last executing test programs: 13.587104504s ago: executing program 4 (id=952): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x7}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@newtfilter={0x7c, 0x2c, 0xd3f, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x1, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x48, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x44, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x5c}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x9c}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) symlinkat(&(0x7f0000001040)='./cgroup\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00') write$binfmt_script(0xffffffffffffffff, &(0x7f0000000a40)={'#! ', './file0'}, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x2}}, 0x26) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x1, 0x400, 0x0, {0xa, 0x0, 0xe38, @private0}}}, 0x32) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) 12.633160241s ago: executing program 4 (id=956): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) recvmmsg$unix(r1, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x34000, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) r4 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r4) r5 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r5, &(0x7f0000000180), 0x0) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r6) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340), &(0x7f0000000380), 0x0) 11.242314212s ago: executing program 3 (id=958): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x220000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x281, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000a00)=[0x0]) r3 = memfd_create(&(0x7f0000000b80)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcf\xdf\xe3b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9vm)\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\xff\xff\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xc8\x1b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-\x1e\xf4\xd1\x02Dt\xc0\x1c\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x03\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) setsockopt$ax25_int(r2, 0x101, 0xf, &(0x7f0000000700)=0xcf7, 0x4) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f0000000240), 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 9.573360326s ago: executing program 1 (id=963): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) recvmmsg$unix(r1, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1020}], 0x1}}], 0x8, 0x34000, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x10, 0x3, 0x0) r3 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r3) r4 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r4, &(0x7f0000000180), 0x0) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r5) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340), &(0x7f0000000380), 0x0) 9.074424869s ago: executing program 0 (id=964): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x80, &(0x7f0000000080)={[{@quota}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x38]}}]}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r4, &(0x7f0000003480)={0x2020}, 0x2020) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="3b000000010006", 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xf}, {0xa, 0xa}, {0x6}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x8, 0x4, 0x0, 0x7}, 0xf0, 0x1, 0x31a, 0x3, 0xa8a, 0xd, 0x8e, 0x1f, 0x3, 0xff, {0x4415, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r9 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x8000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x1c4fb}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r10, 0x0, 0x10000, 0x0, 0x18, 0x3b05ff}) 9.013873813s ago: executing program 3 (id=965): r0 = syz_io_uring_setup(0x2b06, 0x0, 0x0, &(0x7f0000ffe000)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r1, r1, 0x0, 0x40008) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x8002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r4 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)={0x20, 0x1, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008c}, 0x4004000) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x2) ioctl$TIOCVHANGUP(r7, 0x5437, 0x2) r8 = accept4(r4, 0x0, 0x0, 0x80800) socket$inet6_sctp(0xa, 0x801, 0x84) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0xfff3}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000200)={0x17, 0x20, 0x13, 0x1b, 0xb, 0x46, 0x4, 0xf5, 0x1}) syz_open_dev$sndmidi(&(0x7f0000000140), 0x8000000000000000, 0x80) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000380)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xffffffffffffffff, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x90) io_uring_register$IORING_REGISTER_FILES(r0, 0x14, &(0x7f00000003c0), 0x2) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9}}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x7f, 0xff}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x5}}}}}]}}]}}, 0x0) 8.512678876s ago: executing program 0 (id=966): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x220000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) io_submit(0x0, 0x1, &(0x7f0000000a00)=[0x0]) r2 = memfd_create(&(0x7f0000000b80)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcf\xdf\xe3b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9vm)\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\xff\xff\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xc8\x1b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-\x1e\xf4\xd1\x02Dt\xc0\x1c\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x03\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x38}}, 0x44080) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f00000001c0), 0x80, &(0x7f0000000080)={[{@quota}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x38]}}]}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r4, &(0x7f0000003480)={0x2020}, 0x2020) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="3b000000010006", 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xf}, {0xa, 0xa}, {0x6}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x8, 0x4, 0x0, 0x7}, 0xf0, 0x1, 0x31a, 0x3, 0xa8a, 0xd, 0x8e, 0x1f, 0x3, 0xff, {0x4415, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r9 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x8000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x1c4fb}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r10, 0x0, 0x10000, 0x0, 0x18, 0x3b05ff}) 6.908001891s ago: executing program 2 (id=968): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x220000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x281, &(0x7f0000000100)=0x0) memfd_create(&(0x7f0000002bc0)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\x99K\xcd\xab\x1a\x034btY\xdb\v\x86\xca<\x02R\xd6a\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7\x80\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8\x88\'\x06f\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51\tz\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\x97\xad\xef~\x15\xfd\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\\L\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf1\xad&\x86\xcb\xf3\xad\x9e[\x8b\xc0\xd6\x1e\xe4N\x92\xf2\x905\xe0\x13\x90\xaeQ\xed\xea\xad\x9b\xcc\x9f\xc0P\xff_\xaa\xb2L\xf5\x1f\xc1\xa4[\xe51\xcb B*\xaa\a\x003\xc9\xae\x1f\x8c\xcdm\xb8\xce\x01\xdb\xaa\x1c\xc35\x16#\x04\xb7W4\xfd\'\xbe\x922\xde\xd6\x18\xf7`\xff\xfe%\x06\x02\xc6\x81Jr\x10\x88G\xea+^LA\x96\xed\x1d\xe1V\xbd\xebbyq\xd6\xb3', 0x7) io_submit(r1, 0x1, &(0x7f0000000a00)=[0x0]) syz_open_procfs(0x0, &(0x7f0000000940)='net/snmp\x00') r2 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r3 = memfd_create(&(0x7f0000000b80)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcf\xdf\xe3b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9vm)\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\xff\xff\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xc8\x1b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-\x1e\xf4\xd1\x02Dt\xc0\x1c\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x03\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x141842, 0x1c2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) copy_file_range(r2, 0x0, r4, 0x0, 0xffffffffa003e45c, 0x700000000000000) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020}, 0x2020) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) recvmmsg(r3, &(0x7f000000e280), 0x58a, 0x42, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="180000002d00090026bd700000000000040000000400"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) 6.8253932s ago: executing program 4 (id=970): r0 = syz_io_uring_setup(0x2b06, 0x0, 0x0, &(0x7f0000ffe000)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r1, r1, 0x0, 0x40008) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x8002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r4 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)={0x20, 0x1, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008c}, 0x4004000) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x2) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) r8 = accept4(r4, 0x0, 0x0, 0x80800) socket$inet6_sctp(0xa, 0x801, 0x84) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0xfff3}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000200)={0x17, 0x20, 0x13, 0x1b, 0xb, 0x46, 0x4, 0xf5, 0x1}) syz_open_dev$sndmidi(&(0x7f0000000140), 0x8000000000000000, 0x80) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000380)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xffffffffffffffff, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x90) io_uring_register$IORING_REGISTER_FILES(r0, 0x14, &(0x7f00000003c0), 0x2) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9}}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x7f, 0xff}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x5}}}}}]}}]}}, 0x0) 5.400698325s ago: executing program 2 (id=971): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$vim2m(&(0x7f0000000040), 0x5, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}]}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x10, @mcast1}}, {{0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x108) read(0xffffffffffffffff, &(0x7f0000000040)=""/148, 0xffffff96) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x98) socket$kcm(0x10, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0}) ioctl$IOMMU_DESTROY$stdev(r3, 0x3b80, &(0x7f0000000080)={0x8, r5}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000300)=0x4f) syz_open_dev$midi(&(0x7f0000000040), 0x2, 0x0) 5.354207171s ago: executing program 3 (id=972): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x7}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@newtfilter={0x7c, 0x2c, 0xd3f, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x1, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x48, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x44, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x5c}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x9c}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) symlinkat(&(0x7f0000001040)='./cgroup\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00') write$binfmt_script(0xffffffffffffffff, &(0x7f0000000a40)={'#! ', './file0'}, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x2}}, 0x26) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x1, 0x400, 0x0, {0xa, 0x0, 0xe38, @private0}}}, 0x32) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) 4.041497397s ago: executing program 1 (id=973): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x220000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x281, &(0x7f0000000100)=0x0) memfd_create(&(0x7f0000002bc0)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\x99K\xcd\xab\x1a\x034btY\xdb\v\x86\xca<\x02R\xd6a\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7\x80\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8\x88\'\x06f\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51\tz\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\x97\xad\xef~\x15\xfd\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\\L\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf1\xad&\x86\xcb\xf3\xad\x9e[\x8b\xc0\xd6\x1e\xe4N\x92\xf2\x905\xe0\x13\x90\xaeQ\xed\xea\xad\x9b\xcc\x9f\xc0P\xff_\xaa\xb2L\xf5\x1f\xc1\xa4[\xe51\xcb B*\xaa\a\x003\xc9\xae\x1f\x8c\xcdm\xb8\xce\x01\xdb\xaa\x1c\xc35\x16#\x04\xb7W4\xfd\'\xbe\x922\xde\xd6\x18\xf7`\xff\xfe%\x06\x02\xc6\x81Jr\x10\x88G\xea+^LA\x96\xed\x1d\xe1V\xbd\xebbyq\xd6\xb3', 0x7) io_submit(r2, 0x1, &(0x7f0000000a00)=[0x0]) r3 = syz_open_procfs(0x0, &(0x7f0000000940)='net/snmp\x00') r4 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r5 = memfd_create(&(0x7f0000000b80)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcf\xdf\xe3b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9vm)\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\xff\xff\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xc8\x1b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-\x1e\xf4\xd1\x02Dt\xc0\x1c\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x03\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, 0x0) io_uring_enter(r4, 0x207a98, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_create_ruleset(0x0, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000001fc0), 0xa0000, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "9f60"}]}], {0x14}}, 0x94}}, 0x0) 3.095606746s ago: executing program 4 (id=975): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) syz_open_dev$video4linux(&(0x7f0000000180), 0xf3, 0x42) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 2.369577848s ago: executing program 1 (id=976): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x38}}, 0x44080) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x80, &(0x7f0000000080)={[{@quota}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x38]}}]}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r4, &(0x7f0000003480)={0x2020}, 0x2020) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="3b000000010006", 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xf}, {0xa, 0xa}, {0x6}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x8, 0x4, 0x0, 0x7}, 0xf0, 0x1, 0x31a, 0x3, 0xa8a, 0xd, 0x8e, 0x1f, 0x3, 0xff, {0x4415, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r9 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x8000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x1c4fb}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r10, 0x0, 0x10000, 0x0, 0x18, 0x3b05ff}) 2.278877403s ago: executing program 3 (id=977): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000280)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x66, 0x10, 0x4, 0x0, 0x100, 0xb, "1dcbc397720fb990fb734b0f604bc2e375621b86487afead7152af27200a989482712aaa466f8cbe9cbd0f1dc8068aa738b46c8ef5cfef737ebb561a449e0553ff3f01dad65b95e86b82be3e55110624f48e1d20544574515bfffe12065b4c185cc6513917ae"}}, 0x17e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r4, &(0x7f0000000080)='./file0\x00') syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 2.077822625s ago: executing program 0 (id=978): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) recvmmsg$unix(r1, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x34000, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) r4 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r4) r5 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r5, &(0x7f0000000180), 0x0) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r6) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340), &(0x7f0000000380), 0x0) 2.014979462s ago: executing program 3 (id=979): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000081}, 0x40048094) r1 = socket$netlink(0x10, 0x3, 0x15) writev(r1, 0x0, 0x0) prlimit64(0x0, 0x8, &(0x7f00000002c0)={0x2, 0x800000088}, 0x0) sched_setscheduler(0x0, 0x5, 0x0) r2 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x22, &(0x7f0000000000), 0x6b) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10010, 0xffffffffffffffff, 0xb3d68000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x2) openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {0x0}], 0x2, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}], 0x1, 0x40012042, 0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 2.00444578s ago: executing program 2 (id=980): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x220000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) io_submit(0x0, 0x1, &(0x7f0000000a00)=[0x0]) r2 = memfd_create(&(0x7f0000000b80)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcf\xdf\xe3b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9vm)\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\xff\xff\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xc8\x1b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-\x1e\xf4\xd1\x02Dt\xc0\x1c\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x03\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) setsockopt$ax25_int(r2, 0x101, 0xf, &(0x7f0000000700)=0xcf7, 0x4) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f0000000240), 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 947.251418ms ago: executing program 1 (id=982): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000081}, 0x40048094) r1 = socket$netlink(0x10, 0x3, 0x15) writev(r1, &(0x7f0000000100), 0x0) prlimit64(0x0, 0x8, &(0x7f00000002c0)={0x2, 0x800000088}, 0x0) sched_setscheduler(0x0, 0x5, 0x0) r2 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x22, &(0x7f0000000000), 0x6b) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10010, 0xffffffffffffffff, 0xb3d68000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x2) openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {0x0}], 0x2, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}], 0x1, 0x40012042, 0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 904.523485ms ago: executing program 2 (id=983): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x220000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x281, &(0x7f0000000100)=0x0) memfd_create(&(0x7f0000002bc0)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\x99K\xcd\xab\x1a\x034btY\xdb\v\x86\xca<\x02R\xd6a\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7\x80\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8\x88\'\x06f\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51\tz\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\x97\xad\xef~\x15\xfd\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\\L\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf1\xad&\x86\xcb\xf3\xad\x9e[\x8b\xc0\xd6\x1e\xe4N\x92\xf2\x905\xe0\x13\x90\xaeQ\xed\xea\xad\x9b\xcc\x9f\xc0P\xff_\xaa\xb2L\xf5\x1f\xc1\xa4[\xe51\xcb B*\xaa\a\x003\xc9\xae\x1f\x8c\xcdm\xb8\xce\x01\xdb\xaa\x1c\xc35\x16#\x04\xb7W4\xfd\'\xbe\x922\xde\xd6\x18\xf7`\xff\xfe%\x06\x02\xc6\x81Jr\x10\x88G\xea+^LA\x96\xed\x1d\xe1V\xbd\xebbyq\xd6\xb3', 0x7) io_submit(r2, 0x1, &(0x7f0000000a00)=[0x0]) r3 = syz_open_procfs(0x0, &(0x7f0000000940)='net/snmp\x00') r4 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r5 = memfd_create(&(0x7f0000000b80)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcf\xdf\xe3b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9vm)\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\xff\xff\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xc8\x1b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-\x1e\xf4\xd1\x02Dt\xc0\x1c\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x03\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0}) ioctl$IOMMU_DESTROY$stdev(r3, 0x3b80, &(0x7f0000000080)={0x8, r5}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000300)=0x4f) syz_open_dev$midi(&(0x7f0000000040), 0x2, 0x0) 64.546376ms ago: executing program 1 (id=985): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x70ca, &(0x7f0000001380)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100), &(0x7f00000007c0)) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioprio_set$uid(0x0, 0x0, 0x4004) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000140)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x10000008) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r8, 0x0, 0x6, 0x0) 0s ago: executing program 4 (id=986): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1, 0x0, 0xfffffffffffffffc}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xa20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = openat$kvm(0x0, 0x0, 0x2382, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x50424752, 0x0, 0xd, [{}, {}, {}, {0xf, 0xd}, {}, {0x0, 0xfffffffe}, {0x7}], 0x0, 0x0, 0x0, 0x0, 0x6}}) syz_open_dev$rtc(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, r0, &(0x7f0000000340)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfsd\x00', 0x10, 0x0) chroot(&(0x7f0000000180)='./file0\x00') umount2(&(0x7f00000001c0)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): ing later): interface not active [ 71.000266][ T5832] hsr_slave_0: entered promiscuous mode [ 71.006687][ T5832] hsr_slave_1: entered promiscuous mode [ 71.012981][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.020531][ T5832] Cannot create hsr debugfs directory [ 71.030435][ T5831] hsr_slave_0: entered promiscuous mode [ 71.039197][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.043646][ T5831] hsr_slave_1: entered promiscuous mode [ 71.045600][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.053585][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.065185][ T5831] Cannot create hsr debugfs directory [ 71.179268][ T5833] hsr_slave_0: entered promiscuous mode [ 71.186023][ T5833] hsr_slave_1: entered promiscuous mode [ 71.192776][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.200353][ T5833] Cannot create hsr debugfs directory [ 71.403868][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.425894][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.439460][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.457828][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.518389][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.530713][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.546241][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.570878][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.639622][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.662733][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.684459][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.709932][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.734333][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.741120][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.792865][ T990] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.800076][ T990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.810588][ T990] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.817712][ T990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.829543][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.855775][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.869869][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.896686][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.916123][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.935961][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.964073][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.971207][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.980681][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.987915][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.010950][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.064997][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.109030][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 72.109045][ T30] audit: type=1400 audit(1752968789.635:86): avc: denied { sys_module } for pid=5825 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 72.186746][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.207131][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.238934][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.263084][ T990] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.270221][ T990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.281249][ T990] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.288424][ T990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.298995][ T990] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.306229][ T990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.334189][ T990] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.341351][ T990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.356655][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.415682][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.440833][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.465029][ T990] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.472222][ T990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.515235][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.522384][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.573570][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.647756][ T5825] veth0_vlan: entered promiscuous mode [ 72.651897][ T51] Bluetooth: hci0: command tx timeout [ 72.732666][ T5825] veth1_vlan: entered promiscuous mode [ 72.739105][ T5829] veth0_vlan: entered promiscuous mode [ 72.767968][ T5829] veth1_vlan: entered promiscuous mode [ 72.860798][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.873025][ T51] Bluetooth: hci1: command tx timeout [ 72.873777][ T5153] Bluetooth: hci4: command tx timeout [ 72.888869][ T5829] veth0_macvtap: entered promiscuous mode [ 72.900912][ T5825] veth0_macvtap: entered promiscuous mode [ 72.918376][ T5829] veth1_macvtap: entered promiscuous mode [ 72.938187][ T5825] veth1_macvtap: entered promiscuous mode [ 72.951864][ T5153] Bluetooth: hci3: command tx timeout [ 72.956329][ T51] Bluetooth: hci2: command tx timeout [ 72.979426][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.996941][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.025129][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.040032][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.055450][ T5829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.064788][ T5829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.074533][ T5829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.083432][ T5829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.096853][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.108180][ T5825] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.117440][ T5825] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.126411][ T5825] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.135810][ T5825] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.208549][ T5832] veth0_vlan: entered promiscuous mode [ 73.246709][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.280468][ T5832] veth1_vlan: entered promiscuous mode [ 73.302481][ T5831] veth0_vlan: entered promiscuous mode [ 73.333474][ T4438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.341431][ T4438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.360662][ T5831] veth1_vlan: entered promiscuous mode [ 73.427115][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.434411][ T5832] veth0_macvtap: entered promiscuous mode [ 73.448726][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.479514][ T5832] veth1_macvtap: entered promiscuous mode [ 73.525262][ T5831] veth0_macvtap: entered promiscuous mode [ 73.534672][ T5831] veth1_macvtap: entered promiscuous mode [ 73.544692][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.553944][ T4438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.563479][ T4438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.594381][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.622595][ T4438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.630599][ T4438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.641335][ T30] audit: type=1400 audit(1752968791.155:87): avc: denied { mounton } for pid=5825 comm="syz-executor" path="/root/syzkaller.PjKdsJ/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 73.644199][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.674687][ T30] audit: type=1400 audit(1752968791.155:88): avc: denied { mount } for pid=5825 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 73.679040][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.708306][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.717770][ T30] audit: type=1400 audit(1752968791.155:89): avc: denied { mounton } for pid=5825 comm="syz-executor" path="/root/syzkaller.PjKdsJ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 73.719906][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.745509][ T30] audit: type=1400 audit(1752968791.155:90): avc: denied { mount } for pid=5825 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 73.784177][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.804511][ T30] audit: type=1400 audit(1752968791.155:91): avc: denied { mounton } for pid=5825 comm="syz-executor" path="/root/syzkaller.PjKdsJ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 73.834088][ T30] audit: type=1400 audit(1752968791.155:92): avc: denied { mounton } for pid=5825 comm="syz-executor" path="/root/syzkaller.PjKdsJ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 73.840462][ T5833] veth0_vlan: entered promiscuous mode [ 73.868876][ T30] audit: type=1400 audit(1752968791.165:93): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 73.876196][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.896598][ T30] audit: type=1400 audit(1752968791.235:94): avc: denied { mounton } for pid=5825 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 73.924495][ T30] audit: type=1400 audit(1752968791.235:95): avc: denied { mount } for pid=5825 comm="syz-executor" name="/" dev="gadgetfs" ino=6906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 73.927172][ T5833] veth1_vlan: entered promiscuous mode [ 73.984055][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.010742][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.023163][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.036391][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.051003][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.141933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.150515][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.159296][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.221880][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 74.249031][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.323039][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.644561][ T5833] veth0_macvtap: entered promiscuous mode [ 74.660908][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.673183][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.686182][ T5948] process 'syz.3.4' launched '@' with NULL argv: empty string added [ 74.708464][ T5833] veth1_macvtap: entered promiscuous mode [ 74.711815][ T51] Bluetooth: hci0: command tx timeout [ 74.772232][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.827012][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.856819][ T5833] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.870325][ T5833] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.881444][ T5833] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.890753][ T5833] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.953091][ T51] Bluetooth: hci1: command tx timeout [ 74.953122][ T5153] Bluetooth: hci4: command tx timeout [ 74.993085][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.000985][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.024313][ T5958] Zero length message leads to an empty skb [ 75.031804][ T5153] Bluetooth: hci2: command tx timeout [ 75.042139][ T5153] Bluetooth: hci3: command tx timeout [ 75.450825][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.553272][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.562065][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 75.670010][ T10] hid-generic 0010:0004:0000.0001: collection stack underflow [ 75.705206][ T10] hid-generic 0010:0004:0000.0001: item 0 4 0 12 parsing failed [ 75.721434][ T10] hid-generic 0010:0004:0000.0001: probe with driver hid-generic failed with error -22 [ 75.963961][ T990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.140920][ T10] hid-generic 0010:0004:0000.0002: collection stack underflow [ 76.198035][ T990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.445639][ T10] hid-generic 0010:0004:0000.0002: item 0 4 0 12 parsing failed [ 76.461658][ T10] hid-generic 0010:0004:0000.0002: probe with driver hid-generic failed with error -22 [ 76.472017][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.744861][ T5970] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 76.781597][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 76.782131][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 76.832242][ T5153] Bluetooth: hci0: command tx timeout [ 77.031856][ T51] Bluetooth: hci4: command tx timeout [ 77.037338][ T5153] Bluetooth: hci1: command tx timeout [ 77.052192][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.112013][ T51] Bluetooth: hci2: command tx timeout [ 77.114440][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.117452][ T5153] Bluetooth: hci3: command tx timeout [ 77.273693][ T5975] mmap: syz.3.8 (5975) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 77.302253][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 77.302272][ T30] audit: type=1400 audit(1752968794.815:120): avc: denied { create } for pid=5971 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 77.390870][ T30] audit: type=1400 audit(1752968794.825:121): avc: denied { setopt } for pid=5971 comm="syz.3.8" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 77.611712][ T30] audit: type=1400 audit(1752968794.875:122): avc: denied { read } for pid=5971 comm="syz.3.8" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 77.688902][ T5982] trusted_key: encrypted_key: master key parameter '00N00' is invalid [ 77.906068][ T5975] pim6reg: entered allmulticast mode [ 78.332067][ T30] audit: type=1400 audit(1752968795.855:123): avc: denied { write } for pid=5984 comm="syz.2.10" name="snmp" dev="proc" ino=4026533280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 78.344431][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.601611][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.985412][ T30] audit: type=1400 audit(1752968796.515:124): avc: denied { read write } for pid=5988 comm="syz.0.11" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 80.151154][ T30] audit: type=1400 audit(1752968796.515:125): avc: denied { open } for pid=5988 comm="syz.0.11" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 80.629118][ T30] audit: type=1400 audit(1752968796.765:126): avc: denied { name_bind } for pid=5988 comm="syz.0.11" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 80.655521][ T30] audit: type=1400 audit(1752968796.775:127): avc: denied { node_bind } for pid=5988 comm="syz.0.11" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 80.689162][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'. [ 80.793661][ T30] audit: type=1400 audit(1752968797.425:128): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 81.001788][ T30] audit: type=1400 audit(1752968798.395:129): avc: denied { create } for pid=6003 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 81.286166][ T881] cfg80211: failed to load regulatory.db [ 81.356485][ T6007] capability: warning: `syz.0.13' uses deprecated v2 capabilities in a way that may be insecure [ 82.161310][ T6018] kvm: pic: level sensitive irq not supported [ 82.162552][ T6018] kvm: pic: non byte read [ 82.173232][ T6018] kvm: pic: non byte read [ 82.177575][ T6018] kvm: pic: non byte read [ 82.181983][ T6018] kvm: pic: non byte read [ 82.186318][ T6018] kvm: pic: non byte read [ 82.190645][ T6018] kvm: pic: non byte read [ 82.195092][ T6018] kvm: pic: non byte read [ 82.199443][ T6018] kvm: pic: non byte read [ 82.203820][ T6018] kvm: pic: non byte read [ 82.208160][ T6018] kvm: pic: non byte read [ 83.296410][ T6028] pim6reg: entered allmulticast mode [ 83.871450][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 83.871467][ T30] audit: type=1400 audit(1752968801.365:148): avc: denied { create } for pid=6011 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 84.536612][ T881] hid-generic 0010:0004:0000.0003: collection stack underflow [ 84.580313][ T881] hid-generic 0010:0004:0000.0003: item 0 4 0 12 parsing failed [ 84.628776][ T881] hid-generic 0010:0004:0000.0003: probe with driver hid-generic failed with error -22 [ 85.217238][ T6042] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 85.487212][ T6044] ubi0: attaching mtd0 [ 85.491432][ T6044] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 85.639479][ T30] audit: type=1400 audit(1752968803.015:149): avc: denied { ioctl } for pid=6040 comm="syz.2.23" path="/dev/ubi_ctrl" dev="devtmpfs" ino=706 ioctlcmd=0x6f40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.952016][ T5887] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 86.024351][ T30] audit: type=1400 audit(1752968803.135:150): avc: denied { write } for pid=6040 comm="syz.2.23" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.171759][ T5887] usb 3-1: Invalid ep0 maxpacket: 64 [ 86.301805][ T5887] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 86.659896][ T6054] 8021q: VLANs not supported on ipvlan1 [ 87.131436][ T5887] usb 3-1: Invalid ep0 maxpacket: 64 [ 87.138318][ T5887] usb usb3-port1: attempt power cycle [ 87.154172][ T6054] [U]  [ 87.451082][ T6062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28'. [ 87.723045][ T5887] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 87.763270][ T5887] usb 3-1: Invalid ep0 maxpacket: 64 [ 87.932995][ T5887] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 88.072139][ T5887] usb 3-1: Invalid ep0 maxpacket: 64 [ 88.077819][ T5887] usb usb3-port1: unable to enumerate USB device [ 88.091139][ T6060] pim6reg: entered allmulticast mode [ 90.230490][ T30] audit: type=1400 audit(1752968807.735:151): avc: denied { create } for pid=6084 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 90.349156][ T30] audit: type=1400 audit(1752968807.735:152): avc: denied { setopt } for pid=6084 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 92.919137][ T30] audit: type=1400 audit(1752968810.065:153): avc: denied { mount } for pid=6112 comm="syz.3.40" name="/" dev="ramfs" ino=7900 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 94.664010][ T30] audit: type=1326 audit(1752968812.195:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6127 comm="syz.0.44" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44bb18e9a9 code=0x0 [ 94.749129][ T30] audit: type=1400 audit(1752968812.245:155): avc: denied { setopt } for pid=6127 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 95.090390][ T30] audit: type=1326 audit(1752968812.255:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6125 comm="syz.2.43" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f184bd8e9a9 code=0x0 [ 95.919550][ T5894] hid-generic 0010:0004:0000.0004: collection stack underflow [ 95.937697][ T5894] hid-generic 0010:0004:0000.0004: item 0 4 0 12 parsing failed [ 96.307572][ T5894] hid-generic 0010:0004:0000.0004: probe with driver hid-generic failed with error -22 [ 96.678375][ T30] audit: type=1326 audit(1752968814.205:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6142 comm="syz.0.48" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44bb18e9a9 code=0x0 [ 97.305440][ T30] audit: type=1400 audit(1752968814.455:158): avc: denied { read } for pid=6156 comm="syz.2.50" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 97.706977][ T30] audit: type=1400 audit(1752968814.455:159): avc: denied { open } for pid=6156 comm="syz.2.50" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 97.982060][ T30] audit: type=1400 audit(1752968814.475:160): avc: denied { mount } for pid=6156 comm="syz.2.50" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 98.560470][ T30] audit: type=1400 audit(1752968814.475:161): avc: denied { search } for pid=6156 comm="syz.2.50" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 98.610176][ T30] audit: type=1400 audit(1752968815.085:162): avc: denied { unmount } for pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 98.634181][ T30] audit: type=1326 audit(1752968815.275:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6150 comm="syz.3.49" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fb3b8e9a9 code=0x0 [ 99.527422][ T5894] hid-generic 0010:0004:0000.0005: collection stack underflow [ 99.544390][ T5894] hid-generic 0010:0004:0000.0005: item 0 4 0 12 parsing failed [ 99.552643][ T5894] hid-generic 0010:0004:0000.0005: probe with driver hid-generic failed with error -22 [ 102.403928][ T6202] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 104.112693][ T30] audit: type=1400 audit(1752968821.635:164): avc: denied { unmount } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 105.284383][ T5940] hid-generic 0010:0004:0000.0006: collection stack underflow [ 105.450621][ T6232] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 105.709710][ T5940] hid-generic 0010:0004:0000.0006: item 0 4 0 12 parsing failed [ 105.742261][ T5940] hid-generic 0010:0004:0000.0006: probe with driver hid-generic failed with error -22 [ 108.505763][ T6258] pim6reg: entered allmulticast mode [ 110.814274][ T30] audit: type=1400 audit(1752968828.325:165): avc: denied { create } for pid=6271 comm="syz.2.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 110.873861][ T30] audit: type=1326 audit(1752968828.335:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6268 comm="syz.3.78" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fb3b8e9a9 code=0x0 [ 110.988148][ T6272] Bluetooth: MGMT ver 1.23 [ 111.012869][ T30] audit: type=1400 audit(1752968828.515:167): avc: denied { bind } for pid=6271 comm="syz.2.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 111.056511][ T6272] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.064218][ T6272] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.105702][ T6272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.116859][ T6272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.154863][ T6272] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.163886][ T6272] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.172814][ T6272] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.181694][ T6272] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.221605][ T30] audit: type=1400 audit(1752968828.515:168): avc: denied { write } for pid=6271 comm="syz.2.79" path="socket:[10495]" dev="sockfs" ino=10495 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.684116][ T30] audit: type=1400 audit(1752968830.205:169): avc: denied { create } for pid=6278 comm="syz.0.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 112.779546][ T30] audit: type=1400 audit(1752968830.215:170): avc: denied { setopt } for pid=6278 comm="syz.0.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 112.874283][ T30] audit: type=1400 audit(1752968830.215:171): avc: denied { bind } for pid=6278 comm="syz.0.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 112.940673][ T30] audit: type=1400 audit(1752968830.215:172): avc: denied { name_bind } for pid=6278 comm="syz.0.80" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 112.999861][ T30] audit: type=1400 audit(1752968830.215:173): avc: denied { node_bind } for pid=6278 comm="syz.0.80" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 113.373272][ T30] audit: type=1400 audit(1752968830.215:174): avc: denied { write } for pid=6278 comm="syz.0.80" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 116.309412][ T6326] ubi0: attaching mtd0 [ 116.314154][ T6326] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 117.141740][ T5894] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 117.660129][ T5894] usb 3-1: Invalid ep0 maxpacket: 64 [ 117.801647][ T5894] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 118.171657][ T5894] usb 3-1: Invalid ep0 maxpacket: 64 [ 118.178501][ T5894] usb usb3-port1: attempt power cycle [ 118.549528][ T5894] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 118.769394][ T5894] usb 3-1: Invalid ep0 maxpacket: 64 [ 118.916279][ T6348] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.924536][ T6348] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.266796][ T6348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.277349][ T6348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.314086][ T6348] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.323064][ T6348] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.331967][ T6348] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.340800][ T6348] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.980814][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 120.980834][ T30] audit: type=1326 audit(1752968838.475:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6367 comm="syz.2.100" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f184bd8e9a9 code=0x0 [ 122.149659][ T6383] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.157084][ T6383] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.191287][ T6383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.201440][ T6383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.235874][ T6383] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.244817][ T6383] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.253988][ T6383] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.262854][ T6383] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.915052][ T30] audit: type=1326 audit(1752968840.445:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6386 comm="syz.2.104" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f184bd8e9a9 code=0x0 [ 123.901723][ T30] audit: type=1326 audit(1752968841.415:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.3.106" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fb3b8e9a9 code=0x0 [ 123.997809][ T6408] ubi0: attaching mtd0 [ 124.002048][ T6408] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 124.934535][ T5895] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 125.221723][ T5895] usb 5-1: Invalid ep0 maxpacket: 64 [ 125.371628][ T5895] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 126.115766][ T5895] usb 5-1: Invalid ep0 maxpacket: 64 [ 126.130689][ T5887] hid-generic 0010:0004:0000.0007: collection stack underflow [ 126.139700][ T5895] usb usb5-port1: attempt power cycle [ 126.146278][ T5887] hid-generic 0010:0004:0000.0007: item 0 4 0 12 parsing failed [ 126.156434][ T5887] hid-generic 0010:0004:0000.0007: probe with driver hid-generic failed with error -22 [ 126.511685][ T5895] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 126.678096][ T5895] usb 5-1: Invalid ep0 maxpacket: 64 [ 127.072033][ T5895] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 127.117283][ T5895] usb 5-1: device descriptor read/8, error -71 [ 127.339610][ T5895] usb usb5-port1: unable to enumerate USB device [ 127.358383][ T30] audit: type=1326 audit(1752968844.885:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6432 comm="syz.3.113" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fb3b8e9a9 code=0x0 [ 128.521772][ T30] audit: type=1326 audit(1752968846.045:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6446 comm="syz.4.117" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc2778e9a9 code=0x0 [ 131.813627][ T30] audit: type=1326 audit(1752968849.335:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6480 comm="syz.0.125" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44bb18e9a9 code=0x0 [ 132.496556][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.512716][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.520379][ T30] audit: type=1326 audit(1752968850.045:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.3.124" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fb3b8e9a9 code=0x0 [ 132.918697][ T6502] ubi0: attaching mtd0 [ 132.922912][ T6502] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 133.733232][ T5895] hid-generic 0010:0004:0000.0008: collection stack underflow [ 134.153936][ T5895] hid-generic 0010:0004:0000.0008: item 0 4 0 12 parsing failed [ 134.161711][ T5960] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 134.311760][ T5960] usb 1-1: Invalid ep0 maxpacket: 64 [ 134.312208][ T5895] hid-generic 0010:0004:0000.0008: probe with driver hid-generic failed with error -22 [ 134.451952][ T5960] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 134.748973][ T5960] usb 1-1: Invalid ep0 maxpacket: 64 [ 134.876088][ T5960] usb usb1-port1: attempt power cycle [ 134.890030][ T30] audit: type=1326 audit(1752968852.395:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6507 comm="syz.1.130" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8857f8e9a9 code=0x0 [ 135.341653][ T5960] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 135.532422][ T5960] usb 1-1: Invalid ep0 maxpacket: 64 [ 135.737278][ T5960] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 135.919720][ T5909] hid-generic 0010:0004:0000.0009: collection stack underflow [ 136.009411][ T5960] usb 1-1: device not accepting address 5, error -71 [ 136.370762][ T5909] hid-generic 0010:0004:0000.0009: item 0 4 0 12 parsing failed [ 136.379451][ T5960] usb usb1-port1: unable to enumerate USB device [ 136.532687][ T5909] hid-generic 0010:0004:0000.0009: probe with driver hid-generic failed with error -22 [ 138.897127][ T30] audit: type=1400 audit(1752968856.425:189): avc: denied { create } for pid=6539 comm="syz.3.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 138.939071][ T30] audit: type=1400 audit(1752968856.455:190): avc: denied { setopt } for pid=6539 comm="syz.3.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 138.944374][ T6540] tipc: Started in network mode [ 138.997481][ T30] audit: type=1400 audit(1752968856.455:191): avc: denied { write } for pid=6539 comm="syz.3.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 139.008859][ T6540] tipc: Node identity ac14140f, cluster identity 4711 [ 139.026012][ T30] audit: type=1400 audit(1752968856.455:192): avc: denied { nlmsg_write } for pid=6539 comm="syz.3.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 139.070448][ T30] audit: type=1400 audit(1752968856.555:193): avc: denied { ioctl } for pid=6539 comm="syz.3.138" path="socket:[11550]" dev="sockfs" ino=11550 ioctlcmd=0xae84 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 139.079476][ T6540] tipc: Enabling of bearer rejected, failed to enable media [ 139.110350][ T6542] netlink: 'syz.3.138': attribute type 2 has an invalid length. [ 139.132567][ T6559] pim6reg: entered allmulticast mode [ 139.339957][ T30] audit: type=1400 audit(1752968856.865:194): avc: denied { create } for pid=6556 comm="syz.2.