last executing test programs: 20.268087253s ago: executing program 3 (id=480): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x2, 0x7) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x57) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x8002) ioctl$DRM_IOCTL_DROP_MASTER(r4, 0x641f) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, 0x0) unshare(0x2c020400) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0x40000000, 0x0, 0x3}, 0x8}) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, [], [0xffffffff], [], [0xfffffffffffffffc]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x3, 0x2, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[r3, r7, r8], 0x3, 0x800}) syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000c7ce360863078120abd001e402010902120001000000000904000000ff"], 0x0) 17.532390032s ago: executing program 2 (id=485): r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000004100)={0x2020}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ECN={0x8, 0x6, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x51}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r8, &(0x7f0000002640)={0x2020}, 0x2020) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) dup(r0) 15.649907974s ago: executing program 0 (id=487): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}}, 0x4000010) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448d4, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='kvm_msi_set_irq\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4604}, 0x0) syz_usb_connect(0x5, 0x24, 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) 13.669162052s ago: executing program 3 (id=492): r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) socketpair$unix(0x1, 0x2, 0x0, 0x0) fanotify_init(0x10, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002240)='net/dev_mcast\x00') read$FUSE(r2, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c250000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000940)='percpu_alloc_percpu\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) write$uinput_user_dev(r3, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23d, 0x0, 0x800, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x4, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x960, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x3, 0x1010001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9388, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$UI_DEV_DESTROY(r3, 0x5502) syz_open_pts(r0, 0x228c00) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 12.8991352s ago: executing program 1 (id=493): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2000004}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40000, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x7, 0x4, 0x8, 0x8, 0x20000}, 0x50) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0xfe8e, 0x12) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r7, 0x1, 0x200000010, &(0x7f0000000040)=0x9, 0x65) splice(r5, 0x0, r6, 0x0, 0xfffd, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8, 0xfffffff1, 0x2, 0x20184, 0xffffffffffffffff, 0xc74, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2, 0x6}, 0x50) 12.546034053s ago: executing program 0 (id=494): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r1, 0xc0105702, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) syz_emit_vhci(0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/oops_count', 0x140000, 0x0) read$usbfs(r2, &(0x7f00000001c0)=""/90, 0x5a) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000380)) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@setneightbl={0x14, 0x43, 0x1, 0xffff7ffe, 0x0, {0xa}}, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket(0x40000000015, 0x5, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) syz_emit_ethernet(0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa429e82211cf886dd6a7abd6a00006701fc000000009dbd4c56990380c60000000000000000000000ff02000000000000000000000000000114aa7b13fded831a665742042623f2fdeb23a306ed54a5368422166036c57bb21777d42b7e0afb730ce6611a3bce50367108658868fdd363cfdefa38f547f92fb81af92cc5b0e29dabc4a18b821d5757e9b7be3f49d98120dce3f31fa514c3565979c0bc4431"], 0x0) utime(&(0x7f0000000240)='./bus\x00', &(0x7f0000000340)={0x1, 0x100}) 11.68681224s ago: executing program 3 (id=495): creat(0x0, 0xd931d3864d39ddd8) openat$ppp(0xffffffffffffff9c, 0x0, 0xc8902, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) syz_open_procfs(0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x0, 0x0}) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/fib_triestat\x00') r4 = fsopen(&(0x7f0000000240)='hugetlbfs\x00', 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r5, &(0x7f0000002140)={0x2020}, 0x2020) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000c40)=[@cswp={0x58, 0x114, 0x7, {{0x6, 0xfffffff7}, 0x0, 0x0, 0x8, 0x1, 0x72b, 0x4, 0x9, 0x3}}], 0x58}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x69) pread64(r3, &(0x7f0000000100)=""/253, 0xfd, 0xadc) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000400)={0x0, 'ipvlan0\x00'}, 0x18) r7 = socket$inet6_sctp(0xa, 0x7, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) 11.684548384s ago: executing program 2 (id=505): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000760000000000000000000000faffffffffcd37f87c6c49f6ebd5ffffff0082e8f0550fe60ce45792dd84101a900fa4794bde0560c67a6fabcab923ec81e4ee2923b76828a5a9e671804cbca063daa6ad1042294bbcf443d3eabeb61281ae66a4ed01c37fa6b009047e4bd6827c7eb3e35f511e45f6d720812a630ee9308b0d3a2a225fc5075b539638d8d744cbb759b0f80ade85b07d9dcda2a4db22de685dacb1fb6e11f7830860d6f58ed29a3083"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0x1006) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x11}, {0xffe6, 0xb}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x7, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r0, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r11 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x200006e64, 0x80040) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r11, 0x80045530, &(0x7f0000000380)=""/88) 11.522764846s ago: executing program 1 (id=496): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='dyn']) shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ff9000/0x4000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xf1) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) getresuid(&(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) getxattr(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)=@known='trusted.overlay.opaque\x00', &(0x7f0000000540)=""/233, 0xe9) mount$pvfs2(&(0x7f0000000100), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x80, &(0x7f0000000300)={[{'./cgroup/syz0\x00'}, {}, {}], [{@obj_user={'obj_user', 0x3d, '/'}}, {@fowner_lt={'fowner<', r1}}]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1101}) chdir(&(0x7f00000000c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setitimer(0x2, &(0x7f00000000c0)={{0x0, 0xea60}, {0xffffffff}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, 0x0, r0, &(0x7f0000000640)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c00010062"], 0x3c}}, 0x0) sendmmsg(r2, &(0x7f00000006c0), 0x0, 0x44000) chdir(&(0x7f00000000c0)='./bus\x00') r5 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r5, &(0x7f0000000040)=@OVL_FILEID_V0={0x15, 0x3ffff, {0x0, 0xfb, 0x15, 0x4, 0xe, "bffa2938104a672e357cf35df59f7c58"}}, 0xc34240) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 10.383898972s ago: executing program 0 (id=497): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0xdf, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000880)="5ca86304000000f0099af29e96c8d42bf351039697e1d4c1d8edc7399bed9c4584dd57963ddceee7af02f304286e50ffc3e59e635cf000000081f8ac2e86da524ae2ad5deb90ac06b044097359492e6fa240fc9d250c5ff8d080e2659439694cd1ecc032b04249a12c0d69e173f387a090b59226e9804aa251ed0c76014cf17b90f39e40a0389b9fc3644415bb6861be988e7af22fb4d27f3eb4a7c82698fd23a2015f954fb3e9c2b4629ec47b845de19989a6b38b0b6e26c74a680d6f04222f7fd8b490d59e132d5a52c398ff819b237f4a684bd42527f0694996bc711249", 0x0, 0xfffffff9, 0x0, 0x3, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg(r2, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00'}) sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280d00001e0001ff00", @ANYBLOB='\x00\x00\t53'], 0x28}}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000000080)=0x6, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000440)=[@in={0x2, 0x4e24, @broadcast}], 0x10) sendmsg$inet_sctp(r6, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x24000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x4}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1800001ca30000040004800000000000000000246e9e333cd795beb8d34d972ec145596908c80e80f025e9927b85baefc3f2b93d368c542353e4998510dc000000000000"], 0x18}}, 0x0) 10.377956663s ago: executing program 1 (id=498): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200), 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x20000855}, 0x48000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'macvlan1\x00'}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0xffffffffffffff51) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x6, 0x1, {0x0, 0x2, 0x5b, 0x3, 0x23}, 0x7}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) modify_ldt$write(0x1, 0x0, 0x0) r5 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) close(r5) socket(0x840000000002, 0x3, 0xff) r6 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0xc81d, 0x10, 0x4, 0x2cf}, &(0x7f0000000300), 0x0) io_uring_enter(r6, 0x47b2, 0x10f9, 0x82, 0x0, 0x48) io_uring_enter(r6, 0x640a, 0xcaab, 0x23, &(0x7f00000001c0)={[0x4]}, 0x8) r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) sendfile(r7, r7, 0x0, 0x200000) cachestat(r7, &(0x7f0000000000)={0x9}, &(0x7f0000000040), 0x0) 10.254171571s ago: executing program 2 (id=499): r0 = syz_open_dev$media(&(0x7f0000000000), 0x33ac98ac, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095", @ANYBLOB="b5d68d1f5c64769bbc185749d867c6a12313fa25ed90128553bca5ea273a367b05a3c30f86e36cf96a25a99c0d449f91c93693ad8edc69", @ANYRES32=r0], &(0x7f0000000140)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000000)={0xa, {0xbe8, 0x8, 0xd, 0x9}, {0x8, 0x8838, 0x4, 0x8}, {0x0, 0x101}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setrlimit(0x7, &(0x7f0000000640)) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r5, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000000440)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0xffffffff80000000, 0xfffc, 0x2, 0x6b, 0x2, 0x0, 0x0, 0x0, 0x933}}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r7, 0x40480923, 0x200000000005) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r2}, 0x10) epoll_create1(0x0) write$cgroup_subtree(r7, &(0x7f0000000040)={[{0x2d, 'rdma'}]}, 0x6) epoll_create1(0x0) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000b63879103412020036c80102030109021b00010000000309049c0201714bc1000905820240000000002a84d56f4f47ffd149ca26b5e1eef8345bd638b54e2880b56a52be4f975d9d50e91ccdd01db18c906c473f6721410d765b2fec2f7f6beef1500297cca13fdd008b4488934a1b447e1b93cf07e9a084374e5e9437565646c209613da90c47a4b311b1736ac94eec0789d36e8097e6c40953cae9373ccfdaf30bbf062cf437d3afe32b20881abef855fe4452cd1871afb0533e53a5736fe116cd3772f8af081315c96f41e178fd900c"], 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r9, 0x29, 0x11, 0x0, 0x0) syz_usb_control_io$printer(r8, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x7c81, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2000000000000006, 0x5, &(0x7f0000000040)=0x3) 10.220866138s ago: executing program 3 (id=500): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)=0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/mdstat\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x2a) ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, &(0x7f0000000100)={0xda, 0x7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2710, 0x0, &(0x7f0000000040)) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='hfs\x00', 0x2000010, 0x0) getsockname(r3, &(0x7f0000000300)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x80) 9.068241965s ago: executing program 0 (id=501): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) iopl(0x40) socket$isdn_base(0x22, 0x3, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) socket(0x840000000002, 0x3, 0xff) shmctl$SHM_LOCK(0x0, 0xb) close(0xffffffffffffffff) listen(0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, 0xffffffffffffffff, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{r4}, 0x0, &(0x7f0000000f40)}, 0x20) 7.895522625s ago: executing program 0 (id=502): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x6) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x8000, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) sendto$inet(r4, &(0x7f0000000200)="9a9c94a4ff", 0x5, 0x20000800, &(0x7f0000001080)={0x2, 0x4e24, @multicast1}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48}) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) ioctl$FBIOBLANK(r5, 0x4611, 0x3) ioctl$FBIOGET_FSCREENINFO(r5, 0x4602, &(0x7f0000000540)) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000001030101000000000a000000000000000c0002000000000000000069"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x14) syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000e1310a10f0031d58b776050203010902240001000000000904310002ff0107ff09058a02100000fa00"], 0x0) 7.894601007s ago: executing program 4 (id=503): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x69) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000180)='/dev/kvm\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10, 0x0, 0x0, 0xffbd2bcf140de4fb}]}}, 0x0, 0x2a, 0x0, 0x1}, 0x28) dup(r3) ppoll(&(0x7f0000000280)=[{r1, 0x2442}, {0xffffffffffffffff, 0x280}, {r2, 0x9001}, {r3, 0x10}, {r2, 0x421c}, {r1, 0x1108}, {r2, 0x2000}, {r2, 0x1020}, {r2, 0x1240}], 0x9, &(0x7f0000000040), &(0x7f0000000100)={[0xfffffffffffffffd]}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x4004090) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) fsopen(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x1000000, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) utimensat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x1100) removexattr(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)=@known='trusted.overlay.impure\x00') 7.065347848s ago: executing program 1 (id=504): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x9, 0x400000) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000002c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r4, 0xc1105518, &(0x7f0000000380)={{0x9, 0x2, 0x7ff, 0xfffffffd, '\x00', 0x2}, 0x4, 0x10000000, 0x5, r5, 0x5, 0xa6f, 'syz1\x00', &(0x7f0000000300)=['*\x00', '{\x00', '/dev/video36\x00', '/dev/video36\x00', '(,!\x86)\'!]{\x00'], 0x28}) sendmsg$rds(r3, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@mask_fadd={0x58, 0x118, 0x8, {{0x0, 0x3}, 0x0, 0x0, 0x5c, 0x8}}], 0x58}, 0x0) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r6, 0x8004562e, 0x0) pselect6(0x40, &(0x7f0000000200)={0x9, 0x93, 0x5, 0x0, 0x6200000000000000, 0x4, 0x8, 0x7fff}, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000080)={0xf0f041}) socket(0x6, 0x4, 0x4) r7 = openat$tun(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$TUNSETSNDBUF(r7, 0x400454d4, &(0x7f0000000040)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) 6.926924102s ago: executing program 4 (id=506): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x28e08a7aa33ba155) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x8) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) close(r7) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}, 0x1, 0x0, 0x0, 0x24000040}, 0x20000034) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) 6.066595374s ago: executing program 2 (id=507): ioprio_get$pid(0x1, 0x0) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_io_uring_setup(0x5583, &(0x7f0000000000)={0x0, 0xa8, 0x20, 0x0, 0x329, 0x0, r0}, &(0x7f00000000c0), 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000080)="f20f11dbba2100ed650f2015260f01c86ebaf80c66b802a3558e66efbafc0cec0fc77cecba4000b8e11fef0f0f87b300962e050000", 0x35}], 0x1, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e64, 0x2, @mcast1, 0xff7bfffd}}, {{0xa, 0x4e20, 0x4a3, @remote, 0x4f1}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @private2, 0xfffffe01}}}, 0x108) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@local, 0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r5, 0x7b1, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x8}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000040), 0x0, 0x0, 0xff41, 0xfffffffffffffffb) syz_emit_ethernet(0x82, &(0x7f0000000440)={@multicast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "d70c00", 0x4c, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[@hopopts={0x33, 0x5, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0xa, 0x9daf, [0x4, 0xfffffffffffffffd, 0xdc, 0x8]}}, @ra={0x5, 0x2, 0xf53d}]}], {{0x0, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bind$802154_dgram(r7, 0x0, 0x0) r8 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) 5.841952659s ago: executing program 4 (id=508): socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006140)="7672139f6dfe7e10c37e3d50cbf562f2d282560a8454436f47e3f8ebc8e1fd792cee485f0bbe04efd996204a61c0d0772d8e489b6f4c7f78727738db2cd945bd9c9e3acea680ff3cf19e93fecd8832112f3ba0c952d39a0ec4e181e428d2a0b3a0e2da56673973a046eeb1bbb5190f22b2bca28b7bbe31ad76a1f78b6a029a8af489f6504b065915d63ac878725830e46aaad9db413d3d077bd674f5378f86e919a9fe9048a31f6534cacee89e88089851073c7b83642426efe63bf03edb870437a89f8b3f969cd80fe93dd4c55de2ff8560e72be3bbcd5ab399a7804abda51819a6d7b4083ae0371595ed9d6039787398c95617fa2db5bc3d786635de6777ec73518ec0d34e57683465c813e1ced803af62718f6b048d766174900789c3c0bdbe13e1cc48923c418402a93685f777c66e358c1fca553960565574f7c4d9167774a6347df159c4f3ad0caa4af45e4f0a9aaff419e85187cdcd8e38b5983997a926167e2287f8d9e1c8204734d3dc1e25b551cdfa566bac00ad849bf423bef21fc2197f2388bb3b347933bab61425787ff52577f3805e2d1f1bb20d2f288f88b9859db8208e2608eef52e573c36e5109d39826354dc3a562c23d87c585d968fde51ebf91911cd4f33a84f75b7731fac2eed48257bd054d6182f8cdbcd8a722ef32a8597f437e763db99dd7ebb43d9f3882451c24f66ca50ec0ad9058b24601685308133d367c480b7f4999a82ddd179051b43da6b98272928872c19a49834d79726aaac3724dc160d15cf92846a41ecc92948cc5a9cc4f7d6bdd01ceb79cd673cda60a56ff4bd75d8ad6a2bbeefce74f3480496196bf0b74388b7307bd57cc6c67dae4e621766614a4b0adf03aafa2c692b7d200276cb6720c4c00b0f16d0554a13feb1d9b95b5a8596cdcffcb5f43620ad0bb5ee700833aeacb20fe79059e3151d2ff31d737f9b1ebdafb0dbb75aa1b7f426670af32935ccd077137f0ed698b18013d9ca8d4fdb9c1ad59332726db8429af47775d7427bc6d49fdbdfb90daaa1b7e4997082296aad53f8044d26bb56989d0361d83175eedfb10dd3b54bcac20c3222e10af2853085b6d9c2a3132df8678d6cfdb6378bea6f9d308ad85e64d6b1adbacf190135003812c501df017a335cf80ed58ff3f237c9a7bc50dc411059056f00fdd4957cfb0d6cab6e7d24f240ff0530779f9daa7ab351149f0a2666bae744d6c56a67c259eba851cb114aad7f7529ef3eba66a5ddc3bfdc1168c76bb8eb7d0d4a6895b20dec236ef791078e97c480a01e7b2ef2bcb1da0bc493d6cb6cabc6e188a64835fbe1bb56fd0445df647ec41249db6efb4d68adf66449154e04c8cd7348ef02cd0afdec17ace65c2dfc4e024e0e2f3539508821b6cab7f1648d7b5b1a18ff301377f4f98f56ef05328d9fc62fd719cfaf49855f60272cddae74db365623efff3963e40e094a099b5b67fb8f9576be4549b1545d3231203aa30b4a5387860e8487be93bf13e7fdf70a92c4f9d2369f6ed84e2fc4ed938b512f6d5de28f020d7757ced0a7257794b634987d573250639fe66905e7713693de3a7870813803df631d626f4cec977ddc9f6cd62b1e425e9290ebe017c1f563452145a620d52663967cb3f29251607ca9b334e1334967e72d8c89cbbd4059705e6fca7124250f1338a3cb6a1b06c9b3624bbfb4b05dfbf397ff788499ebd2d2800ca5e22c12746041d04699728cf90e4441b82f45ee75bebb6aedcebef826c3b7b177104db327c78b90bee755f0b37fab27853a861108880864c123a70877e649e848abcfb94d4b996ace0734103cdf877e6669019d6017183406335b218858e0330de80f6860030d21e5cc29f165a38df3e5a63ecafc5d50ff4d93339af3a10ba1ab4aa89243b8c9d886a127c93bb946a7c80b6144673483653680dd7adbc25e7841ca9f393c42e9cf6b1fdfa91549c0d6a205dd7eef3a6b4e8dff9fd6c4f5e2b2511990fb38439392c9fda618a1f7dd797e3db4f6651956cd465aaee32ea18c02b9a3e2301dfc63289af5762bbe7e639f6ed0a19cc5acbdb3571c7fbb10f01a1d33038b75c762b6f0ea20d564fc1c7fff81cfd16bcddb051f93057584f4c17afc2c353c90570b71c856113cb58a2e514e75f8b06b2e55b9474199f21a848a4b18d34b1c0eb851be03467d79a40dbcc6ae670cbd1895bc46e6d27bfd9959512e8b4634dc498c63e