last executing test programs: 22.665257758s ago: executing program 4 (id=61): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./trace\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/instances/inst1\x00', 0x1ff) openat$full(0xffffffffffffff9c, 0x0, 0x16b300, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x81980, 0x108) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0, @ANYBLOB], 0x50) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r2) socket$key(0xf, 0x3, 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000400)=0x9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) fsmount(0xffffffffffffffff, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0x111, 0x4b4, 0x1f0, 0xd4feffff, 0x2b8, 0x20a, 0x278, 0x2b8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00, 0xffffff00], [], 'ipvlan0\x00', 'caif0\x00', {}, {0xff}, 0x6, 0xfe}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [0x0, 0xff, 0xff], 0x4e20, 0x4e23, 0x4e21, 0x4e24, 0x4917, 0x0, 0x4, 0x9, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) 22.12101629s ago: executing program 4 (id=63): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x60, 0x887}, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x22) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x40000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FE_READ_UNCORRECTED_BLOCKS(r9, 0x80046f49, &(0x7f00000001c0)) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r8, 0x0, 0x0}, 0x10) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="358749"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f00010000", 0x23) 20.966437169s ago: executing program 4 (id=67): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$key(0xf, 0x3, 0x2) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x3, r5, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0fe104", 0x14, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty}}}}}}, 0x0) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa0}}, 0x0) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) 18.769467086s ago: executing program 4 (id=68): mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) mount(&(0x7f0000000640)=@filename='proc\x00', &(0x7f0000000680)='./proc\x00', &(0x7f00000006c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r1, &(0x7f0000000740)='10\n', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0) write(r2, &(0x7f00000007c0)='10\n', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='tcp 2049\n', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f0000000240)='1\n', 0x2) 10.443726116s ago: executing program 3 (id=88): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./trace\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/instances/inst1\x00', 0x1ff) openat$full(0xffffffffffffff9c, 0x0, 0x16b300, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x81980, 0x108) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0, @ANYBLOB], 0x50) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r2) socket$key(0xf, 0x3, 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000400)=0x9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) fsmount(0xffffffffffffffff, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0x111, 0x4b4, 0x1f0, 0xd4feffff, 0x2b8, 0x20a, 0x278, 0x2b8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00, 0xffffff00], [], 'ipvlan0\x00', 'caif0\x00', {}, {0xff}, 0x6, 0xfe}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [0x0, 0xff, 0xff], 0x4e20, 0x4e23, 0x4e21, 0x4e24, 0x4917, 0x0, 0x4, 0x9, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) 10.182738224s ago: executing program 4 (id=90): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 8.880516351s ago: executing program 0 (id=93): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x40, 0xa, 0x17, "7e359cadbaf6f4c98a1e023990fbe865fed5386134fb4d"}, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x26, 0x301, 0x70bd28, 0x25dfdbfb, {0x15}, [@typed={0x8, 0x14e, 0x0, 0x0, @uid=r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x24008002) ioctl$TCSETS(r1, 0x5402, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb881}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x2e}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008006}, 0x4040844) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0xe4, 0xad, "dfd044f8c05250d1"}}}}, 0xf) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_vhci(&(0x7f0000000740)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_AUTH_ENABLE={{0xfe}, 0x8}}}, 0x7) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) r6 = bpf$ITER_CREATE(0x21, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f00000004c0)=0x0, &(0x7f0000000800)=0x4) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000840)=@bloom_filter={0x1e, 0x40, 0xffff, 0x9, 0x3041, r6, 0x6, '\x00', r7, r6, 0x4, 0x1, 0x0, 0x6}, 0x50) r8 = gettid() r9 = dup2(r5, r1) recvmsg$unix(r9, &(0x7f000001c580)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f000001c4c0)=[{&(0x7f0000000280)=""/224, 0xe0}, {&(0x7f0000000540)=""/197, 0xc5}, {&(0x7f0000000640)=""/118, 0x76}, {&(0x7f00000006c0)=""/116, 0x74}, {&(0x7f0000000780)=""/103, 0x67}, {&(0x7f000001a340)=""/4096, 0x1000}, {&(0x7f000001b340)=""/193, 0xc1}, {&(0x7f000001b440)=""/108, 0x6c}, {&(0x7f000001b4c0)=""/4096, 0x1000}], 0x9}, 0x2) r10 = syz_open_procfs(r8, &(0x7f0000000000)='net/tcp\x00') pread64(r10, &(0x7f0000001340)=""/102390, 0x18ff6, 0x2013) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.365136338s ago: executing program 3 (id=95): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x8001, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40186f40, &(0x7f0000000180)={0x8, 0x0, 0xe3f, 0x1, '\x00', 0x10003}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) fcntl$setlease(r0, 0x400, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="3103fc1f0000000000400800000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) 8.291626973s ago: executing program 2 (id=96): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00003b2000/0x4000)=nil) socket(0x40000000015, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) lseek(r0, 0x800, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x2}) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) 5.983894604s ago: executing program 1 (id=98): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = dup2(r0, r0) syz_ublk_setup_io_uring(0x78ac, &(0x7f0000000040)={0x0, 0xa1c3, 0x80, 0x3, 0xfffffffc, 0x0, r1}, &(0x7f00000001c0), 0x0, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) write(r4, &(0x7f0000000000), 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @empty, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r6, 0x1, &(0x7f000006b000)={{0x0, 0x989680}}, 0x0) timer_settime(r6, 0x1, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 5.222433562s ago: executing program 1 (id=99): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) 4.880609152s ago: executing program 3 (id=100): mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) mount(&(0x7f0000000640)=@filename='proc\x00', &(0x7f0000000680)='./proc\x00', &(0x7f00000006c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r1, &(0x7f0000000740)='10\n', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0) write(r2, &(0x7f00000007c0)='10\n', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='tcp 2049\n', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f0000000240)='1\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f00000002c0)='nfsd 127.0.0.1 2147483647 testdomain\n', 0x25) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r6, &(0x7f0000000340)='testdomain / 2147483647 8194 0 0 0\n', 0x23) r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r7, &(0x7f00000003c0)='testdomain 1 \\x00000000 2147483647 /\n', 0x25) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000440)='127.0.0.1:/\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='addr=127.0.0.1,clientaddr=127.0.0.1\x00']) 4.561507771s ago: executing program 2 (id=101): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testnqn\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./backing_file\x00', 0x42, 0x1ed) ftruncate(r1, 0x100000) close(r1) write(0xffffffffffffffff, &(0x7f0000000480)='./backing_file\x00', 0xe) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testnqn/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000580)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1\x00', 0x1ed) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r4, &(0x7f0000000680)='loop\x00', 0x4) symlinkat(&(0x7f00000006c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testnqn\x00') r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write(r5, &(0x7f0000000780)='transport=loop,nqn=testnqn\x00', 0x1a) nanosleep(&(0x7f0000000800)={0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000840)='./sys\x00', &(0x7f0000000880)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/class/nvme/nvme0/nvme0n1/wwid\x00', 0x0, 0x0) read(r6, &(0x7f0000000900), 0x64) r7 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/nvme/nvme1/nvme1n1/wwid\x00', 0x0, 0x0) read(r7, &(0x7f0000000980), 0x64) 3.654248787s ago: executing program 1 (id=102): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testnqn\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./backing_file\x00', 0x42, 0x1ed) ftruncate(r1, 0x100000) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='./backing_file\x00', 0xe) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testnqn/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r4, &(0x7f0000000580)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1\x00', 0x1ed) write(0xffffffffffffffff, &(0x7f0000000680)='loop\x00', 0x4) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write(r5, &(0x7f0000000780)='transport=loop,nqn=testnqn\x00', 0x1a) nanosleep(&(0x7f0000000800)={0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000840)='./sys\x00', &(0x7f0000000880)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/class/nvme/nvme0/nvme0n1/wwid\x00', 0x0, 0x0) read(r6, &(0x7f0000000900), 0x64) r7 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/nvme/nvme1/nvme1n1/wwid\x00', 0x0, 0x0) read(r7, &(0x7f0000000980), 0x64) 3.647392846s ago: executing program 2 (id=103): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/pm_debug_messages', 0x100102, 0x0) sendfile(r0, r0, 0x0, 0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(0x0, r2) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x50, r3, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4080000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}}, 