last executing test programs: 10m21.582085663s ago: executing program 32 (id=4738): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001200)={'team0\x00', 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001300)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0xfffffffc}, 0x1c, 0x0}}, {{&(0x7f0000000100)={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7fffffff}, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000180)="a614c18cfaabe8850ced9d5c016207007094fd1f6c40", 0x16}, {&(0x7f00000004c0)="b1a901eed4079bb3b05cdb7002a75c22d29a5547b43836d411a60ed70a0c89ac9c5a31de4b95f42f8affeed3aaee9357302b7ca9178a64ddfe04adab4e9305a66c20f2d9f60375d372e19abe58144d5accacc13d80d89764f5bf4af0fdc7c42f038adcb074fe84d19c73cd5921d8252cf6ebac6f6faf2bb992e092fb9db68fac0268783b87c24e0868009ad68561b62fb3f886ac18ce3ef19c601c718b812f582acb7f25d3f1c3a1ca76b57416410359ae80aa4f4930db9251de29001a6005", 0xbf}, {&(0x7f0000000580)="b0af240f54e31de9ebf42eb2782157dab61536426338c840109d5a91c8118e9658868c5031af4789d06b2df9ccbbce02e889e9567804e0d9ede6e83fb9beac0b3c45b81246e5e2971002c0a0da4054f09cd3a7ae54305e0f964ba873d92c463015cb166bafc30f0ebea5dc8b3a8765eb64997966adf92d167c1f3cbd2e6a835bd5b82b88d8cc7fba14ed05de", 0x8c}, {&(0x7f0000000640)}, {&(0x7f0000000680)="fbbf1a86daa300b9572cbe58201f706a55284715af8856b886bc41e9bc983458d6226d04e0080e9acee202e0327fd116460d11d67eb7ce92a9deb84f31682da740a163664cb3a92bbc276d72b818921e86b38fe2b523d585be", 0x59}, {&(0x7f0000000700)="49414fc05e679fe40f6a1e02307dc3484250256ce8caef385761c871cf1f56339a75c4d90a540e04990addc303569bd045b82827c10e22feafb861db29b8874790652ff518a1bfb657be9fc8474f2c96add8e249cf504f5cdd273f4f64a90c26fc1206101552a06420d2276c82fb20223a844c59dd3960db9251016e740e02705fd99d892e82cc4a98c9fa748e43a3c29a4e9994318f0cc2baba112808c2c91b07df5d38bf2bf96cc99e2655fe829ef5803ebbe8619673cae3b5140360b44e91f2756724a38cfc59bbbe5f61c50f68de44ed7780eeca52f803cfdbb889623a330bae28e9a0abeb10db2c631d26", 0xed}, {&(0x7f0000001440)="155467244124aab50200000000000000823a1f7a7413f61d1785a2ff13d24c8257d07725f2b2a2fad47bd8c89a0d17c739b74367ea700d346e64e1fcbf2fdeec04e6af3a1ec85913f753f1c28187bab7c0c01ab29f5b0c91362d455a0a84f2223e17abd565898a74d29b72a7d5e0a5081db2e55dfe335b52e8d5ceedf0c854b4c342b6fcb26fc7ad2c1189f942cb7a285e1cf1eb68b57558220d4db49d5a85b5756c310ea8cae8d49e83737da9e81a006687c6da6b9d4a813c9a8d617e3354d142aeeeb068d323f4aa743b2410e9df341cad2da52949c6b11b75f7ef", 0xdc}], 0x7, &(0x7f00000008c0)=[@hopopts={{0x18, 0x29, 0x36, {0x1}}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000900)="13838119e95c65275fcc589b12b04b9b595d760534e06225ba854fc9", 0x1c}, {&(0x7f0000000940)="f500ffbf5fcc29ec5d5810b1130f8b03e6dc438a2c0d33b60a4ba8db1658282b79abe2a03b062759b06981b8b2adc12b1f6a36be4d0cc6561efb1d77fdf09a83", 0x40}, {&(0x7f0000000980)="291ba2ee5b003d209107b76029da5f3214d46835286e5afe71c483d782ebaa94ed9ba7a0f968c18176264424154a0511db04daa0e7f5d8c2f2e51c126296b6c6d1da7901bc7739e195c108417e8f524f0c677a633cecff96cecaa987f0e69bc4800f7fee1875b8ccbd8ee166547278776a", 0x71}, {&(0x7f0000000a00)="68fc6a85c2f3837e3ce3c43c4f7948a0c92efe63a25a8fe5ab3b", 0x1a}, {&(0x7f0000000a40)="0ef8b89a8f8e6c1469ac7ec8e72de7194466789222dd36dc39050406a22dea0239e87c0543e0aefec0c9b9f0edfebfa929ae609d8a922c3e685ce9ebf385e3b4e33452e8152a465af262d0e96a86c152f44b0f6333cd94ea2c3bc510f669e439010377f779069c1c2e7686cc802e6fcfc92bcfcaacbacc623026175b91bf4021e17d7e18138785b0f737ad79cb99168ad274317c779af0ac4aa7cda7d33a067115daf704a274e87d882d553a67eb6a31ad2c4622e216fbfd773176f09bf6915823dbe876cb79aa", 0xc7}], 0x5, &(0x7f0000000bc0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0x9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8001}}], 0x48}}, {{&(0x7f0000000c40)={0xa, 0x4e24, 0x4000, @empty}, 0x1c, &(0x7f0000000e80)=[{&(0x7f0000000c80)="0601ae6be0d2578f20058d4b017e7d905518c1b388383898ef866e597da9f76db002e02c6c933926eae8201f02f55d11428b62efa5b28d3dc52e9c05a2b4c8061e2202ed64a662d407919bb0a0a70ccc4bb9be6fe0090b0b85b4f7069f6a6dfa", 0x60}, {&(0x7f0000000d00)="2690cca3c31930b98beab9de88c7d9ecd0e1247aebfd235e699e56455f382fdec22125dda57403a98df5843209952d95660d5c917e9fee0a69db71243998c0823a94550e234297052a3bc82076070472d34753b5db41773d34a86e242d9a2a4a5974a49daab73e7483651eff8ef9ed11b412320d1fadfa1136e8b4eb0bb2f7cf886bcf337072500b8a5e4d7e0186b5f4e6296313e1f926da1a0fb95cb5fa18c101632c9047ea1ca8d839f1ae8d462214100296992969990649c23b5f12515e594043db8844ff69eaaa467c40c5385989d0130857b93569d73894bac11aa023f2b6611d29f7", 0xe5}, {&(0x7f0000000e00)="05010d3a8bf9a2a03ed129e2b24e503165de9e0aaf26db9e6aab1f3cd3197e6c91952dd781636bfead0dbdb3bc077fa84caec8f0bac2cddef3720e0e7c24e59f64ad7e05431f02e9", 0x48}], 0x3, &(0x7f0000000ec0)=[@rthdr_2292={{0x68, 0x29, 0x39, {0x62, 0xa, 0x0, 0xf8, 0x0, [@dev={0xfe, 0x80, '\x00', 0x20}, @ipv4={'\x00', '\xff\xff', @local}, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2]}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x87, 0x2, '\x00', [@hao={0xc9, 0x10, @remote}]}}}], 0x98}}, {{&(0x7f0000000f80)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7ff}, 0x1c, &(0x7f00000011c0)=[{&(0x7f0000000fc0)="5305e5bd43e6828802f93e2a4b2e829cb9646a85f6d41edfbc84a1d93d286dfc694f96c2f41763cbba50ecab04779804acf928f14c44827d153ce59f82b0f0c9429f78701a6259dc", 0x48}, {&(0x7f0000001040)="72e29b9742500766d6f35611ce13d38e95b78c3c1935cc036b00f9f861f19c6d408ca70d811128b802b7db9b32e45c2e60c7e88e27a2e3b72b5987d8ea3b", 0x3e}, {&(0x7f0000001080)="8443986a4146e39ea4289eab410bd9324624bc83a5004cd4abc1ea42197585246622f04d7512f5ed186ad304ef2554fd293061f78a669ec5fa58dadf5dec0076fe1122203848de2f91d21991233c9124e38e14aba8439c35123bae8d8bf20d43703ad4d23cb64888711d7002c362298090538612c9d750111c0b94559a6ea9d25c8423399e6229", 0x87}, {&(0x7f0000001140)="10bd50226f462fbe01caf06f3facfc3308c64de1b13c038781e2a007f94e00699ac8eabadee699162cab36b919d6ec5d7b6a310048979752395c987610ebc026ecb72aa8d7c527d782", 0x49}], 0x4, &(0x7f0000001240)=[@rthdr={{0x48, 0x29, 0x39, {0x3a, 0x6, 0x0, 0x58, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @empty]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xfff}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2, r4}}}], 0xa0}}], 0x5, 0x44) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x0, 0x0, 0xc}, [@TCA_NETEM_DELAY_DIST={0x4, 0xd}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000340)={r8, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x2e, 0x1000, 0x4}, 0x9c) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x3) syz_emit_ethernet(0x102b, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x101d, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf82, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) 10m20.426977118s ago: executing program 4 (id=4745): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x36b, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) recvmmsg(r2, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f000000000001000000", @ANYRES64=0x0, @ANYRES64=r0], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 10m20.039677977s ago: executing program 4 (id=4748): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000001240)={0x0, 0x2, 0x4, 0x9, 0x2}) io_submit(0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400001b070000000000f78d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="020000000100"/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0000000001f5ffffffffffffff00"/28], 0x50) syz_usb_connect(0x3, 0x3c, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ff009440f00a116700000102000109022a00010100c0000904000003ff000000032403070581020002000705020200020007058303"], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) add_key(&(0x7f0000002100)='asymmetric\x00', 0x0, &(0x7f00000008c0)='0', 0x1, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180900000000000000dc9c7c56583080be9dbadc5d2f3550c200000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRESHEX], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000073"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/net/bond0/bonding/slaves\x00', 0x1, 0x0) write(r5, &(0x7f0000000300)='-veth', 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 10m19.917941902s ago: executing program 33 (id=4748): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000001240)={0x0, 0x2, 0x4, 0x9, 0x2}) io_submit(0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400001b070000000000f78d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="020000000100"/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0000000001f5ffffffffffffff00"/28], 0x50) syz_usb_connect(0x3, 0x3c, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ff009440f00a116700000102000109022a00010100c0000904000003ff000000032403070581020002000705020200020007058303"], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) add_key(&(0x7f0000002100)='asymmetric\x00', 0x0, &(0x7f00000008c0)='0', 0x1, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180900000000000000dc9c7c56583080be9dbadc5d2f3550c200000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRESHEX], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000073"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/net/bond0/bonding/slaves\x00', 0x1, 0x0) write(r5, &(0x7f0000000300)='-veth', 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 10m12.971637516s ago: executing program 34 (id=4764): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a8010000580"], 0x34}}, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMGET(r3, 0x5415, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000300)={0x7}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000100)=0x0) ptrace$setregset(0x4205, r6, 0x200, &(0x7f00000001c0)={&(0x7f0000000140)="bd22dd5b99edac93e00b708378bea2cb0ecd3b11280828bcc3dd1061c00625ff7d51f5110964af05c1cd2bc8ffecdf5c63e5978293acac7b4151b18069467529e170a7959fc3eaf4896162c14e6b79267e1f2154", 0x54}) write(r5, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) r7 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r7, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x81) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 10m12.899734788s ago: executing program 35 (id=4765): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYBLOB="000126bd7000fedbdf25160000000c00990000800000260000000a001a0008021100000100000a001a0008021100000000000a00060008"], 0x68}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) connect$inet6(r7, 0x0, 0x0) r8 = socket$inet6(0xa, 0x80003, 0xff) r9 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r9, 0x29, 0x16, 0x0, 0x0) setsockopt$inet6_int(r8, 0x29, 0x16, &(0x7f0000fcb000)=0x200, 0x4) setsockopt$inet6_int(r8, 0x29, 0x16, 0x0, 0x0) sendmmsg$inet6(r7, 0x0, 0x0, 0x4404c880) sendto$inet6(r7, 0x0, 0x0, 0x3b00, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r10, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00'}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read(r1, &(0x7f0000000040)=""/148, 0xffffff96) 9m59.461930644s ago: executing program 36 (id=4792): r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000200180001000000000000007f0f4aaeffffffff"], 0x513300) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x7, 0x0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x8, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000085000003a0000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc83285000000060000009536a15da6203f352386826c6e136bcc85d8fbfd8ebbe954b27a57a861fb54c599c12f4a1d9b3ec7b913debc29d6d8feccc6ae54b6102098d854d1ad1d853d21eea3d1b77863f131d9f8626db5e9a8a94bf2f5bc51dc96c432dddaca9c00d19675cf2002baf923296c60042902ca73acb11b34ce9b72be78d0a91391a74473b759b4d543db12acd83fd85e16c47f41c951b6aaf98a6b3c", @ANYBLOB="c893d732f0e79c910ae6ec55811d158ba4151383cba383546f5b53cbb3adb2ac1dc3ab9f9bafb3d7e3d7e0de552926dfb2d25c29801015a9b992159f716fd5560503d1fd7c7e2e8bbac5808c4ab2aa154608378b9f08f40897d6659031cf7adf210a55d74f103160ba1391c62ea7257480ad8eae6ccf3312e0c662fed92f30012c4c71f0371b8e11f994fc52166b787357180d9945ff3ba9e738bed30a2ebfd7e1500064a37fc7774aa98e5a321685dfafa3c679f4bc4f077d2a10f3de66587a8df070b557e79be3739ba66b2ad589c78129eff7cb221f", @ANYBLOB="154ed49fb9752e801062b90ae8c6322685020c2c67a4dd7c80c0667f4f00add2a186e3811345557487c84bc588cab81c9b46a1e3707a0c5e98157257d4a092234735ae1673125c22ed9021a208d6ee1166f2111d26c1d52df4172d3aafc2686aca441311ac2d489b3fc4170183bd39cfb46932d720876ea0eaa788db9d15e03ac993acd61f12c2640342a6e1801b577e1d9d28ac3b27ab85ea839b67f862f4a338bd863c", @ANYRES64=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x558, 0x390, 0x268, 0x300, 0x390, 0x268, 0x488, 0x460, 0x460, 0x488, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x330, 0x390, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xb, 0xb, 0x3, 0x0, 0x5, 0x9}}}, @common=@rt={{0x138}, {0x7, [0x2, 0x2], 0x5, 0x2, 0x3, [@mcast1, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast2}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @remote, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @local, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @private=0xc}, @private2={0xfc, 0x2, '\x00', 0x1}, @local], 0x6}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [0xffffff00, 0xffffff, 0x0, 0xff], 0x4e23, 0x4e22, 0x4e21, 0x4e24, 0x5, 0x3, 0x2, 0xfffff800, 0x7}}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x40, 0x8a}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x2, 0x3}, {0x4, 0x2, 0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r6 = socket$inet(0x2, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r6, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000180)="b9ff03318944268cb89904f086ddc2f1f362ba0af56885186bdebac07a64164c9441b2629864b19bb34e3968021c70bc7889b8faf8ef", 0x0, 0x2005, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 9m8.572232598s ago: executing program 37 (id=4986): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000802000000180000660000000800030090e000004ec313e25277f701b4beaa0b66489a1766d9989950f432d9878ced050b39354314b023ed32313eb22f905e56b29b726a91bbcd6b14b1b05264814139c74bdff3ebb642eba47a4dcfbe248c488d7830ce7f4ab578c900c6d7985d1e2384819974bbb836d2a61bec5ceb5d29ffffca629247e49e3f12a183ece54f276093d455a9da21d9688da9ed85f7cb38b2d8486c9bcbfa6cc84d93e6e17d068e7fb59e16cbccc3912af31434b59857da5bd7a9972d4309f60e74b4b468dbf5a3d3c4a1a5b5a1c2d1ab47d7a24f4c602c1411e7005654e6e60c770876e0731ecdae8ad8eff1eb2966c7564cc193045fcc9b", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000000040), 0xe1, 0x80) ioctl$DVB_DEMUX_DMX_START(r3, 0x6f29) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x479}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r5, 0x2) r6 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r6, 0x1) flock(r5, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$BTRFS_IOC_GET_FEATURES(r8, 0x80189439, &(0x7f0000000100)) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0xc, &(0x7f0000000140)=ANY=[@ANYRES16=r7], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r9}, 0xc) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = eventfd(0x8c66) unshare(0x22020400) ioctl$KVM_IOEVENTFD(r11, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r12, 0x1}) 8m46.648160089s ago: executing program 38 (id=5067): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a8010000580"], 0x34}}, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMGET(r3, 0x5415, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000300)={0x7}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000100)=0x0) ptrace$setregset(0x4205, r6, 0x200, &(0x7f00000001c0)={&(0x7f0000000140)="bd22dd5b99edac93e00b708378bea2cb0ecd3b11280828bcc3dd1061c00625ff7d51f5110964af05c1cd2bc8ffecdf5c63e5978293acac7b4151b18069467529e170a7959fc3eaf4896162c14e6b79267e1f2154", 0x54}) write(r5, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) r7 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r7, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x81) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 8m34.025939063s ago: executing program 39 (id=5104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x40800) 8m33.058761408s ago: executing program 40 (id=5108): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[], 0x0, 0x26}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000440)=0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) socket$inet(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) syz_emit_vhci(0x0, 0xa0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@local}) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0xc00000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffdffffffffffff, 0x9, 0x3, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r3, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r4, &(0x7f0000000500)=[{&(0x7f0000000140)}], 0x1, 0x8) r5 = syz_open_procfs(0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x0, 0x5547, 0x4, 0x3, 0x310, 0x0, r4}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x58aa, 0x2, 0x1, 0x75, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3ae, 0x0, 0x0, 0x182}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880a, 0x629a7e7911b40a9b, 0x0, 0x34e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xed4e, 0x20, 0x1, 0x297}}], 0x4, &(0x7f00000024c0)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x8001}, 0x0, 0x0, '\x00', {0x3, 0x42d, 0x0, &(0x7f00000014c0)=@buf_512="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"}}, &(0x7f0000002540)) r6 = fsmount(r4, 0x0, 0xf1) ioctl$XFS_IOC_GOINGDOWN(r6, 0x8004587d, &(0x7f0000000180)=0x70) close_range(r2, 0xffffffffffffffff, 0x0) 8m30.29935202s ago: executing program 41 (id=5075): r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000180)="ce45357bc8a90635da122ec1a627", 0x0, 0x8d01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0xffffe000) read(r4, &(0x7f0000001000)=""/8192, 0x2000) 8m27.591962071s ago: executing program 4 (id=5069): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x1) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04"], 0x7) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000100001040000", @ANYRES32=0x0, @ANYBLOB="80420f000000000014001280092301007663616e0000000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x48800}, 0x0) add_key$keyring(0x0, &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r7, 0xb) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x4000, 0x0) 8m24.60800768s ago: executing program 4 (id=5121): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a8010000580"], 0x34}}, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMGET(r3, 0x5415, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000300)={0x7}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000100)=0x0) ptrace$setregset(0x4205, r6, 0x200, &(0x7f00000001c0)={&(0x7f0000000140)="bd22dd5b99edac93e00b708378bea2cb0ecd3b11280828bcc3dd1061c00625ff7d51f5110964af05c1cd2bc8ffecdf5c63e5978293acac7b4151b18069467529e170a7959fc3eaf4896162c14e6b79267e1f2154", 0x54}) write(r5, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) r7 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r7, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x81) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 8m23.285058127s ago: executing program 4 (id=5122): write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) 8m22.759562691s ago: executing program 4 (id=5123): openat$dma_heap(0xffffffffffffff9c, 0x0, 0x42300, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x19, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x7) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) semctl$SEM_INFO(0x0, 0x2, 0x13, 0x0) mmap(&(0x7f0000b11000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) 8m22.245007553s ago: executing program 42 (id=5123): openat$dma_heap(0xffffffffffffff9c, 0x0, 0x42300, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x19, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x7) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) semctl$SEM_INFO(0x0, 0x2, 0x13, 0x0) mmap(&(0x7f0000b11000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) 8m5.825137099s ago: executing program 3 (id=5158): sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="100000ed", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf254b0000000800", @ANYRES32, @ANYBLOB="0c0099000400000059000000080077007f0000000600eb0000000000f8017d80d30003007a62c048028bf47c1aa6142bcc0842a449c17acfed0b37abce69e8331377379237b2e62e14e94b3135d7edcaff45c16598774eb162f83f1572ebc5afd7dd0bf00863a640df941cdc49040a90a6548811d178cf6901215bdb454947cd3a5a4291def81733d5bb0c52dd649845259e7eedb880b7"], 0x24c}, 0x1, 0x0, 0x0, 0x42020}, 0x20004880) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x80800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x168, r4, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0xc2, 0x5b, "e90a39a869a1d472c0cb17d236d6893b82a313300ceac550ea6696a30f7dbecde6add3a08198e762cfaaed0aeaf143dc50959c744314f0e0296c0923d275102976ad57ad8f7053036a8a42914ff840d436b1ed0a9de1e000d0ef08415b6d070d0b8f21b31f94213858fa1c730f239c9fa0cb94323b9bfb743db416e40e6a376c4d283ae0e731768f9cfb4bca6751560d7f75390e6fc34ced0d59a6469d04819aa2ab03abb4c04fdb55367eacca94197e56876c551decd529b05bfb91ecff"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_MATCH={0x68, 0x5b, "d034ca9ed10dcf4c2c3e5b821b73ab65747a8570918d7c58fd591ae255d8089d5f5dbb672518019aceac757e03f717792bd47936f8c20e5f81d805e08964267443563e97e1edbdbbb402fb183aee9310541f404c29ad0174bd391113cd75f0f6d3a388f7"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7f}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x100}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffac}]}, 0x168}, 0x1, 0x0, 0x0, 0x30040000}, 0x40) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r2, 0x4068aea3, &(0x7f0000000000)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r7, @ANYBLOB="5c005a80140001800500070001000000050006"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/damon_reclaim/parameters/addr_unit\x00', 0x2, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) 