42331f34a0707e486dc810f361d97953d5eaa0783f3a856081a6e41c057ca2d70c7f44623898af8d39841727a80ac1368135ee5024ff51868ba82fe618433666de64944892783761ec674d05f16f7828b9b24c95210c94fedcc20f58c638c74c12ae14c1287d3bcff75764aecc79aa71ce1c18deb39a4f2274ad661ccb703dc70249eed802577e4d6258010d53294bde2cd2e8167adbf9cb8db10f009a57b29ca1f22a3091638ec9087f35f22cdd359f3a1d102e2cbc7423ec4a6a1a4f8cf6358b8112656d5019d74aede5f7fa4778498fa9414519626e89d1cc09a1ec07e67f984b15d9fbccee6d50acc83a817024f503687df684c768dc96c90941f3279d68d8c804508f7a79d92e7bb8c22520847ced2f1f0ec71cabf96feedcec35ee52326fc45fff73673547e8e55f452c9dfd29231eb9b4f9a70d4e11b43112bc7cb457d371a93f53e2f7d96cf24839bc19b4c9b741aa565128064a92caf8338bf1a05a371684dbab7b45742d2735fc089c0dc740ebd14e70628de5eabc01fdd3080647fa283e95726f3ea9aef5537a534eb8741a7a47c675be8d65d17ef204a12757e8d4eec0d2a7df77f735be0ee6ef8dfe777571fc17acd0b1b9ee1a0845a5a1167ebbd9f771b83c2a5bbbc015a97091225319e13bf0985778da02e51c1909da0dbad32f00b400f1489880cec6237e36d3c1a50a13119aface904090e58f8707ab93f3b565d446568f68d4b3b62ffec0d7ff62191f5c9fcb8219abf1df71c7a5e7a1025e32ea576a01b0e0cf69d3af1b39f6a6896371a7bc1be6c51d971030b1b9ed6d8ae653f5c57368248280129c084122c50b2172c4f905e09dd0301cd2825806fcc6765ac6df707412b3be6a1d05557634d79eb41630ebd71b11434b68ab631a46855e19d71fefb77a01d3a9f8a43e978de8885394c3f5ca51dedb7bcd99b596e8beb2ea4ebd1079cd1e74f3642940119b1173f1ef3cce44c93516d52fa6da11158a432484e8a0b90152c8d4cf5012d48ad4b8ab1bf76e9ef921ece129be5834acf8b93e5816a4db2203f27f3255a83a8dcb457b8ffaccd6598fcf507b30c385c3df4aa47519c3d70f8683025cbca6e5b103e39280ba7a7ba33eddf5ace5065380747e8cbca9a2cd0781f9c9b93fef674a53935c5cb5f3e38cea7155eb959ad241cc635f4e86297c839d48288065a6bd45eb717b1b6ea20a213dc4834a297119eac95ba0ed4ec2245c4692653d670f45261bd54d7772d8d052efafe4486f37c54a94d7022b4b78c4bc7a567fe965d49639004a57b0e45e017bbb149026bcfc12092717dc468cad62bcaa18979582636ce88305140254f7b334b55200f5047387381ffd1f7d34b0fb7bff311f613d7e1b0cf6d8b38702ce9b650350abdcc5a81d0cc97a2b0a5aa11d945c9c302fd23272aef4bf3eece57c765a241893969a3e7d195eaded5af7f1f2845866aeee79a84907bfe6e78526c3b1f107cc28b3732b52bfa8859bceab06263bc8e85e96cf482044bc7516e42583a5b2139b0393c6fac2965b07944d954e74a2430def8ccf574fdc54ddfe5a1d167a0d791cdf202bf99a62bbbfb7c1aac776bde76dc3541228d3230a15fb7c6f687e262bc85a1b1508019369062ca77933b9afccc35f0f8265ee5eae168ece37324de2538a9721934332112f54402d244c82940bcda0a867dfc11d2a99dcd54c7d3b32fcb6eb19ed8950336eeddbf372c91a66f31f7f065a8ab86ec6d40350591bdc0cbf3aa9cad447c4906b00bfd376ca489d48bd49401b5d25f5852d0eff001502ec6fc869c9d5791b3161df0dfc0d6f4994cf277cbce6bbc99e9d409d2a293cbb37ab3d8655b88abdd34ad47bc035dfd504c9ec8b88d657b6376853a1933d4a0f4828aa020cfef3e518fdfacd3d9900b5b9a482dd593c01788ddbd6978f1a7ba80471a3891050451b1f170943181de415f0907b798bc701aaae564e30724c167ab58bed0ab85a75a957a196d2a51f3c6ff01fe57199fa8c526526b552d29b6cb0a41112aee4aa54a7aab1fd5504f7a3c5db2a7c1afcc840991d929a7faecf2e7dc0688f07da2981ca8a78db871ba770c971c561e4521932bf7c08ac554ecc531bfa16e767ee3e2fc54d45d8ff5ec92dd846632f140f9f7a70c4eab2b194317835f3b1e8d4064c2d564d0d61639b9c62d1ad04f76dec2d3251ae4685e152f3b0940ef6d02c81307de3e98bbcbdc1db14b8ba68baaeb3c3d387b4ac0e6b7e9ed144d85565c95120e3548fa1836dfc444ade6be458d9d43f6192d9d83cd7b2aa0f5ae9c238297787b91ac72bb9218f810d00006b2091f2b8a95cdaf60e9e79dbcfe52dccc93efcb729c15323e21ceb886252339dda73d9f07aba55ccc88af838c4ee739b13794884cd12ad6ccb02e821100f03b200af7e4bea30fc88a057622b71b13ef7f99c46f662b344dd4a6c1a6645ec552e2bd329f30cb4c4a06447f6741596e53a2f7d095a2ac618722543de728602d8bd65e6ea442c7e7353c497368107002bd10a50a752d18b90292aefd5e0b40c31b162914bd60d4a80d6ea36b008c795de53e0114b658d75b08c1279541c0e27971e65d6770bf8ecaacd8f0d16eda72167e5028582fb9873e2b55bd1d248d77e8d95aeb5d4ae46e8e9acb0726e1147374e344e22af5d5aa304a8d628e511f3a42a014ef500234147a817b8e34acc3c34ab3df1765a7d767c97bf71ced449b0d4af0a484205447d5129a6c5854a3597ba7aed9fe762dde593b85099f613f8ee8e9306786cb54a0d4aee73f45a1d53c91480a73b110fc366f95805dbb87556316241aa71856358910109931dcca820d10b783238e43dafac54666b73096722d415b6dabbc97795ac8ffccdc507ef3b232a13fb6c5a813eebd72060b8d99eda46e23a97ebf718f7ebff1e2a98c9af045e8474c0c94cbadd9097b36c6df5de20d2496b4048422a8e15097e6ce16145b737f84e7e86441496d1363273bcddc634b5fd9497091214fd7c5d5ea576f0035a8ecb207669a502020483f65b105c1ec0f2f43c45923a5fe1bef8e98a8a391c95b5f29afa2dc0257e073ad354d58ace6f74f6ad65dcb54a2e052b28a61ae06da59e993a14c39962f8a8fd02ad04c1d98503f3aec3b77426d460bf7bf5384ca02353c850db2fffe47e64d476a79583db1a53c98fb1492dd9a91031ff56a44594453b6f2f1ad96e4c8d19e434fbaff9451a73149942b612e4b85a02112ee67b323c1157b0da54045e44a859ecc7c0bd38ff4a26dc249ada967b7fe85fd0c82af5009b75da343422ed8bbb30dc6896b33ff4f0b3b29093f34fb782654827b45479f3c7b7839acd519c45442d7ba3a0cfd3cbba10a5a465608831054499f71ae35edd44d1ce9ef7b064f6790c8689854cd0c766c08c8307b57b1f4c956ad081c064e656d1582c56ed9fdd577f84fbf3ee451acd4d10f0c0a4dc1e6ab1f85261ec686580ecdbbfeb6fb0d291f7e08477fd3935142c2ed8caa847b9d19299c32f62d320cc5237fce666d181777568521e1d5e93c78dd99fc0301335b61cec3f8ae050175f0f07812793ab5025b7f16115789f4519ea79775ceeb2b9ee339b0a80ea2eecd4edf2393a28e0ca4c1252bb24fa7420bab46e2937095e5b9f96cde111de110213dade07359aadfd74c7ee3b893d713662ed204bb9a77b8e9cb4c3ea253ed400f068f5eb84d192ec1bf8d0cb311b875e097e924f5444e748d540fb40ab800b06f5de0c11fef6af640835b552d0b9cd95cf7f79aa9610b850f597372f4334513f4bdb8155cfc2831ba6fff1c8d66fe1372fc211906e816bb4d6c5dc765d49a57d130bcb9734e53bad549d35b53028211e532583e4c1f05d2d3ff0ad57747b57b8004492988dccaa5c3dc7edaa1f3e23c614f897da273648807a50fff28b3ab314966277f76ff5be2a708971c1ca494fd50e0c64e43671b1b07b4e5e0c51732e3dee53ff4d10cfd75bb6f0e09fcc5a7f32d073b1b9bd610d5189c8178af7d52dd7f91b8f9e292b87b320163e6374fcf874db938c17351f43be3f641e92812d72bca591f809ba06349572c1b063e37a59571599bbbbfe6989fcee3d27b7466357a8a5ba48e643a2899f92b208bc0dd48f553dd1f2a6fc95621f4c68067d7dd5ba691b99b3addd839c6391c1ffcdd2832941e2fe7c25490f7a1580ff17a62d4063a8feb35ceef20ad6bfe252697d4631156f8dc8b03107cd1640e1fe8450a89f0565f011b47b9536f6c639b67a32a45542be789cd7aa4e08dbf6e1a8a87f7a74248a976d14eeb7c7139ff00f5cf3e0d0557051a75348ac3c1418ec78ebd3ae32bec0b1e9bc4043f74453b86bc2c6099ab8425a0d2cc9e56879b8fe50b41002af7b3b851860a8108ee284c6f21a25985678e555c2ab5fce4c614dc01c45b943c5045773d314b3aae06f696620d5341b20729c971f0944e86cb012c90ddc315e12572e3517d2e5d4df33c60f30e84cb1ba94125d13e38fff920e292660a32a9a1ee693201be938419a92e6d73a939fbaef1c2d463be57d555902292855ac250cb68429aae8e9f0f6dbfb960e51ca48c1b49e6d2780f2a123d943abf0dd93150d41380b3d99dabf27a7212e86a741650a6634c4e569cc5a8c5d97ec6d70e5cd66f5848e8a09f2a76cd11482f6d3717eef5bab444cb90d7360237bfa65dc75ba3d864d688c2d4e983de7d978a6222e2c0bdf4111f645ce8e409124844455b347415142c886fc95ba869fb4b770dbfad34e267590341ce287ee591f6cd5b6e4a5604b6b0f57cdca1b457c66d1c731ee1002839a1263d8b75b256c90eab7b43d36b7495e50e0865c2a14bfb87713b9ada89bdd453791f6c18046d220bd9e16bbe021df828d2deca20cbb77553e3f54c418179283b236bc231e478558c25af5cd14cd3dabb1cf3e359f7389ee84fad8c98faf560da9b36694e86a80c8d9d3261900bc195d441770774653bd78e66e0999a0f99c9675ed3030c74499c67d869d14cf3ac4df406ea91799de18b129be5d3eb8409047778d063f3bb6e6e6a5820e899ebf43049a079997ff8e36d36e5ccf49cbeb52e5db213c5e46654428cb773a72c6bb01454133aab163b537675e4ace88579c840fcb555e96e3b362869650194b654762b10d0d490b9a4ef1f91f6c32aad575b5cbccb6bb1666476985534ab3159c42c1545bfc1018fb5279c049467a8a46c16f8ba86e1d4041828e68a6c7d7c9a0481718da4ff29ed21f3956f7afa84c54369ac4d85fd93c60491cb5155a751e17dd1bea07854b6fddfeb6eebef32029e8353fca32c0d8831e0c33aca792c71a2792067442c1964c69b7ae56d80abb62dacb502bba580af066d851d69f47012433bfd02fc681c6687261d7709da82a2cdfbe46e2157c54166ce2e041d97f5a824b7ed4b9f25067072617a27ce4f74c574b435da03c2afa4acbd8c1d2d43bffe4570d236e2374fbeb85fd8672bf62b89f8d3cefd63aaaf0054db14d23c4df208bff4d211299d547f5f3b4c7f57d79c1983ac0f2b6fdc60acc7bbdcafc5eebe1ece85bc31e57e9f553444e20d22b7578df116b83d34a91caae699c770e14af09c1cb9814381294f3c7d6e13735e982b2ab17d6bdb74cf7328a7d3b3e963cae944dbc9f91aa1ca629e471ecbffe8c573885209b772e5de04ca6954a9fa196733066d1219380bac92cf297ddc4aab061406fa5f4e73e16398316934be86be4feb69b94ba4ded5996fa17abee2d8015f41b293bc643826672a4d4b007baa9cb93754efa0d5a08b153a1f389e6c1753cb248ea21a18c7e7d58e54f61b6d07c400b105d1364a091c7ac92309e8951a840edd590dde3a3994b53a5c3302fb404094c8787da420c3034d3b289d3667276d2220de8cc8f94989f900483acda9b6d878bf360477dd59cce976e0a4ab29129492e35adc83b41ae4f84483bb89876ec4955e83f9a22a0c506f5532e5390f3d548d327516e5fa7ef8d613be77b4967dd8602de27f28a97cab485f2ccd97f244df27f5969c3626b5e50d7cc802bdb6203494f7cc4d7e1ffc31a6df947f91f1ad8f8110d773840ad3beec8197e7516467b62882af0b7cd0db18e18d86535cca2d00b8d4b1ac22f8f264d22c36a50c8a342da8b0222f657b04b17a1e282d366e6799cfbbd6d8429c79cd989d6cfffcd83790803cc608c3815cf4013a54f07100db8770b7deb1873905ae9d29d0918e06fe0ff42020940ae136a1b01cc283507a051ac23795736213421ac88ea2f7cc3a84bf63ca45957a14986e906a73a9b4f578064d3e34eb3952e01b7b8d239e31c95756539028cbaeba975134b7fde393f0b365f01f5757c89f8db7ff6fa90efa0c4c8a4696f26ae8f6241c4d5672fac434ee547579b08f8e5418590cf526e8aa46b7329e45c41c58680b348562b10de4cbd9d88b22e8e206bb53a54e51c62d4701d2f87f1e2c91f4c78bfd0e29ff05fbc5c2ffe252332c775745aa8b09345906452ef8eafdaf7aa63d9abdc6707454710c73faa131032ce6d760e3b545887cd63188cfccd629e8f17ba7265f67c6e9db46843da5873726563763c08c33a389aff7be2a73da702a56650e9f1e3ea48f7467075d51a6b4dcf943079eccfe67c2fefb16be5216263548029e5754e7c74164e38e4fe3f26d5fad42fc6dfce5618e17bcb978b752106a36436f5be59f960b334c4d6533ac9d0705e84e4c8c90eaffded330482e689dfb788ba3dbf3280de075227a6eab2423ba6331801e1c95913fa37b0d6614ac7e286de82002cfec99d212bcdb4916f82248d1724c0479091d3a95538f6f370f1c8a0d120cc2fa8037003d8555602bf434128b73c06210cda0b49b789d232cc5d25bd6f3028d0ab8d7cb4b4b2555ed819ae6a15c23a7398f72320b924007f16d7e814be30907c24ac5196d84c00adfa449adf3c53a94a8f64f184d42fdacc05492b3f7324f444d13860053dcf877fe2486932248c9e0cc54e4b119a995b00e73d61958fef582bcf52b9e316594e67929ef69d2c2cf36f4c0e6c31a9c740f8caafa31e10a36fda851d6d28ef2442930960497a33cf10c85b5312512325b41865441a8e93c89fe694f133b79e3eef37fc4dbff0fbaa56b699520da1bfae1dd39f0ba9dcffca01188903f46341c815aa54898b87a4e049c8ff28bcb9b69132fda3fc3d10268c480bb76ecb12b48b9808e8e67e42a9bca0c32a48f310c890f9cf61d5e1c09b08f0eb983c765e98acd139cdd5561b0ee4c0e8331a18112037ec39bb29df24ead90a809ea9d57fde46acc2ada50843d9e88575889770d1b407c3f290b353e757fc349bda8fb4add1041e0fff3810a0a3cdddb4e816d8d4682d4e275ae9f2dd1bc06905040a955bd8da336e211a0bdf1b8e1abc8457102d0ba3461bca211e0e47ae82f9ebbaac20a9ed91a96c3d0516844cac3304bdb85c94d1cb703a0c05afdb1db104b2a45a68c198face83a313aecf1da56fcd111123690a1410aa6fa2402ad11fa5331d784beaa49c4cfa74f68dfcb6a9cf6e91e5602ee9439adb5b3cefbe9a9e93c25febe17e8ce47db7846c9b950b55111a676ca855c90e8e82c8adf70cd76bd344085045486f8bbc119d8c24e89ceaca34ac36be0f6f1e1bf1b05c249d0f11cfb1d03b33eee4d94bcbdfa6e659bb109b1262532ab8d54a1dc46645e97496183d88f89b59271a0a8335d1ec1b136e1d4165e5c97c37b336ea5d14f57fd0dcae894254db8d86cd8c2630f944189f4633f1fc373b4e8fd9595a46193eba0fbbfa4f58d5fdf8790c51305065005a61f0e9026eed4f704084b996e2976c883b88818d6b74c2e61c1c41bdc8a34e3a3c792a7652fdb5f4f22ca9e20be548938e174974b28704378cb771b6af910cce6d2e406bb3af4f12033b9d56fcad8307215c812eeccbbad484618c4d0b14d560aedf62e9f6d4b10f0732a559b1d213005434f1ea025e2efae734f10acc42b999a1639e053551aa0fe356431ab7bb6a7beee9b573ce290f8876250962a57d380104d6c800e86e89e1d511d28d3808efcd62a1c6d809ed7507b640de32f432b8ef96255942867c1953fa10d97c5927a277141449a57ddc34521908fd04cfb32ff464a1c4d1935a660bc572f73750102e3ee1a9c6d2abc1b709952cabf6ff4e6d08a2953172d6d9a7a2004cfee1f3b44c6846968cc382238b10846e84a8def3381046193d699434493b136a439c97cb8059fa957e2e80e8598ecf358acb0c07c46411a8c3cdcbd2a40fead2d33be7cd9f447ce0183c166fcff90fa4d50993f1b40743dd8f85ec95185fa64fe1c65900c4a08e5fd4158e413d72a801f128fcc580d22e0994cefb23819804fb55ab7a6e82d47ab108c112bd9d94a48f934d9fbe49672298b91405b3993e61b9bfe4cdd26cf69ba37a8a60d45ff87eb98f8a01a49474d8b7b2e14f6685cad0c4cf60fb9239b5b70208ad5ad6c151c375ccfb09d55c8b140ede7e51a48a33c13724eeb51bd7bcf3767186a1de9e54e0aebec316f6f677e9f244e9350efc6feeef3a606d4527e1aecad2ca6b6222decc0ac034b3efcf6fc653d7e2b95b9fc2d3bb58e1bdc47318fce4928fce7fc1dff89f908495dbd41fa03e976a65bc36d968188fd0d44ac1c4200be82ca3c9db1d0c3c0333a0e817f14565f2771955e0107db94bb790f079ff8fd55afafaaf8b346bf80dba79a74b0129a8d6370344363faf41f40d1e45591ef9677e5745ff5b0e5f76a2053c773cfff2bb1ccc7061cfa0c041d68feb12c56ab3a3b795efc0881d9ffe06caf9a3430bc60e9d716f11d3672b1403416c14b4f8a9caa1b54f7e616d0fd1cf9bb3b52bdb1945074dfef4e6a4a8069084a674414b74c972aca7513cf068ca99da6bfd1cec93cb8769f52bc06366b32bf6cbf6c46919b0da4ed6ba16a2a0cd123ea31634ce07081d593684c61cefa577196c6656d374000945ceedbdb8dbc0b01894edc8d7cab1b635ea248b9742efd6e094b40ab5b97701433c1cc5dbf6041f8f2f41437469518ebef65b7bdb6a0b1e06e7ed405e97c229849aa476647f02521abad910c018cd4eff3f43da9eaebf849575fa0135a697d7571f6cc305652a1cf014d2b97ab7cd254a29fa0f35d122b289c2dbcba9e01af7332c405acf55954b6a81af2a19484339943b08103e6d81b46fdbce53c16baa142bc2ac948b692c3d0006ecf6d2f24e89acd8c1167668657d3a0a4689a69c221619fb9c898b244b442032ffdb63d42ded7850409faeba18af67bcc8e3b8801e55e83e45243f2ce64d2dab507b9d20dca219b55c74e767702e0dc0ecdbfbc00fa5683007d68992bc9080feb8e16ad2528e6afa59217eeff0bf75247caacc5e4c38680478897c360", 0x2000, 0x0) fsetxattr$security_capability(r0, &(0x7f00000001c0), &(0x7f0000000200)=@v3={0x3000000, [{0x10, 0x10000}, {0x7fff, 0x3}]}, 0x18, 0x2) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x4, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r3 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) syz_open_pts(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000600)={0x0, @bt={0x2d0, 0x23e, 0x1, 0x0, 0xdd9f83, 0x8, 0x9, 0x1, 0x2, 0x8, 0x722, 0x13, 0x7, 0x7f, 0x3e, 0xb763599953cb091f, {0x0, 0x6fd8e845}, 0x3, 0xed}}) 5.838797296s ago: executing program 1 (id=509): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_MAP_VDSO_64(0x1e, r2, 0x8, 0x2003) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) dup2(r1, 0xffffffffffffffff) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 5.771637353s ago: executing program 3 (id=510): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_MAP_VDSO_64(0x1e, r2, 0x8, 0x2003) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) dup2(r1, 0xffffffffffffffff) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) 4.078113679s ago: executing program 2 (id=511): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_MAP_VDSO_64(0x1e, r2, 0x8, 0x2003) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) dup2(r1, 0xffffffffffffffff) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_open_dev$usbfs(0x0, 0x4, 0x200200) 3.682586972s ago: executing program 4 (id=512): r0 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) io_pgetevents(r1, 0x7, 0x7, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}], 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000200)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @echo_request={0x2}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) write$UHID_INPUT(r6, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 1.548381921s ago: executing program 4 (id=513): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timerfd_create(0x0, 0x800) syz_io_uring_setup(0x58f7, &(0x7f0000000880)={0x0, 0x0, 0x10100, 0x0, 0x129}, 0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x8, 0x0, 0x3, 0x2, &(0x7f0000000340), 0x4, 0x0, 0x0, {0x1}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) r6 = shmat(r5, &(0x7f0000776000/0x4000)=nil, 0x5000) shmdt(r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, 0x0, &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e0, 0xe4b, 0xa20]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x778, 0x408400) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x81) socket$netlink(0x10, 0x3, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) 1.398590162s ago: executing program 3 (id=514): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r1 = semget(0x3, 0x2, 0x39c) semop(r1, &(0x7f00000001c0)=[{0x1, 0x1, 0x1800}], 0x1) r2 = semget(0x3, 0x1, 0x14) semop(r2, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r3, &(0x7f0000000240)=""/45, 0x2d) getdents(r3, 0xffffffffffffffff, 0x5a) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, &(0x7f0000000040)={0x20, 0xc, 0x9, {0x9, 0x0, "2a53fb0991f8e0"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) unshare(0x20060400) r5 = timerfd_create(0x1, 0x800) r6 = syz_open_dev$loop(&(0x7f0000000180), 0x53ff, 0x0) ioctl$BLKSECDISCARD(r6, 0x127d, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000000)={{}, {0x77359400}}, &(0x7f00000000c0)) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) socket$kcm(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 1.339575223s ago: executing program 2 (id=515): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan1\x00'}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00', @ANYRES16, @ANYBLOB="010025bd7000fddbdf251e00000008000300", @ANYRESHEX], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x16) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x2, 0x1, 0x3d2}, &(0x7f0000000dc0)=0x0, &(0x7f0000000340)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) bind$unix(r5, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r6 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x7684, 0x400, 0xffffdbfd, 0x32e}, &(0x7f0000000240)=0x0, &(0x7f0000001080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x80, &(0x7f00000000c0)=@un=@file={0x0, './file0\x00'}, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x3516, 0x67f, 0x64, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x2, 0x0, &(0x7f0000000600)=[{&(0x7f0000000240)=""/219, 0xdb}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2d) r10 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) r12 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000001000000000904000801030001000921fd0000012205000905810308000c00"/51], 0x0) syz_usb_control_io(r12, 0x0, 0x0) syz_usb_control_io(r12, &(0x7f0000000000)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="82ae059300000606417680d9"], 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r11, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r13 = fsmount(r9, 0x0, 0x0) fchdir(r13) 245.522632ms ago: executing program 1 (id=516): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32], 0x54}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000110001002dbd7000fbdbdf2500000000", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) r7 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r6, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r7, 0x627, 0x4c1, 0x43, 0x0, 0x30) 115.421048ms ago: executing program 0 (id=517): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002000)={'wlan1\x00'}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000002140)=ANY=[@ANYRES64], 0x48) syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000003180)={0x0, 