0x40010) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) syz_clone3(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101080, 0x0) 2.7504002s ago: executing program 1 (id=104): bpf$PROG_LOAD(0x5, &(0x7f0000003a40)={0x1c, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000010000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300bf0900000000000055090100000000000a432c279500000000000000bf91000000000000b7020000010000008500000084000000b700000000ffff0095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x3c, 0x16, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xac}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32, @ANYBLOB="0000000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x44}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.628693835s ago: executing program 1 (id=105): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') r5 = fanotify_init(0x40, 0x101000) fanotify_mark(r5, 0x1, 0x8000039, r4, 0x0) io_setup(0x9, &(0x7f0000000180)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f00000001c0)={0x0, 0x80000, 0x0, 0x2, 0x18, "00000000000700000000fffe00"}) r7 = syz_open_pts(r6, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000240)=0x1) 2.620647552s ago: executing program 2 (id=106): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000001b00)={'\x00', 0x99e5, 0x19, 0x7, 0x4, 0x800, 0x0}) lstat(&(0x7f0000000480)='./sys/bus/usb/drivers/apple-mfi-fastcharge/bind\x00', &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getegid() syz_clone3(&(0x7f0000001f00)={0xa000, &(0x7f0000001c40), &(0x7f0000001c80)=0x0, &(0x7f0000001cc0), {0x1c}, &(0x7f0000001d00)=""/164, 0xa4, &(0x7f0000001dc0)=""/246, &(0x7f0000001ec0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r3}}, 0x58) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r8, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r8, 0x0, 0x0) write$FUSE_ATTR(r8, &(0x7f0000000240)={0x78, 0x0, r9, {0x2000000007, 0x0, 0x0, {0x4, 0xffffffffffffffff, 0x55, 0x51d4, 0x0, 0x3, 0x2, 0x0, 0x1000000, 0x4000, 0xa0000000, r10, r11, 0x0, 0x0, 0x1000000}}}, 0x78) r12 = getpid() getresuid(&(0x7f0000001f80)=0x0, &(0x7f0000001fc0), &(0x7f0000002000)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000025c0)=0x0) r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) r17 = ioctl$KVM_CREATE_VCPU(r16, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r16, r17, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) statx(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x80, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000400)=[0xee01, 0xee01, 0xee00, 0x0, 0xee01, 0xffffffffffffffff]) fchown(r16, r18, r19) sendmmsg$unix(r3, &(0x7f0000003740)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001840)=[{&(0x7f00000002c0)="058ee876212e5ab24548d94dbc1a34449bd9d9786caee303f582e52008f28357a62c182fba94daddcff680dd91972a01949ce61b3f11bef8829d4ef305caf75bc009d7f24a1a4547d784584d3bf3c2634d2aa8513f4db7c7e87e188db0c8f3cbe24b40e0", 0x64}, {&(0x7f0000000340)="2e7644da4fc775443cc264f8fd38430a1ae7fa4384d3cd9bbc32a75c4f08efbeeb8b7140c6e1306e6f70947031e75f308c30173509564e568fd43693b34eda12eaa4aa0a46881a0978fafea50b8585f640d3d3888bf541fc300e0303a3fae7cc030917deb582661e83d39986462727f038ea567566d955db74ddf1ebff1ed7b85fb57f6a9691043bbd60096a5b031bfeae59ee9143bc2543d40c8a878128d31c7da72cf75056e2c2d85d707a1e1819d8f0b2e720ea0376fa9afb561453c1cff163a17a5efde1d1de60efd2cffa0f7c4e92d7626d10fb1bace73472418f2c0defd765d2d0d804a02d85ec73f803f559", 0xef}, {&(0x7f0000000440)="2d9d0c51fac9d883e0ce5532bf1cf9a598761b84675849bed0d5848680e26f7c480fb22c7fcd6150d7b7c9c60d3b91db7d74227eb59f9a1e2cfb558b450d", 0x3e}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)}, {&(0x7f0000001680)="29fa6e606f260dcd4e02c9353952cfc275f838cf8fdf432aec1d49cfe1e9460b8d087bf722bfeb8d5aaafada47decd26398f4b2bc497ad9529bfbe19161bc22dcbe61f2e524025e17f219313919331a8a29bf8d8e4485b9c47f70e3a29514148d2a87eeca09e1a58d0479d62d409402c6062e1ace50150270e0ed98e17b057658ebc8147", 0x84}, {&(0x7f0000001740)="01291bc7ad02be22f7a42e1c5f2d2fa45afd4687f7d9461e3c4f53762124ffe31ed1e5e920b62f60c802f4313eac60751f3e24c9bd979e044102d940ea9d21bf3633920ccc836831cb60ea1138ef89161268d0bcb83ea8b8cd78d33de5207732b746826cd78ad650160538363a47f75367020595c261d59544d7e132b555b2a0280b889a4aa92c44a4b88548", 0x8c}, {&(0x7f0000001800)="8c890b53dfc7d8209191055afc439b78d030a4a1756de62db5593d123b791efc3b1812ad27bf9b07f5ca", 0x2a}], 0x8, &(0x7f0000002040)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [r1, 0xffffffffffffffff, r3, r2, r0, r2, r3, r2, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r2]}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r7, r10, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, 0xee01}}}], 0x110, 0x4000040}}, {{&(0x7f0000002180)=@file={0x1, './sys/bus/usb/drivers/apple-mfi-fastcharge/bind\x00'}, 0x6e, &(0x7f0000002540)=[{&(0x7f0000002200)="1523a7ba20be267d9449d4bbac5f6a3d34e536acdc83099607ce57cdad366498194e2485fc3a1cb81ad852c6bfda1a33b9a26c014d67e4d68127d444b525734e", 0x40}, {&(0x7f0000002240)="8dcbbc766543dfcf56673d0f4ac77eb949973c10f5e7dad297246746ee2a1a55ad7dae94c975de3249f30c176c32119c1b255308f1155fa8b0459d29871e35eee6e2f2b58557b08e", 0x48}, {&(0x7f0000002300)="90fa167ea9a8d7e4d05aa9106578d80c739b7531d2fd2dd041efe14369800ca5f131c9a708c80db12a5a4499e5c876c70da61af512bab3ce2d0e6f51644a3115e6e0dec6a29b410eca0e53c093f74274a1149dcbdc0da418392594d837df838bf2dcebdb6cb7d69b1f20bd15365da8e5eccf5682aa2e36adc12e2f342288a396783af1ac211bf0ece4e8558682f012896420b2c9d3ea59b9fa161770e7f7de8630db758cf5be09039a178e2825b265c836e59f330b375c4c9ace041133b2", 0xbe}, {&(0x7f00000023c0)="666d5ee61fbf6280d5e834f4ece1348544cea2f9fa2041f626906d1beb175bb0369bff939b2a", 0x26}, {&(0x7f0000002400)="5f461df4d10f99d4d26098266048747103f3c2f729273b2bb325b44109c28ec23e49b1db2343a8f56c7212b68598e13c738591c2a5b0d5c1b79fe7bc0c29d4e3ab8c75ece129b70a55b320b607a26f1fdb538e291aa15b0749d15769ac205fb80a295a2b66963f4e93da023ccff74fe032fb7ab4b669f2365d7287896c0f556d0bcb8414628c22f9aa43a81aed3b33396ee19b3297c59d06a7a948690950e17ad09c3570f0876df961c6f1d740633aa57215144dac89efa8ff82203a286803c295d1ba7f34ef7b18b547241a264ff1c532e4d6a261f992abc3d17c", 0xdb}, {&(0x7f0000002500)="bde9e99f0bd71ad6de96b9dcf55ca0672c5b7a1053f5b287725cd6ee80760783dd7235474c27d3ec08fdde", 0x2b}], 0x6, &(0x7f0000002600)=[@cred={{0x1c, 0x1, 0x2, {r14, r18}}}], 0x20, 0x880}}, {{&(0x7f0000002640)=@file={0x1, './sys/bus/usb/drivers/apple-mfi-fastcharge/bind\x00'}, 0x6e, &(0x7f0000003700)=[{&(0x7f00000026c0)}, {0x0}], 0x2, 0x0, 0x0, 0x1}}], 0x3, 0x20084) write(r3, &(0x7f0000000600)='usb1', 0x4) r20 = syz_open_procfs$userns(0x0, &(0x7f00000000c0)) ioctl$F2FS_IOC_GET_FEATURES(r20, 0x8004f50c, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0) 1.768468117s ago: executing program 0 (id=107): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000340), 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1.680637351s ago: executing program 2 (id=108): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testnqn\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./backing_file\x00', 0x42, 0x1ed) ftruncate(r1, 0x100000) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='./backing_file\x00', 0xe) write(0xffffffffffffffff, &(0x7f0000000500)='1\x00', 0x1) write(0xffffffffffffffff, &(0x7f0000000580)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1\x00', 0x1ed) r3 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r3, &(0x7f0000000680)='loop\x00', 0x4) symlinkat(&(0x7f00000006c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testnqn\x00') r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write(r4, &(0x7f0000000780)='transport=loop,nqn=testnqn\x00', 0x1a) nanosleep(&(0x7f0000000800)={0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000840)='./sys\x00', &(0x7f0000000880)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/class/nvme/nvme0/nvme0n1/wwid\x00', 0x0, 0x0) read(r5, &(0x7f0000000900), 0x64) r6 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/nvme/nvme1/nvme1n1/wwid\x00', 0x0, 0x0) read(r6, &(0x7f0000000980), 0x64) 1.650042758s ago: executing program 0 (id=109): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='usbip-vudc\x00', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='pcspkr\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u/720p\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/u\x00') symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.0/control/class/fs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00') write(0xffffffffffffffff, &(0x7f0000000780)='pcspkr\x00', 0x6) r2 = syz_open_dev$video(&(0x7f0000000100), 0x10, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559}) syz_open_dev$video(&(0x7f0000000100), 0x11, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559}) r3 = syz_open_dev$video(&(0x7f0000000100), 0x14, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559}) 1.552419088s ago: executing program 3 (id=110): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000340), 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r1, &(0x7f0000000480)='./backing_file\x00', 0xe) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testnqn/namespaces/1/buffered_io\x00', 0x2, 0x0) 1.551171509s ago: executing program 4 (id=111): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xc0, 0x104) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0xe, 0x0, &(0x7f0000000740)="00800000000000000045a9000000", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf}, 0x50) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r2) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20088840}, 0x24000000) syz_clone3(0x0, 0x0) r6 = getpid() sched_setaffinity(r6, 0x8, &(0x7f00000002c0)=0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x20000801) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x857, 0x0, 0x55}]}) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) 1.308870069s ago: executing program 0 (id=112): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1", 0x12) write$binfmt_elf64(r1, &(0x7f0000000400)=ANY=[@ANYRESOCT, @ANYRES32=r0, @ANYRES64, @ANYRES64], 0xfffffdcf) connect$unix(r1, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) 1.276270225s ago: executing program 1 (id=113): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) 1.179666781s ago: executing program 0 (id=114): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='127.0.0.1\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='7777\x00', 