8m5.422499273s ago: executing program 3 (id=5162): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_emit_ethernet(0x33, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaae43f6642531e0800070000250000e000041190a028a16a9118543e526de4269cb2f5780000000000000000ffff"], 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x2}) fcntl$lock(r0, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0xac1d}) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x8}) syz_usb_connect(0x0, 0x2e, &(0x7f0000000600)=ANY=[@ANYBLOB="12010002000000404406478000010102030109021c0001010080fa0904030000010100000a240100010a00020102aef7a81aec3d75f363aa255613e974b92dc6452c2de84831cc32d9b8ff0cbc66aa8e1bd74f58cb3f92dc2b98c9e3883b2ac2c33819b0b7c6653341f9"], 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) r2 = syz_io_uring_complete(0x0, r1) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x3, 0x146, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x10000, 0x1, 0x393}}], 0x1, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'wg2\x00'}) write$P9_RLCREATE(r0, &(0x7f0000000680)={0x18, 0xf, 0x1, {{0x0, 0x1, 0x4}, 0x7}}, 0x18) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0xc800) sendmsg$nl_route_sched(r6, 0x0, 0x24040011) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) 8m4.513190475s ago: executing program 7 (id=5124): syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001340)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket$rxrpc(0x21, 0x2, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000000000)=0x1, 0x4) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) socket$kcm(0x1e, 0x5, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x11) connect$inet6(r5, &(0x7f0000000280)={0xa, 0x0, 0x2000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7}, 0x1c) openat$ptp0(0xffffffffffffff9c, &(0x7f000000c2c0), 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) fstatfs(r7, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000004180)='smaps_rollup\x00') set_mempolicy(0xa002, &(0x7f00000001c0)=0x401, 0x200) read$FUSE(r8, &(0x7f00000041c0)={0x2020}, 0x2024) connect$inet(r7, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 8m3.394452492s ago: executing program 7 (id=5168): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000440)=ANY=[@ANYBLOB="12010003000000103d1000014000010203"], 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x700) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) utimes(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)={{}, {r2, r3/1000+60000}}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x700) 8m2.177501425s ago: executing program 3 (id=5172): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000140), 0x8, 0x1, 0x0, 0x0, 0x1000008) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d2, 0x0) bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0x3}, 0x6) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x28401, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) r3 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) readv(r3, &(0x7f0000000400)=[{&(0x7f0000000080)=""/167, 0xa7}], 0x1) close(0x3) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x124411, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e21, 0x2, @private0, 0x3}}, 0x7, 0x15}, 0x90) syz_emit_ethernet(0x2e, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffffffffffffff0800450000200000000000119078000000000000000000004e20000c907801000000e5c3d08cf9ee0dce60c8308e7b6f98c563058f9e0ef8c649fea7178cd6078102f6c99500549f8ae6cdff6e2f2c47d01ae8761c97c3bf06cf9a5ff38df53c8b59da8955c58c55b26f862f0af716c6e3ebd32220e2be15d8bfa086cbfe965e4d70cfe02876630b355aeb353267bd8e714dba52ac21a36d001be678f16f15fc7d8ac29264dc4d3c1b603c335eda2747e85324b7cbea25dfb400df"], 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x2, 0x24, &(0x7f0000000200)=ANY=[@ANYRES8=r6, @ANYRESHEX=r2, @ANYRES32=r5], 0x0) read$hidraw(r5, &(0x7f0000002380)=""/93, 0xfdef) move_pages(0x0, 0x2, &(0x7f0000000380)=[&(0x7f00005e4000/0x3000)=nil, &(0x7f0000422000/0x3000)=nil], &(0x7f0000001180), 0x0, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0) 7m59.917860591s ago: executing program 7 (id=5177): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0xc00) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x48840, 0x0) socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000000c0)={0x1, 0x6, 0x200000, 0x8, 0x2, 0xffbffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000380)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d00010000000700000025000000040016000c0014000800001f000006060400180000008cdb25", 0x39}], 0x1) sendmsg$SOCK_DESTROY(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="700000001500000307000000fcdbdf2501e85b0001009f98c4828b11597334c8ea883c7b4d07f96cd37c46488c47cac3e744afd680f1c88473ea644d06e511d91081781ffb19a94a54dec7e40589b83da0cb05c9be43ffb977453c071c8aee8505bead8e097faf450df76ce0dd000000e09b28f7e0fa7aa657bf67e4566488b018ea1dd6c7602a60403d133e0ecf21688a95529cfa"], 0x70}, 0x1, 0x0, 0x0, 0x4004}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x400301, 0xc) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r5, 0x708, 0xb8f7) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000100)={0x1, 0x4, 0x7, &(0x7f0000000080)={0x10, "14a6c62707dab7299602abd83463604d70b41d4008e300"}}) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x12100) 7m58.595462651s ago: executing program 7 (id=5178): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a8010000580"], 0x34}}, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMGET(r3, 0x5415, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000300)={0x7}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000100)) write(r5, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) r6 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r6, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x81) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 7m58.396855892s ago: executing program 3 (id=5179): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a8010000580"], 0x34}}, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMGET(r3, 0x5415, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000300)={0x7}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000100)=0x0) ptrace$setregset(0x4205, r6, 0x200, &(0x7f00000001c0)={&(0x7f0000000140)="bd22dd5b99edac93e00b708378bea2cb0ecd3b11280828bcc3dd1061c00625ff7d51f5110964af05c1cd2bc8ffecdf5c63e5978293acac7b4151b18069467529e170a7959fc3eaf4896162c14e6b79267e1f2154", 0x54}) write(r5, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x81) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 7m57.988228352s ago: executing program 7 (id=5184): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000240)="8330a7e74c799e1710c551c7073d594faf8eccdff5b6c2f981477b7b8146b4251338a8947035c352f24d47a8a738c5219679499f634bf0e8d1442cda44ab91fd", 0x40}, {0x0}], 0x2) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000340)=0xab) socket(0x2, 0x80805, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b70696473202d70696473202d68756790a82b75090d3ed38f03d88565746c62202d696f20"], 0x19) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a300000000e0a010400000000000000000a0004050900010073797a3100000000040004800900020073797a3200000000140000001100010000000000000000000200000a"], 0x58}, 0x1, 0x0, 0x0, 0x8894}, 0x24000000) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000001c0)={0x8000, 0xfffffffa, 0xfffffff9, 0x80000001, 0xfffffff9}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 7m57.040516668s ago: executing program 3 (id=5187): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}}], {0x14}}, 0x7c}}, 0x0) r1 = fsopen(&(0x7f0000000580)='debugfs\x00', 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) ioctl$OCFS2_IOC_GROUP_EXTEND(r1, 0x40046f01, &(0x7f0000000280)=0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000340)={0xf, 0x8, 0xfa00, {r3, 0x10}}, 0x10) fcntl$dupfd(r1, 0x406, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x64, 0x0, 0x2, 0x4}, {0x20, 0x1, 0x9, 0x6}, {0x6, 0x9, 0xd, 0x5}]}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x80046601, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10}}, [0x401, 0xb23, 0xff, 0x355, 0x8, 0x4, 0x2, 0x6ea, 0x3, 0xf2e3, 0x7, 0x80, 0x949, 0x7, 0x7]}, &(0x7f0000000200)=0x100) gettid() timer_create(0x3, 0x0, &(0x7f0000001080)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x77359400}, {0x0, 0xe4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xc, 0x492f, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r8}, 0x38) 7m55.980380084s ago: executing program 7 (id=5191): syz_emit_ethernet(0x6a, &(0x7f0000000900)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c5819c", 0x34, 0x3a, 0x0, @dev, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "5ad10a", 0x0, 0x2b, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [], "aaa12ba2"}}}}}}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000240)) 7m55.517037756s ago: executing program 43 (id=5191): syz_emit_ethernet(0x6a, &(0x7f0000000900)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c5819c", 0x34, 0x3a, 0x0, @dev, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "5ad10a", 0x0, 0x2b, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [], "aaa12ba2"}}}}}}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000240)) 7m55.513270895s ago: executing program 3 (id=5194): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a8010000580"], 0x34}}, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMGET(r3, 0x5415, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000300)={0x7}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000100)) write(r5, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) r6 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r6, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x81) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 7m55.156985847s ago: executing program 44 (id=5194): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a8010000580"], 0x34}}, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMGET(r3, 0x5415, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000300)={0x7}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000100)) write(r5, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) r6 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r6, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x81) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 7m54.7201046s ago: executing program 1 (id=5197): r0 = socket$pppl2tp(0x18, 0x1, 0x1) openat$nullb(0xffffffffffffff9c, 0x0, 0x185202, 0x0) r1 = getpid() socket$inet(0xa, 0x801, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xffffff01, 0x2) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x2010, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r2, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, r1, 0x0, 0x42}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x9435, 0x800, 0x3, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe70b, 