0x0, "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", "77af63f113ad59db63e62302a1a094d93d3e42d2896bd6d5eed67a3dc76541fac21b4657d4fae78ffeddf755e65b1557cd184bd120b7a83dca58f7a8acaca394535f4a8da43db7b276e7350bbbe226a0afe359fa4060f20a57ce49db566609bf0cf6d8cf1cc4e1d7b44d18dbe61d4eb6657fe766f748fa0e8d1758344b28092d85abace636f03531949a126996783d838cf9acec15884960adbf2f03886995a112a116606e2f6a6067fa94e5e6448e5468378fb8e36cc9c15e27d845339a332865e1d2db94673b51bfab8f7d363e39296dfcc3889a7d09cee829bb1be4cb384505495710a0d2cb5c2e875de4726f99217ac2bdd9535cf6fcb6acadbaf88091bf7146fa914bc6f329e813cd4160ba369759a152f074d85a9846d4e75e72aad3ba6c66f052cd55a6c0abb2d9574755effd743d7b1e17dc145d0ae5c8ef1addc19620758f6a59fd73243720afce6599c71da8d249bd58469d0c6469ae177beb327020cbc3521404ed1fb7b962c5c941c0544b1d8c7fea48badbe5a7469bc98d6cc0b9d92f04970f09bdc2c5df3e9911c69129d708dbe3581b2ccd0eb0a5e0eaed714aabf38c98bedc2b1f6f7b74b4b2d94cc8c9127a5e3358210b3f1cf70ff75d420a2d98f142870b4feb2cd19fb58babf5270286f7cfa2d525eef2512046d237aaae0f3766f642a6a9c64f8f0aeb2c154d9a9bcf7e9f3602696077754c6730982c246aed4339ae564025d102c7170236840c1980e4327ecf3c33170cf4ebd497493e86043f058115471b3dfcad0a403b00862613fcfc366b42ba3e4228ef7ac035cd14bcb0645a246c1ff39cc2385c1839a8f28681cd0d6ca2be7fb0811ed0bd3fcd0bc45d6bb22100f2886c4fb70fc56fae639d4cbeebd9dbf632f72a2b0a3b82709175617ad1d8b8b8dcfc2df7dee43ad804ab50bc3f4cd316b96d8beb3ca519f17365ad199a0a9213031a6b88078b9d54a4a533ed8bc833fa694ad1dabd72e543a1982f3e400b0c6f241a03145eadc2c2f2938f3a3c96986743611cc8bfb831a1d4e8bce704d369c0005be7988356c4a45afb4def3fa25468f652177381ce27eeb1fb3ead0a976963f55d5b90f5840164b323d1af026fb467fe1736624b2a9b66def4154b6dd08ee8c294433225fe0446020f9fbc0f4ffd71d758e17842854149de36b3cec7929ac91822b598899c3af78aed0f0d5a56da19cdad9443c91c8a80a383d248c13754b68bc0113b556717e01ffc3835c54a68d5dae6defa8aca31d69fb56ba165ab858ecf8a3e7f1a08afc0ebb08c3d8e2fe39e81cc170ab87405af686e044d306383f3c587d325b35a4dec3b30bdf3b6a76efcc21a9556ba77ab6918f6ba37daab80ed5d2e14129b12be03cf208378f81bf0b3b6bfe390811e669bf1f72a9f43fa585e4681fa2d8e50e109a9b0cc150331a17871a63cd186f5a16f97e7940bcb6bc2c3e36b06ca4dce97f1012b5a72062ba2a97fec6d53ed388f2efca56658bb515ae1389dccc10e41529decd6c3b72093be8139e3db166acfad137e6905e163b9164d00e1440e8d9020dc195cd6ead131f3123f6489e530b6c0a4e5ce26be649b7cab1b95c597794e28a40087b55017fe6a6bc27face6d29ea69de55e02ba4a0d66a5d287f01e368a5057ea9bb1a10da766c3d0f87ab94050d5c47c9c15e761fb4fd63b44057323f21df736e93c12bad22103a447a6a4e2f22759b0989b7014b79af66812d2a51b2a250e0765b5a511b6a1b3e487591f4d1d824f78319b5550b1d4cdb0e3b7c275bbf66a4642b36aeb161012cbd26c37d3a842556e56c9661f9645a593dc2e435d234a4615cad420d4ff662c0eb546c43c3211388a31699a7d129bc7c38301cb00b0fa81c28cdfa3ef53b99e4355658c7a3fe22686a9bdc88b8a54bfdd217c5f6d2e73080fcb584584b7220d9f1855c5dcb57fd1d7570ae0813a94e8709bf57f69311a74c8b67d282d18027ac251f711c114b5079815d22320a5e62d0005b1d1e4d7e5a9ad841b1109487e3dfeb40033a477d42e8e9d6a7933a8707ee6859004557a4760b18caa6f3d3c141c84cf87cf90ad72c17b0831fd490e88acc3b582fc0bf9d34655e9cd61ba7d8c75dc470c5d704c00c4c472061a519644713e23077427fdde6e00056e2985344f569ac8ee6f377a6b5ed94b90e3cd6f0ad6999ff71f9121947d862c4a800e8d9207c02933e9ba088c633ccf02afcb55ecc35a23c7e1d6fb35e1590da961b66ec65287a71382e9674bec79ed2b229d47b100203e83f4dd5c488cd752bec0f92d03c56519f202550e9d0befa4d724b1477b0578a6e3a29374a680fc31c9100c24e314d5ddeee3b7f85f17192e0f387a88fa3b188f13055213b1a1dd5ccdf3b7df272011dc1c1ca192eb6312b3657eca20957f1f42c28dc3c453ee8b64873baa27bbb0e3706ac0ba151f2d2ed84a0e0abae830b24a67011eb8517248315948fbb47a4a2c709b559ab297b8a558a3186e20225ffdcd6642e8c0a4ea60751314c1b75a1569b8dc47c4fdc15a0a15ecd024d40b8b9a9f3c11615572a148155d4ab6ee72ae1d4043da12b87b4515229c5e37a884fb1992ce4f13e01794c8f27413666c09d14ab44215ff594aae12f463fa138a3b77353e6a883de0d2922e2c571739ae597dd28c75579c1fb2b7e3a1b9dd563fd296a2945d5026a054b2d5c4c4ab23177389bbbe6a20d4a4ac30b266cc4723a7eba797d6a8ef93b17a22a3f9d1fe8c33273d917d1b8e45353a384a9b25587e0b9e04418d3c894a159afa2f6bf8e935ec2e359874089f4342962a45954508763f0f2b4bd9efd3f1d58ae7e3ac0078270d34ab82a95b2815d3bfea881b557aeee1e17b50de41802d805b453dc069ad61ed5e2013fd000bbabcef3288caef47bd3236419af9bc32c10c5e73e6b5852a0d39f18f5b226eccbed416edaa7a12a7583e9b3664a03c4fd4e6ffd02ee38357dbc41d614226ef3e9c13a5db06cf0cc5aaaadd47f552296a13ddc74bb4811de82e63e1d63f24aea203a83fabdebe1024874484f31ccaac0778319c38e42d21c76be94693bfd57d1858b3039182d7738f0110dbcead82a0411b0a85063e5bc883b5e9f9734fab599257df9df30fcf1c6f463e34477b1471f8eb8dc2118a095b1f8581d1041d34909197e820899f068fa930b0f2a7db7b169b13e9c3935c0fa6512c5953e4083abca7cc51eca316f2e57b0021484c3a96afae3cc7759d47550f0c591502f2576cfae31318e36df8a23f34cdf76c7d63d58bc4cf0daa7b971005996e78e31ab104ba7747e1398d4b31c390e4f569a3dac2238d8510465f1f04c20d5bd289c8a600f5d7016b9ea529d2fcf277fe231b2ea869d7ff40fe05511ae4ce7d05bf4700d199ee67d437d261a15242bc39ee7b757c3510f7754a87c03b08c613faf3a13460a4bfc0f376b25a818c5970efe460268e2590f87047cb83f7ebd9fc0ae22683ef989f9a66b998faa156db0ef1612fb1b93497732972cc2066e6561da0bb06d4f16b0e189d45a5b243e6b25e581873987b84b632ec9bf64d63b2b2c1a43aad66469beb40c01a75f92856c9f91801ebbbb12a50594773909de8f172ae275fd9ca5624f5e477ffc0386cad8d18f719438094f645f8ad1313d8f08c7421fc2c04f16b75ce076638f011dd187bd97ea42ef3a1d8ab4cd2c91d394ca9ea9d19a0ec4d36ea396045fbce7b747eb1ef3d4ddaa6e88122575cb0db66937f5ee0d61f37182fb42394ef7386d04062a100b3465a40bc045bfac6471e87e6cb5f7caec9499ee448f4e40e63f501d2e26104ae30574171af78a5c0c4a596ded8681d8e51278715cdc1a49d4b4e9b90bd9584da51d778ac59ab7c62b16d19188a853eefc7a153605c3840b2d4508a308a6d9aa293d7d081f9e43fb5d629d2d40a529ca5ebd8491693dd6a357e1dcec1f3b3c39c72e8300687b7f5c6c759d1c2ab0cb3f28b509614438130f73b835fb95738b0e36fdbee3c4f1083a68989c9948c330ee9fc377810258d2d1936b219689abd2514a30780080789b8cbf994ffb72e45d52c62ac69b049a5fd3875df101fc7a90ce666db82fde42701d6e242238a80d8c7f130a547a1cc943b3bcaa97ea5c74d554c53820da3f383313f6a0b96d5dad11ae3cef75efa344c3c3453934f4b76b054e651a40bc172cd042b6e83f9c4e03e348d76d7573748b0e44465ee7793d1506641a980d0f1edcd01a3a29c687f5e3a9b442151a9129ac180b435120e6b5b47be2c6a3d1d897054ae8a3a958c93f79e688d44c8377440b9d8b66830aa5f2d7b42800611676ea78b4db2010214b99af0bda5c2f5d7c8a5221daf5fc1fb289db9fe14223d0acbacb6aaa2c35be9450f75d86be943cd5a4b67adc84b3ccdb047ea8b275c94b2fcc7587ac80f8415cc1b5c6160c10a4e1cf3484ad341f3bd5681275ed7171e5e9301a2ec71c812c7019175d16bc03131a6f2c89e01961bafd11798d0e135b0393de6c5414e4ea3990a19e949815145ee8272fbea692f7be8af51b34fbe12c19937a6801e05518ddff83514caf5d29fdaf6fbd312fff9e9f77776d07b82681dbfd85aa00d9420cb81f7f1b1268679c2af841482bc742a72ddcb205feee19e610ead6d9587c8d3bcf9dacad7f588750822667d5562117f3b686ff4fc4c98e58539e7ede57a9d5cfe0f83c74b0993a78d27342f4b2999009c92d14f1fca0f7c3ba131742285ce1c78da85addba8c5b6769e6603ec697ff34d8c74b3a9176c43bac4c63e8a1d83f11e10d802e38f77ffa5ab45d9318df9e5dd450980def8d448f210d5d3e90f112c12b56962351aea27ae32a114319927f428cc1f3941594147ae6d81b7756e278b60af3b042682cc18adc15fcb13de7800680b34c83ffded89d24df50c2ac6e4fe2f3316f527e0b26b7b72e2dca4b993e562aca6a241fa30d0549cbf1dfca9f5421d73784f3dc1ac27afbf8c6d95dcd73e9e70494446fe79088665a30845c12780c148b89c3b43bcd8fd5c42f9aacadb5b22076f8b1fbe472c80ca94348180d094790048ad2889c3703cbd8297d12adf8bd491e0d32e8db313787e150130efcb36691bf10cea63eb60264d3cf3f4d6bae12be335cd6c081303d3ff0fbab177a3147fe083121b375c347b2f0580164185b49c7d3e5345639688661452d127e48ffbfa97e0f93e84bbc920bbb6f8f0996ed2283a5323604a3d273279de58bed35c83de6ddb9412ad42841408b8e9643dba635810f626904dde60cbaa88b845dceefc1635269029a0bff7d7ee413e56fe07d8bc85b43e54fef7d0c90e7384c91582a6ac633e1c74adbb6102fb8f87bbfd3f10f1ef8a111f1ff75d61eca551aee42b7ad7a98a328ec84fbff709d89ef2aff1a268719a6bebfa567e723503c317b01c68"}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002080)=ANY=[], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002040)={0xaa, 0x22c}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) timerfd_create(0x8, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x2002) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) sendmsg$nl_generic(r3, 0x0, 0xc000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 0s ago: executing program 4 (id=518): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) setpgid(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, 0x0, 0x0, 0x3d08009, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000300)={'bond0\x00', @ifru_names='wg0\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r6}) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f0000000040)={0xb000, 0x3c000}) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x7) dup3(r7, r3, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0_to_batadv\x00'}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180), 0x4) copy_file_range(0xffffffffffffffff, &(0x7f0000000080), r0, 0x0, 0xfffffffffffffff8, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100026829104024040499ced1010203010902240500070108010904cc810203000007090508032000070809090504032000090304c9c8e9ab8825387090f6f5e07c95865492be1c5ff054813846f6a90132e3d88867ae0951c79870f13af7e7396a0ed6cc4ec90b22b9edf60bdf8a8fc77aa01979a144b5446b152ccc50e0cc0accf777e7e42d7d38"], 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) getpgrp(r8) kernel console output (not intermixed with test programs): t:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.145" name="bus" dev="overlay" ino=173 res=0 errno=0 [ 163.576989][ T4376] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x67 [ 163.594769][ T30] audit: type=1400 audit(1765614738.216:299): avc: denied { mounton } for pid=6621 comm="syz.4.147" path="/25/file0" dev="tmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 164.620091][ T30] audit: type=1400 audit(1765614739.016:300): avc: denied { lock } for pid=6621 comm="syz.4.147" path="socket:[10524]" dev="sockfs" ino=10524 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 165.797569][ T30] audit: type=1400 audit(1765614740.126:301): avc: denied { create } for pid=6642 comm="syz.1.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 165.922697][ T30] audit: type=1400 audit(1765614740.146:302): avc: denied { map } for pid=6642 comm="syz.1.151" path="socket:[10602]" dev="sockfs" ino=10602 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 166.202124][ T30] audit: type=1400 audit(1765614740.156:303): avc: denied { read accept } for pid=6642 comm="syz.1.151" path="socket:[10602]" dev="sockfs" ino=10602 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 166.760568][ T30] audit: type=1800 audit(1765614740.546:304): pid=6653 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.153" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 166.783072][ T30] audit: type=1400 audit(1765614740.596:305): avc: denied { lock } for pid=6642 comm="syz.1.151" path="socket:[10602]" dev="sockfs" ino=10602 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 166.806927][ T30] audit: type=1400 audit(1765614740.936:306): avc: denied { connect } for pid=6652 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 169.045684][ T6675] comedi: valid board names for 8255 driver are: [ 169.052265][ T6675] 8255 [ 169.055209][ T6675] comedi: valid board names for vmk80xx driver are: [ 169.061791][ T6675] vmk80xx [ 169.064823][ T6675] comedi: valid board names for usbduxsigma driver are: [ 169.071731][ T6675] usbduxsigma [ 169.075124][ T6675] comedi: valid board names for usbduxfast driver are: [ 169.081963][ T6675] usbduxfast [ 169.085275][ T6675] comedi: valid board names for usbdux driver are: [ 169.091755][ T6675] usbdux [ 169.094713][ T6675] comedi: valid board names for ni6501 driver are: [ 169.101204][ T6675] ni6501 [ 169.104205][ T6675] comedi: valid board names for dt9812 driver are: [ 169.110700][ T6675] dt9812 [ 169.113724][ T6675] comedi: valid board names for ni_labpc_cs driver are: [ 169.120661][ T6675] ni_labpc_cs [ 169.124193][ T6675] comedi: valid board names for ni_daq_700 driver are: [ 169.132814][ T6675] ni_daq_700 [ 169.136135][ T6675] comedi: valid board names for labpc_pci driver are: [ 169.142931][ T6675] labpc_pci [ 169.146104][ T6675] comedi: valid board names for adl_pci9118 driver are: [ 169.153048][ T6675] pci9118dg [ 169.156236][ T6675] pci9118hg [ 169.159448][ T6675] pci9118hr [ 169.162884][ T6675] comedi: valid board names for 8255_pci driver are: [ 169.170016][ T6675] 8255_pci [ 169.173161][ T6675] comedi: valid board names for s526 driver are: [ 169.179478][ T6675] s526 [ 169.182211][ T6675] comedi: valid board names for multiq3 driver are: [ 169.188819][ T6675] multiq3 [ 169.191856][ T6675] comedi: valid board names for pcmuio driver are: [ 169.198520][ T6675] pcmuio48 [ 169.201605][ T6675] pcmuio96 [ 169.204719][ T6675] comedi: valid board names for pcmmio driver are: [ 169.211210][ T6675] pcmmio [ 169.214150][ T6675] comedi: valid board names for pcmda12 driver are: [ 169.220706][ T6675] pcmda12 [ 169.223745][ T6675] comedi: valid board names for pcmad driver are: [ 169.230151][ T6675] pcmad12 [ 169.233947][ T6675] pcmad16 [ 169.236957][ T6675] comedi: valid board names for ni_labpc driver are: [ 169.243658][ T6675] lab-pc-1200 [ 169.247014][ T6675] lab-pc-1200ai [ 169.250526][ T6675] lab-pc+ [ 169.253556][ T6675] comedi: valid board names for atmio16 driver are: [ 169.260130][ T6675] atmio16 [ 169.263149][ T6675] atmio16d [ 169.266231][ T6675] comedi: valid board names for ni_at_ao driver are: [ 169.273113][ T6675] at-ao-6 [ 169.276122][ T6675] at-ao-10 [ 169.279201][ T6675] comedi: valid board names for ni_at_a2150 driver are: [ 169.286140][ T6675] ni_at_a2150 [ 169.289481][ T6675] comedi: valid board names for adq12b driver are: [ 169.295994][ T6675] adq12b [ 169.298900][ T6675] comedi: valid board names for mpc624 driver are: [ 169.305394][ T6675] mpc624 [ 169.308315][ T6675] comedi: valid board names for c6xdigio driver are: [ 169.314992][ T6675] c6xdigio [ 169.318077][ T6675] comedi: valid board names for aio_iiro_16 driver are: [ 169.325008][ T6675] aio_iiro_16 [ 169.328355][ T6675] comedi: valid board names for aio_aio12_8 driver are: [ 169.335957][ T6675] aio_aio12_8 [ 169.339307][ T6675] aio_ai12_8 [ 169.342629][ T6675] aio_ao12_4 [ 169.345886][ T6675] comedi: valid board names for fl512 driver are: [ 169.352266][ T6675] fl512 [ 169.355359][ T6675] comedi: valid board names for dmm32at driver are: [ 169.361951][ T6675] dmm32at [ 169.364999][ T6675] comedi: valid board names for dt282x driver are: [ 169.371472][ T6675] dt2821 [ 169.374414][ T6675] dt2821-f [ 169.377505][ T6675] dt2821-g [ 169.380584][ T6675] dt2823 [ 169.384011][ T6675] dt2824-pgh [ 169.387266][ T6675] dt2824-pgl [ 169.390517][ T6675] dt2825 [ 169.393449][ T6675] dt2827 [ 169.396356][ T6675] dt2828 [ 169.399266][ T6675] dt2829 [ 169.402168][ T6675] dt21-ez [ 169.405198][ T6675] dt23-ez [ 169.408194][ T6675] dt24-ez [ 169.411187][ T6675] dt24-ez-pgl [ 169.414585][ T6675] comedi: valid board names for dt2817 driver are: [ 169.421061][ T6675] dt2817 [ 169.424025][ T6675] comedi: valid board names for dt2815 driver are: [ 169.430495][ T6675] dt2815 [ 169.433436][ T6675] comedi: valid board names for dt2814 driver are: [ 169.440566][ T6675] dt2814 [ 169.443503][ T6675] comedi: valid board names for dt2811 driver are: [ 169.449970][ T6675] dt2811-pgh [ 169.453253][ T6675] dt2811-pgl [ 169.456503][ T6675] comedi: valid board names for dt2801 driver are: [ 169.462996][ T6675] dt2801 [ 169.465903][ T6675] comedi: valid board names for das6402 driver are: [ 169.472461][ T6675] das6402-12 [ 169.475738][ T6675] das6402-16 [ 169.478993][ T6675] comedi: valid board names for das1800 driver are: [ 169.485585][ T6675] das-1701st [ 169.488839][ T6675] das-1701st-da [ 169.492357][ T6675] das-1702st [ 169.495654][ T6675] das-1702st-da [ 169.499168][ T6675] das-1702hr [ 169.502418][ T6675] das-1702hr-da [ 169.505977][ T6675] das-1701ao [ 169.509236][ T6675] das-1702ao [ 169.512492][ T6675] das-1801st [ 169.515782][ T6675] das-1801st-da [ 169.519301][ T6675] das-1802st [ 169.522602][ T6675] das-1802st-da [ 169.526129][ T6675] das-1802hr [ 169.529386][ T6675] das-1802hr-da [ 169.532945][ T6675] das-1801hc [ 169.536211][ T6675] das-1802hc [ 169.540441][ T6675] das-1801ao [ 169.543756][ T6675] das-1802ao [ 169.547012][ T6675] comedi: valid board names for das800 driver are: [ 169.553513][ T6675] das-800 [ 169.556508][ T6675] cio-das800 [ 169.559763][ T6675] das-801 [ 169.562778][ T6675] cio-das801 [ 169.566034][ T6675] das-802 [ 169.569024][ T6675] cio-das802 [ 169.572279][ T6675] cio-das802/16 [ 169.575827][ T6675] comedi: valid board names for isa-das08 driver are: [ 169.582735][ T6675] isa-das08 [ 169.585945][ T6675] das08-pgm [ 169.589115][ T6675] das08-pgh [ 169.592281][ T6675] das08-pgl [ 169.595500][ T6675] das08-aoh [ 169.598676][ T6675] das08-aol [ 169.601841][ T6675] das08-aom [ 169.605053][ T6675] das08/jr-ao [ 169.608393][ T6675] das08jr-16-ao [ 169.611904][ T6675] pc104-das08 [ 169.615304][ T6675] das08jr/16 [ 169.618566][ T6675] comedi: valid board names for das16m1 driver are: [ 169.625180][ T6675] das16m1 [ 169.628185][ T6675] comedi: valid board names for dac02 driver are: [ 169.634606][ T6675] dac02 [ 169.637429][ T6675] comedi: valid board names for rti802 driver are: [ 169.644588][ T6675] rti802 [ 169.647508][ T6675] comedi: valid board names for rti800 driver are: [ 169.654009][ T6675] rti800 [ 169.656919][ T6675] rti815 [ 169.659824][ T6675] comedi: valid board names for pcm3724 driver are: [ 169.666769][ T6675] pcm3724 [ 169.669784][ T6675] comedi: valid board names for pcl818 driver are: [ 169.676309][ T6675] pcl818l [ 169.679307][ T6675] pcl818h [ 169.682303][ T6675] pcl818hd [ 169.685416][ T6675] pcl818hg [ 169.688496][ T6675] pcl818 [ 169.691404][ T6675] pcl718 [ 169.694339][ T6675] pcm3718 [ 169.697333][ T6675] comedi: valid board names for pcl816 driver are: [ 169.703849][ T6675] pcl816 [ 169.706763][ T6675] pcl814b [ 169.709758][ T6675] comedi: valid board names for pcl812 driver are: [ 169.716255][ T6675] pcl812 [ 169.719163][ T6675] pcl812pg [ 169.722240][ T6675] acl8112pg [ 169.725449][ T6675] acl8112dg [ 169.728615][ T6675] acl8112hg [ 169.731777][ T6675] a821pgl [ 169.734824][ T6675] a821pglnda [ 169.738077][ T6675] a821pgh [ 169.741065][ T6675] a822pgl [ 169.744915][ T6675] a822pgh [ 169.747919][ T6675] a823pgl [ 169.750909][ T6675] a823pgh [ 169.753926][ T6675] pcl813 [ 169.756834][ T6675] pcl813b [ 169.760002][ T6675] acl8113 [ 169.763098][ T6675] iso813 [ 169.766009][ T6675] acl8216 [ 169.769002][ T6675] a826pg [ 169.771907][ T6675] comedi: valid board names for pcl730 driver are: [ 169.778407][ T6675] pcl730 [ 169.781313][ T6675] iso730 [ 169.784256][ T6675] acl7130 [ 169.787252][ T6675] pcm3730 [ 169.790242][ T6675] pcl725 [ 169.793179][ T6675] p8r8dio [ 169.796173][ T6675] acl7225b [ 169.799248][ T6675] p16r16dio [ 169.802409][ T6675] pcl733 [ 169.805335][ T6675] pcl734 [ 169.808240][ T6675] opmm-1616-xt [ 169.811671][ T6675] pearl-mm-p [ 169.814948][ T6675] ir104-pbf [ 169.818128][ T6675] comedi: valid board names for pcl726 driver are: [ 169.824659][ T6675] pcl726 [ 169.827574][ T6675] pcl727 [ 169.830481][ T6675] pcl728 [ 169.833457][ T6675] acl6126 [ 169.836455][ T6675] acl6128 [ 169.839448][ T6675] comedi: valid board names for pcl724 driver are: [ 169.847183][ T6675] pcl724 [ 169.850110][ T6675] pcl722 [ 169.853049][ T6675] pcl731 [ 169.855956][ T6675] acl7122 [ 169.858949][ T6675] acl7124 [ 169.861941][ T6675] pet48dio [ 169.865055][ T6675] pcmio48 [ 169.868049][ T6675] onyx-mm-dio [ 169.871390][ T6675] comedi: valid board names for pcl711 driver are: [ 169.877894][ T6675] pcl711 [ 169.880801][ T6675] pcl711b [ 169.883822][ T6675] acl8112hg [ 169.886991][ T6675] acl8112dg [ 169.890154][ T6675] comedi: valid board names for amplc_pc263 driver are: [ 169.897110][ T6675] pc263 [ 169.899931][ T6675] comedi: valid board names for amplc_pc236 driver are: [ 169.906887][ T6675] pc36at [ 169.909804][ T6675] comedi: valid board names for amplc_dio200 driver are: [ 169.916850][ T6675] pc212e [ 169.919764][ T6675] pc214e [ 169.922712][ T6675] pc215e [ 169.925634][ T6675] pc218e [ 169.928549][ T6675] pc272e [ 169.931455][ T6675] comedi: valid board names for comedi_parport driver are: [ 169.938652][ T6675] comedi_parport [ 169.942253][ T6675] comedi: valid board names for comedi_test driver are: [ 169.949911][ T6675] comedi_test [ 169.953289][ T6675] comedi: valid board names for comedi_bond driver are: [ 169.960193][ T6675] comedi_bond [ 170.202668][ T30] audit: type=1400 audit(1765614744.736:307): avc: denied { create } for pid=6664 comm="syz.1.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 170.283579][ T30] audit: type=1400 audit(1765614744.736:308): avc: denied { write } for pid=6664 comm="syz.1.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 170.936083][ T6693] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 170.936083][ T6693] The task syz.3.160 (6693) triggered the difference, watch for misbehavior. [ 171.225134][ T30] audit: type=1400 audit(1765614745.466:309): avc: denied { create } for pid=6687 comm="syz.3.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 171.265324][ T30] audit: type=1400 audit(1765614745.576:310): avc: denied { connect } for pid=6687 comm="syz.3.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 171.367825][ T30] audit: type=1400 audit(1765614745.656:311): avc: denied { mount } for pid=6687 comm="syz.3.160" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 171.845890][ T6698] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 171.855890][ T6698] SELinux: failed to load policy [ 171.861437][ T30] audit: type=1400 audit(1765614746.466:312): avc: denied { load_policy } for pid=6697 comm="syz.3.161" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 172.342683][ T30] audit: type=1400 audit(1765614746.836:313): avc: denied { create } for pid=6700 comm="syz.0.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 172.633268][ T30] audit: type=1400 audit(1765614746.846:314): avc: denied { connect } for pid=6700 comm="syz.0.