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 140.725062][ T6198] tipc: Left network mode [ 141.498787][ T30] audit: type=1326 audit(1752968859.015:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6569 comm="syz.2.145" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f184bd8e9a9 code=0x0 [ 142.275953][ T6588] trusted_key: encrypted_key: master key parameter '00N00' is invalid [ 143.100218][ T6596] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 146.105650][ T6616] tipc: Started in network mode [ 146.153207][ T6616] tipc: Node identity ac14140f, cluster identity 4711 [ 146.182698][ T6616] tipc: Enabling of bearer rejected, failed to enable media [ 146.450777][ T30] audit: type=1400 audit(1752968863.975:196): avc: denied { mount } for pid=6633 comm="syz.4.161" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 147.541589][ T30] audit: type=1326 audit(1752968865.025:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6638 comm="syz.1.162" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8857f8e9a9 code=0x0 [ 147.588266][ T6636] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.595843][ T6636] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.570114][ T30] audit: type=1400 audit(1752968866.095:198): avc: denied { unmount } for pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 148.863120][ T6636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.904474][ T6636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.962950][ T6636] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.974510][ T6636] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.985749][ T6636] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.026121][ T6636] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.645467][ T6671] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 149.872823][ T36] tipc: Left network mode [ 150.695826][ T30] audit: type=1326 audit(1752968868.225:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.2.166" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f184bd8e9a9 code=0x0 [ 150.861101][ T30] audit: type=1326 audit(1752968868.375:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6662 comm="syz.3.167" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fb3b8e9a9 code=0x0 [ 151.064809][ T30] audit: type=1326 audit(1752968868.595:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6665 comm="syz.1.169" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8857f8e9a9 code=0x0 [ 151.099672][ T30] audit: type=1326 audit(1752968868.625:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6678 comm="syz.4.171" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc2778e9a9 code=0x0 [ 152.285591][ T30] audit: type=1326 audit(1752968869.615:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6693 comm="syz.3.174" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fb3b8e9a9 code=0x0 [ 153.253056][ T6719] trusted_key: encrypted_key: master key parameter '00N00' is invalid [ 153.573914][ T30] audit: type=1326 audit(1752968871.105:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6707 comm="syz.0.177" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44bb18e9a9 code=0x0 [ 154.345260][ T30] audit: type=1326 audit(1752968871.875:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6712 comm="syz.3.178" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fb3b8e9a9 code=0x0 [ 154.354436][ T6735] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 155.116950][ T6746] trusted_key: encrypted_key: master key parameter '00N00' is invalid [ 155.501442][ T30] audit: type=1326 audit(1752968873.025:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6736 comm="syz.1.184" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8857f8e9a9 code=0x0 [ 156.443223][ T6756] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 156.681863][ T30] audit: type=1400 audit(1752968874.215:207): avc: denied { read } for pid=6754 comm="syz.2.188" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 156.731578][ T30] audit: type=1400 audit(1752968874.215:208): avc: denied { open } for pid=6754 comm="syz.2.188" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 156.823449][ T6762] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 156.873158][ T30] audit: type=1400 audit(1752968874.405:209): avc: denied { getopt } for pid=6754 comm="syz.2.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 157.566761][ T6762] syz.2.188 (6762): drop_caches: 2 [ 157.633668][ T30] audit: type=1326 audit(1752968875.115:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6760 comm="syz.0.189" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44bb18e9a9 code=0x0 [ 158.230793][ T6778] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 159.484740][ T881] hid-generic 0010:0004:0000.000A: collection stack underflow [ 159.508839][ T881] hid-generic 0010:0004:0000.000A: item 0 4 0 12 parsing failed [ 159.806193][ T881] hid-generic 0010:0004:0000.000A: probe with driver hid-generic failed with error -22 [ 163.297418][ T6819] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 163.591590][ T30] audit: type=1326 audit(1752968881.105:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6808 comm="syz.0.201" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44bb18e9a9 code=0x0 [ 164.240667][ T5895] hid-generic 0010:0004:0000.000B: collection stack underflow [ 164.613327][ T5895] hid-generic 0010:0004:0000.000B: item 0 4 0 12 parsing failed [ 164.655253][ T5895] hid-generic 0010:0004:0000.000B: probe with driver hid-generic failed with error -22 [ 164.781884][ T6832] trusted_key: encrypted_key: insufficient parameters specified [ 165.972424][ T5940] hid-generic 0010:0004:0000.000C: collection stack underflow [ 166.013177][ T5940] hid-generic 0010:0004:0000.000C: item 0 4 0 12 parsing failed [ 166.225231][ T30] audit: type=1326 audit(1752968883.715:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6829 comm="syz.1.207" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8857f8e9a9 code=0x0 [ 166.316353][ T30] audit: type=1326 audit(1752968883.805:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6842 comm="syz.2.210" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f184bd8e9a9 code=0x0 [ 166.363022][ T5940] hid-generic 0010:0004:0000.000C: probe with driver hid-generic failed with error -22 [ 169.012821][ T6886] warning: `syz.2.218' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 169.884157][ T30] audit: type=1326 audit(1752968887.405:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6868 comm="syz.0.214" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44bb18e9a9 code=0x0 [ 170.630289][ T30] audit: type=1326 audit(1752968888.155:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6881 comm="syz.4.217" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc2778e9a9 code=0x0 [ 172.819220][ T30] audit: type=1326 audit(1752968890.345:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6920 comm="syz.2.225" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f184bd8e9a9 code=0x0 [ 173.094676][ T30] audit: type=1326 audit(1752968890.625:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6918 comm="syz.4.224" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc2778e9a9 code=0x0 [ 174.146645][ T30] audit: type=1326 audit(1752968891.665:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.0.228" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44bb18e9a9 code=0x0 [ 176.811610][ T6960] ubi0: attaching mtd0 [ 176.815698][ T6960] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 177.251655][ T881] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 177.737109][ T881] usb 3-1: Invalid ep0 maxpacket: 64 [ 177.921730][ T881] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 178.231631][ T881] usb 3-1: Invalid ep0 maxpacket: 64 [ 178.237328][ T881] usb usb3-port1: attempt power cycle [ 178.612671][ T881] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 178.678025][ T881] usb 3-1: Invalid ep0 maxpacket: 64 [ 178.685989][ T30] audit: type=1326 audit(1752968896.195:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.0.237" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44bb18e9a9 code=0x0 [ 178.923060][ T881] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 179.489165][ T881] usb 3-1: device not accepting address 13, error -71 [ 179.517001][ T881] usb usb3-port1: unable to enumerate USB device [ 180.096074][ T6992] syz.3.240 (6992): drop_caches: 2 [ 180.794922][ T5887] hid-generic 0010:0004:0000.000D: collection stack underflow [ 180.887680][ T5887] hid-generic 0010:0004:0000.000D: item 0 4 0 12 parsing failed [ 180.896349][ T5887] hid-generic 0010:0004:0000.000D: probe with driver hid-generic failed with error -22 [ 181.993917][ T5887] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 182.431616][ T5887] usb 5-1: Invalid ep0 maxpacket: 64 [ 182.481022][ T7022] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 182.841663][ T5887] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 183.053636][ T5887] usb 5-1: Invalid ep0 maxpacket: 64 [ 183.285898][ T5887] usb usb5-port1: attempt power cycle [ 183.731964][ T5887] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 183.821625][ T5887] usb 5-1: device descriptor read/8, error -71 [ 187.067013][ T30] audit: type=1326 audit(1752968904.075:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7049 comm="syz.4.257" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc2778e9a9 code=0x0 [ 187.230901][ T30] audit: type=1326 audit(1752968904.665:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7046 comm="syz.3.255" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fb3b8e9a9 code=0x0 [ 189.100530][ T7086] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 191.016545][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 191.023149][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 191.027278][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 193.947319][ T30] audit: type=1326 audit(1752968911.425:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7116 comm="syz.3.274" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fb3b8e9a9 code=0x0 [ 193.971804][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.978067][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.079375][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 196.140172][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 197.749345][ T7168] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.756771][ T7168] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.258376][ T7168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.271543][ T7168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.334280][ T7168] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.445097][ T7168] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.473792][ T7168] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.487348][ T7168] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.731700][ T30] audit: type=1326 audit(1752968916.255:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7179 comm="syz.3.290" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fb3b8e9a9 code=0x0 [ 203.913222][ T30] audit: type=1326 audit(1752968921.375:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7236 comm="syz.1.303" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8857f8e9a9 code=0x0 [ 210.181159][ T30] audit: type=1326 audit(1752968927.635:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7295 comm="syz.2.319" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f184bd8e9a9 code=0x0 [ 211.266792][ T30] audit: type=1326 audit(1752968928.745:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7306 comm="syz.4.321" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc2778e9a9 code=0x0 [ 212.691164][ T30] audit: type=1326 audit(1752968930.165:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7324 comm="syz.3.326" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fb3b8e9a9 code=0x0 [ 212.766635][ T30] audit: type=1326 audit(1752968930.285:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7316 comm="syz.1.323" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8857f8e9a9 code=0x0 [ 217.237054][ T30] audit: type=1326 audit(1752968934.615:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7364 comm="syz.2.335" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f184bd8e9a9 code=0x0 [ 218.135469][ T30] audit: type=1400 audit(1752968935.665:230): avc: denied { write } for pid=7385 comm="syz.1.338" path="socket:[18006]" dev="sockfs" ino=18006 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 218.141776][ T7390] netlink: 72 bytes leftover after parsing attributes in process `syz.1.338'. [ 218.324489][ T7390] syz.1.338: attempt to access beyond end of device [ 218.324489][ T7390] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 218.338705][ T7390] syz.1.338: attempt to access beyond end of device [ 218.338705][ T7390] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 218.352210][ T7390] Mount JFS Failure: -5 [ 218.658290][ T30] audit: type=1326 audit(1752968936.185:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.4.339" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc2778e9a9 code=0x0 [ 219.012181][ T30] audit: type=1326 audit(1752968936.515:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7386 comm="syz.3.340" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fb3b8e9a9 code=0x0 [ 219.456848][ T30] audit: type=1326 audit(1752968936.985:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7401 comm="syz.1.342" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8857f8e9a9 code=0x0 [ 220.806101][ T30] audit: type=1326 audit(1752968938.335:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7407 comm="syz.2.343" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f184bd8e9a9 code=0x0 [ 221.490741][ T5887] hid-generic 0010:0004:0000.000E: collection stack underflow [ 221.873951][ T5887] hid-generic 0010:0004:0000.000E: item 0 4 0 12 parsing failed [ 221.893781][ T5887] hid-generic 0010:0004:0000.000E: probe with driver hid-generic failed with error -22 [ 222.037823][ T30] audit: type=1326 audit(1752968939.555:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.1.348" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8857f8e9a9 code=0x0 [ 222.923510][ T7450] trusted_key: encrypted_key: insufficient parameters specified [ 224.303463][ T30] audit: type=1326 audit(1752968941.825:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7459 comm="syz.1.355" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8857f8e9a9 code=0x0 [ 225.473138][ T30] audit: type=1326 audit(1752968942.995:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.4.356" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc2778e9a9 code=0x0 [ 226.570764][ T5940] hid-generic 0010:0004:0000.000F: collection stack underflow [ 226.579225][ T5940] hid-generic 0010:0004:0000.000F: item 0 4 0 12 parsing failed [ 226.948384][ T5940] hid-generic 0010:0004:0000.000F: probe with driver hid-generic failed with error -22 [ 227.899917][ T5887] hid-generic 0010:0004:0000.0010: collection stack underflow [ 227.907743][ T5887] hid-generic 0010:0004:0000.0010: item 0 4 0 12 parsing failed [ 227.950716][ T5887] hid-generic 0010:0004:0000.0010: probe with driver hid-generic failed with error -22 [ 227.973725][ T30] audit: type=1326 audit(1752968945.505:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.2.359" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f184bd8e9a9 code=0x0 [ 228.625555][ T7503] netlink: 72 bytes leftover after parsing attributes in process `syz.4.364'. [ 229.194064][ T7503] syz.4.364: attempt to access beyond end of device [ 229.194064][ T7503] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 229.194305][ T5940] hid-generic 0010:0004:0000.0011: collection stack underflow [ 229.216661][ T7503] syz.4.364: attempt to access beyond end of device [ 229.216661][ T7503] nbd4: rw=0, sector=120, nr_sectors = 8 limit=0 [ 229.220313][ T5940] hid-generic 0010:0004:0000.0011: item 0 4 0 12 parsing failed [ 229.231126][ T7503] Mount JFS Failure: -5 [ 229.466874][ T5940] hid-generic 0010:0004:0000.0011: probe with driver hid-generic failed with error -22 [ 229.630259][ T7516] netlink: 72 bytes leftover after parsing attributes in process `syz.3.368'. [ 230.971627][ T5940] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 231.013767][ T30] audit: type=1326 audit(1752968948.545:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7511 comm="syz.2.367" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f184bd8e9a9 code=0x0 [ 231.164168][ T5940] usb 4-1: Invalid ep0 maxpacket: 64 [ 231.311553][ T5940] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 231.502283][ T5940] usb 4-1: Invalid ep0 maxpacket: 64 [ 231.508967][ T5940] usb usb4-port1: attempt power cycle [ 231.547564][ T7545] netlink: 72 bytes leftover after parsing attributes in process `syz.1.373'. [ 231.578617][ T7545] syz.1.373: attempt to access beyond end of device [ 231.578617][ T7545] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 231.595613][ T7545] syz.1.373: attempt to access beyond end of device [ 231.595613][ T7545] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 231.609953][ T7545] Mount JFS Failure: -5 [ 231.854758][ T24] hid-generic 0010:0004:0000.0012: collection stack underflow [ 231.954555][ T24] hid-generic 0010:0004:0000.0012: item 0 4 0 12 parsing failed [ 232.350440][ T5940] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 232.360206][ T24] hid-generic 0010:0004:0000.0012: probe with driver hid-generic failed with error -22 [ 232.382641][ T5940] usb 4-1: Invalid ep0 maxpacket: 64 [ 232.498504][ T30] audit: type=1326 audit(1752968950.015:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7538 comm="syz.0.374" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44bb18e9a9 code=0x0 [ 232.522666][ T5940] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 232.618625][ T5940] usb 4-1: Invalid ep0 maxpacket: 64 [ 232.647992][ T5940] usb usb4-port1: unable to enumerate USB device [ 235.589492][ T7588] netlink: 72 bytes leftover after parsing attributes in process `syz.3.382'. [ 235.641717][ T7588] syz.3.382: attempt to access beyond end of device [ 235.641717][ T7588] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 235.656044][ T7588] syz.3.382: attempt to access beyond end of device [ 235.656044][ T7588] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 235.669826][ T7588] Mount JFS Failure: -5 [ 236.436336][ T30] audit: type=1326 audit(1752968953.965:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.1.381" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8857f8e9a9 code=0x0 [ 237.808066][ T5887] hid-generic 0010:0004:0000.0013: collection stack underflow [ 238.182842][ T5887] hid-generic 0010:0004:0000.0013: item 0 4 0 12 parsing failed [ 238.213041][ T5887] hid-generic 0010:0004:0000.0013: probe with driver hid-generic failed with error -22 [ 238.320810][ T7625] netlink: 72 bytes leftover after parsing attributes in process `syz.2.390'. [ 238.451248][ T7625] syz.2.390: attempt to access beyond end of device [ 238.451248][ T7625] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 238.464866][ T7625] syz.2.390: attempt to access beyond end of device [ 238.464866][ T7625] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 238.478174][ T7625] Mount JFS Failure: -5 [ 239.472953][ T30] audit: type=1326 audit(1752968956.875:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7622 comm="syz.4.388" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc2778e9a9 code=0x0 [ 240.781418][ T30] audit: type=1400 audit(1752968958.305:243): avc: denied { create } for pid=7651 comm="syz.4.395" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 241.086983][ T30] audit: type=1400 audit(1752968958.595:244): avc: denied { bind } for pid=7651 comm="syz.4.