0x4) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0\x00', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/local\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='1\x00', 0x1) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/mycluster/heartbeat/myregion/block_bytes\x00', 0x2, 0x0) write(r4, &(0x7f00000003c0)='512\x00', 0x3) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/mycluster/heartbeat/myregion/blocks\x00', 0x2, 0x0) write(r5, &(0x7f0000000440)='255\x00', 0x3) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/cluster/mycluster/heartbeat/myregion/start_block\x00', 0x2, 0x0) write(r6, &(0x7f00000004c0)='1\x00', 0x1) close(r6) mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x61c0, 0x700) r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x2, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./backing_file\x00', 0x42, 0x1ff) fallocate(r8, 0x0, 0x0, 0x100000) ioctl$LOOP_SET_FD(r7, 0x4c00, r8) write(0xffffffffffffffff, &(0x7f00000005c0)='3\x00', 0x1) (async) close(0xffffffffffffffff) 975.330327ms ago: executing program 3 (id=115): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='127.0.0.1\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='7777\x00', 0x4) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0\x00', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/local\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='1\x00', 0x1) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/mycluster/heartbeat/myregion/block_bytes\x00', 0x2, 0x0) write(r4, &(0x7f00000003c0)='512\x00', 0x3) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/mycluster/heartbeat/myregion/blocks\x00', 0x2, 0x0) write(r5, &(0x7f0000000440)='255\x00', 0x3) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/cluster/mycluster/heartbeat/myregion/start_block\x00', 0x2, 0x0) write(r6, &(0x7f00000004c0)='1\x00', 0x1) close(r6) mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x61c0, 0x700) r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x2, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./backing_file\x00', 0x42, 0x1ff) fallocate(r8, 0x0, 0x0, 0x100000) ioctl$LOOP_SET_FD(r7, 0x4c00, r8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/heartbeat/myregion/dev\x00', 0x2, 0x0) write(r9, &(0x7f00000005c0)='3\x00', 0x1) (async) 896.670035ms ago: executing program 0 (id=116): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='127.0.0.1\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='7777\x00', 0x4) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0\x00', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/local\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='1\x00', 0x1) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/mycluster/heartbeat/myregion/block_bytes\x00', 0x2, 0x0) write(r4, &(0x7f00000003c0)='512\x00', 0x3) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/mycluster/heartbeat/myregion/blocks\x00', 0x2, 0x0) write(r5, &(0x7f0000000440)='255\x00', 0x3) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/cluster/mycluster/heartbeat/myregion/start_block\x00', 0x2, 0x0) write(r6, &(0x7f00000004c0)='1\x00', 0x1) close(r6) mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x61c0, 0x700) r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x2, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./backing_file\x00', 0x42, 0x1ff) fallocate(r8, 0x0, 0x0, 0x100000) ioctl$LOOP_SET_FD(r7, 0x4c00, r8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/heartbeat/myregion/dev\x00', 0x2, 0x0) write(r9, &(0x7f00000005c0)='3\x00', 0x1) (async) 736.132317ms ago: executing program 2 (id=117): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x40, 0xa, 0x17, "7e359cadbaf6f4c98a1e023990fbe865fed5386134fb4d"}, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x26, 0x301, 0x70bd28, 0x25dfdbfb, {0x15}, [@typed={0x8, 0x14e, 0x0, 0x0, @uid=r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x24008002) ioctl$TCSETS(r1, 0x5402, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb881}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x2e}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008006}, 0x4040844) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0xe4, 0xad, "dfd044f8c05250d1"}}}}, 0xf) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_vhci(&(0x7f0000000740)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_AUTH_ENABLE={{0xfe}, 0x8}}}, 0x7) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, &(0x7f0000000800)) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000840)=@bloom_filter={0x1e, 0x40, 0xffff, 0x9, 0x3041, r6, 0x6, '\x00', 0x0, r6, 0x4, 0x1, 0x0, 0x6}, 0x50) r7 = gettid() r8 = dup2(r5, r1) recvmsg$unix(r8, &(0x7f000001c580)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f000001c4c0)=[{&(0x7f0000000280)=""/224, 0xe0}, {&(0x7f0000000540)=""/197, 0xc5}, {&(0x7f0000000640)=""/118, 0x76}, {&(0x7f00000006c0)=""/116, 0x74}, {&(0x7f0000000780)=""/103, 0x67}, {&(0x7f000001a340)=""/4096, 0x1000}, {&(0x7f000001b340)=""/193, 0xc1}, {&(0x7f000001b440)=""/108, 0x6c}, {&(0x7f000001b4c0)=""/4096, 0x1000}], 0x9}, 0x2) r9 = syz_open_procfs(r7, &(0x7f0000000000)='net/tcp\x00') pread64(r9, &(0x7f0000001340)=""/102390, 0x18ff6, 0x2013) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=118): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testnqn\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./backing_file\x00', 0x42, 0x1ed) ftruncate(r1, 0x100000) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='./backing_file\x00', 0xe) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testnqn/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r4, &(0x7f0000000580)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1\x00', 0x1ed) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r5, &(0x7f0000000680)='loop\x00', 0x4) symlinkat(&(0x7f00000006c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testnqn\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write(r6, &(0x7f0000000780)='transport=loop,nqn=testnqn\x00', 0x1a) kernel console output (not intermixed with test programs): 52.571893][ T30] audit: type=1400 audit(1785860859.148:128): avc: denied { write } for pid=5582 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.10' (ED25519) to the list of known hosts. [ 59.969549][ T30] audit: type=1400 audit(1785860866.548:129): avc: denied { mounton } for pid=5594 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 59.993266][ T30] audit: type=1400 audit(1785860866.568:130): avc: denied { mount } for pid=5594 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.996307][ T5594] cgroup: Unknown subsys name 'net' [ 60.022486][ T30] audit: type=1400 audit(1785860866.598:131): avc: denied { unmount } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 60.156026][ T5594] cgroup: Unknown subsys name 'cpuset' [ 60.163757][ T5594] cgroup: Unknown subsys name 'rlimit' [ 60.322929][ T30] audit: type=1400 audit(1785860866.898:132): avc: denied { setattr } for pid=5594 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.346618][ T30] audit: type=1400 audit(1785860866.898:133): avc: denied { create } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.381563][ T30] audit: type=1400 audit(1785860866.898:134): avc: denied { write } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.402284][ T30] audit: type=1400 audit(1785860866.898:135): avc: denied { read } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.427348][ T30] audit: type=1400 audit(1785860866.898:136): avc: denied { mounton } for pid=5594 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 60.435513][ T5596] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 60.452635][ T30] audit: type=1400 audit(1785860866.898:137): avc: denied { mount } for pid=5594 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 60.484302][ T30] audit: type=1400 audit(1785860867.048:138): avc: denied { relabelto } for pid=5596 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 61.421128][ T5594] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.453163][ T5614] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.461849][ T5614] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.470538][ T5619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.476160][ T5617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.479948][ T5619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.487127][ T5617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.493624][ T5619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.499723][ T5617] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.513821][ T5619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.514673][ T5617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.526626][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.536653][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.544496][ T5617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.544694][ T5621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.552887][ T5617] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.566843][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.567403][ T5625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.575784][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.582126][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.596327][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.596664][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.604361][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.612210][ T5625] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.628920][ T5625] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.644153][ T5625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.848521][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.855935][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.863044][ T5606] bridge_slave_0: entered allmulticast mode [ 64.870002][ T5606] bridge_slave_0: entered promiscuous mode [ 64.910015][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.917174][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.924325][ T5606] bridge_slave_1: entered allmulticast mode [ 64.931371][ T5606] bridge_slave_1: entered promiscuous mode [ 64.974581][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.981720][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.989258][ T5609] bridge_slave_0: entered allmulticast mode [ 64.996027][ T5609] bridge_slave_0: entered promiscuous mode [ 65.019260][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.026448][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.033643][ T5609] bridge_slave_1: entered allmulticast mode [ 65.040304][ T5609] bridge_slave_1: entered promiscuous mode [ 65.048997][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.089293][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.130136][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.137478][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.144828][ T5607] bridge_slave_0: entered allmulticast mode [ 65.151489][ T5607] bridge_slave_0: entered promiscuous mode [ 65.158232][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.165317][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.172395][ T5622] bridge_slave_0: entered allmulticast mode [ 65.179262][ T5622] bridge_slave_0: entered promiscuous mode [ 65.186154][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.193215][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.201240][ T5608] bridge_slave_0: entered allmulticast mode [ 65.208172][ T5608] bridge_slave_0: entered promiscuous mode [ 65.216956][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.232900][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.240134][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.247776][ T5607] bridge_slave_1: entered allmulticast mode [ 65.254599][ T5607] bridge_slave_1: entered promiscuous mode [ 65.261231][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.268310][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.275581][ T5622] bridge_slave_1: entered allmulticast mode [ 65.282209][ T5622] bridge_slave_1: entered promiscuous mode [ 65.288843][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.296007][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.303210][ T5608] bridge_slave_1: entered allmulticast mode [ 65.310072][ T5608] bridge_slave_1: entered promiscuous mode [ 65.319207][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.329730][ T5606] team0: Port device team_slave_0 added [ 65.362254][ T5606] team0: Port device team_slave_1 added [ 65.401682][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.412618][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.424121][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.434740][ T5609] team0: Port device team_slave_0 added [ 65.448499][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.458977][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.469680][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.480025][ T5609] team0: Port device team_slave_1 added [ 65.492710][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.499776][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.525906][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.568416][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.575477][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.601411][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.614135][ T5625] Bluetooth: hci1: command tx timeout [ 65.638533][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.645552][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.671666][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.688772][ T5607] team0: Port device team_slave_0 added [ 65.695420][ T5614] Bluetooth: hci0: command tx timeout [ 65.697609][ T5607] team0: Port device team_slave_1 added [ 65.701505][ T5625] Bluetooth: hci2: command tx timeout [ 65.707994][ T5622] team0: Port device team_slave_0 added [ 65.712515][ T5614] Bluetooth: hci4: command tx timeout [ 65.718078][ T5623] Bluetooth: hci3: command tx timeout [ 65.726048][ T5622] team0: Port device team_slave_1 added [ 65.735679][ T5608] team0: Port device team_slave_0 added [ 65.741757][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.748831][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.776937][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.780225][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.783611][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.816148][ T5608] team0: Port device team_slave_1 added [ 65.865428][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.872526][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.898658][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.910367][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.917525][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.943483][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.964659][ T5609] hsr_slave_0: entered promiscuous mode [ 65.971334][ T5609] hsr_slave_1: entered promiscuous mode [ 65.981220][ T5606] hsr_slave_0: entered promiscuous mode [ 65.987392][ T5606] hsr_slave_1: entered promiscuous mode [ 65.993235][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 65.999030][ T5606] Cannot create hsr debugfs directory [ 66.004981][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.011969][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.037902][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.049324][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.056273][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.082212][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.093441][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.100384][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.126590][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.139977][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.146931][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.172871][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.319636][ T5607] hsr_slave_0: entered promiscuous mode [ 66.325728][ T5607] hsr_slave_1: entered promiscuous mode [ 66.331546][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 66.337520][ T5607] Cannot create hsr debugfs directory [ 66.346104][ T5622] hsr_slave_0: entered promiscuous mode [ 66.352087][ T5622] hsr_slave_1: entered promiscuous mode [ 66.358293][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 66.364044][ T5622] Cannot create hsr debugfs directory [ 66.383729][ T5608] hsr_slave_0: entered promiscuous mode [ 66.389715][ T5608] hsr_slave_1: entered promiscuous mode [ 66.395696][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 66.401404][ T5608] Cannot create hsr debugfs directory [ 66.649394][ T5609] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.660589][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.668869][ T5609] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.677677][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.701282][ T5609] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.710522][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.740393][ T5609] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.749984][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.801550][ T5606] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.810949][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.818731][ T5606] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.828842][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.836680][ T5606] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.845654][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.853343][ T5606] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.862492][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.938104][ T5607] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.949001][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.957027][ T5607] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.966881][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.979929][ T5607] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.988656][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.996893][ T5607] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.005363][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.080344][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.102045][ T5622] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.112187][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.120908][ T5622] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.129881][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.147140][ T5622] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.157185][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.165542][ T5622] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.174049][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.187879][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.229866][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.237325][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.250042][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.260343][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.267466][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.313052][ T5608] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.325007][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.339358][ T5608] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.347929][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.356384][ T5608] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.366834][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.375025][ T5608] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.384045][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.395960][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.416894][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.423998][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.439464][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.446552][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.533177][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.589714][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.622051][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.629248][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.644896][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.658101][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.665263][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.694208][ T5623] Bluetooth: hci1: command tx timeout [ 67.736107][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.773469][ T5623] Bluetooth: hci3: command tx timeout [ 67.774203][ T5614] Bluetooth: hci4: command tx timeout [ 67.778884][ T5623] Bluetooth: hci2: command tx timeout [ 67.778901][ T5623] Bluetooth: hci0: command tx timeout [ 