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 173.096389][ T30] audit: type=1400 audit(1765614747.716:315): avc: denied { connect } for pid=6710 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 173.164853][ T6711] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 173.223349][ T30] audit: type=1400 audit(1765614747.766:316): avc: denied { create } for pid=6710 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 173.386721][ T6713] batman_adv: batadv0: Adding interface: dummy0 [ 173.393482][ T6713] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.480162][ T6713] batman_adv: batadv0: Interface activated: dummy0 [ 173.549603][ T6714] batadv0: mtu less than device minimum [ 173.568641][ T6714] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 173.579870][ T6714] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 173.590887][ T6714] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 173.601835][ T6714] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 173.612859][ T6714] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 173.623904][ T6714] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 173.635062][ T6714] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 173.646006][ T6714] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 173.656936][ T6714] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.904045][ T6736] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 178.048059][ T6740] /dev/nullb0: Can't open blockdev [ 178.765058][ T6747] evm: overlay not supported [ 180.690496][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 180.690513][ T30] audit: type=1400 audit(2000000005.249:321): avc: denied { connect } for pid=6754 comm="syz.1.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 181.744973][ T6769] IPv6: NLM_F_CREATE should be specified when creating new route [ 181.872645][ T30] audit: type=1400 audit(2000000006.879:322): avc: denied { write } for pid=6765 comm="syz.1.178" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 182.140340][ T6775] sp0: Synchronizing with TNC [ 182.154679][ T6776] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 182.583187][ T30] audit: type=1400 audit(2000000007.619:323): avc: denied { search } for pid=5481 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.854942][ T6773] [U] è` [ 183.006616][ T30] audit: type=1400 audit(2000000007.629:324): avc: denied { search } for pid=5481 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.028224][ T30] audit: type=1400 audit(2000000007.629:325): avc: denied { search } for pid=5481 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.049933][ T30] audit: type=1400 audit(2000000007.629:326): avc: denied { read } for pid=5481 comm="dhcpcd" name="n100" dev="tmpfs" ino=2549 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 183.074262][ T30] audit: type=1400 audit(2000000007.629:327): avc: denied { open } for pid=5481 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2549 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 183.097357][ T30] audit: type=1400 audit(2000000007.629:328): avc: denied { getattr } for pid=5481 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2549 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 185.181427][ T6794] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 185.191070][ T6794] SELinux: failed to load policy [ 186.172189][ T6810] QAT: failed to copy from user cfg_data. [ 186.259504][ T30] audit: type=1400 audit(2000000011.249:329): avc: denied { setopt } for pid=6805 comm="syz.3.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 188.393382][ T30] audit: type=1400 audit(2000000013.439:330): avc: denied { name_bind } for pid=6816 comm="syz.0.189" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 188.417902][ T6822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.189'. [ 188.981097][ T6823] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 190.384494][ T30] audit: type=1400 audit(2000000013.439:331): avc: denied { node_bind } for pid=6816 comm="syz.0.189" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 190.634149][ T30] audit: type=1400 audit(2000000013.459:332): avc: denied { bind } for pid=6816 comm="syz.0.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 190.920604][ T30] audit: type=1400 audit(2000000015.939:333): avc: denied { getopt } for pid=6818 comm="syz.2.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 191.165926][ T6837] fuse: Bad value for 'fd' [ 191.355274][ T30] audit: type=1400 audit(2000000016.399:334): avc: denied { name_bind } for pid=6840 comm="syz.0.194" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 193.080426][ T30] audit: type=1400 audit(2000000018.119:335): avc: denied { lock } for pid=6854 comm="syz.2.197" path="socket:[11220]" dev="sockfs" ino=11220 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 193.167223][ T6857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.197'. [ 193.177823][ T6857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.197'. [ 193.314524][ T30] audit: type=1400 audit(2000000018.309:336): avc: denied { setopt } for pid=6858 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 193.813908][ T30] audit: type=1326 audit(2000000018.829:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6858 comm="syz.1.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93d58f749 code=0x7ffc0000 [ 193.996781][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.101996][ T30] audit: type=1326 audit(2000000018.829:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6858 comm="syz.1.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc93d58f749 code=0x7ffc0000 [ 194.315218][ T30] audit: type=1326 audit(2000000018.829:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6858 comm="syz.1.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93d58f749 code=0x7ffc0000 [ 194.652668][ T30] audit: type=1326 audit(2000000018.829:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6858 comm="syz.1.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc93d58f749 code=0x7ffc0000 [ 194.731155][ T30] audit: type=1326 audit(2000000018.839:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6858 comm="syz.1.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93d58f749 code=0x7ffc0000 [ 194.806595][ T30] audit: type=1326 audit(2000000018.839:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6858 comm="syz.1.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93d58f749 code=0x7ffc0000 [ 194.908575][ T30] audit: type=1400 audit(2000000018.889:343): avc: denied { create } for pid=6861 comm="syz.4.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 196.304628][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 196.304641][ T5829] Bluetooth: hci4: command 0x0406 tx timeout [ 196.304726][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 196.311671][ T5824] Bluetooth: hci3: command 0x0406 tx timeout [ 196.752706][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 196.896001][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 196.896017][ T30] audit: type=1400 audit(2000000021.929:346): avc: denied { read } for pid=6874 comm="syz.2.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 198.699371][ T6905] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 201.134477][ T30] audit: type=1400 audit(2000000025.909:347): avc: denied { append } for pid=6917 comm="syz.3.214" name="sg0" dev="devtmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 201.476437][ T30] audit: type=1400 audit(2000000025.909:348): avc: denied { open } for pid=6917 comm="syz.3.214" path="/dev/sg0" dev="devtmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 201.712801][ T30] audit: type=1400 audit(2000000025.909:349): avc: denied { ioctl } for pid=6917 comm="syz.3.214" path="/dev/sg0" dev="devtmpfs" ino=770 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 201.738451][ T30] audit: type=1400 audit(2000000026.679:350): avc: denied { setopt } for pid=6915 comm="syz.1.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 203.180998][ T30] audit: type=1400 audit(2000000027.879:351): avc: denied { read write } for pid=6930 comm="syz.0.209" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 203.181046][ T30] audit: type=1400 audit(2000000027.879:352): avc: denied { open } for pid=6930 comm="syz.0.209" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 203.181080][ T30] audit: type=1400 audit(2000000027.889:353): avc: denied { ioctl } for pid=6930 comm="syz.0.209" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 203.183485][ T5813] Bluetooth: hci1: command 0x0406 tx timeout [ 203.257066][ T30] audit: type=1400 audit(2000000028.299:354): avc: denied { getopt } for pid=6915 comm="syz.1.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 203.953038][ T30] audit: type=1326 audit(2000000028.969:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6937 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29eef8f749 code=0x7ffc0000 [ 204.016562][ T30] audit: type=1326 audit(2000000028.969:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6937 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f29eef8f749 code=0x7ffc0000 [ 204.048855][ T30] audit: type=1326 audit(2000000028.969:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6937 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29eef8f749 code=0x7ffc0000 [ 204.086450][ T6948] block nbd3: not configured, cannot reconfigure [ 204.176631][ T30] audit: type=1326 audit(2000000028.969:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6937 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f29eef8f749 code=0x7ffc0000 [ 204.374663][ T30] audit: type=1326 audit(2000000028.969:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6937 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29eef8f749 code=0x7ffc0000 [ 204.410905][ T30] audit: type=1326 audit(2000000028.969:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6937 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f29eef8f749 code=0x7ffc0000 [ 204.567626][ T6950] mmap: syz.1.220 (6950) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 206.220672][ T6974] hfs: can't find a HFS filesystem on dev nullb0 [ 207.432698][ T5940] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 207.619767][ T5940] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 207.721779][ T5940] usb 2-1: config 1 has no interface number 0 [ 207.895224][ T6988] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 209.139110][ T5940] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 209.150771][ T5940] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 209.160868][ T5940] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 209.190752][ T5940] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 209.204951][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.213729][ T5940] usb 2-1: Product: syz [ 209.215370][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.231'. [ 209.218085][ T5940] usb 2-1: Manufacturer: syz [ 209.984715][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 210.164050][ T5940] usb 2-1: SerialNumber: syz [ 210.171486][ T5940] usb 2-1: can't set config #1, error -71 [ 210.179450][ T5940] usb 2-1: USB disconnect, device number 6 [ 210.515129][ T7012] netlink: 32 bytes leftover after parsing attributes in process `syz.4.233'. [ 210.852815][ T7019] fuse: Bad value for 'fd' [ 211.300213][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.235'. [ 212.822660][ T975] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 213.096930][ T975] usb 1-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 213.164911][ T7036] hfs: can't find a HFS filesystem on dev nullb0 [ 213.560388][ T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.858390][ T975] usb 1-1: config 0 descriptor?? [ 214.091598][ T7042] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 214.101569][ T7042] SELinux: failed to load policy [ 214.343812][ T7014] syz.1.232 (7014): drop_caches: 2 [ 216.179454][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 216.179502][ T30] audit: type=1400 audit(2000000040.679:368): avc: denied { getopt } for pid=7025 comm="syz.0.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 216.278434][ T975] usbhid 1-1:0.0: can't add hid device: -71 [ 216.327304][ T975] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 216.655997][ T975] usb 1-1: USB disconnect, device number 3 [ 216.715026][ T5932] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 217.075535][ T5932] usb 3-1: Using ep0 maxpacket: 16 [ 217.223916][ T5932] usb 3-1: config index 0 descriptor too short (expected 65532, got 18) [ 217.362730][ T5932] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 217.371233][ T5932] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 217.415408][ T5932] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 217.473804][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.509504][ T5932] usb 3-1: Product: syz [ 217.542673][ T5932] usb 3-1: Manufacturer: syz [ 217.561765][ T5932] usb 3-1: SerialNumber: syz [ 217.577180][ T5932] r8152-cfgselector 3-1: Unknown version 0x0000 [ 217.596502][ T5932] r8152-cfgselector 3-1: config 0 descriptor?? [ 218.070322][ T5932] r8152-cfgselector 3-1: Unknown version 0x0000 [ 218.107263][ T5932] r8152-cfgselector 3-1: bad CDC descriptors [ 218.170052][ T5932] r8152-cfgselector 3-1: USB disconnect, device number 3 [ 218.392749][ T6215] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 219.562676][ T6215] usb 4-1: Using ep0 maxpacket: 16 [ 219.633392][ T6215] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.716062][ T6215] usb 4-1: config 0 interface 0 has no altsetting 0 [ 219.795883][ T6215] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 219.826646][ T6215] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.849717][ T6215] usb 4-1: config 0 descriptor?? [ 220.478372][ T6215] nzxt-smart2 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 220.788135][ T5903] usb 4-1: USB disconnect, device number 4 [ 224.376287][ T7110] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.384982][ T7110] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.511374][ T7111] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 224.522716][ T7111] SELinux: failed to load policy [ 228.017360][ T7124] hfs: can't find a HFS filesystem on dev nullb0 [ 228.262589][ T30] audit: type=1400 audit(2000000053.059:369): avc: denied { mounton } for pid=7116 comm="syz.3.257" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 228.423574][ T30] audit: type=1400 audit(2000000053.429:370): avc: denied { listen } for pid=7120 comm="syz.0.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 228.460750][ T5827] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 228.471218][ T5827] CPU: 1 UID: 0 PID: 5827 Comm: kworker/u9:7 Not tainted syzkaller #0 PREEMPT(full) [ 228.471246][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 228.471260][ T5827] Workqueue: hci2 hci_rx_work [ 228.471290][ T5827] Call Trace: [ 228.471294][ T5827] [ 228.471299][ T5827] dump_stack_lvl+0x16c/0x1f0 [ 228.471317][ T5827] sysfs_warn_dup+0x7f/0xa0 [ 228.471333][ T5827] sysfs_create_dir_ns+0x24b/0x2b0 [ 228.471345][ T5827] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 228.471357][ T5827] ? find_held_lock+0x2b/0x80 [ 228.471376][ T5827] ? do_raw_spin_unlock+0x172/0x230 [ 228.471391][ T5827] kobject_add_internal+0x2c4/0x9d0 [ 228.471407][ T5827] kobject_add+0x16e/0x240 [ 228.471418][ T5827] ? __pfx_kobject_add+0x10/0x10 [ 228.471432][ T5827] ? kobject_put+0xaf/0x6f0 [ 228.471442][ T5827] ? _raw_spin_unlock+0x3e/0x50 [ 228.471462][ T5827] device_add+0x288/0x1980 [ 228.471478][ T5827] ? __pfx_dev_set_name+0x10/0x10 [ 228.471489][ T5827] ? __pfx_device_add+0x10/0x10 [ 228.471504][ T5827] ? mgmt_send_event_skb+0x2fb/0x460 [ 228.471523][ T5827] hci_conn_add_sysfs+0x1a8/0x260 [ 228.471535][ T5827] le_conn_complete_evt+0x11ed/0x1fa0 [ 228.471555][ T5827] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 228.471574][ T5827] hci_le_conn_complete_evt+0x23c/0x3a0 [ 228.471593][ T5827] hci_le_meta_evt+0x357/0x610 [ 228.471603][ T5827] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 228.471620][ T5827] hci_event_packet+0x685/0x1210 [ 228.471635][ T5827] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 228.471649][ T5827] ? __pfx_hci_event_packet+0x10/0x10 [ 228.471666][ T5827] ? kcov_remote_start+0x399/0x680 [ 228.471677][ T5827] ? lockdep_hardirqs_on+0x7c/0x110 [ 228.471692][ T5827] hci_rx_work+0x2c9/0x1020 [ 228.471711][ T5827] process_one_work+0x9ba/0x1b20 [ 228.471731][ T5827] ? __pfx_process_one_work+0x10/0x10 [ 228.471748][ T5827] ? assign_work+0x1a0/0x250 [ 228.471761][ T5827] worker_thread+0x6c8/0xf10 [ 228.471781][ T5827] ? __pfx_worker_thread+0x10/0x10 [ 228.471794][ T5827] kthread+0x3c5/0x780 [ 228.471807][ T5827] ? __pfx_kthread+0x10/0x10 [ 228.471820][ T5827] ? rcu_is_watching+0x12/0xc0 [ 228.471829][ T5827] ? __pfx_kthread+0x10/0x10 [ 228.471842][ T5827] ret_from_fork+0x983/0xb10 [ 228.471854][ T5827] ? __pfx_ret_from_fork+0x10/0x10 [ 228.471866][ T5827] ? rcu_is_watching+0x12/0xc0 [ 228.471875][ T5827] ? __switch_to+0x7af/0x10d0 [ 228.471888][ T5827] ? __pfx_kthread+0x10/0x10 [ 228.471901][ T5827] ret_from_fork_asm+0x1a/0x30 [ 228.471925][ T5827] [ 228.472338][ T5827] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 228.731539][ T5827] Bluetooth: hci2: failed to register connection device [ 229.269674][ T30] audit: type=1400 audit(2000000054.059:371): avc: denied { bind } for pid=7122 comm="syz.4.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 229.949945][ T30] audit: type=1400 audit(2000000054.989:372): avc: denied { mount } for pid=7132 comm="syz.0.261" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 231.167663][ T7152] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 231.196586][ T30] audit: type=1400 audit(2000000056.239:373): avc: denied { mounton } for pid=7151 comm="syz.4.265" path="/48/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 231.227444][ T7152] pvfs2: Unknown parameter './cgroup/syz0' [ 231.511567][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.266'. [ 231.520555][ T7160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.266'. [ 231.584040][ T30] audit: type=1400 audit(2000000056.519:374): avc: denied { setopt } for pid=7158 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 231.620903][ T3557] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.631274][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.266'. [ 231.640244][ T7160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.266'. [ 231.856189][ T3557] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.879241][ T3557] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.901072][ T3557] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.918573][ T30] audit: type=1400 audit(2000000056.959:375): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 232.639127][ T5813] Bluetooth: hci5: command 0x1003 tx timeout [ 232.646512][ T5827] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 234.874017][ T5813] Bluetooth: hci2: command 0x0406 tx timeout [ 236.236002][ T30] audit: type=1400 audit(2000000061.109:376): avc: denied { read } for pid=7197 comm="syz.1.273" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 237.303560][ T30] audit: type=1400 audit(2000000061.119:377): avc: denied { open } for pid=7197 comm="syz.1.273" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 237.425727][ T7209] /dev/nullb0: Can't open blockdev [ 238.188259][ T30] audit: type=1400 audit(2000000061.119:378): avc: denied { ioctl } for pid=7197 comm="syz.1.273" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 238.292580][ T5896] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 238.300543][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 238.593037][ T5896] usb 2-1: device descriptor read/64, error -32 [ 239.135831][ T30] audit: type=1400 audit(2000000064.179:379): avc: denied { setopt } for pid=7217 comm="syz.3.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 239.541075][ T7225] netlink: 24 bytes leftover after parsing attributes in process `syz.4.280'. [ 239.810794][ T5896] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 240.683557][ T7239] hfs: can't find a HFS filesystem on dev nullb0 [ 241.123276][ T30] audit: type=1400 audit(2000000065.509:380): avc: denied { ioctl } for pid=7230 comm="syz.3.282" path="socket:[13884]" dev="sockfs" ino=13884 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 241.430344][ T30] audit: type=1400 audit(2000000066.459:381): avc: denied { setopt } for pid=7242 comm="syz.4.