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 241.350737][ T30] audit: type=1400 audit(1752968958.595:245): avc: denied { accept } for pid=7651 comm="syz.4.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 241.385085][ T30] audit: type=1400 audit(1752968958.595:246): avc: denied { write } for pid=7651 comm="syz.4.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 241.415627][ T7635] tipc: Started in network mode [ 241.420550][ T7635] tipc: Node identity ac14140f, cluster identity 4711 [ 241.427537][ T7635] tipc: Enabling of bearer rejected, failed to enable media [ 241.440784][ T7635] netlink: 'syz.1.392': attribute type 2 has an invalid length. [ 241.478037][ T30] audit: type=1400 audit(1752968959.005:247): avc: denied { unlink } for pid=5833 comm="syz-executor" name="file0" dev="tmpfs" ino=483 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 242.150642][ T5887] hid-generic 0010:0004:0000.0014: collection stack underflow [ 242.158781][ T5887] hid-generic 0010:0004:0000.0014: item 0 4 0 12 parsing failed [ 242.167409][ T5887] hid-generic 0010:0004:0000.0014: probe with driver hid-generic failed with error -22 [ 242.292772][ T6198] tipc: Left network mode [ 242.825639][ T30] audit: type=1326 audit(1752968960.345:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7671 comm="syz.4.400" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc2778e9a9 code=0x0 [ 242.934839][ T5887] hid-generic 0010:0004:0000.0015: collection stack underflow [ 242.950752][ T5887] hid-generic 0010:0004:0000.0015: item 0 4 0 12 parsing failed [ 242.969445][ T5887] hid-generic 0010:0004:0000.0015: probe with driver hid-generic failed with error -22 [ 243.129465][ T7683] netlink: 72 bytes leftover after parsing attributes in process `syz.3.401'. [ 243.187171][ T7683] syz.3.401: attempt to access beyond end of device [ 243.187171][ T7683] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 243.231704][ T7683] syz.3.401: attempt to access beyond end of device [ 243.231704][ T7683] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 243.411553][ T7683] Mount JFS Failure: -5 [ 244.654685][ T30] audit: type=1326 audit(1752968962.185:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7681 comm="syz.2.402" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f184bd8e9a9 code=0x0 [ 246.626955][ T5940] hid-generic 0010:0004:0000.0016: collection stack underflow [ 247.531739][ T5895] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 247.657551][ T5940] hid-generic 0010:0004:0000.0016: item 0 4 0 12 parsing failed [ 247.669719][ T5940] hid-generic 0010:0004:0000.0016: probe with driver hid-generic failed with error -22 [ 247.783434][ T30] audit: type=1326 audit(1752968965.285:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7706 comm="syz.1.407" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8857f8e9a9 code=0x0 [ 247.788770][ T5895] usb 4-1: Invalid ep0 maxpacket: 64 [ 248.036648][ T5895] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 248.369817][ T7730] syz.0.411: attempt to access beyond end of device [ 248.369817][ T7730] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 248.384419][ T7730] syz.0.411: attempt to access beyond end of device [ 248.384419][ T7730] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 248.412521][ T7730] Mount JFS Failure: -5 [ 248.736785][ T5895] usb 4-1: device not accepting address 7, error -71 [ 248.743816][ T5895] usb usb4-port1: attempt power cycle [ 249.931810][ T30] audit: type=1326 audit(1752968967.455:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7723 comm="syz.2.410" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f184bd8e9a9 code=0x0 [ 250.689580][ T7765] netlink: 72 bytes leftover after parsing attributes in process `syz.1.419'. [ 250.724743][ T7765] syz.1.419: attempt to access beyond end of device [ 250.724743][ T7765] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 250.738426][ T7765] syz.1.419: attempt to access beyond end of device [ 250.738426][ T7765] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 250.751890][ T7765] Mount JFS Failure: -5 [ 251.516916][ T30] audit: type=1326 audit(1752968969.035:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7762 comm="syz.2.420" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f184bd8e9a9 code=0x0 [ 252.288793][ T30] audit: type=1326 audit(1752968969.815:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7774 comm="syz.1.421" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8857f8e9a9 code=0x0 [ 252.439120][ T30] audit: type=1326 audit(1752968969.905:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7779 comm="syz.4.422" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc2778e9a9 code=0x0 [ 254.616854][ T7810] trusted_key: encrypted_key: insufficient parameters specified [ 255.200561][ T7816] syz.1.431: attempt to access beyond end of device [ 255.200561][ T7816] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 255.382985][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.389496][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.444303][ T7816] syz.1.431: attempt to access beyond end of device [ 255.444303][ T7816] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 255.659169][ T7816] Mount JFS Failure: -5 [ 255.723140][ T7824] netlink: 72 bytes leftover after parsing attributes in process `syz.3.433'. [ 255.763081][ T7824] syz.3.433: attempt to access beyond end of device [ 255.763081][ T7824] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 255.776665][ T7824] syz.3.433: attempt to access beyond end of device [ 255.776665][ T7824] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 255.790026][ T7824] Mount JFS Failure: -5 [ 256.132147][ T30] audit: type=1400 audit(1752968973.635:255): avc: denied { setattr } for pid=7829 comm="syz.1.434" name="vcsu" dev="devtmpfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 256.411896][ T30] audit: type=1400 audit(1752968973.915:256): avc: denied { write } for pid=7829 comm="syz.1.434" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 257.333662][ T30] audit: type=1326 audit(1752968974.825:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7831 comm="syz.4.435" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc2778e9a9 code=0x0 [ 257.449086][ T7850] netlink: 72 bytes leftover after parsing attributes in process `syz.0.438'. [ 257.516587][ T7850] syz.0.438: attempt to access beyond end of device [ 257.516587][ T7850] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 257.531407][ T7850] syz.0.438: attempt to access beyond end of device [ 257.531407][ T7850] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 257.545610][ T7850] Mount JFS Failure: -5 [ 259.266568][ T5887] hid-generic 0010:0004:0000.0017: collection stack underflow [ 259.799669][ T5887] hid-generic 0010:0004:0000.0017: item 0 4 0 12 parsing failed [ 259.932402][ T5887] hid-generic 0010:0004:0000.0017: probe with driver hid-generic failed with error -22 [ 260.174660][ T7884] netlink: 72 bytes leftover after parsing attributes in process `syz.4.445'. [ 260.360514][ T7883] syz.4.445: attempt to access beyond end of device [ 260.360514][ T7883] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 260.373499][ T7883] syz.4.445: attempt to access beyond end of device [ 260.373499][ T7883] nbd4: rw=0, sector=120, nr_sectors = 8 limit=0 [ 260.386551][ T7883] Mount JFS Failure: -5 [ 260.674583][ T7890] netlink: 72 bytes leftover after parsing attributes in process `syz.1.446'. [ 260.716315][ T7890] syz.1.446: attempt to access beyond end of device [ 260.716315][ T7890] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 260.729874][ T7890] syz.1.446: attempt to access beyond end of device [ 260.729874][ T7890] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 260.743123][ T7890] Mount JFS Failure: -5 [ 262.046267][ T5887] hid-generic 0010:0004:0000.0018: collection stack underflow [ 262.071546][ T5887] hid-generic 0010:0004:0000.0018: item 0 4 0 12 parsing failed [ 262.099775][ T5887] hid-generic 0010:0004:0000.0018: probe with driver hid-generic failed with error -22 [ 263.066566][ T30] audit: type=1400 audit(1752968980.555:258): avc: denied { create } for pid=7909 comm="syz.0.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 263.293019][ T30] audit: type=1400 audit(1752968980.575:259): avc: denied { create } for pid=7909 comm="syz.0.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 264.731006][ T30] audit: type=1326 audit(1752968982.245:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7916 comm="syz.3.452" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fb3b8e9a9 code=0x0 [ 265.238383][ T7942] netlink: 72 bytes leftover after parsing attributes in process `syz.4.457'. [ 265.288231][ T7942] syz.4.457: attempt to access beyond end of device [ 265.288231][ T7942] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 265.301836][ T7942] syz.4.457: attempt to access beyond end of device [ 265.301836][ T7942] nbd4: rw=0, sector=120, nr_sectors = 8 limit=0 [ 265.315126][ T7942] Mount JFS Failure: -5 [ 265.655755][ T30] audit: type=1326 audit(1752968983.185:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7925 comm="syz.0.454" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44bb18e9a9 code=0x0 [ 267.502076][ T7963] netlink: 72 bytes leftover after parsing attributes in process `syz.4.461'. [ 267.531486][ T7963] syz.4.461: attempt to access beyond end of device [ 267.531486][ T7963] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 267.545290][ T7963] syz.4.461: attempt to access beyond end of device [ 267.545290][ T7963] nbd4: rw=0, sector=120, nr_sectors = 8 limit=0 [ 267.560865][ T7963] Mount JFS Failure: -5 [ 269.683025][ T7984] netlink: 72 bytes leftover after parsing attributes in process `syz.0.468'. [ 269.724341][ T7984] syz.0.468: attempt to access beyond end of device [ 269.724341][ T7984] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 269.738061][ T7984] syz.0.468: attempt to access beyond end of device [ 269.738061][ T7984] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 269.751194][ T7984] Mount JFS Failure: -5 [ 273.393261][ T30] audit: type=1400 audit(1752968990.925:262): avc: denied { write } for pid=8024 comm="syz.4.479" name="video5" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 273.428255][ T8025] 9pnet_fd: Insufficient options for proto=fd [ 274.597029][ T8039] ubi0: attaching mtd0 [ 274.601183][ T8039] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 275.090073][ T30] audit: type=1326 audit(1752968992.615:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8019 comm="syz.3.477" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fb3b8e9a9 code=0x0 [ 275.271600][ T5940] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 275.468623][ T8049] trusted_key: syz.1.482 sent an empty control message without MSG_MORE. [ 275.485563][ T30] audit: type=1400 audit(1752968992.995:264): avc: denied { setopt } for pid=8044 comm="syz.1.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 275.491599][ T5940] usb 1-1: Invalid ep0 maxpacket: 64 [ 275.932455][ T5887] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 276.123843][ T5887] usb 4-1: Invalid ep0 maxpacket: 64 [ 276.227741][ T5940] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 276.491828][ T5887] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 276.531957][ T5940] usb 1-1: Invalid ep0 maxpacket: 64 [ 276.698153][ T5940] usb usb1-port1: attempt power cycle [ 277.201959][ T5940] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 277.229080][ T5887] usb 4-1: Invalid ep0 maxpacket: 64 [ 277.237757][ T5887] usb usb4-port1: attempt power cycle [ 277.284244][ T5940] usb 1-1: Invalid ep0 maxpacket: 64 [ 277.594892][ T5887] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 277.660885][ T5887] usb 4-1: Invalid ep0 maxpacket: 64 [ 278.412930][ T5887] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 278.682000][ T5887] usb 4-1: device not accepting address 12, error -71 [ 278.695587][ T5887] usb usb4-port1: unable to enumerate USB device [ 279.071203][ T8090] netlink: 72 bytes leftover after parsing attributes in process `syz.4.493'. [ 279.080331][ T30] audit: type=1400 audit(1752968996.565:265): avc: denied { ioctl } for pid=8074 comm="syz.0.489" path="socket:[22449]" dev="sockfs" ino=22449 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 279.196627][ T8090] syz.4.493: attempt to access beyond end of device [ 279.196627][ T8090] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 279.211106][ T8090] syz.4.493: attempt to access beyond end of device [ 279.211106][ T8090] nbd4: rw=0, sector=120, nr_sectors = 8 limit=0 [ 279.245742][ T8090] Mount JFS Failure: -5 [ 281.835050][ T8124] netlink: 72 bytes leftover after parsing attributes in process `syz.4.500'. [ 281.856823][ T8124] syz.4.500: attempt to access beyond end of device [ 281.856823][ T8124] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 281.870359][ T8124] syz.4.500: attempt to access beyond end of device [ 281.870359][ T8124] nbd4: rw=0, sector=120, nr_sectors = 8 limit=0 [ 281.883525][ T8124] Mount JFS Failure: -5 [ 282.871716][ T5887] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 283.091662][ T5887] usb 3-1: Invalid ep0 maxpacket: 64 [ 283.387612][ T5887] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 283.551660][ T5887] usb 3-1: Invalid ep0 maxpacket: 64 [ 283.654698][ T5887] usb usb3-port1: attempt power cycle [ 284.061556][ T5887] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 284.126924][ T8149] netlink: 72 bytes leftover after parsing attributes in process `syz.0.505'. [ 284.181298][ T8149] syz.0.505: attempt to access beyond end of device [ 284.181298][ T8149] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 284.195158][ T8149] syz.0.505: attempt to access beyond end of device [ 284.195158][ T8149] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 284.208370][ T8149] Mount JFS Failure: -5 [ 284.422246][ T5887] usb 3-1: Invalid ep0 maxpacket: 64 [ 284.558764][ T8158] netlink: 72 bytes leftover after parsing attributes in process `syz.4.504'. [ 284.595061][ T8158] syz.4.504: attempt to access beyond end of device [ 284.595061][ T8158] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 284.608746][ T8158] syz.4.504: attempt to access beyond end of device [ 284.608746][ T8158] nbd4: rw=0, sector=120, nr_sectors = 8 limit=0 [ 284.621941][ T8158] Mount JFS Failure: -5 [ 284.654269][ T5887] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 284.852048][ T5887] usb 3-1: Invalid ep0 maxpacket: 64 [ 284.857625][ T5887] usb usb3-port1: unable to enumerate USB device [ 285.018909][ T30] audit: type=1326 audit(1752969002.545:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8145 comm="syz.3.506" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fb3b8e9a9 code=0x0 [ 285.992033][ T5940] hid-generic 0010:0004:0000.0019: collection stack underflow [ 286.081271][ T5940] hid-generic 0010:0004:0000.0019: item 0 4 0 12 parsing failed [ 286.119306][ T5940] hid-generic 0010:0004:0000.0019: probe with driver hid-generic failed with error -22 [ 286.306218][ T30] audit: type=1326 audit(1752969003.835:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8172 comm="syz.1.509" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8857f8e9a9 code=0x0 [ 287.552764][ T8192] trusted_key: encrypted_key: insufficient parameters specified [ 293.035128][ T30] audit: type=1326 audit(1752969010.545:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8224 