0x40000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8005c87, 0x200, 0x3, 0x1c3, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2215, 0x100, 0x1, 0x1c9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xfffffffc}}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x280}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r6 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x1000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) lseek(r0, 0x6, 0x3) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/time\x00') 7m53.676014378s ago: executing program 1 (id=5199): fsopen(&(0x7f0000000300)='jfs\x00', 0x0) 7m53.438698091s ago: executing program 1 (id=5201): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) symlink(&(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/fs/afs/cells\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='clear_refs\x00') (async) write(r1, &(0x7f0000000300)='add syz0 127.0.0.1+70', 0x15) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') dup(r2) (async) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8032, 0xffffffffffffffff, 0x28f41000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x10000007}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) (async) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x3938700}}, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) (async) timer_gettime(r5, &(0x7f00000001c0)) syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x2, 0x33d, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x20, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0xffffffff, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="120110012157d1104705016870f3010203010902120001012460080904"], 0x0) 7m49.999929934s ago: executing program 1 (id=5211): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a8010000580"], 0x34}}, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMGET(r3, 0x5415, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000300)={0x7}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000100)=0x0) ptrace$setregset(0x4205, r6, 0x200, &(0x7f00000001c0)={&(0x7f0000000140)="bd22dd5b99edac93e00b708378bea2cb0ecd3b11280828bcc3dd1061c00625ff7d51f5110964af05c1cd2bc8ffecdf5c63e5978293acac7b4151b18069467529e170a7959fc3eaf4896162c14e6b79267e1f2154", 0x54}) write(r5, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x81) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 7m48.693266058s ago: executing program 1 (id=5212): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a8010000580"], 0x34}}, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000300)={0x7}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) ptrace$setregset(0x4205, r5, 0x200, &(0x7f00000001c0)={&(0x7f0000000140)="bd22dd5b99edac93e00b708378bea2cb0ecd3b11280828bcc3dd1061c00625ff7d51f5110964af05c1cd2bc8ffecdf5c63e5978293acac7b4151b18069467529e170a7959fc3eaf4896162c14e6b79267e1f2154", 0x54}) write(r4, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) 7m48.017020705s ago: executing program 1 (id=5215): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000015d80), 0x201, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x50440, 0x29) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x2, 0x5, 0x300e, 0x8}, 0x14) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1208000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c87c363159f0e8ae000000", @ANYRES16=r4, @ANYBLOB="00022dbd7000fddbdf2541000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x880) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0], 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r8, 0x40045569, 0x1) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x2001c) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00', 0x19}) ioctl$UI_DEV_CREATE(r8, 0x5501) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) write$FUSE_NOTIFY_RESEND(0xffffffffffffffff, &(0x7f0000000300)={0x14}, 0x14) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c0002800c00028008000340000000024c0002800800034000000004080001"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) sendmsg$nl_generic(r7, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000ecc4000000b37f1a009500000000000000c3a3ac15af761990bef76fc949f1ec0ac114d5a7dd99834981fdfef0856e50b2f7914d05a21260fbaf5435604c4ba9f338bee7d2fd2ad76f9df838d4b412290a3c79030dbb84c78a93f197d00afa38fbca1573486d405bf5ba056bcaf61a69c65e0987e4e60e22a32ff8d9378b54097e16c6afef55960154b7fcd226f3dfc90991bc5859"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x7000000}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYRES8=r6, @ANYRESOCT=r5, @ANYRESHEX=r8, @ANYRESHEX=r2, @ANYRES32=r7, @ANYRES8=r3, @ANYRES16=r5, @ANYBLOB="18e384c33ddef3e8087c2d25f03e5dbae2521a803d907bc77563f131f1c762a8a1aaccf01084a84839bf34cd8fc4d8207fbf74e3bc90afe8d608b2239e72cbc34f5cef94701f18d5ff5802be4b4683225f7edb92b03aacb0bb2eba914dadaa4c34eaa05f50aa84b9ef6862664cff60d8769a28ddeac7b3227b59df47c3e6301576e89a20b6edc869f870902128946f9ff33294f276e5f3cbdbb1d44511cd8ba7fcc3388f09d5205c4624d6e71a9e79ad"], 0x7c}}, 0x40488) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000100001000080001c000000000000000a50000000060a0b040000000000000000020000002400048020000180080001006c6f67001400028008000540000003ff060002407d0000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x78}}, 0x0) 7m47.579998576s ago: executing program 45 (id=5215): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000015d80), 0x201, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x50440, 0x29) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x2, 0x5, 0x300e, 0x8}, 0x14) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1208000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c87c363159f0e8ae000000", @ANYRES16=r4, @ANYBLOB="00022dbd7000fddbdf2541000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x880) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0], 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r8, 0x40045569, 0x1) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x2001c) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00', 0x19}) ioctl$UI_DEV_CREATE(r8, 0x5501) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) write$FUSE_NOTIFY_RESEND(0xffffffffffffffff, &(0x7f0000000300)={0x14}, 0x14) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) sendmsg$nl_generic(r7, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000ecc4000000b37f1a009500000000000000c3a3ac15af761990bef76fc949f1ec0ac114d5a7dd99834981fdfef0856e50b2f7914d05a21260fbaf5435604c4ba9f338bee7d2fd2ad76f9df838d4b412290a3c79030dbb84c78a93f197d00afa38fbca1573486d405bf5ba056bcaf61a69c65e0987e4e60e22a32ff8d9378b54097e16c6afef55960154b7fcd226f3dfc90991bc5859"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x7000000}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYRES8=r6, @ANYRESOCT=r5, @ANYRESHEX=r8, @ANYRESHEX=r2, @ANYRES32=r7, @ANYRES8=r3, @ANYRES16=r5, @ANYBLOB="18e384c33ddef3e8087c2d25f03e5dbae2521a803d907bc77563f131f1c762a8a1aaccf01084a84839bf34cd8fc4d8207fbf74e3bc90afe8d608b2239e72cbc34f5cef94701f18d5ff5802be4b4683225f7edb92b03aacb0bb2eba914dadaa4c34eaa05f50aa84b9ef6862664cff60d8769a28ddeac7b3227b59df47c3e6301576e89a20b6edc869f870902128946f9ff33294f276e5f3cbdbb1d44511cd8ba7fcc3388f09d5205c4624d6e71a9e79ad"], 0x7c}}, 0x40488) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000100001000080001c000000000000000a50000000060a0b040000000000000000020000002400048020000180080001006c6f67001400028008000540000003ff060002407d0000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x78}}, 0x0) 2m39.576379512s ago: executing program 9 (id=6305): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x402) 2m38.615839638s ago: executing program 9 (id=6308): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0105b08, &(0x7f0000000040)) 2m35.248286552s ago: executing program 9 (id=6319): syz_emit_ethernet(0x3e, &(0x7f0000000900)={@link_local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) 2m35.068131445s ago: executing program 9 (id=6320): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002100)={0x20, 0x44, 0x1, 0x70bd29, 0x4, {0x2}, [@nested={0x4, 0x48}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1022}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094) 2m35.024656728s ago: executing program 9 (id=6322): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/uts\x00') read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ptrace(0x10, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa02, 0x870, 0x1, 0x2, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x8, 0x2800, 0x6, 0x2, 0xba2, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) 2m34.637505548s ago: executing program 9 (id=6323): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu '], 0xb) kcmp(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, r1) 2m19.054059697s ago: executing program 46 (id=6323): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu '], 0xb) kcmp(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, r1) 11.12637819s ago: executing program 5 (id=7013): socket$xdp(0x2c, 0x3, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) ioctl$EVIOCGLED(r0, 0x40044583, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000080) sendmmsg(r2, &(0x7f0000002f00)=[{{0x0, 0x0, &(0x7f00000005c0)}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000002a80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @empty}, 0x1, 0x2, 0x3}}, 0x80, &(0x7f0000002d80)}}], 0x3, 0x4000) socket$inet6(0xa, 0x80002, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x3c, r6, 0x1, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {0x53}}, 0x14}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) 10.731366419s ago: executing program 0 (id=7015): userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 9.533404249s ago: executing program 0 (id=7018): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000040)=0x0) write$dsp(r0, &(0x7f0000000200)="bb45f2", 0x3) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 7.739776612s ago: executing program 0 (id=7026): socket$inet6_sctp(0xa, 0x801, 0x84) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) gettimeofday(0x0, 0x0) ptrace$ARCH_GET_FS(0x1e, 0x0, &(0x7f00000001c0), 0x1003) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x5fe74b71b702e3e9, 0x81) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/crypto\x00', 0x0, 0x0) r2 = inotify_init() r3 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r3, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(r2, 0xffffffffffffffff, 0x0) 7.518793347s ago: executing program 5 (id=7028): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, 0x0, r2, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xffbffffe, 0xa, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x31e4, 0x4000, 0xfffffffd, 0x32c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffff8, 0x2, 0x1, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x2, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x8000, 