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 242.222599][ T30] audit: type=1400 audit(2000000066.859:382): avc: denied { ioctl } for pid=7242 comm="syz.4.285" path="socket:[13891]" dev="sockfs" ino=13891 ioctlcmd=0x9409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 242.552645][ T5882] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 242.555377][ T7252] netlink: 32 bytes leftover after parsing attributes in process `syz.4.286'. [ 243.079661][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.144493][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1160, setting to 1024 [ 243.230706][ T5882] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 243.329648][ T5882] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 243.420025][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.592397][ T5882] usb 4-1: config 0 descriptor?? [ 243.732043][ T7260] Bluetooth: MGMT ver 1.23 [ 243.942673][ T7245] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 243.950596][ T30] audit: type=1400 audit(2000000068.989:383): avc: denied { getopt } for pid=7256 comm="syz.4.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 244.034439][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.288'. [ 244.043981][ T7261] netlink: 20 bytes leftover after parsing attributes in process `syz.4.288'. [ 244.068802][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.288'. [ 244.078416][ T7261] netlink: 20 bytes leftover after parsing attributes in process `syz.4.288'. [ 244.558023][ T69] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.583254][ T6073] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.592300][ T6073] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.644644][ T30] audit: type=1400 audit(2000000069.069:384): avc: denied { read write } for pid=7256 comm="syz.4.288" name="sg0" dev="devtmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 244.698371][ T6073] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.882119][ T5882] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 244.896250][ T5882] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 244.903959][ T5882] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 244.913578][ T5882] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 244.921109][ T5882] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 245.039749][ T7267] hfs: can't find a HFS filesystem on dev nullb0 [ 245.228046][ T5882] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 245.252711][ T5896] usb 2-1: device descriptor read/64, error -110 [ 245.729676][ T5896] usb usb2-port1: attempt power cycle [ 246.001296][ T30] audit: type=1400 audit(2000000071.029:385): avc: denied { read write } for pid=7270 comm="syz.2.291" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 246.074300][ T30] audit: type=1400 audit(2000000071.029:386): avc: denied { open } for pid=7270 comm="syz.2.291" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 246.187343][ T5896] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 246.239165][ T30] audit: type=1400 audit(2000000071.029:387): avc: denied { setopt } for pid=7270 comm="syz.2.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 246.262987][ T5896] usb 2-1: device descriptor read/8, error -32 [ 246.283048][ T7245] usb 4-1: string descriptor 0 read error: -71 [ 246.314124][ T24] usb 4-1: USB disconnect, device number 5 [ 246.347099][ T30] audit: type=1400 audit(2000000071.309:388): avc: denied { accept } for pid=7276 comm="syz.4.292" path=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 247.563770][ T7288] xt_CT: You must specify a L4 protocol and not use inversions on it [ 248.388198][ T7297] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 248.398002][ T7297] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 248.410034][ T7297] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 248.413100][ T30] audit: type=1400 audit(2000000073.429:389): avc: denied { mounton } for pid=7294 comm="syz.1.297" path="/52/file1" dev="tmpfs" ino=318 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 248.419681][ T7297] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 248.451971][ T7297] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 248.461675][ T7297] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 248.471533][ T7297] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 248.481155][ T7297] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 248.491543][ T7297] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 248.543103][ T7290] netlink: 12 bytes leftover after parsing attributes in process `syz.4.293'. [ 248.707524][ T7303] netlink: 28 bytes leftover after parsing attributes in process `syz.4.293'. [ 249.193588][ T7308] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 249.204231][ T7308] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 249.220415][ T7308] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 249.231326][ T7308] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 249.251618][ T7308] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 249.262142][ T7308] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 249.274264][ T7308] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 249.284326][ T7308] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 249.293894][ T7308] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 249.509614][ T30] audit: type=1400 audit(2000000073.769:390): avc: denied { bind } for pid=7289 comm="syz.3.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 250.796786][ T6189] libceph: connect (1)[c::]:6789 error -13 [ 250.811377][ T6189] libceph: mon0 (1)[c::]:6789 connect error [ 250.942084][ T7321] ceph: No mds server is up or the cluster is laggy [ 251.202728][ T6215] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 251.452584][ T6215] usb 5-1: Using ep0 maxpacket: 32 [ 252.254395][ T6215] usb 5-1: config 0 has an invalid interface number: 136 but max is 0 [ 252.273897][ T6215] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.292601][ T6215] usb 5-1: config 0 has no interface number 0 [ 252.298756][ T6215] usb 5-1: config 0 interface 136 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 252.308780][ T6215] usb 5-1: config 0 interface 136 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.336341][ T6215] usb 5-1: New USB device found, idVendor=10cf, idProduct=8063, bcdDevice=d1.d2 [ 252.345770][ T6215] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.354010][ T6215] usb 5-1: Product: syz [ 252.358170][ T6215] usb 5-1: Manufacturer: syz [ 252.362889][ T6215] usb 5-1: SerialNumber: syz [ 252.369787][ T6215] usb 5-1: config 0 descriptor?? [ 252.375536][ T7329] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 252.395162][ T6215] vmk80xx 5-1:0.136: driver 'vmk80xx' failed to auto-configure device. [ 252.486944][ T30] audit: type=1400 audit(2000000077.519:391): avc: denied { getopt } for pid=7343 comm="syz.1.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 253.444813][ T7354] tipc: Started in network mode [ 253.450813][ T7354] tipc: Node identity ac1414aa, cluster identity 4711 [ 253.483037][ T30] audit: type=1400 audit(2000000077.699:392): avc: denied { ioctl } for pid=7348 comm="syz.3.309" path="socket:[13995]" dev="sockfs" ino=13995 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 253.720973][ T7354] tipc: Enabled bearer , priority 10 [ 253.804338][ T30] audit: type=1400 audit(2000000078.519:393): avc: denied { setopt } for pid=7342 comm="syz.2.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 254.064132][ T7362] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 254.115977][ T30] audit: type=1400 audit(2000000078.559:394): avc: denied { setopt } for pid=7342 comm="syz.2.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 254.847231][ T5934] tipc: Node number set to 2886997162 [ 254.958565][ T6215] usb 5-1: USB disconnect, device number 4 [ 255.067699][ T7373] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 255.077636][ T7373] SELinux: failed to load policy [ 255.445911][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.208651][ T7376] netlink: 'syz.2.314': attribute type 10 has an invalid length. [ 257.220492][ T7376] team0: Device veth1_macvtap failed to register rx_handler [ 257.323677][ T30] audit: type=1400 audit(2000000082.359:395): avc: denied { create } for pid=7383 comm="syz.4.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 257.577122][ T30] audit: type=1400 audit(2000000082.399:396): avc: denied { watch } for pid=7383 comm="syz.4.317" path="/62/file0" dev="tmpfs" ino=357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 258.377285][ T30] audit: type=1400 audit(2000000083.419:397): avc: denied { append } for pid=7395 comm="syz.2.320" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 258.598803][ T7399] netlink: 24 bytes leftover after parsing attributes in process `syz.1.319'. [ 258.649176][ T7400] hfs: can't find a HFS filesystem on dev nullb0 [ 259.186236][ T30] audit: type=1400 audit(2000000084.229:398): avc: denied { getopt } for pid=7395 comm="syz.2.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 260.191516][ T30] audit: type=1326 audit(2000000085.149:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7402 comm="syz.4.321" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f29eef8f749 code=0x0 [ 260.428172][ T30] audit: type=1400 audit(2000000085.229:400): avc: denied { bind } for pid=7402 comm="syz.4.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 261.577859][ T30] audit: type=1400 audit(2000000086.249:401): avc: denied { read } for pid=7412 comm="syz.0.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 262.353168][ T7422] comedi: valid board names for 8255 driver are: [ 262.362965][ T7422] 8255 [ 262.378318][ T7422] comedi: valid board names for vmk80xx driver are: [ 262.390467][ T7422] vmk80xx [ 262.404700][ T7422] comedi: valid board names for usbduxsigma driver are: [ 262.427526][ T7422] usbduxsigma [ 262.430980][ T7422] comedi: valid board names for usbduxfast driver are: [ 262.441465][ T7422] usbduxfast [ 262.445146][ T7422] comedi: valid board names for usbdux driver are: [ 262.451689][ T7422] usbdux [ 262.454816][ T7422] comedi: valid board names for ni6501 driver are: [ 262.461358][ T7422] ni6501 [ 262.464491][ T7422] comedi: valid board names for dt9812 driver are: [ 262.471044][ T7422] dt9812 [ 262.474546][ T7422] comedi: valid board names for ni_labpc_cs driver are: [ 262.481538][ T7422] ni_labpc_cs [ 262.485132][ T7422] comedi: valid board names for ni_daq_700 driver are: [ 262.492024][ T7422] ni_daq_700 [ 262.495611][ T7422] comedi: valid board names for labpc_pci driver are: [ 262.502487][ T7422] labpc_pci [ 262.505882][ T7422] comedi: valid board names for adl_pci9118 driver are: [ 262.513802][ T7422] pci9118dg [ 262.517061][ T7422] pci9118hg [ 262.524341][ T7422] pci9118hr [ 262.528375][ T7422] comedi: valid board names for 8255_pci driver are: [ 262.535731][ T7422] 8255_pci [ 262.538900][ T7422] comedi: valid board names for s526 driver are: [ 262.545466][ T7422] s526 [ 262.548277][ T7422] comedi: valid board names for multiq3 driver are: [ 262.555160][ T7422] multiq3 [ 262.558244][ T7422] comedi: valid board names for pcmuio driver are: [ 262.564959][ T7422] pcmuio48 [ 262.568142][ T7422] pcmuio96 [ 262.571288][ T7422] comedi: valid board names for pcmmio driver are: [ 262.578032][ T7422] pcmmio [ 262.581078][ T7422] comedi: valid board names for pcmda12 driver are: [ 262.587889][ T7422] pcmda12 [ 262.591025][ T7422] comedi: valid board names for pcmad driver are: [ 262.598407][ T7422] pcmad12 [ 262.601465][ T7422] pcmad16 [ 262.605060][ T7422] comedi: valid board names for ni_labpc driver are: [ 262.611804][ T7422] lab-pc-1200 [ 262.615594][ T7422] lab-pc-1200ai [ 262.619258][ T7422] lab-pc+ [ 262.624478][ T7422] comedi: valid board names for atmio16 driver are: [ 262.631137][ T7422] atmio16 [ 262.634540][ T7422] atmio16d [ 262.637702][ T7422] comedi: valid board names for ni_at_ao driver are: [ 262.644526][ T7422] at-ao-6 [ 262.647581][ T7422] at-ao-10 [ 262.650704][ T7422] comedi: valid board names for ni_at_a2150 driver are: [ 262.657806][ T7422] ni_at_a2150 [ 262.661210][ T7422] comedi: valid board names for adq12b driver are: [ 262.668206][ T7422] adq12b [ 262.671179][ T7422] comedi: valid board names for mpc624 driver are: [ 262.677795][ T7422] mpc624 [ 262.680778][ T7422] comedi: valid board names for c6xdigio driver are: [ 262.687511][ T7422] c6xdigio [ 262.690654][ T7422] comedi: valid board names for aio_iiro_16 driver are: [ 262.697694][ T7422] aio_iiro_16 [ 262.701100][ T7422] comedi: valid board names for aio_aio12_8 driver are: [ 262.708216][ T7422] aio_aio12_8 [ 262.711614][ T7422] aio_ai12_8 [ 262.715048][ T7422] aio_ao12_4 [ 262.718327][ T7422] comedi: valid board names for fl512 driver are: [ 262.725670][ T7422] fl512 [ 262.729857][ T7422] comedi: valid board names for dmm32at driver are: [ 262.736655][ T7422] dmm32at [ 262.739707][ T7422] comedi: valid board names for dt282x driver are: [ 262.746315][ T7422] dt2821 [ 262.749252][ T7422] dt2821-f [ 262.752375][ T7422] dt2821-g [ 262.755616][ T7422] dt2823 [ 262.758586][ T7422] dt2824-pgh [ 262.761881][ T7422] dt2824-pgl [ 262.765303][ T7422] dt2825 [ 262.768288][ T7422] dt2827 [ 262.771238][ T7422] dt2828 [ 262.774445][ T7422] dt2829 [ 262.777435][ T7422] dt21-ez [ 262.780466][ T7422] dt23-ez [ 262.783647][ T7422] dt24-ez [ 262.786705][ T7422] dt24-ez-pgl [ 262.790091][ T7422] comedi: valid board names for dt2817 driver are: [ 262.797362][ T7422] dt2817 [ 262.800346][ T7422] comedi: valid board names for dt2815 driver are: [ 262.807073][ T7422] dt2815 [ 262.810061][ T7422] comedi: valid board names for dt2814 driver are: [ 262.816939][ T7422] dt2814 [ 262.819932][ T7422] comedi: valid board names for dt2811 driver are: [ 262.829597][ T7422] dt2811-pgh [ 262.833057][ T7422] dt2811-pgl [ 262.836388][ T7422] comedi: valid board names for dt2801 driver are: [ 262.842954][ T7422] dt2801 [ 262.845927][ T7422] comedi: valid board names for das6402 driver are: [ 262.852677][ T7422] das6402-12 [ 262.855997][ T7422] das6402-16 [ 262.859296][ T7422] comedi: valid board names for das1800 driver are: [ 262.865943][ T7422] das-1701st [ 262.869221][ T7422] das-1701st-da [ 262.872888][ T7422] das-1702st [ 262.876224][ T7422] das-1702st-da [ 262.879776][ T7422] das-1702hr [ 262.883283][ T7422] das-1702hr-da [ 262.886886][ T7422] das-1701ao [ 262.890202][ T7422] das-1702ao [ 262.893680][ T7422] das-1801st [ 262.897005][ T7422] das-1801st-da [ 262.900571][ T7422] das-1802st [ 262.903930][ T7422] das-1802st-da [ 262.907522][ T7422] das-1802hr [ 262.910848][ T7422] das-1802hr-da [ 262.914553][ T7422] das-1801hc [ 262.917878][ T7422] das-1802hc [ 262.921218][ T7422] das-1801ao [ 262.924548][ T7422] das-1802ao [ 262.930131][ T7422] comedi: valid board names for das800 driver are: [ 262.936831][ T7422] das-800 [ 262.939907][ T7422] cio-das800 [ 262.943325][ T7422] das-801 [ 262.946380][ T7422] cio-das801 [ 262.949684][ T7422] das-802 [ 262.953002][ T7422] cio-das802 [ 262.956321][ T7422] cio-das802/16 [ 262.959886][ T7422] comedi: valid board names for isa-das08 driver are: [ 262.966806][ T7422] isa-das08 [ 262.970110][ T7422] das08-pgm [ 262.973458][ T7422] das08-pgh [ 262.976694][ T7422] das08-pgl [ 262.979914][ T7422] das08-aoh [ 262.983322][ T7422] das08-aol [ 262.986568][ T7422] das08-aom [ 262.989793][ T7422] das08/jr-ao [ 262.993320][ T7422] das08jr-16-ao [ 262.996920][ T7422] pc104-das08 [ 263.000291][ T7422] das08jr/16 [ 263.003748][ T7422] comedi: valid board names for das16m1 driver are: [ 263.010373][ T7422] das16m1 [ 263.013552][ T7422] comedi: valid board names for dac02 driver are: [ 263.019997][ T7422] dac02 [ 263.022980][ T7422] comedi: valid board names for rti802 driver are: [ 263.029513][ T7422] rti802 [ 263.036198][ T7422] comedi: valid board names for rti800 driver are: [ 263.042826][ T7422] rti800 [ 263.045792][ T7422] rti815 [ 263.048743][ T7422] comedi: valid board names for pcm3724 driver are: [ 263.055449][ T7422] pcm3724 [ 263.058518][ T7422] comedi: valid board names for pcl818 driver are: [ 263.065154][ T7422] pcl818l [ 263.068212][ T7422] pcl818h [ 263.071253][ T7422] pcl818hd [ 263.074476][ T7422] pcl818hg [ 263.077634][ T7422] pcl818 [ 263.080605][ T7422] pcl718 [ 263.083615][ T7422] pcm3718 [ 263.086671][ T7422] comedi: valid board names for pcl816 driver are: [ 263.093350][ T7422] pcl816 [ 263.096350][ T7422] pcl814b [ 263.099381][ T7422] comedi: valid board names for pcl812 driver are: [ 263.106051][ T7422] pcl812 [ 263.109039][ T7422] pcl812pg [ 263.112172][ T7422] acl8112pg [ 263.115794][ T7422] acl8112dg [ 263.119226][ T7422] acl8112hg [ 263.122437][ T7422] a821pgl [ 263.125592][ T7422] a821pglnda [ 263.128926][ T7422] a821pgh [ 263.131966][ T7422] a822pgl [ 263.138187][ T7422] a822pgh [ 263.141265][ T7422] a823pgl [ 263.144346][ T7422] a823pgh [ 263.147405][ T7422] pcl813 [ 263.150355][ T7422] pcl813b [ 263.153505][ T7422] acl8113 [ 263.156573][ T7422] iso813 [ 263.159520][ T7422] acl8216 [ 263.162706][ T7422] a826pg [ 263.165674][ T7422] comedi: valid board names for pcl730 driver are: [ 263.172237][ T7422] pcl730 [ 263.175372][ T7422] iso730 [ 263.178342][ T7422] acl7130 [ 263.181382][ T7422] pcm3730 [ 263.184508][ T7422] pcl725 [ 263.187476][ T7422] p8r8dio [ 263.190512][ T7422] acl7225b [ 263.194378][ T7422] p16r16dio [ 263.197611][ T7422] pcl733 [ 263.200560][ T7422] pcl734 [ 263.203609][ T7422] opmm-1616-xt [ 263.207124][ T7422] pearl-mm-p [ 263.210468][ T7422] ir104-pbf [ 263.213824][ T7422] comedi: valid board names for pcl726 driver are: [ 263.220374][ T7422] pcl726 [ 263.223351][ T7422] pcl727 [ 263.226425][ T7422] pcl728 [ 263.229380][ T7422] acl6126 [ 263.232420][ T7422] acl6128 [ 263.238568][ T7422] comedi: valid board names for pcl724 driver are: [ 263.245199][ T7422] pcl724 [ 263.248190][ T7422] pcl722 [ 263.251144][ T7422] pcl731 [ 263.254213][ T7422] acl7122 [ 263.257268][ T7422] acl7124 [ 263.260304][ T7422] pet48dio [ 263.263569][ T7422] pcmio48 [ 263.266622][ T7422] onyx-mm-dio [ 263.270007][ T7422] comedi: valid board names for pcl711 driver are: [ 263.276730][ T7422] pcl711 [ 263.279699][ T7422] pcl711b [ 263.282776][ T7422] acl8112hg [ 263.286006][ T7422] acl8112dg [ 263.289217][ T7422] comedi: valid board names for amplc_pc263 driver are: [ 263.296321][ T7422] pc263 [ 263.299206][ T7422] comedi: valid board names for amplc_pc236 driver are: [ 263.306233][ T7422] pc36at [ 263.309218][ T7422] comedi: valid board names for amplc_dio200 driver are: [ 263.316372][ T7422] pc212e [ 263.319346][ T7422] pc214e [ 263.322299][ T7422] pc215e [ 263.325349][ T7422] pc218e [ 263.328316][ T7422] pc272e [ 263.331250][ T7422] comedi: valid board names for comedi_parport driver are: [ 263.341716][ T7422] comedi_parport [ 263.345488][ T7422] comedi: valid board names for comedi_test driver are: [ 263.352459][ T7422] comedi_test [ 263.356119][ T7422] comedi: valid board names for comedi_bond driver are: [ 263.363183][ T7422] comedi_bond [ 263.796087][ T30] audit: type=1400 audit(2000000088.829:402): avc: denied { ioctl } for pid=7425 comm="syz.1.329" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 264.773846][ T7436] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 264.783791][ T7436] SELinux: failed to load policy [ 266.524785][ T30] audit: type=1400 audit(2000000090.109:403): avc: denied { read } for pid=7433 comm="syz.4.331" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 267.966750][ T30] audit: type=1400 audit(2000000092.959:404): avc: denied { ioctl } for pid=7448 comm="syz.2.335" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 268.327972][ T30] audit: type=1326 audit(2000000093.369:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8beb58f749 code=0x7ffc0000 [ 268.603632][ T7453] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 268.612022][ T7453] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 268.622166][ T7453] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 268.752840][ T30] audit: type=1326 audit(2000000093.369:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8beb58f749 code=0x7ffc0000 [ 269.843921][ T30] audit: type=1326 audit(2000000093.369:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f8beb58f749 code=0x7ffc0000 [ 269.867985][ T30] audit: type=1326 audit(2000000093.369:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8beb58f749 code=0x7ffc0000 [ 269.897767][ T30] audit: type=1326 audit(2000000093.369:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8beb58f749 code=0x7ffc0000 [ 269.942607][ T30] audit: type=1326 audit(2000000093.369:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8beb58f749 code=0x7ffc0000 [ 270.060613][ T30] audit: type=1326 audit(2000000093.369:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8beb58f749 code=0x7ffc0000 [ 270.242685][ T30] audit: type=1326 audit(2000000093.369:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8beb58f749 code=0x7ffc0000 [ 271.748742][ T7483] sd 0:0:1:0: device reset [ 273.786643][ T7486] ubi31: attaching mtd0 [ 273.830701][ T7486] ubi31: scanning is finished [ 273.868318][ T7486] ubi31: empty MTD device detected [ 274.070073][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 274.070088][ T30] audit: type=1400 audit(2000000099.109:447): avc: denied { read write } for pid=5821 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 274.585781][ T30] audit: type=1400 audit(2000000099.159:448): avc: denied { open } for pid=5821 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 274.972041][ T30] audit: type=1400 audit(2000000099.159:449): avc: denied { ioctl } for pid=5821 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 275.002158][ T7486] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 275.593437][ T30] audit: type=1400 audit(2000000099.269:450): avc: denied { create } for pid=7487 comm="syz.0.