67.810812][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.841465][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.860602][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.867764][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.879692][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.886793][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.910845][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.917999][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.941489][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.948672][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.185919][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.365911][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.489708][ T5606] veth0_vlan: entered promiscuous mode [ 68.543616][ T5606] veth1_vlan: entered promiscuous mode [ 68.615005][ T5606] veth0_macvtap: entered promiscuous mode [ 68.641895][ T5606] veth1_macvtap: entered promiscuous mode [ 68.687538][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.720332][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.833588][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.883489][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.895005][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.904726][ T5609] veth0_vlan: entered promiscuous mode [ 68.938337][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.949722][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.982392][ T5609] veth1_vlan: entered promiscuous mode [ 68.994224][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.011686][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.019922][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.065420][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.080368][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.089078][ T5609] veth0_macvtap: entered promiscuous mode [ 69.109463][ T5609] veth1_macvtap: entered promiscuous mode [ 69.120221][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 69.120234][ T30] audit: type=1400 audit(1785860875.698:152): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.llJkII/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 69.122648][ T5607] veth0_vlan: entered promiscuous mode [ 69.133213][ T30] audit: type=1400 audit(1785860875.708:153): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.181612][ T30] audit: type=1400 audit(1785860875.708:154): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.llJkII/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 69.209014][ T30] audit: type=1400 audit(1785860875.708:155): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 69.245275][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.248943][ T5606] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.253087][ T30] audit: type=1400 audit(1785860875.738:156): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.llJkII/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 69.270738][ T144] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.296901][ T30] audit: type=1400 audit(1785860875.738:157): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.llJkII/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 69.316836][ T5608] veth0_vlan: entered promiscuous mode [ 69.335064][ T30] audit: type=1400 audit(1785860875.738:158): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 69.356096][ T30] audit: type=1400 audit(1785860875.768:159): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 69.381262][ T30] audit: type=1400 audit(1785860875.768:160): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="gadgetfs" ino=7629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 69.385598][ T5622] veth0_vlan: entered promiscuous mode [ 69.406677][ T30] audit: type=1400 audit(1785860875.788:161): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 69.415166][ T5622] veth1_vlan: entered promiscuous mode [ 69.442077][ T5607] veth1_vlan: entered promiscuous mode [ 69.452077][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.497492][ T5608] veth1_vlan: entered promiscuous mode [ 69.514669][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.544025][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.572468][ T5607] veth0_macvtap: entered promiscuous mode [ 69.597398][ T5622] veth0_macvtap: entered promiscuous mode [ 69.610847][ T5607] veth1_macvtap: entered promiscuous mode [ 69.634375][ T3318] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.652765][ T5622] veth1_macvtap: entered promiscuous mode [ 69.677026][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.703091][ T5608] veth0_macvtap: entered promiscuous mode [ 69.744102][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.767720][ T5608] veth1_macvtap: entered promiscuous mode [ 69.774843][ T5614] Bluetooth: hci1: command tx timeout [ 69.786509][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.798706][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.808770][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.853644][ T5625] Bluetooth: hci2: command tx timeout [ 69.854569][ T5623] Bluetooth: hci3: command tx timeout [ 69.859123][ T5614] Bluetooth: hci0: command tx timeout [ 69.864851][ T5623] Bluetooth: hci4: command tx timeout [ 69.887431][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.906661][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.923670][ T3318] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.970535][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.979883][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.988503][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.043804][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.074140][ T3318] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.220982][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.249933][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.135082][ T144] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.145187][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.175139][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.231892][ T3318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.256467][ T3318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.296079][ T3318] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.332433][ T3318] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.334011][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.367048][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.403614][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.452717][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.483172][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.493526][ T154] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.525693][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.553116][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.560844][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.633561][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.843566][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.855384][ T5623] Bluetooth: hci1: command tx timeout [ 72.413796][ T5623] Bluetooth: hci4: command tx timeout [ 72.444775][ T5614] Bluetooth: hci0: command tx timeout [ 72.450906][ T5614] Bluetooth: hci3: command tx timeout [ 72.456592][ T5614] Bluetooth: hci2: command tx timeout [ 72.856882][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.185822][ T3318] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.401421][ T5822] netlink: 4064 bytes leftover after parsing attributes in process `syz.3.4'. [ 74.390813][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 74.390828][ T30] audit: type=1400 audit(1785860880.968:216): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 74.430298][ T5613] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 74.683512][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.093623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 75.545102][ T30] audit: type=1400 audit(1785860881.368:217): avc: denied { read } for pid=5834 comm="syz.1.10" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 75.699346][ T30] audit: type=1400 audit(1785860881.368:218): avc: denied { open } for pid=5834 comm="syz.1.10" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 75.700980][ T5613] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 75.770620][ T5839] netlink: 'syz.3.11': attribute type 4 has an invalid length. [ 75.779187][ T5839] netlink: 17 bytes leftover after parsing attributes in process `syz.3.11'. [ 75.834077][ T30] audit: type=1400 audit(1785860881.418:219): avc: denied { create } for pid=5834 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 75.909969][ T5613] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 75.940548][ T5613] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 75.968311][ T5613] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.004451][ T30] audit: type=1400 audit(1785860881.458:220): avc: denied { write } for pid=5834 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 76.050066][ T5614] Bluetooth: hci5: unexpected event for opcode 0x1009 [ 76.061603][ T5614] Bluetooth: hci5: unexpected event for opcode 0x2003 [ 76.070285][ T5614] Bluetooth: hci5: unexpected event for opcode 0x2002 [ 76.077879][ T5614] Bluetooth: hci5: unexpected event for opcode 0x201c [ 76.087698][ T5614] Bluetooth: hci5: unexpected event for opcode 0x200f [ 76.096918][ T5614] Bluetooth: hci5: unexpected event for opcode 0x202a [ 76.107733][ T5614] Bluetooth: hci5: unexpected event for opcode 0x202f [ 76.116302][ T5614] Bluetooth: hci5: unexpected event for opcode 0x203b [ 76.129031][ T30] audit: type=1400 audit(1785860881.478:221): avc: denied { create } for pid=5834 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 76.153507][ T30] audit: type=1400 audit(1785860882.218:222): avc: denied { read } for pid=5832 comm="syz.3.11" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 76.177929][ T30] audit: type=1400 audit(1785860882.218:223): avc: denied { open } for pid=5832 comm="syz.3.11" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 76.188647][ T5824] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 76.201791][ T30] audit: type=1400 audit(1785860882.278:224): avc: denied { create } for pid=5832 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 76.235836][ T30] audit: type=1400 audit(1785860882.538:225): avc: denied { map_create } for pid=5832 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 76.312679][ T5613] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 78.093430][ T5625] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 78.571537][ T5707] usb 1-1: USB disconnect, device number 2 [ 79.929537][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 79.929547][ T30] audit: type=1400 audit(1785860886.508:234): avc: denied { mount } for pid=5863 comm="syz.0.21" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 79.997662][ T30] audit: type=1400 audit(1785860886.538:235): avc: denied { search } for pid=5863 comm="syz.0.21" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 80.070000][ T30] audit: type=1400 audit(1785860886.538:236): avc: denied { search } for pid=5863 comm="syz.0.21" name="instances" dev="tracefs" ino=1389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 80.152180][ T30] audit: type=1400 audit(1785860886.548:237): avc: denied { write search } for pid=5863 comm="syz.0.21" name="instances" dev="tracefs" ino=1389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 80.238447][ T30] audit: type=1400 audit(1785860886.548:238): avc: denied { add_name } for pid=5863 comm="syz.0.21" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 81.183676][ T30] audit: type=1400 audit(1785860886.548:239): avc: denied { create } for pid=5863 comm="syz.0.21" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 81.299421][ T30] audit: type=1400 audit(1785860886.688:240): avc: denied { setopt } for pid=5863 comm="syz.0.21" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.351818][ T120] cfg80211: failed to load regulatory.db [ 81.380906][ T30] audit: type=1400 audit(1785860886.698:241): avc: denied { getopt } for pid=5863 comm="syz.0.21" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.528175][ T30] audit: type=1400 audit(1785860886.698:242): avc: denied { connect } for pid=5863 comm="syz.0.21" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.612816][ T30] audit: type=1400 audit(1785860886.698:243): avc: denied { name_connect } for pid=5863 comm="syz.0.21" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 83.229057][ T5879] futex_wake_op: syz.0.22 tries to shift op by 144; fix this program [ 84.329618][ T5889] netlink: 'syz.0.26': attribute type 4 has an invalid length. [ 84.339139][ T5889] netlink: 17 bytes leftover after parsing attributes in process `syz.0.26'. [ 84.839024][ T5893] afs: Unknown parameter 'dyn' [ 85.143311][ T5897] afs: Unknown parameter 'dyn' [ 86.106344][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 86.106356][ T30] audit: type=1400 audit(1785860890.678:254): avc: denied { bind } for pid=5900 comm="syz.2.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 87.483483][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.720857][ T30] audit: type=1400 audit(1785860890.768:255): avc: denied { create } for pid=5902 comm="syz.4.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.779140][ T5903] netlink: 'syz.4.31': attribute type 10 has an invalid length. [ 87.791806][ T5903] team0: Port device dummy0 added [ 88.039363][ T30] audit: type=1400 audit(1785860892.618:256): avc: denied { ioctl } for pid=5909 comm="syz.4.32" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 89.879959][ T30] audit: type=1400 audit(1785860894.458:257): avc: denied { write } for pid=5922 comm="syz.3.35" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 89.906293][ T5923] ubi8: attaching mtd0 [ 89.921996][ T5923] ubi8: scanning is finished [ 89.942803][ T5923] ubi8: empty MTD device detected [ 90.045117][ T30] audit: type=1400 audit(1785860894.618:258): avc: denied { read write } for pid=5922 comm="syz.3.35" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 90.092095][ T5721] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 90.138635][ T30] audit: type=1400 audit(1785860894.618:259): avc: denied { open } for pid=5922 comm="syz.3.35" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 90.255479][ T5935] futex_wake_op: syz.2.36 tries to shift op by 144; fix this program [ 91.583444][ T5721] usb 1-1: Using ep0 maxpacket: 16 [ 91.617248][ T5721] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 91.632203][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.651383][ T30] audit: type=1400 audit(1785860896.228:260): avc: denied { lock } for pid=5922 comm="syz.3.35" path="/dev/ubi_ctrl" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.040727][ T5721] usb 1-1: Product: syz [ 92.086543][ T5721] usb 1-1: Manufacturer: syz [ 92.127830][ T5721] usb 1-1: SerialNumber: syz [ 92.242889][ T5721] usb 1-1: config 0 descriptor?? [ 92.353671][ T5923] ubi8: attached mtd0 (name "mtdram test device", size 0 MiB) [ 92.361311][ T5923] ubi8: PEB size: 4096 bytes (4 KiB), LEB size: 385 bytes [ 92.368785][ T5923] ubi8: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 92.375922][ T5923] ubi8: VID header offset: 3647 (aligned 3647), data offset: 3711 [ 92.383883][ T5923] ubi8: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 92.390778][ T5923] ubi8: user volume: 0, internal volumes: 1, max. volumes count: 2 [ 92.399592][ T5923] ubi8: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1896761624 [ 92.410339][ T5923] ubi8: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 92.454338][ T5941] ubi8: background thread "ubi_bgt8d" started, PID 5941 [ 92.508235][ T5721] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 92.896414][ T5721] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110 [ 93.000979][ T5946] netlink: 'syz.2.42': attribute type 10 has an invalid length. [ 94.664568][ T5946] team0: Port device dummy0 added [ 94.759319][ T5721] usb 1-1: USB disconnect, device number 3 [ 95.140590][ T5956] afs: Unknown parameter 'dyn' [ 95.485809][ T5960] CUSE: info not properly terminated [ 95.544485][ T30] audit: type=1400 audit(1785860899.125:261): avc: denied { create } for pid=5961 comm="syz.4.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 95.653259][ T30] audit: type=1400 audit(1785860899.125:262): avc: denied { bind } for pid=5961 comm="syz.4.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 95.673555][ T30] audit: type=1400 audit(1785860899.125:263): avc: denied { ioctl } for pid=5959 comm="syz.3.46" path="socket:[9087]" dev="sockfs" ino=9087 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.082688][ T30] audit: type=1400 audit(1785860899.645:264): avc: denied { ioctl } for pid=5959 comm="syz.3.46" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xf50c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 96.133170][ T5971] netlink: 'syz.0.47': attribute type 4 has an invalid length. [ 96.140816][ T5971] netlink: 17 bytes leftover after parsing attributes in process `syz.0.47'. [ 96.193980][ T30] audit: type=1400 audit(1785860899.745:265): avc: denied { read write } for pid=5953 comm="syz.2.45" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 96.248407][ T30] audit: type=1400 audit(1785860899.745:266): avc: denied { open } for pid=5953 comm="syz.2.45" path="/10/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 96.315648][ T30] audit: type=1400 audit(1785860899.745:267): avc: denied { ioctl } for pid=5953 comm="syz.2.45" path="/10/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 96.622344][ T30] audit: type=1400 audit(1785860900.195:268): avc: denied { name_bind } for pid=5972 comm="syz.3.48" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 96.715918][ T30] audit: type=1400 audit(1785860900.195:269): avc: denied { name_connect } for pid=5972 comm="syz.3.48" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 96.852885][ T30] audit: type=1400 audit(1785860900.345:270): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 97.640418][ T5625] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 97.662239][ T5986] futex_wake_op: syz.0.51 tries to shift op by 144; fix this program [ 98.488706][ T5707] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.552480][ T30] audit: type=1400 audit(1785860902.125:271): avc: denied { write } for pid=5990 comm="syz.1.55" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 98.651362][ T5992] netlink: 'syz.1.55': attribute type 10 has an invalid length. [ 98.691265][ T5992] team0: Port device dummy0 added [ 99.016293][ T5995] nvmet: adding nsid 1 to subsystem testnqn [ 99.309893][ T5729] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 100.342989][ T30] audit: type=1400 audit(1785860902.505:272): avc: denied { mount } for pid=5993 comm="syz.4.56" name="/" dev="configfs" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 100.368486][ T30] audit: type=1400 audit(1785860902.535:273): avc: denied { write } for pid=5993 comm="syz.4.56" name="subsystems" dev="configfs" ino=1192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 100.429207][ T5707] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 100.449680][ T30] audit: type=1400 audit(1785860902.545:274): avc: denied { add_name } for pid=5993 comm="syz.4.56" name="testnqn" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 100.482566][ T6003] CUSE: info not properly terminated [ 100.488769][ T5707] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 100.516904][ T5729] usb 1-1: Using ep0 maxpacket: 16 [ 100.525581][ T5729] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 100.536340][ T30] audit: type=1400 audit(1785860902.545:275): avc: denied { create } for pid=5993 comm="syz.4.56" name="testnqn" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 100.556396][ T5729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.573935][ T5729] usb 1-1: Product: syz [ 100.582998][ T5729] usb 1-1: Manufacturer: syz [ 100.596322][ T5729] usb 1-1: SerialNumber: syz [ 100.603600][ T30] audit: type=1400 audit(1785860902.545:276): avc: denied { read write } for pid=5993 comm="syz.4.56" name="attr_allow_any_host" dev="configfs" ino=9177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 100.643068][ T5729] usb 1-1: config 0 descriptor?? [ 100.648665][ T144] nvmet: connect request for invalid subsystem testnqn! [ 100.670016][ T5729] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 100.679666][ T30] audit: type=1400 audit(1785860902.545:277): avc: denied { open } for pid=5993 comm="syz.4.56" path="/15/config/nvmet/subsystems/testnqn/attr_allow_any_host" dev="configfs" ino=9177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 100.682407][ T5995] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testnqn" [ 100.708849][ T30] audit: type=1800 audit(1785860902.555:278): pid=5995 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.56" name="attr_allow_any_host" dev="configfs" ino=9177 