0x1, 0x2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, r3, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0xffffff7e, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.348313217s ago: executing program 5 (id=7029): userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) dup(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 6.355895184s ago: executing program 2 (id=7033): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)) write$tun(r3, 0x0, 0xfffffd68) 6.35207297s ago: executing program 6 (id=7034): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000feffffff0000000001000000850000007b0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000085000000060000009500000000000000000000008124677f7e2b355db21a7b4a59180eb0a3000c986c2613907501b6cae950b8b0615eb9a2d9893d13c18efbde2ac40c0585558752c79a066c6da1e5d47f3da354d3e328df6197232cf13978187d03b80b69af469a38df8907e26fd10917d8f6904276d12d27b2c0d1748ee04577e67221d8703dc8ca4be76389190eda274ad509bc568a34f6ed74f6517fb48dec5b41"], &(0x7f0000000080)='GPL\x00', 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xd, 0x0, &(0x7f0000000400)="c274386d178550cb864bd57221", 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102038700fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="38000000031401002dbd700002dcdf250900020073607a310000000008004100736977001400330073797a5f74756e00"], 0x38}, 0x1, 0x0, 0x0, 0x14f7325ddd07b80}, 0x44000) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, 0x1402, 0x1, 0x70bd23, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x60408a0}, 0x488c0) 5.394374561s ago: executing program 2 (id=7035): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x2, &(0x7f0000000000)=0x80000000000003) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000240)=@md0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x22) 5.280572302s ago: executing program 6 (id=7036): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)=0x0) write$dsp(r0, &(0x7f0000000200)="bb45f2", 0x3) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 4.558435386s ago: executing program 2 (id=7037): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, 0x0) 4.515905495s ago: executing program 8 (id=7038): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000040)={'bridge0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket(0xa, 0x5, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) listen(r5, 0x5) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_req={{0x17, 0x42, 0xa}, {0x80, 0x200, 0x200, 0xa, [0x40]}}}}, 0x17) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYBLOB="00032abd7000fb"], 0x14}, 0x1, 0x0, 0x0, 0x4081}, 0x200408c0) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, 0x0, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r7, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendto$inet6(r6, 0x0, 0x0, 0x2004c053, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0x8}, 0x1c) vmsplice(r1, &(0x7f0000000740)=[{&(0x7f0000000300)="b01dc87549cee0d3c33f2d20eb9ea90ecdb39467a26b80972c496049ca21bd9d60b7925890cd43a5bb6fac4fdc9adf1f928ac531155ffa555ef6c79eced6189be1973c4f7e08b6a53469977d0a389a025feecbdd4556ab76f6eb945bb344c0d02d9b88c8d645d4777ade65d33f3f27a3d8788c60d552ab", 0x77}, {&(0x7f00000003c0)="93a0dd541de5b30c9846f40172319563b611f84d4d729b2e66f0024677c22636f2b976817eaf5085577ba8478efda9a4648c54d198ee8609be56d989d8e7c13b4666bc3193356be0b3582283c794ef4b9c442bc6b8f52715c1d28f9cb3732566fc549ae5dfff4e64392edfe01c89dcc8b778c3af38a45b7cac963274cfb344aa8362c02ed3", 0x85}, {&(0x7f0000000500)}, {&(0x7f0000000540)}, {0x0}], 0x5, 0x3) syz_emit_ethernet(0x5e, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x43) 4.481644678s ago: executing program 5 (id=7039): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000580)={0x40, 0x18, 0x3, "16c081"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.409561875s ago: executing program 0 (id=7040): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 3.223996085s ago: executing program 6 (id=7041): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x80000001, 0x5, 0x9, 0xfa}, {0x2, 0xffffff53, 0xffffffff, 0xca0, 0xffffff80}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x18, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x18, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.184281567s ago: executing program 8 (id=7042): syz_emit_ethernet(0x15, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @random="6a2ddcf6177a", @val={@void, {0x8864, 0x0, 0x1}}, {@llc={0x4, {@llc={0xe, 0xf4, "99"}}}}}, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0xa882, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f00000000c0)={{0xdc, 0x43}, {0xe}, 0x0, 0xb8, 0x8}) file_getattr(0xffffffffffffff9c, 0x0, 0x0, 0x2f, 0x1000) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x680d, 0x2, 0x1, 0x3a3}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xda22, 0x1, 0x3, 0x313, 0x0, r0}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb32, 0x8, 0x0, 0x7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4d47, 0x1, 0x1, 0x2e5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf521, 0x1000, 0x2, 0xb0}}], 0x4, &(0x7f0000001780)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, 0x0, '\x00', {0x0, 0x2b5, 0x0, &(0x7f0000000780)=@buf_1k="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"}}, &(0x7f0000001800)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setreuid(0x0, 0xee00) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r3, &(0x7f0000000100)='select \n', 0x10) r4 = syz_io_uring_setup(0xaba, &(0x7f00000000c0)={0x0, 0x5352, 0x8, 0x2000, 0x9a, 0x0, r2}, 0x0, &(0x7f00000004c0), &(0x7f0000000080)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000240)={{0xa, @multicast2, 0x4e20, 0x3, 'ovf\x00', 0x21, 0x800, 0x1a}, {@multicast1, 0x4e21, 0x3, 0xfffffff9, 0x0, 0xb}}, 0x44) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r6, 0x701, 0x2070bd24, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40850}, 0x4000) r7 = epoll_create1(0x0) r8 = fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x28, 0xfa00, {0x0, {0x1b, 0x4e22, 0x9, @empty, 0x595a}}}, 0x30) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000034191dcb0ea7ac4b42a04accaaa991c0960839a75d5ad3102ab924242abe1315c97e72718ad46b777ab216b19dddd46260c1c18013571cfa27f64b9732539f1ba18325ef5238f5ae524365e4f9127b8aa44da8214c72eee15f61758a9ba7bd4eaf970c10b2a65949072597f6d9bdd0348d1082055c80e7f4fda4229d9d827a72e3cbf393446761192140affbca9c32f6847a861f18500fa01a94736ea08e3d57b667da307454e5bc0ad37787639ed8cbd5c00afbdb"], &(0x7f0000000040)='GPL\x00'}, 0x80) r10 = epoll_create1(0x0) r11 = fcntl$dupfd(r10, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r11, @ANYRES32=r9, @ANYBLOB="11"], 0x14) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r8, r9, 0x11, 0x0, r8}, 0x11) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x2, &(0x7f0000000180), 0xfe) 3.019861287s ago: executing program 6 (id=7043): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) socketpair(0x29, 0x800, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0xb) gettid() ppoll(0x0, 0x0, &(0x7f0000002d00), &(0x7f0000002d40)={[0x100000001]}, 0x8) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 2.984756956s ago: executing program 8 (id=7044): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="80fd", 0x2}], 0x1, 0x0, 0x0) 2.384066485s ago: executing program 0 (id=7045): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)) write$tun(r3, 0x0, 0xfffffd68) 2.383770676s ago: executing program 8 (id=7046): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000feffffff0000000001000000850000007b0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000085000000060000009500000000000000000000008124677f7e2b355db21a7b4a59180eb0a3000c986c2613907501b6cae950b8b0615eb9a2d9893d13c18efbde2ac40c0585558752c79a066c6da1e5d47f3da354d3e328df6197232cf13978187d03b80b69af469a38df8907e26fd10917d8f6904276d12d27b2c0d1748ee04577e67221d8703dc8ca4be76389190eda274ad509bc568a34f6ed74f6517fb48dec5b41"], &(0x7f0000000080)='GPL\x00', 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xd, 0x0, &(0x7f0000000400)="c274386d178550cb864bd57221", 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102038700fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="38000000031401002dbd700002dcdf250900020073607a310000000008004100736977001400330073797a5f74756e00"], 0x38}, 0x1, 0x0, 0x0, 0x14f7325ddd07b80}, 0x44000) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, 0x1402, 0x1, 0x70bd23, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x60408a0}, 0x488c0) 2.16766013s ago: executing program 6 (id=7047): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0xff) creat(0x0, 0x48) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="0203040314f400002cbd70fbbfdbdf250100090000000000030006000000000002004e23e0000001000000000000000002000100000000000000000a000000ffffffc2fc000f00000000000000000000000000070018003d70324000000000050017002b8000000a004e2400000000fc020000000000000000000000000000001000000000000002001300080000002dbd700007350000"], 0xa0}, 0x1, 0x7}, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r2, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r1, &(0x7f0000000100), 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_int(r5, 0x1, 0xc, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) readv(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.344007209s ago: executing program 0 (id=7048): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000240)=@md0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x22) 1.276987786s ago: executing program 8 (id=7049): syz_open_dev$loop(0x0, 0x4, 0x2001) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340)="11ee10920f885aabcb1d73ba8b7ce59e4921f17ec326e5ebd476cdbcf8ea838deeec34cee912dd63158908f6540970d617e643d36a204df305b45c922c2aa48fc99374e6603e749d9b784cc8b22e5f278f160588d890dff2e14a3f34637f238475e8d392acf13c1a791229714285ded46a20887e", 0x74) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = socket$inet6(0xa, 0x800, 0xfff7fffe) sendmsg$inet6(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x1cd040, 0x0) 1.253395076s ago: executing program 2 (id=7050): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/ocfs2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/ocfs2/node/node1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/ocfs2/node/node1/ipv4_address\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='127.0.0.1', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/ocfs2/node/node1/ipv4_port\x00', 0x2, 0x0) write(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/cluster/ocfs2/node/node2\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/cluster/ocfs2/node/node2/ipv4_address\x00', 0x2, 0x0) write(r2, &(0x7f0000000d00)='127.0.0.2', 0x9) 1.251417133s ago: executing program 5 (id=7051): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x1, 0x3e, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2, 0x1], 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 