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 275.614780][ T30] audit: type=1400 audit(2000000099.659:451): avc: denied { create } for pid=7487 comm="syz.0.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 275.676436][ T7501] kAFS: unable to lookup cell '' [ 276.044678][ T30] audit: type=1400 audit(2000000099.699:452): avc: denied { prog_load } for pid=7491 comm="syz.3.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 276.279971][ T30] audit: type=1400 audit(2000000099.699:453): avc: denied { bpf } for pid=7491 comm="syz.3.344" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 276.418197][ T30] audit: type=1400 audit(2000000099.699:454): avc: denied { perfmon } for pid=7491 comm="syz.3.344" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 276.524609][ T7509] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 276.534780][ T7509] SELinux: failed to load policy [ 276.555405][ T30] audit: type=1400 audit(2000000099.699:455): avc: denied { prog_run } for pid=7491 comm="syz.3.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 277.076853][ T30] audit: type=1400 audit(2000000099.889:456): avc: denied { execmem } for pid=7491 comm="syz.3.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 279.354163][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 279.354179][ T30] audit: type=1400 audit(2000000104.399:477): avc: denied { create } for pid=7519 comm="syz.1.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 279.899146][ T30] audit: type=1400 audit(2000000104.939:478): avc: denied { read } for pid=7512 comm="syz.2.339" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 280.143453][ T7532] hfs: can't find a HFS filesystem on dev nullb0 [ 280.261161][ T7527] netlink: 111 bytes leftover after parsing attributes in process `syz.1.350'. [ 280.418797][ T7533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.350'. [ 280.944124][ T30] audit: type=1400 audit(2000000104.969:479): avc: denied { open } for pid=7512 comm="syz.2.339" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 280.968863][ T30] audit: type=1400 audit(2000000105.179:480): avc: denied { create } for pid=7528 comm="syz.0.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 280.988487][ T30] audit: type=1400 audit(2000000105.179:481): avc: denied { getopt } for pid=7528 comm="syz.0.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 281.007867][ T30] audit: type=1400 audit(2000000105.189:482): avc: denied { mounton } for pid=7528 comm="syz.0.352" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 281.458492][ T30] audit: type=1400 audit(2000000105.279:483): avc: denied { read write } for pid=7521 comm="syz.4.349" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 281.487730][ T30] audit: type=1400 audit(2000000105.279:484): avc: denied { open } for pid=7521 comm="syz.4.349" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 281.518033][ T30] audit: type=1400 audit(2000000105.299:485): avc: denied { create } for pid=7519 comm="syz.1.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 281.997288][ T30] audit: type=1400 audit(2000000105.299:486): avc: denied { write } for pid=7519 comm="syz.1.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 283.840953][ T7559] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 285.914313][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 285.914369][ T30] audit: type=1400 audit(2000000108.869:506): avc: denied { setopt } for pid=7555 comm="syz.0.357" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 286.508421][ T7547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.536440][ T7547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.544773][ T30] audit: type=1400 audit(2000000111.589:507): avc: denied { read write } for pid=7564 comm="syz.1.359" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 286.571031][ T30] audit: type=1400 audit(2000000111.589:508): avc: denied { open } for pid=7564 comm="syz.1.359" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 286.602037][ T7566] netlink: 152 bytes leftover after parsing attributes in process `syz.1.359'. [ 287.643546][ T30] audit: type=1400 audit(2000000112.669:509): avc: denied { create } for pid=7563 comm="syz.4.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 287.769830][ T30] audit: type=1400 audit(2000000112.809:510): avc: denied { read } for pid=7563 comm="syz.4.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 287.860640][ T1312] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.892619][ T1312] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.901598][ T1312] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.959647][ T1312] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.982613][ T30] audit: type=1400 audit(2000000113.019:511): avc: denied { setopt } for pid=7563 comm="syz.4.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 288.033625][ T6069] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.060642][ T30] audit: type=1400 audit(2000000113.049:512): avc: denied { ioctl } for pid=7563 comm="syz.4.358" path="socket:[14766]" dev="sockfs" ino=14766 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 288.155873][ T6069] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.178540][ T6073] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.216525][ T6073] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.470164][ T30] audit: type=1400 audit(2000000113.059:513): avc: denied { bind } for pid=7574 comm="syz.1.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 288.543712][ T7582] fuse: Unknown parameter 'rootmode00000000000000000000' [ 288.886505][ T30] audit: type=1326 audit(2000000113.099:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7574 comm="syz.1.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93d58f749 code=0x7ffc0000 [ 289.011222][ T30] audit: type=1326 audit(2000000113.099:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7574 comm="syz.1.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc93d58f749 code=0x7ffc0000 [ 291.110304][ T30] kauditd_printk_skb: 81 callbacks suppressed [ 291.110315][ T30] audit: type=1400 audit(2000000116.149:597): avc: denied { write } for pid=7606 comm="syz.0.367" name="comedi0" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 291.167914][ T30] audit: type=1400 audit(2000000116.209:598): avc: denied { name_bind } for pid=7607 comm="syz.1.368" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 291.238690][ T30] audit: type=1400 audit(2000000116.279:599): avc: denied { create } for pid=7606 comm="syz.0.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 291.696305][ T30] audit: type=1400 audit(2000000116.279:600): avc: denied { read } for pid=7606 comm="syz.0.367" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 291.838812][ T30] audit: type=1400 audit(2000000116.279:601): avc: denied { open } for pid=7606 comm="syz.0.367" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 292.026782][ T30] audit: type=1400 audit(2000000116.279:602): avc: denied { ioctl } for pid=7606 comm="syz.0.367" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64c6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 292.738995][ T30] audit: type=1400 audit(2000000116.709:603): avc: denied { write } for pid=7614 comm="syz.4.369" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 292.931736][ T7623] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 293.285367][ T30] audit: type=1400 audit(2000000116.769:604): avc: denied { setopt } for pid=7606 comm="syz.0.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 293.514948][ T30] audit: type=1400 audit(2000000116.789:605): avc: denied { ioctl } for pid=7606 comm="syz.0.367" path="/dev/comedi0" dev="devtmpfs" ino=1276 ioctlcmd=0x6400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 293.910138][ T30] audit: type=1400 audit(2000000117.459:606): avc: denied { mount } for pid=7621 comm="syz.4.372" name="/" dev="pipefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 294.072858][ T5940] IPVS: starting estimator thread 0... [ 295.623627][ T3787] wlan1: Trigger new scan to find an IBSS to join [ 296.453709][ T7642] IPVS: using max 33 ests per chain, 79200 per kthread [ 296.915814][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 296.915825][ T30] audit: type=1400 audit(2000000121.959:614): avc: denied { read write } for pid=7681 comm="syz.0.378" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 297.105434][ T7319] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 297.117817][ T30] audit: type=1400 audit(2000000121.989:615): avc: denied { open } for pid=7681 comm="syz.0.378" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 297.146431][ T7319] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 298.226486][ T7686] kAFS: unable to lookup cell '(' [ 298.817972][ T30] audit: type=1400 audit(2000000122.209:616): avc: denied { ioctl } for pid=7682 comm="syz.2.379" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 299.114888][ T30] audit: type=1400 audit(2000000123.909:617): avc: denied { ioctl } for pid=7679 comm="syz.3.377" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=15141 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 299.435409][ T7695] fido_id[7695]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 299.848960][ T30] audit: type=1400 audit(2000000124.619:618): avc: denied { setopt } for pid=7696 comm="syz.0.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 300.575424][ T30] audit: type=1400 audit(2000000124.629:619): avc: denied { firmware_load } for pid=7696 comm="syz.0.381" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 300.600112][ T30] audit: type=1400 audit(2000000125.069:620): avc: denied { getopt } for pid=7698 comm="syz.2.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 301.025475][ T30] audit: type=1400 audit(2000000126.059:621): avc: denied { create } for pid=7716 comm="syz.0.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 301.209936][ T7722] futex_wake_op: syz.4.384 tries to shift op by -1; fix this program [ 301.546021][ T7720] bond0: entered promiscuous mode [ 301.551153][ T7720] bond_slave_0: entered promiscuous mode [ 301.557141][ T7720] bond_slave_1: entered promiscuous mode [ 301.588210][ T7720] batadv0: entered promiscuous mode [ 301.595283][ T60] wlan1: Trigger new scan to find an IBSS to join [ 301.596272][ T7720] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 301.611652][ T7720] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 301.645212][ T7720] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 301.963287][ T7720] bond0: left promiscuous mode [ 301.976592][ T7720] bond_slave_0: left promiscuous mode [ 301.982241][ T7720] bond_slave_1: left promiscuous mode [ 301.997169][ T30] audit: type=1400 audit(2000000126.929:622): avc: denied { write } for pid=7711 comm="syz.4.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 302.053517][ T7720] batadv0: left promiscuous mode [ 302.074307][ T30] audit: type=1400 audit(2000000126.929:623): avc: denied { nlmsg_write } for pid=7711 comm="syz.4.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 302.163285][ T30] audit: type=1400 audit(2000000127.199:624): avc: denied { ioctl } for pid=7716 comm="syz.0.386" path="socket:[15191]" dev="sockfs" ino=15191 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 302.415311][ T30] audit: type=1326 audit(2000000127.459:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7712 comm="syz.2.385" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f974478f749 code=0x0 [ 303.098438][ T6414] wlan1: Creating new IBSS network, BSSID 3e:2b:3b:9f:f2:ac [ 303.573397][ T7743] Invalid source name [ 303.577497][ T7743] UBIFS error (pid: 7743): cannot open "./file0", error -22 [ 304.025471][ T30] audit: type=1400 audit(2000000128.599:626): avc: denied { create } for pid=7739 comm="syz.4.390" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 304.304682][ T30] audit: type=1400 audit(2000000128.609:627): avc: denied { mounton } for pid=7739 comm="syz.4.390" path="/78/file0" dev="tmpfs" ino=452 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 304.404982][ T7746] overlayfs: failed to resolve './file1': -2 [ 304.526665][ T30] audit: type=1400 audit(2000000129.569:628): avc: denied { ioctl } for pid=7738 comm="syz.3.388" path="socket:[15747]" dev="sockfs" ino=15747 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 304.692642][ T30] audit: type=1400 audit(2000000129.699:629): avc: denied { write } for pid=7745 comm="syz.1.389" path="socket:[15242]" dev="sockfs" ino=15242 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 306.411708][ T30] audit: type=1400 audit(2000000131.449:630): avc: denied { unlink } for pid=5820 comm="syz-executor" name="file0" dev="tmpfs" ino=452 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 307.225304][ T30] audit: type=1400 audit(2000000132.269:631): avc: denied { create } for pid=7758 comm="syz.2.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 307.404438][ T7764] kAFS: unable to lookup cell 'Þ({^ú@' [ 307.533059][ T30] audit: type=1400 audit(2000000132.489:632): avc: denied { setopt } for pid=7758 comm="syz.2.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 307.892565][ T30] audit: type=1400 audit(2000000132.489:633): avc: denied { connect } for pid=7758 comm="syz.2.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 309.199824][ T30] audit: type=1400 audit(2000000133.759:634): avc: denied { bind } for pid=7774 comm="syz.1.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 309.224567][ T30] audit: type=1400 audit(2000000133.759:635): avc: denied { name_bind } for pid=7774 comm="syz.1.398" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 309.251194][ T7776] net_ratelimit: 10 callbacks suppressed [ 309.251204][ T7776] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 309.257728][ T30] audit: type=1400 audit(2000000133.759:636): avc: denied { node_bind } for pid=7774 comm="syz.1.398" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 309.349603][ T30] audit: type=1400 audit(2000000134.389:637): avc: denied { create } for pid=7781 comm="syz.4.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 309.544005][ T30] audit: type=1400 audit(2000000134.589:638): avc: denied { append } for pid=7779 comm="syz.0.397" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 310.520288][ T7797] bridge1: entered promiscuous mode [ 310.526151][ T7797] bridge1: entered allmulticast mode [ 310.777961][ T7798] tmpfs: Bad value for 'mpol' [ 312.342578][ T30] audit: type=1400 audit(2000000137.309:639): avc: denied { sys_module } for pid=7792 comm="syz.2.401" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 313.243858][ T30] audit: type=1400 audit(2000000138.279:640): avc: denied { ioctl } for pid=7794 comm="syz.4.402" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 313.269393][ T30] audit: type=1400 audit(2000000138.279:641): avc: denied { set_context_mgr } for pid=7794 comm="syz.4.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 313.292790][ T7813] gfs2: block size(16384) > page size(4096) not supported by filesystem [ 313.332946][ T30] audit: type=1400 audit(2000000138.339:642): avc: denied { read write } for pid=7794 comm="syz.4.402" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 313.485321][ T7816] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 313.495385][ T7816] SELinux: failed to load policy [ 313.658469][ T30] audit: type=1400 audit(2000000138.339:643): avc: denied { ioctl open } for pid=7794 comm="syz.4.402" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 315.751033][ T7822] random: crng reseeded on system resumption [ 315.758532][ T30] audit: type=1400 audit(2000000140.789:644): avc: denied { write } for pid=7820 comm="syz.0.405" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 316.256861][ T30] audit: type=1400 audit(2000000140.789:645): avc: denied { open } for pid=7820 comm="syz.0.405" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 316.949862][ T30] audit: type=1400 audit(2000000141.519:646): avc: denied { create } for pid=7836 comm="syz.4.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 316.950226][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.996091][ T7841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.406'. [ 317.011379][ T7841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.406'. [ 317.043190][ T30] audit: type=1400 audit(2000000141.539:647): avc: denied { connect } for pid=7836 comm="syz.4.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 317.225411][ T30] audit: type=1400 audit(2000000141.619:648): avc: denied { mount } for pid=7836 comm="syz.4.409" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 317.603350][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 317.603364][ T30] audit: type=1400 audit(2000000142.649:652): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 317.705854][ T30] audit: type=1400 audit(2000000142.749:653): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 317.979502][ T7853] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 317.989445][ T7853] SELinux: failed to load policy [ 318.570599][ T7859] xt_SECMARK: invalid security context 'unconfined' [ 318.707755][ T30] audit: type=1400 audit(2000000143.729:654): avc: denied { mount } for pid=7856 comm="syz.2.411" name="/" dev="hugetlbfs" ino=16542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 319.612899][ T7864] hfs: can't find a HFS filesystem on dev nullb0 [ 320.821799][ T30] audit: type=1400 audit(2000000145.859:655): avc: denied { write } for pid=7877 comm="syz.3.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 320.824603][ T7879] netlink: 24 bytes leftover after parsing attributes in process `syz.3.417'. [ 320.946565][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.417'. [ 320.975201][ T7879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.417'. [ 321.218280][ T30] audit: type=1400 audit(2000000145.989:656): avc: denied { setopt } for pid=7877 comm="syz.3.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 322.192776][ T7893] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 322.202726][ T7893] SELinux: failed to load policy [ 322.504135][ T30] audit: type=1400 audit(2000000147.359:657): avc: denied { ioctl } for pid=7881 comm="syz.4.418" path="socket:[16646]" dev="sockfs" ino=16646 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 323.379972][ T30] audit: type=1400 audit(2000000148.099:658): avc: denied { setopt } for pid=7898 comm="syz.2.