487][ T8890] print_circular_bug.cold+0x178/0x1be [ 362.556931][ T8890] check_noncircular+0x146/0x160 [ 362.561847][ T8890] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 362.567808][ T8890] check_prev_add+0xeb/0xe60 [ 362.572379][ T8890] __lock_acquire+0x1528/0x1f40 [ 362.577210][ T8890] ? lapic_next_event+0x10/0x20 [ 362.582043][ T8890] lock_acquire+0x1d1/0x380 [ 362.586524][ T8890] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 362.592831][ T8890] ? __pfx___might_resched+0x10/0x10 [ 362.598092][ T8890] ? audit_inode_permission+0x1ea/0x2a0 [ 362.603623][ T8890] __mutex_lock+0x1a4/0x1bd0 [ 362.608195][ T8890] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 362.614501][ T8890] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 362.620808][ T8890] ? __lock_acquire+0x5c0/0x1f40 [ 362.625728][ T8890] ? __pfx___mutex_lock+0x10/0x10 [ 362.630736][ T8890] ? selinux_inode_permission+0x14a/0x1130 [ 362.636525][ T8890] ? __pfx___might_resched+0x10/0x10 [ 362.641789][ T8890] ? make_vfsgid+0xf1/0x140 [ 362.646275][ T8890] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 362.652581][ T8890] ? security_inode_permission+0xbf/0x250 [ 362.658282][ T8890] uvcg_streaming_header_allow_link+0x7c/0x650 [ 362.664417][ T8890] ? inode_permission+0x374/0x620 [ 362.669422][ T8890] ? mntput_no_expire+0xe8/0x220 [ 362.674345][ T8890] configfs_symlink+0x695/0x1340 [ 362.679267][ T8890] ? __pfx_configfs_symlink+0x10/0x10 [ 362.684624][ T8890] vfs_symlink+0x178/0x4d0 [ 362.689020][ T8890] filename_symlinkat+0x2a6/0x560 [ 362.694024][ T8890] ? __pfx_filename_symlinkat+0x10/0x10 [ 362.699545][ T8890] ? strncpy_from_user+0x19d/0x2d0 [ 362.704644][ T8890] ? do_getname+0x191/0x390 [ 362.709125][ T8890] __x64_sys_symlinkat+0x9c/0xe0 [ 362.714042][ T8890] do_syscall_64+0x123/0x790 [ 362.718622][ T8890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.724496][ T8890] RIP: 0033:0x7f0cfbd9e2d9 [ 362.728894][ T8890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.748478][ T8890] RSP: 002b:00007f0cfcba7028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 362.756870][ T8890] RAX: ffffffffffffffda RBX: 00007f0cfc025fa0 RCX: 00007f0cfbd9e2d9 [ 362.764821][ T8890] RDX: 00002000000019c0 RSI: ffffffffffffff9c RDI: 0000200000001980 [ 362.772774][ T8890] RBP: 00007f0cfbe35888 R08: 0000000000000000 R09: 0000000000000000 [ 362.780722][ T8890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.788670][ T8890] R13: 00007f0cfc026038 R14: 00007f0cfc025fa0 R15: 00007ffcfdce1c08 [ 362.796630][ T8890] [ 362.975543][ T31] audit: type=1400 audit(1791997927.617:691): avc: denied { write } for pid=8889 comm="syz.0.758" name="hs" dev="configfs" ino=20179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 362.975579][ T31] audit: type=1400 audit(1791997927.617:692): avc: denied { write } for pid=8889 comm="syz.0.758" name="hs" dev="configfs" ino=20179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1