339.343352ms ago: executing program 8 (id=7052): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)=0x0) write$dsp(r0, &(0x7f0000000200)="bb45f2", 0x3) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 288.702089ms ago: executing program 2 (id=7053): mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1f9) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x10c) write(r0, &(0x7f0000000200)='\\x\\', 0x3) 251.78892ms ago: executing program 6 (id=7054): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x80000001, 0x5, 0x9, 0xfa}, {0x2, 0xffffff53, 0xffffffff, 0xca0, 0xffffff80}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x18, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x18, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 224.795534ms ago: executing program 5 (id=7055): socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x48}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x56, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, r3, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x672e, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2002, 0x2, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 0s ago: executing program 2 (id=7056): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, 0x0, 0x0) kernel console output (not intermixed with test programs): __do_sys_io_uring_enter+0xa88/0x1b10 [ 1418.493763][T27951] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 1418.493783][T27951] ? sched_clock_cpu+0x6c/0x570 [ 1418.493819][T27951] ? xfd_validate_state+0x129/0x190 [ 1418.493851][T27951] do_syscall_64+0x123/0x790 [ 1418.493877][T27951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1418.493898][T27951] RIP: 0033:0x7fecb919e159 [ 1418.493915][T27951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1418.493934][T27951] RSP: 002b:00007fecb73f5f38 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1418.493954][T27951] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fecb919e159 [ 1418.493966][T27951] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000d [ 1418.493978][T27951] RBP: 00000000000000e6 R08: 0000000000000000 R09: 0000000000000008 [ 1418.493990][T27951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000a80 [ 1418.494002][T27951] R13: 0000200000000a88 R14: 00000000000003c9 R15: 0000000000000000 [ 1418.494027][T27951] [ 1418.688044][T27962] 9p: Bad value for 'rfdno' [ 1418.731337][ T31] audit: type=1400 audit(1788653894.394:6293): avc: denied { write } for pid=27949 comm="syz.0.5888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1419.228117][T27972] synth uevent: /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:00: unknown uevent action string [ 1419.229494][T27972] acpi device:00: uevent: failed to send synthetic uevent: -22 [ 1420.226254][T27986] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27986 comm=syz.9.5897 [ 1420.965923][ T31] audit: type=1400 audit(1788653896.694:6294): avc: denied { read } for pid=28016 comm="syz.2.5908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1421.207863][T28017] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1421.207897][T28017] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1421.207932][T28017] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1421.211946][T28017] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1421.461885][ T31] audit: type=1400 audit(1788653897.184:6295): avc: denied { setopt } for pid=28033 comm="syz.9.5912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1421.490736][ T31] audit: type=1400 audit(1788653897.214:6296): avc: denied { bind } for pid=28033 comm="syz.9.5912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1422.509447][ T31] audit: type=1400 audit(1788653897.774:6297): avc: denied { name_bind } for pid=28039 comm="syz.0.5898" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1422.640483][T28046] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1422.828714][T28051] netlink: 'syz.8.5917': attribute type 1 has an invalid length. [ 1422.828760][T28051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1423.052003][ T31] audit: type=1400 audit(1788653898.774:6298): avc: denied { write } for pid=28031 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1423.243397][ T31] audit: type=1400 audit(1788653898.964:6299): avc: denied { write } for pid=28073 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1424.740254][ T31] audit: type=1400 audit(1788653900.464:6300): avc: denied { write } for pid=28076 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1424.848200][ T31] audit: type=1400 audit(1788653900.574:6301): avc: denied { write } for pid=28100 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1425.751292][T28101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1425.898402][T28108] configfs-gadget.g1 gadget.0: afunc_bind:1270 Error! [ 1425.898539][T28108] udc dummy_udc.0: failed to start g1: -19 [ 1425.901472][T28108] UDC core: g1: couldn't find an available UDC or it's busy [ 1425.920208][T28092] kvm [28091]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080 [ 1425.939840][T28092] kvm [28091]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x80 [ 1425.951375][T28092] kvm [28091]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1426.952084][ T31] audit: type=1400 audit(1788653902.674:6302): avc: denied { write } for pid=28128 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1428.298700][ T31] audit: type=1400 audit(1788653904.024:6303): avc: denied { write } for pid=28163 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1428.390363][T28169] FAULT_INJECTION: forcing a failure. [ 1428.390363][T28169] name failslab, interval 1, probability 0, space 0, times 0 [ 1428.390420][T28169] CPU: 0 UID: 0 PID: 28169 Comm: syz.8.5944 Tainted: G L syzkaller #0 PREEMPT(full) [ 1428.390448][T28169] Tainted: [L]=SOFTLOCKUP [ 1428.390455][T28169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1428.390465][T28169] Call Trace: [ 1428.390470][T28169] [ 1428.390476][T28169] dump_stack_lvl+0x100/0x190 [ 1428.390507][T28169] should_fail_ex.cold+0x5/0xa [ 1428.390531][T28169] should_failslab+0xc2/0x120 [ 1428.390552][T28169] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1428.390570][T28169] ? security_file_alloc+0x34/0x2c0 [ 1428.390595][T28169] security_file_alloc+0x34/0x2c0 [ 1428.390613][T28169] init_file+0x95/0x480 [ 1428.390636][T28169] alloc_empty_file_noaccount+0x45/0xd0 [ 1428.390661][T28169] alloc_file_pseudo_noaccount+0x183/0x290 [ 1428.390685][T28169] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 1428.390709][T28169] ? iput+0x3a/0x40 [ 1428.390734][T28169] bdev_file_open_by_dev+0x13a/0x210 [ 1428.390761][T28169] setup_bdev_super+0x78/0x770 [ 1428.390788][T28169] get_tree_bdev_flags+0x363/0x620 [ 1428.390804][T28169] ? __pfx_bfs_fill_super+0x10/0x10 [ 1428.390822][T28169] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1428.390838][T28169] ? cap_capable+0x107/0x430 [ 1428.390862][T28169] ? bpf_lsm_capable+0x9/0x10 [ 1428.390883][T28169] ? security_capable+0x80/0x260 [ 1428.390906][T28169] vfs_get_tree+0x92/0x320 [ 1428.390936][T28169] path_mount+0x7d0/0x24c0 [ 1428.390962][T28169] ? __pfx_path_mount+0x10/0x10 [ 1428.390983][T28169] ? lockdep_hardirqs_on+0x7d/0x110 [ 1428.391008][T28169] ? putname+0xb1/0x110 [ 1428.391029][T28169] ? kmem_cache_free+0x127/0x6c0 [ 1428.391063][T28169] ? __x64_sys_mount+0x293/0x310 [ 1428.391086][T28169] __x64_sys_mount+0x293/0x310 [ 1428.391109][T28169] ? __pfx___x64_sys_mount+0x10/0x10 [ 1428.391139][T28169] do_syscall_64+0x123/0x790 [ 1428.391159][T28169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1428.391176][T28169] RIP: 0033:0x7f81eb19e159 [ 1428.391191][T28169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1428.391208][T28169] RSP: 002b:00007f81ec10c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1428.391225][T28169] RAX: ffffffffffffffda RBX: 00007f81eb425fa0 RCX: 00007f81eb19e159 [ 1428.391237][T28169] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000140 [ 1428.391248][T28169] RBP: 00007f81eb235024 R08: 0000000000000000 R09: 0000000000000000 [ 1428.391258][T28169] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000000 [ 1428.391270][T28169] R13: 00007f81eb426038 R14: 00007f81eb425fa0 R15: 00007ffefa561df8 [ 1428.391293][T28169] [ 1428.414348][T28169] /dev/nullb0: Can't open blockdev [ 1429.873066][T20965] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1430.027396][T20965] usb 9-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=44.0c [ 1430.039169][T20965] usb 9-1: config 36 has an invalid interface number: 107 but max is 0 [ 1430.039210][T20965] usb 9-1: config 36 has no interface number 0 [ 1430.039253][T20965] usb 9-1: config 36 interface 107 altsetting 13 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 1430.039282][T20965] usb 9-1: config 36 interface 107 has no altsetting 0 [ 1430.090891][T20965] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.090934][T20965] usb 9-1: Product: syz [ 1430.090961][T20965] usb 9-1: Manufacturer: syz [ 1430.090978][T20965] usb 9-1: SerialNumber: syz [ 1430.181784][ T31] audit: type=1400 audit(1788653905.904:6304): avc: denied { write } for pid=28185 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1430.644484][T28208] siw: device registration error -23 [ 1430.670468][T20965] usb 9-1: USB disconnect, device number 22 [ 1431.242206][ T31] audit: type=1400 audit(1788653906.964:6305): avc: denied { write } for pid=28224 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1431.334721][ T31] audit: type=1326 audit(1788653907.054:6306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28227 comm="syz.2.5958" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb2699e159 code=0x7ffc0000 [ 1431.363264][ T31] audit: type=1326 audit(1788653907.094:6307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28227 comm="syz.2.5958" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb2699e159 code=0x7ffc0000 [ 1431.394966][ T31] audit: type=1326 audit(1788653907.114:6308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28227 comm="syz.2.5958" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fdb2699e159 code=0x7ffc0000 [ 1431.426158][ T31] audit: type=1326 audit(1788653907.154:6309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28227 comm="syz.2.5958" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb2699e159 code=0x7ffc0000 [ 1431.532647][ T31] audit: type=1326 audit(1788653907.254:6310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28227 comm="syz.2.5958" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb2699e159 code=0x7ffc0000 [ 1431.573048][ T31] audit: type=1326 audit(1788653907.294:6311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28227 comm="syz.2.5958" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fdb2699e159 code=0x7ffc0000 [ 1431.604624][ T31] audit: type=1326 audit(1788653907.324:6312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28227 