res=0 errno=0 [ 100.763601][ T5707] usb 3-1: string descriptor 0 read error: -71 [ 100.782284][ T5707] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 100.830556][ T5707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.876437][ T5707] usb 3-1: can't set config #2, error -71 [ 100.901471][ T5707] usb 3-1: USB disconnect, device number 2 [ 101.183639][ T5729] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110 [ 101.451028][ T5607] svc: failed to register nfsdv3 RPC service (errno 111). [ 101.472666][ T5607] svc: failed to register nfsaclv3 RPC service (errno 111). [ 101.483187][ T5607] failed to unregister tcp with rpcbind [ 101.493688][ T5607] svc: failed to register nfsdv3 RPC service (errno 97). [ 101.502742][ T5607] svc: failed to register nfsaclv3 RPC service (errno 97). [ 101.513860][ T5607] failed to unregister tcp with rpcbind [ 101.718883][ T6018] binder: 6016:6018 ioctl 4018620d 0 returned -22 [ 101.730010][ T30] kauditd_printk_skb: 120 callbacks suppressed [ 101.730024][ T30] audit: type=1326 audit(1785860905.295:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz.0.53" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f751d35e84e code=0x7ffc0000 [ 101.831941][ T30] audit: type=1326 audit(1785860905.305:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz.0.53" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f751d35e84e code=0x7ffc0000 [ 101.888659][ T30] audit: type=1326 audit(1785860905.355:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz.0.53" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f751d35e84e code=0x7ffc0000 [ 101.936649][ T30] audit: type=1326 audit(1785860905.355:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz.0.53" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f751d35e84e code=0x7ffc0000 [ 101.999173][ T30] audit: type=1326 audit(1785860905.355:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz.0.53" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f751d35e84e code=0x7ffc0000 [ 102.105317][ T30] audit: type=1326 audit(1785860905.365:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz.0.53" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f751d35e84e code=0x7ffc0000 [ 102.172188][ T30] audit: type=1326 audit(1785860905.365:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz.0.53" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f751d35e84e code=0x7ffc0000 [ 102.224518][ T30] audit: type=1326 audit(1785860905.365:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz.0.53" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f751d35e84e code=0x7ffc0000 [ 102.278057][ T30] audit: type=1326 audit(1785860905.365:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz.0.53" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f751d35e84e code=0x7ffc0000 [ 102.334072][ T30] audit: type=1326 audit(1785860905.365:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz.0.53" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f751d35e84e code=0x7ffc0000 [ 102.426846][ T5707] usb 1-1: USB disconnect, device number 4 [ 102.564876][ T6029] futex_wake_op: syz.2.64 tries to shift op by 144; fix this program [ 102.784077][ T6034] nvmet: disable ns before setting buffered_io value. [ 104.892040][ T48] nvmet: Created nvm controller 1 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:d4e675da-fd15-41bd-8f15-c3f37e09133f. [ 104.955722][ T6034] nvme nvme0: creating 2 I/O queues. [ 104.967079][ T6034] nvme nvme0: new ctrl: "testnqn" [ 105.155676][ T6050] CUSE: info not properly terminated [ 105.189193][ T6048] netlink: 4064 bytes leftover after parsing attributes in process `syz.0.69'. [ 106.833460][ T5729] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 106.961126][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 106.961142][ T30] audit: type=1400 audit(1785860910.535:480): avc: denied { read } for pid=6062 comm="syz.4.68" name="versions" dev="nfsd" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 107.014911][ T5729] usb 1-1: Using ep0 maxpacket: 16 [ 107.037264][ T5729] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 107.072136][ T5729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.095751][ T5729] usb 1-1: Product: syz [ 107.108469][ T5729] usb 1-1: Manufacturer: syz [ 107.122038][ T5729] usb 1-1: SerialNumber: syz [ 107.146603][ T5729] usb 1-1: config 0 descriptor?? [ 107.169647][ T5729] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 107.596584][ T30] audit: type=1326 audit(1785860911.175:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6057 comm="syz.0.75" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751d39e019 code=0x7ffc0000 [ 107.664900][ T30] audit: type=1326 audit(1785860911.175:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6057 comm="syz.0.75" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751d39e019 code=0x7ffc0000 [ 107.673693][ T5729] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110 [ 107.782627][ T30] audit: type=1326 audit(1785860911.175:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6057 comm="syz.0.75" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751d39e019 code=0x7ffc0000 [ 107.863954][ T30] audit: type=1326 audit(1785860911.175:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6057 comm="syz.0.75" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f751d35e84e code=0x7ffc0000 [ 107.916620][ T30] audit: type=1326 audit(1785860911.175:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6057 comm="syz.0.75" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f751d39f317 code=0x7ffc0000 [ 107.973521][ T30] audit: type=1326 audit(1785860911.175:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6057 comm="syz.0.75" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f751d39e019 code=0x7ffc0000 [ 108.071322][ T30] audit: type=1326 audit(1785860911.215:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6057 comm="syz.0.75" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f751d39f317 code=0x7ffc0000 [ 108.112461][ T30] audit: type=1326 audit(1785860911.215:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6057 comm="syz.0.75" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f751d35e84e code=0x7ffc0000 [ 108.214838][ T6066] NFSD: Unable to initialize client recovery tracking! (-110) [ 108.240826][ T6066] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 108.279453][ T30] audit: type=1326 audit(1785860911.215:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6057 comm="syz.0.75" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751d39e019 code=0x7ffc0000 [ 108.325471][ T6066] NFSD: starting 10-second grace period (net f00003cb) [ 109.624204][ T5611] usb 1-1: USB disconnect, device number 5 [ 109.714245][ T6086] CUSE: info not properly terminated [ 111.653095][ T6103] futex_wake_op: syz.3.85 tries to shift op by 144; fix this program [ 112.311923][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 112.311939][ T30] audit: type=1400 audit(1785860915.885:555): avc: denied { write } for pid=6106 comm="syz.1.87" name="mcfilter6" dev="proc" ino=4026532960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 113.083396][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 113.235147][ T30] audit: type=1400 audit(1785860916.395:556): avc: denied { watch watch_reads } for pid=6106 comm="syz.1.87" path="/proc/44/net/mcfilter6" dev="proc" ino=4026532960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 114.878609][ T30] audit: type=1400 audit(1785860918.455:557): avc: denied { map_read map_write } for pid=6122 comm="syz.2.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 114.954260][ T30] audit: type=1400 audit(1785860918.485:558): avc: denied { write } for pid=6122 comm="syz.2.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 115.059028][ T6126] CUSE: info not properly terminated [ 115.385273][ T6130] ubi: mtd0 is already attached to ubi8 [ 117.870099][ T6143] futex_wake_op: syz.1.98 tries to shift op by 144; fix this program [ 118.793480][ T5707] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 119.063656][ T5729] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 119.095454][ T5707] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 119.116288][ T5707] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 119.129831][ T5707] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 119.139510][ T5707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.148266][ T5707] usb 2-1: Product: syz [ 119.156946][ T5707] usb 2-1: Manufacturer: syz [ 119.163107][ T5707] usb 2-1: SerialNumber: syz [ 119.170568][ T30] audit: type=1800 audit(1785860922.745:559): pid=6153 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.101" name="attr_allow_any_host" dev="configfs" ino=10691 res=0 errno=0 [ 119.174929][ T5707] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 119.205022][ T6153] nvmet: disable ns before setting buffered_io value. [ 119.221123][ T6153] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 119.225604][ T30] audit: type=1800 audit(1785860922.785:560): pid=6153 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.101" name="buffered_io" dev="configfs" ino=10194 res=0 errno=0 [ 119.233370][ T5707] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 119.261272][ T5729] usb 1-1: Using ep0 maxpacket: 16 [ 119.273975][ T5729] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 119.283526][ T5729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.284886][ T30] audit: type=1800 audit(1785860922.785:561): pid=6153 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.101" name="enable" dev="configfs" ino=10195 res=0 errno=0 [ 119.293419][ T5729] usb 1-1: Product: syz [ 119.323067][ T5707] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 119.341342][ T5729] usb 1-1: Manufacturer: syz [ 119.346090][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 119.354867][ T5729] usb 1-1: SerialNumber: syz [ 119.362744][ T5729] usb 1-1: config 0 descriptor?? [ 119.368598][ T30] audit: type=1800 audit(1785860922.795:562): pid=6153 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.101" name="addr_trtype" dev="configfs" ino=10196 res=0 errno=0 [ 119.410207][ T5613] usb 2-1: USB disconnect, device number 2 [ 119.429324][ T12] nvmet: Created nvm controller 2 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:d4e675da-fd15-41bd-8f15-c3f37e09133f. [ 119.443820][ T5729] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 119.473312][ T5613] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 119.487876][ T6153] nvme nvme1: creating 2 I/O queues. [ 119.498255][ T6153] nvme nvme1: new ctrl: "testnqn" [ 119.503409][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 119.511857][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 119.529825][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 119.542827][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 119.555064][ T5613] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 119.583688][ T5613] ti_usb_3410_5052 2-1:2.0: device disconnected [ 119.590194][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 119.616522][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 119.652003][ T10] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 119.662281][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.676176][ T10] usb 4-1: config 0 descriptor?? [ 119.812035][ T30] audit: type=1326 audit(1785860923.385:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6147 comm="syz.0.93" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751d39e019 code=0x7ffc0000 [ 119.839400][ T30] audit: type=1326 audit(1785860923.385:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6147 comm="syz.0.93" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751d39e019 code=0x7ffc0000 [ 119.867878][ T30] audit: type=1326 audit(1785860923.385:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6147 comm="syz.0.93" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751d39e019 code=0x7ffc0000 [ 119.894442][ T30] audit: type=1326 audit(1785860923.385:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6147 comm="syz.0.93" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f751d35e84e code=0x7ffc0000 [ 119.920989][ T5729] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110 [ 119.932659][ T30] audit: type=1326 audit(1785860923.385:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6147 comm="syz.0.93" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f751d39f317 code=0x7ffc0000 [ 119.960120][ T30] audit: type=1326 audit(1785860923.385:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6147 comm="syz.0.93" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f751d39e019 code=0x7ffc0000 [ 120.047577][ T6161] nvmet: disable ns before setting buffered_io value. [ 120.172642][ T6150] NFSD: Unable to initialize client recovery tracking! (-110) [ 120.184419][ T5919] nvmet: Created nvm controller 3 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:d4e675da-fd15-41bd-8f15-c3f37e09133f. [ 120.203436][ T6150] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 120.231483][ T6161] nvme nvme2: creating 2 I/O queues. [ 120.234669][ T6150] NFSD: starting 10-second grace period (net f00004de) [ 120.280344][ T6161] nvme nvme2: new ctrl: "testnqn" [ 120.379954][ T6170] afs: Unknown parameter 'dyn' [ 120.949101][ T10] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 121.038594][ T10] usb 4-1: USB disconnect, device number 2 [ 121.059973][ T10] usblp0: removed [ 121.134128][ T6177] CUSE: info not properly terminated [ 121.877952][ T10] usb 1-1: USB disconnect, device number 6 [ 122.084157][ T6183] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 122.231582][ T154] nvmet: Created nvm controller 4 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:d4e675da-fd15-41bd-8f15-c3f37e09133f. [ 122.285445][ T6183] nvme nvme3: creating 2 I/O queues. [ 122.307993][ T6183] nvme nvme3: new ctrl: "testnqn" [ 122.453414][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 122.614498][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 122.626809][ T6195] loop0: detected capacity change from 0 to 2048 [ 122.640655][ T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 122.659600][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 122.700346][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 122.756145][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 122.790270][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.805846][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 122.820456][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.882678][ T6206] loop0: detected capacity change from 0 to 2048 [ 122.993409][ T1598] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 123.042113][ T10] usb 5-1: usb_control_msg returned -32 [ 123.048129][ T10] usbtmc 5-1:16.0: can't read capabilities [ 123.144502][ T1598] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 123.155150][ T1598] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 123.166725][ T1598] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 123.175863][ T1598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.183924][ T1598] usb 2-1: Product: syz [ 123.188114][ T1598] usb 2-1: Manufacturer: syz [ 123.192694][ T1598] usb 2-1: SerialNumber: syz [ 123.203464][ T120] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 123.204868][ T1598] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 123.223941][ T1598] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 123.236525][ T1598] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 123.250961][ T10] usb 5-1: USB disconnect, device number 2 [ 123.363895][ T120] usb 3-1: Using ep0 maxpacket: 16 [ 123.371726][ T120] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 123.380856][ T120] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.389292][ T120] usb 3-1: Product: syz [ 123.393492][ T120] usb 3-1: Manufacturer: syz [ 123.398074][ T120] usb 3-1: SerialNumber: syz [ 123.405582][ T120] usb 3-1: config 0 descriptor?? [ 123.413176][ T120] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 123.427975][ T1598] usb 2-1: USB disconnect, device number 3 [ 123.444340][ T1598] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 123.461779][ T1598] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 123.476211][ T1598] ti_usb_3410_5052 2-1:2.0: device disconnected [ 123.667630][ T6206] ================================================================== [ 123.675720][ T6206] BUG: KASAN: null-ptr-deref in fput+0x2e/0x100 [ 123.681980][ T6206] Write of size 8 at addr 0000000000000158 by task syz.0.116/6206 [ 123.689776][ T6206] [ 123.692089][ T6206] CPU: 0 UID: 0 PID: 6206 Comm: syz.0.116 Not tainted syzkaller #0 PREEMPT(full) [ 123.692108][ T6206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 123.692117][ T6206] Call Trace: [ 123.692124][ T6206] [ 123.692129][ T6206] dump_stack_lvl+0x100/0x190 [ 123.692153][ T6206] kasan_report+0xdf/0x1c0 [ 123.692173][ T6206] ? fput+0x2e/0x100 [ 123.692192][ T6206] kasan_check_range+0x10f/0x1e0 [ 123.692215][ T6206] fput+0x2e/0x100 [ 123.692232][ T6206] o2hb_region_dev_store+0x1230/0x1bc0 [ 123.692254][ T6206] ? __pfx_o2hb_region_dev_store+0x10/0x10 [ 123.692274][ T6206] ? __pfx_autoremove_wake_function+0x10/0x10 [ 123.692290][ T6206] ? configfs_write_iter+0x388/0x4e0 [ 123.692308][ T6206] configfs_write_iter+0x302/0x4e0 [ 123.692325][ T6206] vfs_write+0x6ac/0x1050 [ 123.692348][ T6206] ? __pfx_configfs_write_iter+0x10/0x10 [ 123.692365][ T6206] ? __pfx_vfs_write+0x10/0x10 [ 123.692391][ T6206] ksys_write+0x12a/0x250 [ 123.692403][ T6206] ? __pfx_ksys_write+0x10/0x10 [ 123.692417][ T6206] do_syscall_64+0x115/0x870 [ 123.692435][ T6206] ? clear_bhb_loop+0x40/0x90 [ 123.692451][ T6206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.692478][ T6206] RIP: 0033:0x7f751d39e019 [ 123.692492][ T6206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.692507][ T6206] RSP: 002b:00007f751e2a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 123.692523][ T6206] RAX: ffffffffffffffda RBX: 00007f751d625fa0 RCX: 00007f751d39e019 [ 123.692533][ T6206] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 0000000000000005 [ 123.692543][ T6206] RBP: 00007f751d43500c R08: 0000000000000000 R09: 0000000000000000 [ 123.692552][ T6206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.692565][ T6206] R13: 00007f751d626038 R14: 00007f751d625fa0 R15: 00007ffcd0737ea8 [ 123.692578][ T6206] [ 123.692583][ T6206] ================================================================== [ 123.889242][ T6206] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 123.896435][ T6206] CPU: 0 UID: 0 PID: 6206 Comm: syz.0.116 Not tainted syzkaller #0 PREEMPT(full) [ 123.905615][ T6206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 123.915650][ T6206] Call Trace: [ 123.918910][ T6206] [ 123.921821][ T6206] dump_stack_lvl+0x100/0x190 [ 123.926485][ T6206] vpanic+0x552/0x970 [ 123.930446][ T6206] ? __pfx_vpanic+0x10/0x10 [ 123.934927][ T6206] ? mark_held_locks+0x40/0x70 [ 123.939677][ T6206] ? irqentry_exit+0x24d/0xa00 [ 123.944426][ T6206] ? fput+0x2e/0x100 [ 123.948310][ T6206] panic+0xd1/0xe0 [ 123.952020][ T6206] ? __pfx_panic+0x10/0x10 [ 123.956418][ T6206] check_panic_on_warn.cold+0x19/0x34 [ 123.961767][ T6206] end_report.part.0+0x3a/0x90 [ 123.966516][ T6206] kasan_report.cold+0xe/0x18 [ 123.971180][ T6206] ? fput+0x2e/0x100 [ 123.975058][ T6206] kasan_check_range+0x10f/0x1e0 [ 123.979981][ T6206] fput+0x2e/0x100 [ 123.983685][ T6206] o2hb_region_dev_store+0x1230/0x1bc0 [ 123.989138][ T6206] ? __pfx_o2hb_region_dev_store+0x10/0x10 [ 123.994929][ T6206] ? __pfx_autoremove_wake_function+0x10/0x10 [ 124.000982][ T6206] ? configfs_write_iter+0x388/0x4e0 [ 124.006262][ T6206] configfs_write_iter+0x302/0x4e0 [ 124.011355][ T6206] vfs_write+0x6ac/0x1050 [ 124.015675][ T6206] ? __pfx_configfs_write_iter+0x10/0x10 [ 124.021287][ T6206] ? __pfx_vfs_write+0x10/0x10 [ 124.026136][ T6206] ksys_write+0x12a/0x250 [ 124.030452][ T6206] ? __pfx_ksys_write+0x10/0x10 [ 124.035283][ T6206] do_syscall_64+0x115/0x870 [ 124.039870][ T6206] ? clear_bhb_loop+0x40/0x90 [ 124.044559][ T6206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.050444][ T6206] RIP: 0033:0x7f751d39e019 [ 124.054838][ T6206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.074427][ T6206] RSP: 002b:00007f751e2a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 124.082819][ T6206] RAX: ffffffffffffffda RBX: 00007f751d625fa0 RCX: 00007f751d39e019 [ 124.090767][ T6206] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 0000000000000005 [ 124.098716][ T6206] RBP: 00007f751d43500c R08: 0000000000000000 R09: 0000000000000000 [ 124.106665][ T6206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.114702][ T6206] R13: 00007f751d626038 R14: 00007f751d625fa0 R15: 00007ffcd0737ea8 [ 124.122655][ T6206] [ 124.125842][ T6206] Kernel Offset: disabled [ 124.130140][ T6206] Rebooting in 86400 seconds..