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 323.433193][ T30] audit: type=1400 audit(2000000148.109:659): avc: denied { ioctl } for pid=7898 comm="syz.2.422" path="socket:[16093]" dev="sockfs" ino=16093 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 323.524869][ T30] audit: type=1400 audit(2000000148.129:660): avc: denied { mount } for pid=7898 comm="syz.2.422" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 323.829383][ T7906] ubi31: attaching mtd0 [ 323.835642][ T7906] ubi31: scanning is finished [ 324.271213][ T30] audit: type=1400 audit(2000000148.869:661): avc: denied { append } for pid=7903 comm="syz.0.423" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 324.405493][ T7906] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 324.413432][ T7906] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 324.420749][ T7906] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 324.427840][ T7906] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 324.435518][ T7906] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 324.442370][ T7906] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 324.450808][ T7906] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3600837624 [ 324.460965][ T7906] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 324.542671][ T7909] ubi31: background thread "ubi_bgt31d" started, PID 7909 [ 325.648217][ T7915] 9pnet_virtio: no channels available for device syz [ 325.682797][ T30] audit: type=1400 audit(2000000150.729:662): avc: denied { map } for pid=7917 comm="syz.2.426" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 326.357041][ T30] audit: type=1400 audit(2000000150.759:663): avc: denied { execute } for pid=7917 comm="syz.2.426" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 326.978644][ T30] audit: type=1400 audit(2000000151.189:664): avc: denied { read } for pid=7917 comm="syz.2.426" dev="sockfs" ino=16689 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 327.480277][ T30] audit: type=1400 audit(2000000152.519:665): avc: denied { setopt } for pid=7932 comm="syz.4.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 327.762236][ T30] audit: type=1400 audit(2000000152.799:666): avc: denied { read } for pid=7933 comm="syz.0.427" name="usbmon8" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 327.774394][ T7938] usb usb8: usbfs: process 7938 (syz.0.427) did not claim interface 0 before use [ 327.865900][ T30] audit: type=1400 audit(2000000152.799:667): avc: denied { open } for pid=7933 comm="syz.0.427" path="/dev/usbmon8" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 327.900138][ T7943] fuse: Bad value for 'fd' [ 328.500677][ T7930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.659813][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 328.659829][ T30] audit: type=1400 audit(2000000153.689:670): avc: denied { read } for pid=7946 comm="syz.3.430" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 328.721360][ T7930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.803786][ T30] audit: type=1400 audit(2000000153.689:671): avc: denied { open } for pid=7946 comm="syz.3.430" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 329.041109][ T30] audit: type=1400 audit(2000000153.689:672): avc: denied { ioctl } for pid=7946 comm="syz.3.430" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 329.042862][ T6189] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 329.231753][ T60] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.252419][ T60] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.271561][ T60] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.291871][ T60] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.343054][ T6189] usb 4-1: Using ep0 maxpacket: 8 [ 329.353169][ T6189] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.392718][ T6189] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 329.588539][ T6189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.994834][ T7962] fuse: Bad value for 'fd' [ 330.009420][ T30] audit: type=1400 audit(2000000154.679:673): avc: denied { connect } for pid=7956 comm="syz.2.432" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 330.061009][ T6189] usb 4-1: config 0 descriptor?? [ 330.863093][ T30] audit: type=1400 audit(2000000154.679:674): avc: denied { write } for pid=7956 comm="syz.2.432" path="socket:[16191]" dev="sockfs" ino=16191 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 331.111016][ T7970] lo speed is unknown, defaulting to 1000 [ 331.117097][ T7970] lo speed is unknown, defaulting to 1000 [ 331.123696][ T7970] lo speed is unknown, defaulting to 1000 [ 331.131999][ T7970] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 331.143928][ T7970] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 331.166041][ T7970] lo speed is unknown, defaulting to 1000 [ 331.172876][ T7970] lo speed is unknown, defaulting to 1000 [ 331.180392][ T7970] lo speed is unknown, defaulting to 1000 [ 331.186954][ T7970] lo speed is unknown, defaulting to 1000 [ 331.193546][ T7970] lo speed is unknown, defaulting to 1000 [ 333.095358][ T4376] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 333.236774][ T30] audit: type=1400 audit(2000000157.579:675): avc: denied { map } for pid=7955 comm="syz.1.433" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 333.243160][ T6189] usb 4-1: USB disconnect, device number 6 [ 333.272557][ T5889] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 333.600411][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.640114][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.686648][ T5889] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 333.891722][ T5889] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 334.056379][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.090951][ T5889] usb 3-1: config 0 descriptor?? [ 334.116814][ T30] audit: type=1326 audit(2000000159.149:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.3.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8beb58f749 code=0x7ffc0000 [ 334.219936][ T30] audit: type=1326 audit(2000000159.149:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.3.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8beb58f749 code=0x7ffc0000 [ 334.301554][ T30] audit: type=1326 audit(2000000159.149:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.3.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8beb58f749 code=0x7ffc0000 [ 334.493647][ T30] audit: type=1326 audit(2000000159.149:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.3.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8beb58f749 code=0x7ffc0000 [ 334.669996][ T5889] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 334.686483][ T30] audit: type=1326 audit(2000000159.149:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.3.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8beb58f749 code=0x7ffc0000 [ 334.688112][ T5889] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 334.768831][ T7996] SELinux: security_context_str_to_sid (3) failed with errno=-22 [ 334.892559][ T5889] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 334.905143][ T5889] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 334.919040][ T5889] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 334.935465][ T5889] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 335.425955][ T30] audit: type=1326 audit(2000000159.149:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.3.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8beb58f749 code=0x7ffc0000 [ 335.461465][ T5889] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 335.498972][ T5889] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 335.522631][ T30] audit: type=1326 audit(2000000159.159:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.3.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8beb58f749 code=0x7ffc0000 [ 335.619952][ T30] audit: type=1326 audit(2000000159.159:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.3.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8beb58f749 code=0x7ffc0000 [ 335.655114][ T30] audit: type=1326 audit(2000000159.159:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.3.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8beb58f749 code=0x7ffc0000 [ 335.816212][ T8004] hfs: can't find a HFS filesystem on dev nullb0 [ 336.013856][ T30] audit: type=1326 audit(2000000159.209:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.3.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8beb58f749 code=0x7ffc0000 [ 336.253958][ T8009] fuse: Bad value for 'fd' [ 336.274631][ T5889] usb 3-1: USB disconnect, device number 4 [ 336.662788][ T5889] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 336.837197][ T5827] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 336.849194][ T5827] CPU: 0 UID: 0 PID: 5827 Comm: kworker/u9:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 336.849229][ T5827] Tainted: [L]=SOFTLOCKUP [ 336.849236][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 336.849248][ T5827] Workqueue: hci4 hci_rx_work [ 336.849295][ T5827] Call Trace: [ 336.849302][ T5827] [ 336.849309][ T5827] dump_stack_lvl+0x16c/0x1f0 [ 336.849334][ T5827] sysfs_warn_dup+0x7f/0xa0 [ 336.849359][ T5827] sysfs_create_dir_ns+0x24b/0x2b0 [ 336.849391][ T5827] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 336.849412][ T5827] ? find_held_lock+0x2b/0x80 [ 336.849441][ T5827] ? do_raw_spin_unlock+0x172/0x230 [ 336.849466][ T5827] kobject_add_internal+0x2c4/0x9d0 [ 336.849488][ T5827] kobject_add+0x16e/0x240 [ 336.849506][ T5827] ? __pfx_kobject_add+0x10/0x10 [ 336.849525][ T5827] ? kobject_put+0xaf/0x6f0 [ 336.849548][ T5827] device_add+0x288/0x1980 [ 336.849570][ T5827] ? __pfx_dev_set_name+0x10/0x10 [ 336.849585][ T5827] ? __pfx_device_add+0x10/0x10 [ 336.849606][ T5827] ? mgmt_send_event_skb+0x2fb/0x460 [ 336.849634][ T5827] hci_conn_add_sysfs+0x1a8/0x260 [ 336.849650][ T5827] le_conn_complete_evt+0x11ed/0x1fa0 [ 336.849678][ T5827] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 336.849705][ T5827] hci_le_conn_complete_evt+0x23c/0x3a0 [ 336.849732][ T5827] hci_le_meta_evt+0x357/0x610 [ 336.849746][ T5827] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 336.849770][ T5827] hci_event_packet+0x685/0x1210 [ 336.849792][ T5827] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 336.849807][ T5827] ? __pfx_hci_event_packet+0x10/0x10 [ 336.849832][ T5827] ? kcov_remote_start+0x3a9/0x680 [ 336.849853][ T5827] hci_rx_work+0x2c9/0x1020 [ 336.849878][ T5827] process_one_work+0x9ba/0x1b20 [ 336.849905][ T5827] ? __pfx_process_one_work+0x10/0x10 [ 336.849930][ T5827] ? assign_work+0x1a0/0x250 [ 336.849949][ T5827] worker_thread+0x6c8/0xf10 [ 336.849977][ T5827] ? __pfx_worker_thread+0x10/0x10 [ 336.849995][ T5827] kthread+0x3c5/0x780 [ 336.850013][ T5827] ? __pfx_kthread+0x10/0x10 [ 336.850032][ T5827] ? rcu_is_watching+0x12/0xc0 [ 336.850046][ T5827] ? __pfx_kthread+0x10/0x10 [ 336.850064][ T5827] ret_from_fork+0x983/0xb10 [ 336.850081][ T5827] ? __pfx_ret_from_fork+0x10/0x10 [ 336.850097][ T5827] ? rcu_is_watching+0x12/0xc0 [ 336.850111][ T5827] ? __switch_to+0x7af/0x10d0 [ 336.850130][ T5827] ? __pfx_kthread+0x10/0x10 [ 336.850148][ T5827] ret_from_fork_asm+0x1a/0x30 [ 336.850184][ T5827] [ 337.225778][ T5827] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 337.240008][ T5827] Bluetooth: hci4: failed to register connection device [ 337.913836][ T5889] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 337.925756][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.969355][ T5889] usb 2-1: Product: syz [ 337.973665][ T5889] usb 2-1: Manufacturer: syz [ 337.978267][ T5889] usb 2-1: SerialNumber: syz [ 337.985162][ T5889] usb 2-1: config 0 descriptor?? [ 338.394534][ T8030] siw: device registration error -23 [ 339.033429][ T5889] airspy 2-1:0.0: usb_control_msg() failed -110 request 09 [ 339.072712][ T5889] airspy 2-1:0.0: Could not detect board [ 339.292948][ T5889] airspy 2-1:0.0: probe with driver airspy failed with error -110 [ 339.433478][ T8035] gfs2: block size(16384) > page size(4096) not supported by filesystem [ 339.472643][ T8035] binder: 8032:8035 ioctl c0306201 200000000040 returned -22 [ 339.811927][ T5934] usb 2-1: USB disconnect, device number 11 [ 340.393232][ T8046] netlink: 'syz.0.451': attribute type 2 has an invalid length. [ 340.974687][ T8046] : entered promiscuous mode [ 341.115571][ T8046] GUP no longer grows the stack in syz.0.451 (8046): 200000005000-200000008000 (200000004000) [ 341.155240][ T8046] CPU: 1 UID: 0 PID: 8046 Comm: syz.0.451 Tainted: G L syzkaller #0 PREEMPT(full) [ 341.155274][ T8046] Tainted: [L]=SOFTLOCKUP [ 341.155282][ T8046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 341.155294][ T8046] Call Trace: [ 341.155302][ T8046] [ 341.155311][ T8046] dump_stack_lvl+0x16c/0x1f0 [ 341.155337][ T8046] gup_vma_lookup+0x1d2/0x220 [ 341.155364][ T8046] fixup_user_fault+0x26e/0x540 [ 341.155391][ T8046] ? futex_lock_pi+0x687/0x7c0 [ 341.155414][ T8046] fault_in_user_writeable+0x70/0xe0 [ 341.155448][ T8046] futex_lock_pi+0x690/0x7c0 [ 341.155473][ T8046] ? __pfx_futex_lock_pi+0x10/0x10 [ 341.155502][ T8046] ? __futex_wait+0x24b/0x2f0 [ 341.155548][ T8046] ? futex_private_hash_put+0x160/0x1b0 [ 341.155579][ T8046] ? __pfx_futex_wake_mark+0x10/0x10 [ 341.155617][ T8046] do_futex+0x11a/0x350 [ 341.155643][ T8046] ? __pfx_do_futex+0x10/0x10 [ 341.155668][ T8046] ? __vm_munmap+0x1d2/0x380 [ 341.155694][ T8046] __x64_sys_futex+0x1e0/0x4c0 [ 341.155731][ T8046] ? __pfx___x64_sys_futex+0x10/0x10 [ 341.155759][ T8046] ? xfd_validate_state+0x61/0x180 [ 341.155780][ T8046] ? __sys_setsockopt+0x1c0/0x230 [ 341.155819][ T8046] do_syscall_64+0xcd/0xf80 [ 341.155842][ T8046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.155864][ T8046] RIP: 0033:0x7fc361f8f749 [ 341.155892][ T8046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.155911][ T8046] RSP: 002b:00007fc362e03038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 341.155932][ T8046] RAX: ffffffffffffffda RBX: 00007fc3621e6270 RCX: 00007fc361f8f749 [ 341.155946][ T8046] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 341.155958][ T8046] RBP: 00007fc362013f91 R08: 0000000000000000 R09: 0000000000000000 [ 341.155970][ T8046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.155981][ T8046] R13: 00007fc3621e6308 R14: 00007fc3621e6270 R15: 00007ffdddfea888 [ 341.156012][ T8046] [ 342.110294][ T8048] lo speed is unknown, defaulting to 1000 [ 342.326286][ T8059] hfs: can't find a HFS filesystem on dev nullb0 [ 342.398908][ T5940] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 342.686079][ T5940] usb 4-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 342.702891][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.761569][ T5940] usb 4-1: config 0 descriptor?? [ 342.843142][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 342.843158][ T30] audit: type=1400 audit(2000000167.849:696): avc: denied { read } for pid=8060 comm="syz.2.455" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 342.901409][ T30] audit: type=1400 audit(2000000167.849:697): avc: denied { open } for pid=8060 comm="syz.2.455" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 343.149061][ T30] audit: type=1400 audit(2000000167.859:698): avc: denied { ioctl } for pid=8060 comm="syz.2.455" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 343.435264][ T5813] Bluetooth: hci4: command 0x0406 tx timeout [ 344.627303][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 344.631145][ T30] audit: type=1400 audit(2000000169.099:699): avc: denied { getopt } for pid=8054 comm="syz.3.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 344.634825][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 344.662185][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 344.669400][ T5940] usbhid 4-1:0.0: can't add hid device: -32 [ 344.675413][ T5940] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 344.703284][ T5940] usb 4-1: USB disconnect, device number 7 [ 345.701952][ T8078] program syz.4.457 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 345.995564][ T30] audit: type=1400 audit(2000000171.029:700): avc: denied { read } for pid=8076 comm="syz.4.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 346.156068][ T30] audit: type=1400 audit(2000000171.199:701): avc: denied { write } for pid=8076 comm="syz.4.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 346.456653][ T8088] program syz.2.461 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 346.502666][ T30] audit: type=1400 audit(2000000171.199:702): avc: denied { getopt } for pid=8076 comm="syz.4.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 348.506982][ T8106] fuse: Bad value for 'fd' [ 348.608481][ T30] audit: type=1400 audit(2000000173.649:703): avc: denied { write } for pid=8102 comm="syz.4.465" lport=50278 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 349.205532][ T8111] vivid-007: disconnect [ 349.599881][ T5967] wlan0: Trigger new scan to find an IBSS to join [ 349.622943][ T30] audit: type=1400 audit(2000000174.239:704): avc: denied { bind } for pid=8108 comm="syz.0.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 349.659069][ T30] audit: type=1400 audit(2000000174.239:705): avc: denied { ioctl } for pid=8108 comm="syz.0.466" path="socket:[17201]" dev="sockfs" ino=17201 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 349.691697][ T30] audit: type=1400 audit(2000000174.239:706): avc: denied { write } for pid=8108 comm="syz.0.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 349.710999][ T30] audit: type=1400 audit(2000000174.249:707): avc: denied { create } for pid=8108 comm="syz.0.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 349.974061][ T8108] vivid-007: reconnect [ 349.974748][ T8119] hfs: can't find a HFS filesystem on dev nullb0 [ 350.382242][ T30] audit: type=1400 audit(2000000175.329:708): avc: denied { mount } for pid=8116 comm="syz.1.468" name="/" dev="gadgetfs" ino=7775 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 352.006027][ T5940] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 352.194170][ T5940] usb 2-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 352.361083][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.372328][ T5940] usb 2-1: config 0 descriptor?? [ 352.494638][ T30] audit: type=1400 audit(2000000177.509:709): avc: denied { lock } for pid=8139 comm="syz.0.471" path="socket:[17250]" dev="sockfs" ino=17250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 352.589544][ T30] audit: type=1400 audit(2000000177.529:710): avc: denied { ioctl } for pid=8139 comm="syz.0.471" path="socket:[17253]" dev="sockfs" ino=17253 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 352.841565][ T30] audit: type=1400 audit(2000000177.539:711): avc: denied { read } for pid=8139 comm="syz.0.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 352.919935][ T30] audit: type=1400 audit(2000000177.539:712): avc: denied { bind } for pid=8139 comm="syz.0.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 355.448635][ T6069] wlan0: Trigger new scan to find an IBSS to join [ 355.449317][ T5940] usbhid 2-1:0.0: can't add hid device: -71 [ 355.464151][ T5940] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 355.475273][ T5940] usb 2-1: USB disconnect, device number 12 [ 357.492949][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 357.492992][ T30] audit: type=1400 audit(2000000182.519:714): avc: denied { bind } for pid=8165 comm="syz.4.