comm="syz.1.524" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8857f8e9a9 code=0x0 [ 293.121255][ T8243] 9pnet_fd: Insufficient options for proto=fd [ 293.488022][ T8249] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 294.773981][ T5887] hid-generic 0010:0004:0000.001A: collection stack underflow [ 295.117082][ T5887] hid-generic 0010:0004:0000.001A: item 0 4 0 12 parsing failed [ 295.139491][ T5887] hid-generic 0010:0004:0000.001A: probe with driver hid-generic failed with error -22 [ 295.165100][ T30] audit: type=1326 audit(1752969012.695:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8253 comm="syz.1.531" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8857f8e9a9 code=0x0 [ 295.949892][ T5887] hid-generic 0010:0004:0000.001B: collection stack underflow [ 295.959135][ T5887] hid-generic 0010:0004:0000.001B: item 0 4 0 12 parsing failed [ 295.967489][ T5887] hid-generic 0010:0004:0000.001B: probe with driver hid-generic failed with error -22 [ 296.160028][ T8275] netlink: 72 bytes leftover after parsing attributes in process `syz.3.534'. [ 296.177913][ T8275] syz.3.534: attempt to access beyond end of device [ 296.177913][ T8275] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 296.191540][ T8275] syz.3.534: attempt to access beyond end of device [ 296.191540][ T8275] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 296.205555][ T8275] Mount JFS Failure: -5 [ 297.288869][ T8286] 9pnet_fd: Insufficient options for proto=fd [ 297.371418][ T8288] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 297.437175][ T8288] sp0: Synchronizing with TNC [ 298.430877][ T8293] netlink: 72 bytes leftover after parsing attributes in process `syz.0.537'. [ 298.487578][ T8293] syz.0.537: attempt to access beyond end of device [ 298.487578][ T8293] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 298.504443][ T8293] syz.0.537: attempt to access beyond end of device [ 298.504443][ T8293] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 298.518911][ T8293] Mount JFS Failure: -5 [ 299.736373][ T30] audit: type=1326 audit(1752969017.135:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8301 comm="syz.2.539" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f184bd8e9a9 code=0x0 [ 300.585167][ T30] audit: type=1326 audit(1752969018.115:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.4.543" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc2778e9a9 code=0x0 [ 301.069106][ T30] audit: type=1326 audit(1752969018.575:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8329 comm="syz.0.544" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44bb18e9a9 code=0x0 [ 301.868099][ T30] audit: type=1326 audit(1752969019.395:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8338 comm="syz.1.546" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8857f8e9a9 code=0x0 [ 302.404911][ T30] audit: type=1326 audit(1752969019.935:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8341 comm="syz.2.547" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f184bd8e9a9 code=0x0 [ 302.481841][ T30] audit: type=1326 audit(1752969019.965:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8345 comm="syz.4.548" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc2778e9a9 code=0x0 [ 306.066447][ T8390] ubi0: attaching mtd0 [ 306.070614][ T8390] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 306.411618][ T5894] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 306.585697][ T5894] usb 2-1: Invalid ep0 maxpacket: 64 [ 306.668118][ T8393] trusted_key: encrypted_key: insufficient parameters specified [ 306.861757][ T5894] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 307.061616][ T5894] usb 2-1: Invalid ep0 maxpacket: 64 [ 307.355728][ T5894] usb usb2-port1: attempt power cycle [ 307.426362][ T8403] netlink: 72 bytes leftover after parsing attributes in process `syz.0.561'. [ 307.469095][ T8403] syz.0.561: attempt to access beyond end of device [ 307.469095][ T8403] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 307.482845][ T8403] syz.0.561: attempt to access beyond end of device [ 307.482845][ T8403] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 307.496171][ T8403] Mount JFS Failure: -5 [ 307.991855][ T5894] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 308.022728][ T5894] usb 2-1: Invalid ep0 maxpacket: 64 [ 308.213676][ T5894] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 308.252327][ T5894] usb 2-1: Invalid ep0 maxpacket: 64 [ 308.258284][ T5894] usb usb2-port1: unable to enumerate USB device [ 309.591346][ T8418] tipc: Started in network mode [ 309.602711][ T8418] tipc: Node identity ac14140f, cluster identity 4711 [ 309.630259][ T8418] tipc: Enabling of bearer rejected, failed to enable media [ 309.699222][ T8418] netlink: 'syz.0.563': attribute type 2 has an invalid length. [ 310.593830][ T3015] tipc: Left network mode [ 310.920156][ T30] audit: type=1326 audit(1752969028.435:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8433 comm="syz.4.566" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc2778e9a9 code=0x0 [ 312.780019][ T8453] 9pnet_fd: Insufficient options for proto=fd [ 312.877801][ T8456] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 312.909581][ T8456] sp0: Synchronizing with TNC [ 312.989350][ T8442] syz.2.567 (8442): drop_caches: 2 [ 313.980483][ T8458] 9pnet_fd: Insufficient options for proto=fd [ 314.082419][ T8461] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 314.657734][ T8464] 9pnet_fd: Insufficient options for proto=fd [ 314.792828][ T8469] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 315.926526][ T8472] netlink: 72 bytes leftover after parsing attributes in process `syz.0.573'. [ 316.386876][ T8466] syz.0.573: attempt to access beyond end of device [ 316.386876][ T8466] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 316.399716][ T8466] syz.0.573: attempt to access beyond end of device [ 316.399716][ T8466] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 316.412595][ T8466] Mount JFS Failure: -5 [ 316.794670][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.801170][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.032590][ T8488] 9pnet_fd: Insufficient options for proto=fd [ 317.593195][ T8489] sp0: Synchronizing with TNC [ 318.126331][ T30] audit: type=1400 audit(1752969035.525:277): avc: denied { search } for pid=5497 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 318.802382][ T30] audit: type=1400 audit(1752969035.535:278): avc: denied { search } for pid=5497 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 318.959714][ T30] audit: type=1400 audit(1752969035.545:279): avc: denied { search } for pid=5497 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 318.981894][ T30] audit: type=1400 audit(1752969035.545:280): avc: denied { read } for pid=5497 comm="dhcpcd" name="n102" dev="tmpfs" ino=4324 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 319.003977][ T30] audit: type=1400 audit(1752969035.555:281): avc: denied { open } for pid=5497 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=4324 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 319.035523][ T30] audit: type=1400 audit(1752969035.575:282): avc: denied { getattr } for pid=5497 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=4324 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 322.286637][ T8510] syz.1.585 (8510): drop_caches: 2 [ 322.393717][ T8525] netlink: 72 bytes leftover after parsing attributes in process `syz.3.590'. [ 322.510148][ T8525] syz.3.590: attempt to access beyond end of device [ 322.510148][ T8525] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 322.530729][ T8525] syz.3.590: attempt to access beyond end of device [ 322.530729][ T8525] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 322.548332][ T8525] Mount JFS Failure: -5 [ 322.851350][ T8530] 9pnet_fd: Insufficient options for proto=fd [ 322.931194][ T8533] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 324.853741][ T30] audit: type=1326 audit(1752969042.375:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8537 comm="syz.3.592" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fb3b8e9a9 code=0x0 [ 325.169660][ T8557] netlink: 72 bytes leftover after parsing attributes in process `syz.2.596'. [ 325.213743][ T8557] syz.2.596: attempt to access beyond end of device [ 325.213743][ T8557] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 325.229188][ T8557] syz.2.596: attempt to access beyond end of device [ 325.229188][ T8557] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 325.242901][ T8557] Mount JFS Failure: -5 [ 325.505216][ T8555] 9pnet_fd: Insufficient options for proto=fd [ 326.799323][ T8564] sp0: Synchronizing with TNC [ 327.172058][ T30] audit: type=1400 audit(1752969044.615:284): avc: denied { write } for pid=8550 comm="syz.1.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 327.686348][ T30] audit: type=1326 audit(1752969045.215:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8569 comm="syz.2.599" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f184bd8e9a9 code=0x0 [ 329.691500][ T30] audit: type=1400 audit(1752969046.965:286): avc: denied { write } for pid=8587 comm="syz.2.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 330.134687][ T8594] 9pnet_fd: Insufficient options for proto=fd [ 330.236874][ T5894] hid-generic 0010:0004:0000.001C: collection stack underflow [ 330.262844][ T5894] hid-generic 0010:0004:0000.001C: item 0 4 0 12 parsing failed [ 331.026535][ T5894] hid-generic 0010:0004:0000.001C: probe with driver hid-generic failed with error -22 [ 331.450231][ T8601] sp0: Synchronizing with TNC [ 332.050770][ T8609] trusted_key: encrypted_key: insufficient parameters specified [ 332.304793][ T24] hid-generic 0010:0004:0000.001D: collection stack underflow [ 332.349103][ T30] audit: type=1326 audit(1752969049.875:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8604 comm="syz.4.607" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc2778e9a9 code=0x0 [ 332.422236][ T24] hid-generic 0010:0004:0000.001D: item 0 4 0 12 parsing failed [ 332.431684][ T24] hid-generic 0010:0004:0000.001D: probe with driver hid-generic failed with error -22 [ 332.815646][ T8622] ubi0: attaching mtd0 [ 332.819834][ T8622] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 332.914742][ T30] audit: type=1400 audit(1752969050.335:288): avc: denied { execute } for pid=8619 comm="syz.2.612" dev="tmpfs" ino=1094 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 332.984062][ T30] audit: type=1400 audit(1752969050.335:289): avc: denied { execute_no_trans } for pid=8619 comm="syz.2.612" path=2F6D656D66643A5B0BDB58AE5B1AA9202864656C6574656429 dev="tmpfs" ino=1094 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 333.401689][ T24] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 333.416213][ T8629] netlink: 72 bytes leftover after parsing attributes in process `syz.4.615'. [ 333.540820][ T8629] syz.4.615: attempt to access beyond end of device [ 333.540820][ T8629] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 333.554907][ T8629] syz.4.615: attempt to access beyond end of device [ 333.554907][ T8629] nbd4: rw=0, sector=120, nr_sectors = 8 limit=0 [ 333.568171][ T8629] Mount JFS Failure: -5 [ 333.901538][ T24] usb 3-1: Invalid ep0 maxpacket: 64 [ 334.022509][ T30] audit: type=1326 audit(1752969051.525:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8624 comm="syz.0.614" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44bb18e9a9 code=0x0 [ 334.111555][ T24] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 334.331524][ T24] usb 3-1: Invalid ep0 maxpacket: 64 [ 334.402590][ T24] usb usb3-port1: attempt power cycle [ 334.521757][ T30] audit: type=1326 audit(1752969052.005:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8641 comm="syz.3.613" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fb3b8e9a9 code=0x0 [ 335.220003][ T24] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 335.242046][ T24] usb 3-1: Invalid ep0 maxpacket: 64 [ 335.391592][ T24] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 336.692893][ T24] usb 3-1: device not accepting address 21, error -71 [ 336.796771][ T24] usb usb3-port1: unable to enumerate USB device [ 338.192438][ T30] audit: type=1326 audit(1752969055.695:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8680 comm="syz.3.624" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fb3b8e9a9 code=0x0 [ 339.592728][ T30] audit: type=1326 audit(1752969057.125:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8694 comm="syz.2.627" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f184bd8e9a9 code=0x0 [ 343.241670][ T30] audit: type=1326 audit(1752969060.725:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8718 comm="syz.2.634" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f184bd8e9a9 code=0x0 [ 347.207956][ T8759] netlink: 72 bytes leftover after parsing attributes in process `syz.3.644'. [ 347.223989][ T8759] syz.3.644: attempt to access beyond end of device [ 347.223989][ T8759] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 347.237459][ T8759] syz.3.644: attempt to access beyond end of device [ 347.237459][ T8759] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 347.250598][ T8759] Mount JFS Failure: -5 [ 348.709170][ T24] hid-generic 0010:0004:0000.001E: collection stack underflow [ 349.096733][ T24] hid-generic 0010:0004:0000.001E: item 0 4 0 12 parsing failed [ 349.211223][ T24] hid-generic 0010:0004:0000.001E: probe with driver hid-generic failed with error -22 [ 350.387499][ T8792] 9pnet_fd: Insufficient options for proto=fd [ 350.449430][ T8793] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 350.538548][ T8793] sp0: Synchronizing with TNC [ 350.555626][ T30] audit: type=1326 audit(1752969068.085:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8781 comm="syz.4.649" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc2778e9a9 code=0x0 [ 357.784335][ T8839] syz.2.661: attempt to access beyond end of device [ 357.784335][ T8839] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 357.797352][ T8839] syz.2.661: attempt to access beyond end of device [ 357.797352][ T8839] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 357.810451][ T8839] Mount JFS Failure: -5 [ 358.414280][ T8850] ubi0: attaching mtd0 [ 358.418448][ T8850] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 358.891586][ T5887] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 359.063500][ T5887] usb 5-1: Invalid ep0 maxpacket: 64 [ 359.303985][ T8860] netlink: 72 bytes leftover after parsing attributes in process `syz.3.667'. [ 359.326653][ T8860] syz.3.667: attempt to access beyond end of device [ 359.326653][ T8860] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 359.377238][ T8860] syz.3.667: attempt to access beyond end of device [ 359.377238][ T8860] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 359.390550][ T8860] Mount JFS Failure: -5 [ 359.391570][ T5887] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 359.711515][ T5887] usb 5-1: Invalid ep0 maxpacket: 64 [ 359.720003][ T5887] usb usb5-port1: attempt power cycle [ 360.214501][ T8876] syz.0.670: attempt to access beyond end of device [ 360.214501][ T8876] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 360.228330][ T8876] syz.0.670: attempt to access beyond end of device [ 360.228330][ T8876] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 360.241472][ T8876] Mount JFS Failure: -5 [ 360.421581][ T5887] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 360.463587][ T5887] usb 5-1: Invalid ep0 maxpacket: 64 [ 360.591570][ T5887] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 360.955021][ T5887] usb 5-1: Invalid ep0 maxpacket: 64 [ 361.035259][ T5887] usb usb5-port1: unable to enumerate USB device [ 361.462075][ T8890] 9pnet_fd: Insufficient options for proto=fd [ 361.542796][ T8894] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 361.598391][ T8894] sp0: Synchronizing with TNC [ 363.878790][ T24] hid-generic 0010:0004:0000.001F: collection stack underflow [ 363.887003][ T24] hid-generic 0010:0004:0000.001F: item 0 4 0 12 parsing failed [ 363.897134][ T24] hid-generic 0010:0004:0000.001F: probe with driver hid-generic failed with error -22 [ 364.269777][ T8907] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 365.021938][ T8915] 9pnet_fd: Insufficient options for proto=fd [ 365.111541][ T8917] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 365.226477][ T8917] sp0: Synchronizing with TNC [ 366.120406][ T30] audit: type=1326 audit(1752969083.635:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8903 comm="syz.1.674" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8857f8e9a9 code=0x0 [ 370.416570][ T24] hid-generic 0010:0004:0000.0020: collection stack underflow [ 370.424126][ T24] hid-generic 0010:0004:0000.0020: item 0 4 0 12 parsing failed [ 370.436647][ T24] hid-generic 0010:0004:0000.0020: probe with driver hid-generic failed with error -22 [ 371.717923][ T8960] 9pnet_fd: Insufficient options for proto=fd [ 371.800361][ T8961] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 371.860194][ T8961] sp0: Synchronizing with TNC [ 373.926279][ T8971] 9pnet_fd: Insufficient options for proto=fd [ 374.019308][ T8973] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 374.077436][ T8973] sp0: Synchronizing with TNC [ 377.791844][ T8994] 9pnet_fd: Insufficient options for proto=fd [ 377.883469][ T8996] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 377.938510][ T8996] sp0: Synchronizing with TNC [ 378.867566][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.874700][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.917317][ T9007] syz.3.705: attempt to access beyond end of device [ 379.917317][ T9007] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 379.931281][ T9007] syz.3.705: attempt to access beyond end of device [ 379.931281][ T9007] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 379.944456][ T9007] Mount JFS Failure: -5 [ 380.148922][ T9002] 9pnet_fd: Insufficient options for proto=fd [ 380.233587][ T9014] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 380.332615][ T9014] sp0: Synchronizing with TNC [ 382.684215][ T9030] syz.1.709: attempt to access beyond end of device [ 382.684215][ T9030] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 382.697502][ T9030] syz.1.709: attempt to access beyond end of device [ 382.697502][ T9030] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 382.711448][ T9030] Mount JFS Failure: -5 [ 383.405954][ T30] audit: type=1326 audit(1752969100.935:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9023 comm="syz.4.710" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc2778e9a9 code=0x0 [ 386.411564][ T30] audit: type=1400 audit(1752969103.935:298): avc: denied { sys_module } for pid=9048 comm="syz.2.713" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 387.066229][ T9074] 9pnet_fd: Insufficient options for proto=fd [ 387.135705][ T9075] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 387.194220][ T9075] sp0: Synchronizing with TNC [ 389.738295][ T5894] hid-generic 0010:0004:0000.0021: collection stack underflow [ 390.141923][ T5894] hid-generic 0010:0004:0000.0021: item 0 4 0 12 parsing failed [ 390.242153][ T5894] hid-generic 0010:0004:0000.0021: probe with driver hid-generic failed with error -22 [ 395.405571][ T9138] 9pnet_fd: Insufficient options for proto=fd [ 395.485565][ T9139] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 396.299242][ T9141] 9pnet_fd: Insufficient options for proto=fd [ 396.440173][ T9142] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 396.493660][ T9142] sp0: Synchronizing with TNC [ 399.959166][ T30] audit: type=1326 audit(1752969117.465:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9143 comm="syz.0.735" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44bb18e9a9 code=0x0 [ 401.951263][ T30] audit: type=1400 audit(1752969119.475:300): avc: denied { write } for pid=9181 comm="syz.0.746" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 403.931191][ T24] hid-generic 0010:0004:0000.0022: collection stack underflow [ 403.943987][ T24] hid-generic 0010:0004:0000.0022: item 0 4 0 12 parsing failed [ 403.966794][ T24] hid-generic 0010:0004:0000.0022: probe with driver hid-generic failed with error -22 [ 404.285549][ T9194] 9pnet_fd: Insufficient options for proto=fd [ 404.420878][ T9198] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 404.475552][ T9198] sp0: Synchronizing with TNC [ 406.056813][ T9205] 9pnet_fd: Insufficient options for proto=fd [ 406.131274][ T9206] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 406.186256][ T9206] sp0: Synchronizing with TNC [ 407.656594][ T9216] 9pnet_fd: Insufficient options for proto=fd [ 407.745356][ T9220] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 407.807905][ T9220] sp0: Synchronizing with TNC [ 408.778390][ T30] audit: type=1326 audit(1752969126.305:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9207 comm="syz.0.753" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44bb18e9a9 code=0x0 [ 409.929078][ T30] audit: type=1326 audit(1752969127.455:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9217 comm="syz.2.756" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f184bd8e9a9 code=0x0 [ 410.477738][ T5894] hid-generic 0010:0004:0000.0023: collection stack underflow [ 410.505253][ T5894] hid-generic 0010:0004:0000.0023: item 0 4 0 12 parsing failed [ 410.521994][ T5894] hid-generic 0010:0004:0000.0023: probe with driver hid-generic failed with error -22 [ 411.162092][ T9250] netlink: 72 bytes leftover after parsing attributes in process `syz.3.765'. [ 411.208303][ T9250] syz.3.765: attempt to access beyond end of device [ 411.208303][ T9250] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 411.228113][ T9250] syz.3.765: attempt to access beyond end of device [ 411.228113][ T9250] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 411.245980][ T9250] Mount JFS Failure: -5 [ 413.083237][ T9272] 9pnet_fd: Insufficient options for proto=fd [ 413.154770][ T9274] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 413.212637][ T9274] sp0: Synchronizing with TNC [ 415.289528][ T30] audit: type=1326 audit(1752969132.785:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9269 comm="syz.1.768" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8857f8e9a9 code=0x0 [ 417.704727][ T30] audit: type=1326 audit(1752969135.235:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.0.774" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44bb18e9a9 code=0x0 [ 419.043589][ T9320] 9pnet_fd: Insufficient options for proto=fd [ 419.185849][ T9321] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 419.269004][ T9321] sp0: Synchronizing with TNC [ 424.551585][ T30] audit: type=1400 audit(1752969142.035:305): avc: denied { create } for pid=9351 comm="syz.2.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 424.771608][ T30] audit: type=1400 audit(1752969142.045:306): avc: denied { connect } for pid=9351 comm="syz.2.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 424.888511][ T30] audit: type=1326 audit(1752969142.415:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.4.787" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc2778e9a9 code=0x0 [ 425.691562][ T24] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 425.968327][ T9368] 9pnet_fd: Insufficient options for proto=fd [ 425.986827][ T24] usb 3-1: Invalid ep0 maxpacket: 64 [ 426.033671][ T9369] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 426.048549][ T9369] sp0: Synchronizing with TNC [ 426.141709][ T24] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 426.351954][ T24] usb 3-1: Invalid ep0 maxpacket: 64 [ 426.380075][ T24] usb usb3-port1: attempt power cycle [ 426.834414][ T24] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 426.928888][ T24] usb 3-1: Invalid ep0 maxpacket: 64 [ 427.134103][ T24] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 427.375662][ T5894] hid-generic 0010:0004:0000.0024: collection stack underflow [ 427.601741][ T5894] hid-generic 0010:0004:0000.0024: item 0 4 0 12 parsing failed [ 427.618104][ T5894] hid-generic 0010:0004:0000.0024: probe with driver hid-generic failed with error -22 [ 427.779878][ T24] usb 3-1: Invalid ep0 maxpacket: 64 [ 427.810696][ T24] usb usb3-port1: unable to enumerate USB device [ 430.291474][ T30] audit: type=1326 audit(1752969147.805:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9403 comm="syz.4.802" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc2778e9a9 code=0x0 [ 431.042677][ T30] audit: type=1326 audit(1752969148.575:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9412 comm="syz.0.804" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44bb18e9a9 code=0x0 [ 432.558157][ T30] audit: type=1326 audit(1752969150.085:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9429 comm="syz.3.809" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fb3b8e9a9 code=0x0 [ 434.421995][ T9450] 9pnet_fd: Insufficient options for proto=fd [ 435.376197][ T9464] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 435.438708][ T9464] sp0: Synchronizing with TNC [ 437.554763][ T9473] 9pnet_fd: Insufficient options for proto=fd [ 437.817414][ T9477] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 438.923311][ T30] audit: type=1400 audit(1752969156.455:311): avc: denied { read } for pid=9478 comm="syz.4.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 439.683261][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.689566][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.873406][ T30] audit: type=1400 audit(1752969156.475:312): avc: denied { ioctl } for pid=9478 comm="syz.4.821" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 440.381687][ T24] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 440.717139][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 440.754661][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 440.962523][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 440.975793][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 441.139564][ T24] usb 5-1: SerialNumber: syz [ 441.162974][ T24] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 441.177352][ T24] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 441.282054][ T9494] tipc: Started in network mode [ 441.286967][ T9494] tipc: Node identity ac14140f, cluster identity 4711 [ 441.294156][ T9494] tipc: Enabling of bearer rejected, failed to enable media [ 441.312987][ T9494] netlink: 'syz.1.825': attribute type 2 has an invalid length. [ 441.412160][ T24] usb 5-1: USB disconnect, device number 14 [ 443.004061][ T3015] tipc: Left network mode [ 443.161634][ T5894] hid-generic 0010:0004:0000.0025: collection stack underflow [ 443.568857][ T5894] hid-generic 0010:0004:0000.0025: item 0 4 0 12 parsing failed [ 443.603288][ T5894] hid-generic 0010:0004:0000.0025: probe with driver hid-generic failed with error -22 [ 445.120551][ T9532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.834'. [ 447.166659][ T9545] netlink: 72 bytes leftover after parsing attributes in process `syz.0.838'. [ 447.193937][ T9545] syz.0.838: attempt to access beyond end of device [ 447.193937][ T9545] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 447.207842][ T9545] syz.0.838: attempt to access beyond end of device [ 447.207842][ T9545] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 447.221119][ T9545] Mount JFS Failure: -5 [ 450.248033][ T5894] hid-generic 0010:0004:0000.0026: collection stack underflow [ 450.491495][ T5894] hid-generic 0010:0004:0000.0026: item 0 4 0 12 parsing failed [ 450.522020][ T5894] hid-generic 0010:0004:0000.0026: probe with driver hid-generic failed with error -22 [ 451.111619][ T5887] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 451.377925][ T5887] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 451.395157][ T5887] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 452.001596][ T5887] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 452.011005][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 452.019811][ T5887] usb 2-1: SerialNumber: syz [ 452.067008][ T5887] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 452.085688][ T5887] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 452.452829][ T5887] usb 2-1: USB disconnect, device number 6 [ 453.240154][ T9607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.851'. [ 456.371005][ T9634] 9pnet_fd: Insufficient options for proto=fd [ 456.564279][ T9639] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 456.578242][ T9639] sp0: Synchronizing with TNC [ 459.817988][ T5887] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 459.829645][ T5894] hid-generic 0010:0004:0000.0027: collection stack underflow [ 460.386782][ T5894] hid-generic 0010:0004:0000.0027: item 0 4 0 12 parsing failed [ 460.582267][ T5894] hid-generic 0010:0004:0000.0027: probe with driver hid-generic failed with error -22 [ 461.311544][ T5887] usb 5-1: device descriptor read/all, error -71 [ 461.743353][ T5894] hid-generic 0010:0004:0000.0028: collection stack underflow [ 462.152419][ T5894] hid-generic 0010:0004:0000.0028: item 0 4 0 12 parsing failed [ 462.417104][ T5894] hid-generic 0010:0004:0000.0028: probe with driver hid-generic failed with error -22 [ 463.133953][ T5909] hid-generic 0010:0004:0000.0029: collection stack underflow [ 463.152770][ T5909] hid-generic 0010:0004:0000.0029: item 0 4 0 12 parsing failed [ 463.190661][ T5909] hid-generic 0010:0004:0000.0029: probe with driver hid-generic failed with error -22 [ 463.641705][ T5894] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 463.905074][ T5894] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 464.033900][ T5894] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 464.176803][ T5894] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 464.271211][ T9679] 9pnet_fd: Insufficient options for proto=fd [ 464.482718][ T9682] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 464.546188][ T9681] sp0: Synchronizing with TNC [ 465.452511][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 466.554663][ T5894] usb 2-1: SerialNumber: syz [ 466.723921][ T5894] usb 2-1: can't set config #1, error -71 [ 466.735996][ T5894] usb 2-1: USB disconnect, device number 7 [ 467.984646][ T9699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.877'. [ 468.174409][ T30] audit: type=1326 audit(1752969185.675:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9678 comm="syz.3.873" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fb3b8e9a9 code=0x0 [ 468.565819][ T9705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.878'. [ 470.400112][ T5909] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 470.725458][ T5909] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 470.738498][ T5909] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 471.474697][ T5909] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 471.504593][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 471.541242][ T5909] usb 4-1: SerialNumber: syz [ 471.674352][ T5909] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 471.691779][ T5909] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 471.755360][ T9728] 9pnet_fd: Insufficient options for proto=fd [ 471.818094][ T9729] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 471.951723][ T5894] usb 4-1: USB disconnect, device number 13 [ 472.204901][ T9729] sp0: Synchronizing with TNC [ 474.208162][ T30] audit: type=1326 audit(1752969191.735:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9749 comm="syz.0.889" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44bb18e9a9 code=0x0 [ 476.449687][ T30] audit: type=1326 audit(1752969193.975:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9760 comm="syz.1.892" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8857f8e9a9 code=0x0 [ 477.451792][ T30] audit: type=1326 audit(1752969194.985:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9777 comm="syz.1.896" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8857f8e9a9 code=0x0 [ 478.041655][ T30] audit: type=1326 audit(1752969195.565:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9783 comm="syz.0.897" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44bb18e9a9 code=0x0 [ 478.291419][ T9798] ubi0: attaching mtd0 [ 478.295622][ T9798] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 479.101631][ T5909] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 479.371458][ T5909] usb 2-1: Invalid ep0 maxpacket: 64 [ 479.718937][ T5909] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 479.873784][ T5909] usb 2-1: Invalid ep0 maxpacket: 64 [ 479.883931][ T5909] usb usb2-port1: attempt power cycle [ 480.331630][ T5909] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 481.188796][ T9726] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 482.410440][ T5909] usb 2-1: device descriptor read/8, error -71 [ 483.666001][ T9726] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 483.977786][ T9726] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 485.052746][ T9831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.908'. [ 485.105383][ T9726] usb 5-1: string descriptor 0 read error: -71 [ 485.125625][ T9726] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 485.548055][ T9726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 485.891673][ T30] audit: type=1326 audit(1752969203.365:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9828 comm="syz.4.909" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc2778e9a9 code=0x0 [ 486.174531][ T9726] usb 5-1: can't set config #1, error -71 [ 486.630287][ T9726] usb 5-1: USB disconnect, device number 17 [ 489.225010][ T9869] ubi0: attaching mtd0 [ 489.229230][ T9869] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 489.811455][ T5894] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 490.051500][ T5894] usb 5-1: Invalid ep0 maxpacket: 64 [ 491.328591][ T5894] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 491.342991][ T5887] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 491.391674][ T9726] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 491.552014][ T5894] usb 5-1: Invalid ep0 maxpacket: 64 [ 491.558018][ T5894] usb usb5-port1: attempt power cycle [ 491.624287][ T5887] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 491.634552][ T5887] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 491.643220][ T9726] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 491.648321][ T5887] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 491.665717][ T9726] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 491.671494][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 491.679695][ T9726] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 491.685199][ T5887] usb 3-1: SerialNumber: syz [ 491.706134][ T9726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 491.837011][ T9726] usb 2-1: SerialNumber: syz [ 491.870508][ T9726] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 491.878576][ T9726] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 492.340303][ T5894] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 492.355384][ T5887] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 492.364896][ T5887] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12 [ 492.575207][ T5894] usb 5-1: device not accepting address 20, error -71 [ 492.768845][ T9726] usb 2-1: USB disconnect, device number 12 [ 493.280264][ T5887] usb 3-1: USB disconnect, device number 26 [ 493.619608][ T30] audit: type=1326 audit(1752969211.125:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9884 comm="syz.3.921" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fb3b8e9a9 code=0x0 [ 494.031552][ T5894] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 494.364641][ T5894] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 494.835302][ T5894] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 495.331012][ T5894] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 495.449974][ T9915] syz.3.929: attempt to access beyond end of device [ 495.449974][ T9915] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 495.462957][ T9915] syz.3.929: attempt to access beyond end of device [ 495.462957][ T9915] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 495.475818][ T9915] Mount JFS Failure: -5 [ 495.822009][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 495.832018][ T5894] usb 5-1: SerialNumber: syz [ 496.079648][ T9914] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 496.195167][ T5894] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 496.246572][ T5894] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 496.958743][ T5894] usb 5-1: USB disconnect, device number 22 [ 497.054201][ T9934] 9pnet_fd: Insufficient options for proto=fd [ 497.138627][ T9936] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 497.192688][ T30] audit: type=1326 audit(1752969214.725:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9930 comm="syz.1.931" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8857f8e9a9 code=0x0 [ 497.235460][ T9936] sp0: Synchronizing with TNC [ 498.063278][ T9939] netlink: 72 bytes leftover after parsing attributes in process `syz.3.932'. [ 498.115826][ T9939] syz.3.932: attempt to access beyond end of device [ 498.115826][ T9939] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 498.165497][ T9939] syz.3.932: attempt to access beyond end of device [ 498.165497][ T9939] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 498.189652][ T9939] Mount JFS Failure: -5 [ 498.565111][ T9949] netlink: 72 bytes leftover after parsing attributes in process `syz.4.934'. [ 498.589518][ T9949] syz.4.934: attempt to access beyond end of device [ 498.589518][ T9949] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 498.604126][ T9949] syz.4.934: attempt to access beyond end of device [ 498.604126][ T9949] nbd4: rw=0, sector=120, nr_sectors = 8 limit=0 [ 498.617342][ T9949] Mount JFS Failure: -5 [ 501.135557][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.143243][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.019051][ T9726] hid-generic 0010:0004:0000.002A: collection stack underflow [ 502.044972][ T9726] hid-generic 0010:0004:0000.002A: item 0 4 0 12 parsing failed [ 502.129997][ T9726] hid-generic 0010:0004:0000.002A: probe with driver hid-generic failed with error -22 [ 502.327059][ T9984] 9pnet_fd: Insufficient options for proto=fd [ 502.551060][ T9986] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 502.565932][ T9986] sp0: Synchronizing with TNC [ 504.167254][ T9998] 9pnet_fd: Insufficient options for proto=fd [ 504.248947][T10000] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 504.306805][T10000] sp0: Synchronizing with TNC [ 506.108407][ T30] audit: type=1326 audit(1752969223.625:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10001 comm="syz.2.947" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f184bd8e9a9 code=0x0 [ 506.534612][T10020] ubi0: attaching mtd0 [ 506.538765][T10020] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 507.066947][ T30] audit: type=1326 audit(1752969224.595:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10011 comm="syz.4.949" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc2778e9a9 code=0x0 [ 507.089784][ T5894] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 507.251592][ T5894] usb 1-1: Invalid ep0 maxpacket: 64 [ 507.510446][ T5894] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 507.661576][ T5894] usb 1-1: Invalid ep0 maxpacket: 64 [ 507.667312][ T5894] usb usb1-port1: attempt power cycle [ 508.038664][T10031] syz.2.953: attempt to access beyond end of device [ 508.038664][T10031] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 508.052268][T10031] syz.2.953: attempt to access beyond end of device [ 508.052268][T10031] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 508.065507][T10031] Mount JFS Failure: -5 [ 508.368284][ T5894] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 508.411248][ T5894] usb 1-1: Invalid ep0 maxpacket: 64 [ 508.812621][ T5894] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 508.862720][ T5894] usb 1-1: Invalid ep0 maxpacket: 64 [ 509.162131][ T5894] usb usb1-port1: unable to enumerate USB device [ 511.361654][ T5894] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 511.387492][T10063] syz.1.961: attempt to access beyond end of device [ 511.387492][T10063] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 511.401435][T10063] syz.1.961: attempt to access beyond end of device [ 511.401435][T10063] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 511.414716][T10063] Mount JFS Failure: -5 [ 511.601511][ T5894] usb 3-1: Invalid ep0 maxpacket: 64 [ 511.761648][ T5894] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 511.949995][ T30] audit: type=1326 audit(1752969229.455:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.4.962" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc2778e9a9 code=0x0 [ 512.075103][ T5894] usb 3-1: Invalid ep0 maxpacket: 64 [ 512.089123][ T5894] usb usb3-port1: attempt power cycle [ 512.531518][ T5894] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 512.565024][ T5894] usb 3-1: Invalid ep0 maxpacket: 64 [ 513.214105][ T5894] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 513.743124][ T5894] usb 3-1: device descriptor read/8, error -71 [ 514.001848][ T9726] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 514.145540][ T5894] usb usb3-port1: unable to enumerate USB device [ 514.642181][ T9726] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 514.666973][ T9726] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 514.701338][ T9726] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 514.719760][ T9726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 514.730561][ T9726] usb 4-1: SerialNumber: syz [ 515.758328][ T9726] usb 4-1: can't set config #1, error -71 [ 515.783163][ T5909] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 515.841165][ T9726] usb 4-1: USB disconnect, device number 14 [ 515.872405][T10109] 9pnet_fd: Insufficient options for proto=fd [ 515.957927][T10111] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 516.033766][T10111] sp0: Synchronizing with TNC [ 516.641489][ T5909] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 517.063166][ T5909] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 517.175462][ T5909] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 517.186239][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 517.194644][ T5909] usb 5-1: SerialNumber: syz [ 517.881612][ T5909] usb 5-1: can't set config #1, error -71 [ 517.910060][ T5909] usb 5-1: USB disconnect, device number 23 [ 519.052172][ T5887] hid-generic 0010:0004:0000.002B: collection stack underflow [ 519.061740][ T5887] hid-generic 0010:0004:0000.002B: item 0 4 0 12 parsing failed [ 519.072989][ T5887] hid-generic 0010:0004:0000.002B: probe with driver hid-generic failed with error -22 [ 519.449394][T10143] syz.3.979: attempt to access beyond end of device [ 519.449394][T10143] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 519.464164][T10143] syz.3.979: attempt to access beyond end of device [ 519.464164][T10143] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 519.488220][T10143] Mount JFS Failure: -5 [ 520.016018][T10148] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 520.338465][T10158] syz.1.982: attempt to access beyond end of device [ 520.338465][T10158] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 520.363329][T10158] syz.1.982: attempt to access beyond end of device [ 520.363329][T10158] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 520.376459][T10158] Mount JFS Failure: -5 [ 521.181913][T10168] page: refcount:515 mapcount:0 mapping:ffff888058b7e080 index:0x0 pfn:0x4f400 [ 521.191444][T10168] head: order:9 mapcount:1 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 521.199966][T10168] aops:hugetlbfs_aops ino:8276 dentry name(?):"anon_hugepage" [ 521.207436][T10168] flags: 0xfff00000000041(locked|head|node=0|zone=1|lastcpupid=0x7ff) [ 521.215569][T10168] page_type: f4(hugetlb) [ 521.219790][T10168] raw: 00fff00000000041 ffffea0001360008 ffffc900047bfd68 ffff888058b7e080 [ 521.228371][T10168] raw: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000 [ 521.236948][T10168] head: 00fff00000000041 ffffea0001360008 ffffc900047bfd68 ffff888058b7e080 [ 521.245645][T10168] head: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000 [ 521.254317][T10168] head: 00fff00000000009 ffffea00013d0001 0000000000000000 0000000000000000 [ 521.262975][T10168] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000200 [ 521.271624][T10168] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 521.278885][T10168] page_owner tracks the page as allocated [ 521.285105][T10168] page last allocated via order 9, migratetype Movable, gfp_mask 0x146cca(GFP_HIGHUSER_MOVABLE|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 10079, tgid 10072 (syz.4.962), ts 511823925884, free_ts 506077397560 [ 521.305784][T10168] post_alloc_hook+0x1c0/0x230 [ 521.310581][T10168] get_page_from_freelist+0x1321/0x3890 [ 521.316126][T10168] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 521.322008][T10168] alloc_surplus_hugetlb_folio+0x1ad/0x4a0 [ 521.327800][T10168] alloc_hugetlb_folio+0xed4/0x1560 [ 521.332980][T10168] hugetlb_fault+0x2005/0x3070 [ 521.337728][T10168] handle_mm_fault+0xbfa/0xd10 [ 521.342478][T10168] __get_user_pages+0x589/0x3b80 [ 521.347398][T10168] populate_vma_page_range+0x278/0x3a0 [ 521.352842][T10168] __mm_populate+0x1d8/0x380 [ 521.357418][T10168] vm_mmap_pgoff+0x362/0x450 [ 521.361989][T10168] ksys_mmap_pgoff+0x1c8/0x5c0 [ 521.366737][T10168] __x64_sys_mmap+0x125/0x190 [ 521.371402][T10168] do_syscall_64+0xcd/0x4c0 [ 521.375903][T10168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.381782][T10168] page last free pid 10010 tgid 10001 stack trace: [ 521.388266][T10168] __free_frozen_pages+0x7fe/0x1180 [ 521.393461][T10168] __folio_put+0x329/0x450 [ 521.397859][T10168] hugetlb_free_folio+0xfc/0x140 [ 521.402785][T10168] __update_and_free_hugetlb_folio+0x1e3/0x420 [ 521.408928][T10168] update_and_free_hugetlb_folio+0xce/0x210 [ 521.414812][T10168] free_huge_folio+0x85b/0x1050 [ 521.419653][T10168] __folio_put+0x3be/0x450 [ 521.424048][T10168] folio_putback_hugetlb+0x449/0x550 [ 521.429333][T10168] migrate_pages+0xab8/0x23b0 [ 521.433995][T10168] do_mbind+0x6f0/0xf30 [ 521.438144][T10168] kernel_mbind+0x1e3/0x1f0 [ 521.442632][T10168] do_syscall_64+0xcd/0x4c0 [ 521.447117][T10168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.453103][T10168] ------------[ cut here ]------------ [ 521.458537][T10168] kernel BUG at mm/filemap.c:154! [ 521.463553][T10168] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 521.469949][T10168] CPU: 1 UID: 0 PID: 10168 Comm: syz.3.981 Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 PREEMPT(full) [ 521.481904][T10168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 521.491937][T10168] RIP: 0010:filemap_unaccount_folio+0xef/0x8c0 [ 521.498078][T10168] Code: f7 fd c9 ff 89 ee 31 ff 4c 8d 6b 30 e8 2a f9 c9 ff 85 ed 7e 17 e8 e1 fd c9 ff 48 c7 c6 80 03 b9 8b 48 89 df e8 62 ba 11 00 90 <0f> 0b e8 ca fd c9 ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 521.517666][T10168] RSP: 0018:ffffc9000484f3d0 EFLAGS: 00010046 [ 521.523712][T10168] RAX: 0000000000080000 RBX: ffffea00013d0000 RCX: ffffc90012a92000 [ 521.531664][T10168] RDX: 0000000000080000 RSI: ffffffff81f1eade RDI: ffff88802724a884 [ 521.539623][T10168] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 521.547573][T10168] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888058b7e080 [ 521.555523][T10168] R13: ffffea00013d0030 R14: 00000000000006c0 R15: ffffea00013d0000 [ 521.563490][T10168] FS: 00007f5fb49786c0(0000) GS:ffff888124820000(0000) knlGS:0000000000000000 [ 521.572414][T10168] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 521.578980][T10168] CR2: 00007f8858d62f98 CR3: 0000000026169000 CR4: 00000000003526f0 [ 521.586937][T10168] Call Trace: [ 521.590209][T10168] [ 521.593125][T10168] filemap_remove_folio+0xf1/0x250 [ 521.598239][T10168] remove_inode_hugepages+0x74a/0xed0 [ 521.603599][T10168] ? __schedule+0x1181/0x5de0 [ 521.608269][T10168] ? __pfx_remove_inode_hugepages+0x10/0x10 [ 521.614148][T10168] ? __pfx___schedule+0x10/0x10 [ 521.618985][T10168] ? __pfx_try_to_wake_up+0x10/0x10 [ 521.624184][T10168] ? up_write+0x209/0x520 [ 521.628498][T10168] hugetlbfs_fallocate+0xf3f/0x12e0 [ 521.633684][T10168] ? avc_has_perm_noaudit+0x149/0x3b0 [ 521.639055][T10168] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 521.644682][T10168] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 521.650300][T10168] ? vfs_fallocate+0x608/0x10c0 [ 521.655151][T10168] vfs_fallocate+0x608/0x10c0 [ 521.659816][T10168] ? __pfx_vfs_fallocate+0x10/0x10 [ 521.664929][T10168] ? madvise_vma_behavior+0x222c/0x2420 [ 521.670456][T10168] ? __sanitizer_cov_trace_pc+0x62/0x70 [ 521.675985][T10168] madvise_vma_behavior+0x21ca/0x2420 [ 521.681340][T10168] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 521.687050][T10168] ? __pfx_mas_prev+0x10/0x10 [ 521.691709][T10168] ? find_vma_prev+0xda/0x160 [ 521.696373][T10168] ? __pfx_find_vma_prev+0x10/0x10 [ 521.701471][T10168] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 521.707174][T10168] madvise_walk_vmas+0x1ce/0x2c0 [ 521.712093][T10168] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 521.717533][T10168] ? madvise_do_behavior+0x103/0x3f0 [ 521.722801][T10168] madvise_do_behavior+0x15d/0x3f0 [ 521.727896][T10168] ? __pfx_madvise_do_behavior+0x10/0x10 [ 521.733532][T10168] do_madvise+0x161/0x230 [ 521.737966][T10168] ? __pfx_do_madvise+0x10/0x10 [ 521.742816][T10168] __x64_sys_madvise+0xa9/0x110 [ 521.747685][T10168] do_syscall_64+0xcd/0x4c0 [ 521.752211][T10168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.758099][T10168] RIP: 0033:0x7f5fb3b8e9a9 [ 521.762497][T10168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 521.782088][T10168] RSP: 002b:00007f5fb4978038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 521.790482][T10168] RAX: ffffffffffffffda RBX: 00007f5fb3db6320 RCX: 00007f5fb3b8e9a9 [ 521.798436][T10168] RDX: 0000000000000009 RSI: 0000000000600002 RDI: 0000200000000000 [ 521.806404][T10168] RBP: 00007f5fb3c10d69 R08: 0000000000000000 R09: 0000000000000000 [ 521.814358][T10168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.822324][T10168] R13: 0000000000000000 R14: 00007f5fb3db6320 R15: 00007ffec73fe288 [ 521.830283][T10168] [ 521.833281][T10168] Modules linked in: [ 521.837158][T10168] ---[ end trace 0000000000000000 ]--- [ 521.842593][T10168] RIP: 0010:filemap_unaccount_folio+0xef/0x8c0 [ 521.848758][T10168] Code: f7 fd c9 ff 89 ee 31 ff 4c 8d 6b 30 e8 2a f9 c9 ff 85 ed 7e 17 e8 e1 fd c9 ff 48 c7 c6 80 03 b9 8b 48 89 df e8 62 ba 11 00 90 <0f> 0b e8 ca fd c9 ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 521.868526][T10168] RSP: 0018:ffffc9000484f3d0 EFLAGS: 00010046 [ 521.874571][T10168] RAX: 0000000000080000 RBX: ffffea00013d0000 RCX: ffffc90012a92000 [ 521.882532][T10168] RDX: 0000000000080000 RSI: ffffffff81f1eade RDI: ffff88802724a884 [ 521.890484][T10168] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 521.898435][T10168] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888058b7e080 [ 521.906410][T10168] R13: ffffea00013d0030 R14: 00000000000006c0 R15: ffffea00013d0000 [ 521.914362][T10168] FS: 00007f5fb49786c0(0000) GS:ffff888124820000(0000) knlGS:0000000000000000 [ 521.923274][T10168] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 521.929855][T10168] CR2: 00007f8858d62f98 CR3: 0000000026169000 CR4: 00000000003526f0 [ 521.937811][T10168] Kernel panic - not syncing: Fatal exception [ 521.944073][T10168] Kernel Offset: disabled [ 521.948374][T10168] Rebooting in 86400 seconds..