comm="syz.2.5958" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb2699e159 code=0x7ffc0000 [ 1432.310865][T28241] FAULT_INJECTION: forcing a failure. [ 1432.310865][T28241] name failslab, interval 1, probability 0, space 0, times 0 [ 1432.310918][T28241] CPU: 0 UID: 0 PID: 28241 Comm: syz.8.5960 Tainted: G L syzkaller #0 PREEMPT(full) [ 1432.310946][T28241] Tainted: [L]=SOFTLOCKUP [ 1432.310952][T28241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1432.310962][T28241] Call Trace: [ 1432.310967][T28241] [ 1432.310974][T28241] dump_stack_lvl+0x100/0x190 [ 1432.311003][T28241] should_fail_ex.cold+0x5/0xa [ 1432.311030][T28241] should_failslab+0xc2/0x120 [ 1432.311054][T28241] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1432.311073][T28241] ? security_file_alloc+0x34/0x2c0 [ 1432.311096][T28241] security_file_alloc+0x34/0x2c0 [ 1432.311113][T28241] init_file+0x95/0x480 [ 1432.311133][T28241] alloc_empty_file_noaccount+0x45/0xd0 [ 1432.311157][T28241] alloc_file_pseudo_noaccount+0x183/0x290 [ 1432.311181][T28241] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 1432.311206][T28241] ? iput+0x3a/0x40 [ 1432.311232][T28241] bdev_file_open_by_dev+0x13a/0x210 [ 1432.311260][T28241] setup_bdev_super+0x78/0x770 [ 1432.311286][T28241] get_tree_bdev_flags+0x363/0x620 [ 1432.311302][T28241] ? __pfx_bfs_fill_super+0x10/0x10 [ 1432.311321][T28241] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1432.311338][T28241] ? cap_capable+0x107/0x430 [ 1432.311361][T28241] ? bpf_lsm_capable+0x9/0x10 [ 1432.311382][T28241] ? security_capable+0x80/0x260 [ 1432.311412][T28241] vfs_get_tree+0x92/0x320 [ 1432.311435][T28241] path_mount+0x7d0/0x24c0 [ 1432.311461][T28241] ? __pfx_path_mount+0x10/0x10 [ 1432.311482][T28241] ? lockdep_hardirqs_on+0x7d/0x110 [ 1432.311505][T28241] ? putname+0xb1/0x110 [ 1432.311527][T28241] ? kmem_cache_free+0x127/0x6c0 [ 1432.311557][T28241] ? __x64_sys_mount+0x293/0x310 [ 1432.311579][T28241] __x64_sys_mount+0x293/0x310 [ 1432.311601][T28241] ? __pfx___x64_sys_mount+0x10/0x10 [ 1432.311630][T28241] do_syscall_64+0x123/0x790 [ 1432.311651][T28241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1432.311669][T28241] RIP: 0033:0x7f81eb19e159 [ 1432.311685][T28241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1432.311701][T28241] RSP: 002b:00007f81ec10c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1432.311718][T28241] RAX: ffffffffffffffda RBX: 00007f81eb425fa0 RCX: 00007f81eb19e159 [ 1432.311729][T28241] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000140 [ 1432.311740][T28241] RBP: 00007f81eb235024 R08: 0000000000000000 R09: 0000000000000000 [ 1432.311750][T28241] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000000 [ 1432.311761][T28241] R13: 00007f81eb426038 R14: 00007f81eb425fa0 R15: 00007ffefa561df8 [ 1432.311784][T28241] [ 1432.311843][T28241] /dev/nullb0: Can't open blockdev [ 1432.746333][T27485] Bluetooth: hci4: hardware error 0x69 [ 1432.755849][T28255] new mount options do not match the existing superblock, will be ignored [ 1433.785572][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 1433.785704][ T31] audit: type=1400 audit(1788653909.504:6318): avc: denied { write } for pid=28247 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1433.873201][ T31] audit: type=1326 audit(1788653909.594:6319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28279 comm="syz.9.5967" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb919e159 code=0x7ffc0000 [ 1433.901995][ T31] audit: type=1326 audit(1788653909.594:6320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28279 comm="syz.9.5967" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb919e159 code=0x7ffc0000 [ 1433.931223][ T31] audit: type=1326 audit(1788653909.594:6321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28279 comm="syz.9.5967" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb919e159 code=0x7ffc0000 [ 1433.931270][ T31] audit: type=1326 audit(1788653909.594:6322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28279 comm="syz.9.5967" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb919e159 code=0x7ffc0000 [ 1433.931305][ T31] audit: type=1326 audit(1788653909.594:6323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28279 comm="syz.9.5967" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fecb919e159 code=0x7ffc0000 [ 1433.960525][ T31] audit: type=1326 audit(1788653909.654:6324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28279 comm="syz.9.5967" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fecb915e98e code=0x7ffc0000 [ 1433.960573][ T31] audit: type=1326 audit(1788653909.654:6325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28279 comm="syz.9.5967" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fecb915e98e code=0x7ffc0000 [ 1433.960609][ T31] audit: type=1326 audit(1788653909.654:6326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28279 comm="syz.9.5967" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fecb915e98e code=0x7ffc0000 [ 1433.960649][ T31] audit: type=1326 audit(1788653909.654:6327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28279 comm="syz.9.5967" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fecb915e98e code=0x7ffc0000 [ 1434.983219][T27485] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1435.244306][T28306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1435.822361][T28319] FAT-fs (nbd9): unable to read boot sector [ 1436.014072][T28333] overlayfs: failed to resolve './file0': -2 [ 1436.554446][T28347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28347 comm=syz.8.5983 [ 1436.964022][T28357] FAULT_INJECTION: forcing a failure. [ 1436.964022][T28357] name failslab, interval 1, probability 0, space 0, times 0 [ 1436.964080][T28357] CPU: 0 UID: 0 PID: 28357 Comm: syz.0.5975 Tainted: G L syzkaller #0 PREEMPT(full) [ 1436.964108][T28357] Tainted: [L]=SOFTLOCKUP [ 1436.964117][T28357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1436.964126][T28357] Call Trace: [ 1436.964133][T28357] [ 1436.964141][T28357] dump_stack_lvl+0x100/0x190 [ 1436.964171][T28357] should_fail_ex.cold+0x5/0xa [ 1436.964195][T28357] should_failslab+0xc2/0x120 [ 1436.964214][T28357] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1436.964232][T28357] ? d_instantiate+0x8a/0xb0 [ 1436.964256][T28357] ? alloc_empty_file_noaccount+0x2b/0xd0 [ 1436.964283][T28357] alloc_empty_file_noaccount+0x2b/0xd0 [ 1436.964307][T28357] alloc_file_pseudo_noaccount+0x183/0x290 [ 1436.964341][T28357] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 1436.964368][T28357] ? iput+0x3a/0x40 [ 1436.964396][T28357] bdev_file_open_by_dev+0x13a/0x210 [ 1436.964425][T28357] setup_bdev_super+0x78/0x770 [ 1436.964454][T28357] get_tree_bdev_flags+0x363/0x620 [ 1436.964470][T28357] ? __pfx_bfs_fill_super+0x10/0x10 [ 1436.964489][T28357] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1436.964506][T28357] ? cap_capable+0x107/0x430 [ 1436.964531][T28357] ? bpf_lsm_capable+0x9/0x10 [ 1436.964555][T28357] ? security_capable+0x80/0x260 [ 1436.964579][T28357] vfs_get_tree+0x92/0x320 [ 1436.964602][T28357] path_mount+0x7d0/0x24c0 [ 1436.964627][T28357] ? __pfx_path_mount+0x10/0x10 [ 1436.964649][T28357] ? lockdep_hardirqs_on+0x7d/0x110 [ 1436.964671][T28357] ? putname+0xb1/0x110 [ 1436.964689][T28357] ? kmem_cache_free+0x127/0x6c0 [ 1436.964720][T28357] ? __x64_sys_mount+0x293/0x310 [ 1436.964742][T28357] __x64_sys_mount+0x293/0x310 [ 1436.964764][T28357] ? __pfx___x64_sys_mount+0x10/0x10 [ 1436.964794][T28357] do_syscall_64+0x123/0x790 [ 1436.964815][T28357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.964833][T28357] RIP: 0033:0x7fe71819e159 [ 1436.964849][T28357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1436.964865][T28357] RSP: 002b:00007fe719036028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1436.964882][T28357] RAX: ffffffffffffffda RBX: 00007fe718425fa0 RCX: 00007fe71819e159 [ 1436.964894][T28357] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000140 [ 1436.964904][T28357] RBP: 00007fe718235024 R08: 0000000000000000 R09: 0000000000000000 [ 1436.964915][T28357] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000000 [ 1436.964925][T28357] R13: 00007fe718426038 R14: 00007fe718425fa0 R15: 00007fff9835d768 [ 1436.964947][T28357] [ 1436.964995][T28357] /dev/nullb0: Can't open blockdev [ 1438.177720][T28365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1439.932926][ T31] kauditd_printk_skb: 57 callbacks suppressed [ 1439.933099][ T31] audit: type=1400 audit(1788653915.654:6385): avc: denied { write } for pid=28392 comm="syz.6.5998" path="socket:[116083]" dev="sockfs" ino=116083 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1440.150319][ T31] audit: type=1400 audit(1788653915.874:6386): avc: denied { write } for pid=28394 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1440.221518][T28400] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1440.377648][ T5264] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1440.583433][T28407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1441.285814][ T31] audit: type=1400 audit(1788653917.014:6387): avc: denied { write } for pid=28404 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1442.171644][ T31] audit: type=1400 audit(1788653917.894:6388): avc: denied { write } for pid=28439 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1442.301456][T28444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1444.293230][ T31] audit: type=1326 audit(1788653920.014:6389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28471 comm="syz.6.6018" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0ff9e159 code=0x7ffc0000 [ 1444.330448][ T31] audit: type=1326 audit(1788653920.054:6390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28471 comm="syz.6.6018" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0ff9e159 code=0x7ffc0000 [ 1444.382347][ T31] audit: type=1400 audit(1788653920.104:6391): avc: denied { write } for pid=28453 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1444.430272][ T31] audit: type=1326 audit(1788653920.154:6392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28471 comm="syz.6.6018" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fca0ff9e159 code=0x7ffc0000 [ 1444.430345][ T31] audit: type=1326 audit(1788653920.154:6393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28471 comm="syz.6.6018" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0ff9e159 code=0x7ffc0000 [ 1444.430375][ T31] audit: type=1326 audit(1788653920.154:6394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28471 comm="syz.6.6018" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0ff9e159 code=0x7ffc0000 [ 1444.657000][T28474] device-mapper: ioctl: Unable to rename non-existent device, t to j [ 1445.057098][T28500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1446.966256][T28514] overlayfs: failed to resolve './file1': -2 [ 1447.031675][T28516] netlink: 'syz.0.6027': attribute type 27 has an invalid