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 357.768211][ T8155] binder: 8146:8155 ioctl 4018620d 0 returned -22 [ 358.166421][ T6060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.676661][ T8179] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 359.466084][ T8184] NILFS (nullb0): couldn't find nilfs on the device [ 360.722582][ T5889] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 360.884970][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 360.922587][ T5889] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 360.952857][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.983830][ T5889] usb 5-1: config 0 descriptor?? [ 360.999398][ T8187] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 362.148761][ T8186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.163492][ T8186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.275371][ T5889] usbhid 5-1:0.0: can't add hid device: -71 [ 362.308722][ T5889] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 362.350517][ T5889] usb 5-1: USB disconnect, device number 5 [ 362.362630][ T5882] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 362.542580][ T5882] usb 4-1: Using ep0 maxpacket: 8 [ 362.638407][ T5882] usb 4-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 362.648574][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 362.658598][ T8219] fuse: Bad value for 'fd' [ 362.672833][ T5882] usb 4-1: Product: syz [ 362.882881][ T30] audit: type=1400 audit(2000000187.799:715): avc: denied { ioctl } for pid=8215 comm="syz.0.487" path="socket:[17609]" dev="sockfs" ino=17609 ioctlcmd=0x48d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 363.104563][ T5882] usb 4-1: Manufacturer: syz [ 363.109201][ T5882] usb 4-1: SerialNumber: syz [ 363.141917][ T5882] usb 4-1: config 0 descriptor?? [ 363.203329][ T8220] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.210589][ T8220] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.223440][ T8220] bond_slave_0: left promiscuous mode [ 363.229074][ T8220] bond_slave_1: left promiscuous mode [ 363.241542][ T8220] batman_adv: batadv0: Interface deactivated: dummy0 [ 363.314771][ T8220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.327870][ T8220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.561783][ T6095] lo speed is unknown, defaulting to 1000 [ 363.573002][ T6095] syz0: Port: 1 Link DOWN [ 363.637602][ T1156] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.692856][ T1156] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.723219][ T1156] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.739564][ T1156] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.125981][ T8225] Mount JFS Failure: -22 [ 364.130385][ T8225] jfs_mount failed w/return code = -22 [ 364.964460][ T5882] usb 4-1: USB disconnect, device number 8 [ 364.999965][ T30] audit: type=1400 audit(2000000190.039:716): avc: denied { read } for pid=8235 comm="syz.3.492" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 365.086340][ T30] audit: type=1400 audit(2000000190.039:717): avc: denied { open } for pid=8235 comm="syz.3.492" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 365.208010][ T30] audit: type=1400 audit(2000000190.229:718): avc: denied { read write } for pid=8235 comm="syz.3.492" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 365.275556][ T6095] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 365.279743][ T8239] input: syz1 as /devices/virtual/input/input5 [ 365.544436][ T30] audit: type=1400 audit(2000000190.229:719): avc: denied { open } for pid=8235 comm="syz.3.492" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 365.670769][ T30] audit: type=1400 audit(2000000190.309:720): avc: denied { ioctl } for pid=8235 comm="syz.3.492" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 365.802633][ T30] audit: type=1400 audit(2000000190.399:721): avc: denied { read } for pid=5171 comm="acpid" name="event4" dev="devtmpfs" ino=2906 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 365.826497][ T30] audit: type=1400 audit(2000000190.399:722): avc: denied { open } for pid=5171 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2906 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 365.843333][ T8245] netlink: 'syz.0.494': attribute type 1 has an invalid length. [ 366.073576][ T8246] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 366.266694][ T6095] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 366.283844][ T30] audit: type=1400 audit(2000000190.399:723): avc: denied { ioctl } for pid=5171 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2906 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 366.284966][ T6095] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 366.320581][ T6095] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 366.327886][ T8245] bond2: entered promiscuous mode [ 366.330775][ T6095] usb 5-1: Product: syz [ 366.340062][ T6095] usb 5-1: Manufacturer: syz [ 366.346290][ T6095] usb 5-1: SerialNumber: syz [ 366.346684][ T8245] 8021q: adding VLAN 0 to HW filter on device bond2 [ 366.368853][ T30] audit: type=1400 audit(2000000190.869:724): avc: denied { write } for pid=8243 comm="syz.0.494" name="mouse0" dev="devtmpfs" ino=979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 366.459183][ T8249] 8021q: adding VLAN 0 to HW filter on device bond2 [ 366.557615][ T8249] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 366.572251][ T6095] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 366.583982][ T8249] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 366.598433][ T8249] bond2: (slave vcan1): making interface the new active one [ 366.606212][ T8249] vcan1: entered promiscuous mode [ 366.639340][ T8249] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 367.340744][ T8259] xt_SECMARK: invalid security context 'unconfined' [ 367.545094][ T8256] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 367.582210][ T8264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.505'. [ 367.620799][ T8256] pvfs2: Unknown parameter './cgroup/syz0' [ 367.926787][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 367.926801][ T30] audit: type=1400 audit(2000000192.969:730): avc: denied { ioctl } for pid=8275 comm="syz.0.497" path="/dev/sg0" dev="devtmpfs" ino=770 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 368.359541][ T8290] hfs: can't find a HFS filesystem on dev nullb0 [ 370.166016][ T5940] usb 5-1: USB disconnect, device number 6 [ 370.174819][ T5940] usblp0: removed [ 371.298902][ T8306] vivid-007: disconnect [ 371.728659][ T8309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.506'. [ 372.224133][ T8301] vivid-007: reconnect [ 372.351765][ T30] audit: type=1400 audit(2000000197.389:731): avc: denied { read } for pid=8311 comm="syz.4.508" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 372.393525][ T30] audit: type=1400 audit(2000000197.419:732): avc: denied { open } for pid=8311 comm="syz.4.508" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 372.764417][ T69] Bluetooth: hci5: Frame reassembly failed (-84) [ 373.677255][ T30] audit: type=1400 audit(2000000198.719:733): avc: denied { bind } for pid=8322 comm="syz.2.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 373.802379][ T30] audit: type=1400 audit(2000000198.839:734): avc: denied { write } for pid=8327 comm="syz.0.502" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 374.158084][ T30] audit: type=1400 audit(2000000199.199:735): avc: denied { read } for pid=5481 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 374.329940][ T30] audit: type=1400 audit(2000000199.209:736): avc: denied { search } for pid=5481 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.365663][ T30] audit: type=1400 audit(2000000199.209:737): avc: denied { search } for pid=5481 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.441914][ T30] audit: type=1400 audit(2000000199.209:738): avc: denied { search } for pid=5481 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.499022][ T30] audit: type=1400 audit(2000000199.209:739): avc: denied { read } for pid=5481 comm="dhcpcd" name="n102" dev="tmpfs" ino=3090 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 374.538238][ T30] audit: type=1400 audit(2000000199.209:740): avc: denied { open } for pid=5481 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=3090 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 374.562596][ T6215] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 374.571882][ T30] audit: type=1400 audit(2000000199.209:741): avc: denied { getattr } for pid=5481 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=3090 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 374.598749][ T30] audit: type=1400 audit(2000000199.609:742): avc: denied { read open } for pid=8341 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.712581][ T5828] Bluetooth: hci5: command 0x1003 tx timeout [ 374.722625][ T5813] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 374.762582][ T6215] usb 1-1: Using ep0 maxpacket: 16 [ 374.801302][ T6215] usb 1-1: config 0 has an invalid interface number: 49 but max is 0 [ 374.811173][ T6215] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.822824][ T6215] usb 1-1: config 0 has no interface number 0 [ 374.829041][ T6215] usb 1-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 374.839536][ T6215] usb 1-1: config 0 interface 49 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 375.795329][ T5813] Bluetooth: hci6: command 0x1003 tx timeout [ 375.804231][ T5827] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 376.399919][ T6215] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 376.420879][ T6215] usb 1-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 376.447461][ T6215] usb 1-1: Product: syz [ 376.459542][ T6215] usb 1-1: Manufacturer: syz [ 376.470538][ T6215] usb 1-1: SerialNumber: syz [ 376.585267][ T6215] usb 1-1: config 0 descriptor?? [ 377.702749][ T6095] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 377.812611][ T5896] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 377.872631][ T6095] usb 4-1: Using ep0 maxpacket: 32 [ 377.894322][ T6095] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.916063][ T6215] usb 1-1: can't set config #0, error -71 [ 377.955713][ T6095] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.968136][ T5896] usb 3-1: device descriptor read/64, error -71 [ 377.982676][ T6095] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 378.000818][ T6215] usb 1-1: USB disconnect, device number 4 [ 378.040094][ T6095] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.065176][ T8379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.516'. [ 378.121328][ T6095] usb 4-1: config 0 descriptor?? [ 378.212661][ T8381] netlink: 28 bytes leftover after parsing attributes in process `syz.1.516'. [ 378.243613][ T6095] hub 4-1:0.0: USB hub found [ 378.266206][ T5896] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 378.315909][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.325322][ T1296] ================================================================== [ 378.333400][ T1296] BUG: KASAN: slab-use-after-free in tty_write_room+0x7d/0x90 [ 378.340862][ T1296] Read of size 8 at addr ffff888056ebf020 by task aoe_tx0/1296 [ 378.348390][ T1296] [ 378.350696][ T1296] CPU: 0 UID: 0 PID: 1296 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 378.350721][ T1296] Tainted: [L]=SOFTLOCKUP [ 378.350727][ T1296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 378.350736][ T1296] Call Trace: [ 378.350741][ T1296] [ 378.350747][ T1296] dump_stack_lvl+0x116/0x1f0 [ 378.350765][ T1296] print_report+0xcd/0x630 [ 378.350783][ T1296] ? __virt_addr_valid+0x81/0x610 [ 378.350796][ T1296] ? __phys_addr+0xe8/0x180 [ 378.350810][ T1296] ? tty_write_room+0x7d/0x90 [ 378.350826][ T1296] kasan_report+0xe0/0x110 [ 378.350844][ T1296] ? tty_write_room+0x7d/0x90 [ 378.350862][ T1296] tty_write_room+0x7d/0x90 [ 378.350879][ T1296] handle_tx+0x14f/0x630 [ 378.350896][ T1296] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 378.350920][ T1296] dev_hard_start_xmit+0x97/0x6e0 [ 378.350940][ T1296] __dev_queue_xmit+0x6d7/0x4650 [ 378.350959][ T1296] ? rcu_is_watching+0x12/0xc0 [ 378.350974][ T1296] ? finish_task_switch.isra.0+0x207/0xbd0 [ 378.350996][ T1296] ? __pfx___dev_queue_xmit+0x10/0x10 [ 378.351015][ T1296] ? __lock_acquire+0x436/0x2890 [ 378.351032][ T1296] ? ref_tracker_free+0x37c/0x830 [ 378.351051][ T1296] ? do_raw_spin_lock+0x12c/0x2b0 [ 378.351070][ T1296] ? find_held_lock+0x2b/0x80 [ 378.351089][ T1296] ? skb_dequeue+0x126/0x180 [ 378.351104][ T1296] ? find_held_lock+0x2b/0x80 [ 378.351124][ T1296] ? rcu_is_watching+0x12/0xc0 [ 378.351138][ T1296] tx+0xcc/0x190 [ 378.351153][ T1296] ? __pfx_tx+0x10/0x10 [ 378.351165][ T1296] kthread+0x1e4/0x3e0 [ 378.351185][ T1296] ? find_held_lock+0x2b/0x80 [ 378.351204][ T1296] ? __pfx_kthread+0x10/0x10 [ 378.351224][ T1296] ? __pfx_default_wake_function+0x10/0x10 [ 378.351244][ T1296] ? lockdep_hardirqs_on+0x7c/0x110 [ 378.351259][ T1296] ? __kthread_parkme+0x19e/0x250 [ 378.351273][ T1296] ? __pfx_kthread+0x10/0x10 [ 378.351292][ T1296] kthread+0x3c5/0x780 [ 378.351308][ T1296] ? __pfx_kthread+0x10/0x10 [ 378.351324][ T1296] ? rcu_is_watching+0x12/0xc0 [ 378.351337][ T1296] ? __pfx_kthread+0x10/0x10 [ 378.351353][ T1296] ret_from_fork+0x983/0xb10 [ 378.351368][ T1296] ? __pfx_ret_from_fork+0x10/0x10 [ 378.351384][ T1296] ? __switch_to+0x7af/0x10d0 [ 378.351402][ T1296] ? __pfx_kthread+0x10/0x10 [ 378.351417][ T1296] ret_from_fork_asm+0x1a/0x30 [ 378.351444][ T1296] [ 378.351448][ T1296] [ 378.576113][ T1296] Allocated by task 8330: [ 378.580414][ T1296] kasan_save_stack+0x33/0x60 [ 378.585073][ T1296] kasan_save_track+0x14/0x30 [ 378.589732][ T1296] __kasan_kmalloc+0xaa/0xb0 [ 378.594304][ T1296] alloc_tty_struct+0x96/0x8c0 [ 378.599042][ T1296] tty_init_dev.part.0+0x1e/0x500 [ 378.604055][ T1296] tty_open+0xa4f/0xf90 [ 378.608186][ T1296] chrdev_open+0x234/0x6a0 [ 378.612589][ T1296] do_dentry_open+0x748/0x1590 [ 378.617331][ T1296] vfs_open+0x82/0x3f0 [ 378.621380][ T1296] path_openat+0x2078/0x3140 [ 378.625947][ T1296] do_filp_open+0x20b/0x470 [ 378.630428][ T1296] do_sys_openat2+0x11f/0x280 [ 378.635082][ T1296] __x64_sys_openat+0x174/0x210 [ 378.639906][ T1296] do_syscall_64+0xcd/0xf80 [ 378.644389][ T1296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.650257][ T1296] [ 378.652564][ T1296] Freed by task 975: [ 378.656427][ T1296] kasan_save_stack+0x33/0x60 [ 378.661081][ T1296] kasan_save_track+0x14/0x30 [ 378.665756][ T1296] kasan_save_free_info+0x3b/0x60 [ 378.670765][ T1296] __kasan_slab_free+0x5f/0x80 [ 378.675515][ T1296] kfree+0x2f8/0x6e0 [ 378.679391][ T1296] process_one_work+0x9ba/0x1b20 [ 378.684309][ T1296] worker_thread+0x6c8/0xf10 [ 378.688876][ T1296] kthread+0x3c5/0x780 [ 378.692923][ T1296] ret_from_fork+0x983/0xb10 [ 378.697487][ T1296] ret_from_fork_asm+0x1a/0x30 [ 378.702229][ T1296] [ 378.704523][ T1296] Last potentially related work creation: [ 378.710210][ T1296] kasan_save_stack+0x33/0x60 [ 378.714864][ T1296] kasan_record_aux_stack+0xa7/0xc0 [ 378.720041][ T1296] insert_work+0x36/0x230 [ 378.724353][ T1296] __queue_work+0x94f/0x10e0 [ 378.728927][ T1296] queue_work_on+0x1a4/0x1f0 [ 378.733499][ T1296] release_tty+0x4de/0x5d0 [ 378.737906][ T1296] tty_release_struct+0xb7/0xe0 [ 378.742743][ T1296] tty_release+0xe2d/0x1470 [ 378.747240][ T1296] __fput+0x402/0xb70 [ 378.751203][ T1296] task_work_run+0x150/0x240 [ 378.755771][ T1296] do_exit+0x87f/0x2bd0 [ 378.759904][ T1296] do_group_exit+0xd3/0x2a0 [ 378.764406][ T1296] get_signal+0x2671/0x26d0 [ 378.768889][ T1296] arch_do_signal_or_restart+0x8f/0x7e0 [ 378.774417][ T1296] exit_to_user_mode_loop+0x8c/0x540 [ 378.779686][ T1296] do_syscall_64+0x4ee/0xf80 [ 378.784254][ T1296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.790123][ T1296] [ 378.792421][ T1296] The buggy address belongs to the object at ffff888056ebf000 [ 378.792421][ T1296] which belongs to the cache kmalloc-cg-2k of size 2048 [ 378.806704][ T1296] The buggy address is located 32 bytes inside of [ 378.806704][ T1296] freed 2048-byte region [ffff888056ebf000, ffff888056ebf800) [ 378.820481][ T1296] [ 378.822780][ T1296] The buggy address belongs to the physical page: [ 378.829172][ T1296] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x56eb8 [ 378.837906][ T1296] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 378.846374][ T1296] memcg:ffff8880349acc81 [ 378.850587][ T1296] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 378.858114][ T1296] page_type: f5(slab) [ 378.862080][ T1296] raw: 00fff00000000040 ffff88813ff303c0 dead000000000100 dead000000000122 [ 378.870650][ T1296] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff8880349acc81 [ 378.879224][ T1296] head: 00fff00000000040 ffff88813ff303c0 dead000000000100 dead000000000122 [ 378.887875][ T1296] head: 0000000000000000 0000000000080008 00000000f5000000 ffff8880349acc81 [ 378.896529][ T1296] head: 00fff00000000003 ffffea00015bae01 00000000ffffffff 00000000ffffffff [ 378.905186][ T1296] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 378.913836][ T1296] page dumped because: kasan: bad access detected [ 378.920237][ T1296] page_owner tracks the page as allocated [ 378.925930][ T1296] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5821, tgid 5821 (syz-executor), ts 74579329158, free_ts 18005349002 [ 378.947267][ T1296] post_alloc_hook+0x1af/0x220 [ 378.952026][ T1296] get_page_from_freelist+0xd0b/0x31a0 [ 378.957462][ T1296] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 378.963337][ T1296] alloc_pages_mpol+0x1fb/0x550 [ 378.968171][ T1296] new_slab+0x2c3/0x430 [ 378.972318][ T1296] ___slab_alloc+0xe18/0x1c90 [ 378.977001][ T1296] __slab_alloc.constprop.0+0x63/0x110 [ 378.982465][ T1296] __kmalloc_node_track_caller_noprof+0x4d6/0x930 [ 378.988875][ T1296] kmemdup_noprof+0x29/0x60 [ 378.993361][ T1296] neigh_sysctl_register+0xb2/0x670 [ 378.998554][ T1296] devinet_sysctl_register+0xb6/0x200 [ 379.003916][ T1296] inetdev_init+0x2b8/0x580 [ 379.008410][ T1296] inetdev_event+0xc32/0x1870 [ 379.013067][ T1296] notifier_call_chain+0xbc/0x3e0 [ 379.018084][ T1296] call_netdevice_notifiers_info+0xbe/0x110 [ 379.024218][ T1296] register_netdevice+0x1792/0x21d0 [ 379.029396][ T1296] page last free pid 1 tgid 1 stack trace: [ 379.035173][ T1296] __free_frozen_pages+0x7df/0x1170 [ 379.040364][ T1296] free_contig_range+0x183/0x4a0 [ 379.045285][ T1296] destroy_args+0xb95/0x14e0 [ 379.049849][ T1296] debug_vm_pgtable+0x2220/0x38d0 [ 379.054864][ T1296] do_one_initcall+0x123/0x680 [ 379.059612][ T1296] kernel_init_freeable+0x5c8/0x920 [ 379.064829][ T1296] kernel_init+0x1c/0x2b0 [ 379.069142][ T1296] ret_from_fork+0x983/0xb10 [ 379.073709][ T1296] ret_from_fork_asm+0x1a/0x30 [ 379.078460][ T1296] [ 379.080767][ T1296] Memory state around the buggy address: [ 379.086370][ T1296] ffff888056ebef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 379.094410][ T1296] ffff888056ebef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 379.102448][ T1296] >ffff888056ebf000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 379.110498][ T1296] ^ [ 379.115587][ T1296] ffff888056ebf080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 379.123627][ T1296] ffff888056ebf100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 379.131661][ T1296] ================================================================== [ 379.139745][ T1296] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 379.146929][ T1296] CPU: 0 UID: 0 PID: 1296 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 379.157514][ T1296] Tainted: [L]=SOFTLOCKUP [ 379.161820][ T1296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 379.171860][ T1296] Call Trace: [ 379.175119][ T1296] [ 379.178029][ T1296] dump_stack_lvl+0x3d/0x1f0 [ 379.182605][ T1296] vpanic+0x640/0x6f0 [ 379.186568][ T1296] panic+0xca/0xd0 [ 379.190270][ T1296] ? __pfx_panic+0x10/0x10 [ 379.194670][ T1296] ? check_panic_on_warn+0x1f/0xb0 [ 379.199764][ T1296] check_panic_on_warn+0xab/0xb0 [ 379.204685][ T1296] end_report+0x107/0x160 [ 379.209000][ T1296] kasan_report+0xee/0x110 [ 379.213400][ T1296] ? tty_write_room+0x7d/0x90 [ 379.218063][ T1296] tty_write_room+0x7d/0x90 [ 379.222564][ T1296] handle_tx+0x14f/0x630 [ 379.226811][ T1296] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 379.232620][ T1296] dev_hard_start_xmit+0x97/0x6e0 [ 379.237656][ T1296] __dev_queue_xmit+0x6d7/0x4650 [ 379.242589][ T1296] ? rcu_is_watching+0x12/0xc0 [ 379.247341][ T1296] ? finish_task_switch.isra.0+0x207/0xbd0 [ 379.253137][ T1296] ? __pfx___dev_queue_xmit+0x10/0x10 [ 379.258522][ T1296] ? __lock_acquire+0x436/0x2890 [ 379.263443][ T1296] ? ref_tracker_free+0x37c/0x830 [ 379.268462][ T1296] ? do_raw_spin_lock+0x12c/0x2b0 [ 379.273471][ T1296] ? find_held_lock+0x2b/0x80 [ 379.278141][ T1296] ? skb_dequeue+0x126/0x180 [ 379.282723][ T1296] ? find_held_lock+0x2b/0x80 [ 379.287393][ T1296] ? rcu_is_watching+0x12/0xc0 [ 379.292137][ T1296] tx+0xcc/0x190 [ 379.295666][ T1296] ? __pfx_tx+0x10/0x10 [ 379.299806][ T1296] kthread+0x1e4/0x3e0 [ 379.303874][ T1296] ? find_held_lock+0x2b/0x80 [ 379.308707][ T1296] ? __pfx_kthread+0x10/0x10 [ 379.313296][ T1296] ? __pfx_default_wake_function+0x10/0x10 [ 379.319095][ T1296] ? lockdep_hardirqs_on+0x7c/0x110 [ 379.324284][ T1296] ? __kthread_parkme+0x19e/0x250 [ 379.329288][ T1296] ? __pfx_kthread+0x10/0x10 [ 379.333866][ T1296] kthread+0x3c5/0x780 [ 379.337929][ T1296] ? __pfx_kthread+0x10/0x10 [ 379.342526][ T1296] ? rcu_is_watching+0x12/0xc0 [ 379.347270][ T1296] ? __pfx_kthread+0x10/0x10 [ 379.351840][ T1296] ret_from_fork+0x983/0xb10 [ 379.356413][ T1296] ? __pfx_ret_from_fork+0x10/0x10 [ 379.361514][ T1296] ? __switch_to+0x7af/0x10d0 [ 379.366176][ T1296] ? __pfx_kthread+0x10/0x10 [ 379.370755][ T1296] ret_from_fork_asm+0x1a/0x30 [ 379.375516][ T1296] [ 379.378853][ T1296] Kernel Offset: disabled [ 379.383186][ T1296] Rebooting in 86400 seconds..