length. [ 1447.114691][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 1447.114729][ T31] audit: type=1400 audit(1788653922.834:6402): avc: denied { write } for pid=28487 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1447.237383][ T31] audit: type=1400 audit(1788653922.964:6403): avc: denied { write } for pid=28528 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1447.472257][T28539] device-mapper: ioctl: Unable to rename non-existent device, t to j [ 1447.578555][ T31] audit: type=1400 audit(1788653923.304:6404): avc: denied { write } for pid=28544 comm="syz.8.6035" path="socket:[116429]" dev="sockfs" ino=116429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1447.825436][ T31] audit: type=1400 audit(1788653923.544:6405): avc: denied { unmount } for pid=25804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1447.924740][T28554] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1447.958026][ T31] audit: type=1400 audit(1788653923.684:6406): avc: denied { write } for pid=28531 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1448.318562][ T31] audit: type=1400 audit(1788653924.044:6407): avc: denied { write } for pid=28560 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1451.659907][ T31] audit: type=1400 audit(1788653927.314:6408): avc: denied { write } for pid=28579 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1452.253382][T28618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1452.741728][ T31] audit: type=1400 audit(1788653928.464:6409): avc: denied { write } for pid=28619 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1454.136034][ T31] audit: type=1400 audit(1788653929.864:6410): avc: denied { write } for pid=28631 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1454.475711][ T31] audit: type=1400 audit(1788653930.164:6411): avc: denied { write } for pid=28655 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1454.637440][ T31] audit: type=1400 audit(1788653930.364:6412): avc: denied { write } for pid=28657 comm="syz.0.6062" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1457.789273][ T31] audit: type=1400 audit(1788653933.414:6413): avc: denied { write } for pid=28664 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1458.123037][ T31] audit: type=1400 audit(1788653933.844:6414): avc: denied { write } for pid=28715 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1458.213331][ T31] audit: type=1326 audit(1788653933.934:6415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28716 comm="syz.8.6073" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81eb19e159 code=0x7ffc0000 [ 1458.213521][ T31] audit: type=1326 audit(1788653933.934:6416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28716 comm="syz.8.6073" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81eb19e159 code=0x7ffc0000 [ 1458.221080][ T31] audit: type=1326 audit(1788653933.934:6417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28716 comm="syz.8.6073" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f81eb19e159 code=0x7ffc0000 [ 1458.221318][ T31] audit: type=1326 audit(1788653933.934:6418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28716 comm="syz.8.6073" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81eb19e159 code=0x7ffc0000 [ 1458.225357][ T31] audit: type=1326 audit(1788653933.934:6419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28716 comm="syz.8.6073" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81eb19e159 code=0x7ffc0000 [ 1458.226052][ T31] audit: type=1326 audit(1788653933.934:6420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28716 comm="syz.8.6073" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f81eb19e159 code=0x7ffc0000 [ 1458.229259][ T31] audit: type=1326 audit(1788653933.934:6421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28716 comm="syz.8.6073" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81eb19e159 code=0x7ffc0000 [ 1458.229418][ T31] audit: type=1326 audit(1788653933.934:6422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28716 comm="syz.8.6073" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81eb19e159 code=0x7ffc0000 [ 1459.706506][T28736] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1462.603392][T28772] program syz.0.6091 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1462.800478][T28779] jffs2: notice: (28779) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1462.853959][T28781] overlayfs: failed to clone upperpath [ 1464.951814][T28809] siw: device registration error -23 [ 1465.960341][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 1465.960382][ T31] audit: type=1400 audit(1788653941.684:6433): avc: denied { write } for pid=28774 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1466.114843][T28815] program syz.8.6102 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1466.244169][ T31] audit: type=1400 audit(1788653941.964:6434): avc: denied { write } for pid=28816 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1466.588621][T28829] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1466.751506][T28835] fuse: Bad value for 'fd' [ 1467.438408][T15824] libceph: connect (1)[c::]:6789 error -101 [ 1467.492308][T15824] libceph: mon0 (1)[c::]:6789 connect error [ 1467.580776][T28842] ceph: No mds server is up or the cluster is laggy [ 1467.748363][T15824] libceph: connect (1)[c::]:6789 error -101 [ 1467.749273][T15824] libceph: mon0 (1)[c::]:6789 connect error [ 1468.259588][T15824] libceph: connect (1)[c::]:6789 error -101 [ 1468.340410][T15824] libceph: mon0 (1)[c::]:6789 connect error [ 1469.024357][ T31] audit: type=1400 audit(1788653944.744:6435): avc: denied { write } for pid=28824 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1470.406314][T28867] program syz.8.6113 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1470.685363][ T31] audit: type=1400 audit(1788653946.404:6436): avc: denied { write } for pid=28874 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1471.902410][T28890] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1472.115572][ T31] audit: type=1400 audit(1788653947.834:6437): avc: denied { write } for pid=28896 comm="syz.6.6119" name="subsystems" dev="configfs" ino=3542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1472.163198][ T31] audit: type=1400 audit(1788653947.884:6438): avc: denied { write } for pid=28896 comm="syz.6.6119" name="namespaces" dev="configfs" ino=117963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1472.192450][T28898] nvmet: adding nsid 1 to subsystem testsubsys [ 1472.288366][ T31] audit: type=1400 audit(1788653948.014:6439): avc: denied { write } for pid=28886 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1472.288736][T28898] nvmet: failed to open block device ./file0: (-2) [ 1472.592348][T28907] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1472.715092][T28911] siw: device registration error -23 [ 1472.760641][ T31] audit: type=1400 audit(1788653948.484:6440): avc: denied { write } for pid=28908 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1473.620226][ T31] audit: type=1400 audit(1788653949.334:6441): avc: denied { write } for pid=28921 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1473.725717][ T9] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 1474.394283][T28943] overlayfs: failed to clone lowerpath [ 1474.402439][T15824] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1474.487053][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 1474.492877][ T9] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1474.508687][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1474.523641][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.532018][ T9] usb 10-1: Product: syz [ 1474.536927][ T9] usb 10-1: Manufacturer: syz [ 1474.541692][ T9] usb 10-1: SerialNumber: syz [ 1474.549354][ T9] usb 10-1: config 0 descriptor?? [ 1474.556182][T15824] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1474.561375][ T31] audit: type=1400 audit(1788653950.274:6442): avc: denied { write } for pid=28944 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1474.594048][T15824] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1474.594086][T15824] usb 1-1: Product: syz [ 1474.594111][T15824] usb 1-1: SerialNumber: syz [ 1474.622613][ T9] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1474.622661][ T9] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 1474.639418][T15824] usb 1-1: config 0 descriptor?? [ 1474.754520][ T5264] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1475.513826][T15824] hso 1-1:0.0: Failed to find BULK eps [ 1475.747003][ T5783] usb 1-1: USB disconnect, device number 78 [ 1475.921173][ T9] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1476.868365][ T9] em28xx 10-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 1476.909057][ T9] em28xx 10-1:0.0: board has no eeprom [ 1478.082200][ T9] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1478.082252][ T9] em28xx 10-1:0.0: dvb set to bulk mode. [ 1478.117161][ T9] usb 10-1: USB disconnect, device number 48 [ 1478.127442][ T9] em28xx 10-1:0.0: Disconnecting em28xx [ 1478.135038][ T5712] em28xx 10-1:0.0: Binding DVB extension [ 1478.407378][ T31] audit: type=1400 audit(1788653954.134:6443): avc: denied { write } for pid=28965 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1478.474957][ T5712] em28xx 10-1:0.0: Registering input extension [ 1478.492827][ T9] em28xx 10-1:0.0: Closing input extension [ 1479.017784][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1479.017854][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1479.032390][ T31] audit: type=1400 audit(1788653954.754:6444): avc: denied { write } for pid=29005 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1480.198933][ T9] em28xx: Freeing device [ 1481.645298][T29033] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1481.767870][ T31] audit: type=1400 audit(1788653957.494:6445): avc: denied { write } for pid=29009 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1482.419612][ T31] audit: type=1400 audit(1788653958.134:6446): avc: denied { write } for pid=29043 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1482.546336][T29045] FAULT_INJECTION: forcing a failure. [ 1482.546336][T29045] name failslab, interval 1, probability 0, space 0, times 0 [ 1482.547115][T29045] CPU: 1 UID: 0 PID: 29045 Comm: syz.6.6153 Tainted: G L syzkaller #0 PREEMPT(full) [ 1482.547149][T29045] Tainted: [L]=SOFTLOCKUP [ 1482.547157][T29045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1482.547171][T29045] Call Trace: [ 1482.547178][T29045] [ 1482.547187][T29045] dump_stack_lvl+0x100/0x190 [ 1482.547221][T29045] should_fail_ex.cold+0x5/0xa [ 1482.547248][T29045] should_failslab+0xc2/0x120 [ 1482.547274][T29045] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1482.547295][T29045] ? lock_acquire+0x1d1/0x380 [ 1482.547316][T29045] ? do_getname_kernel+0x5d/0x250 [ 1482.547348][T29045] do_getname_kernel+0x5d/0x250 [ 1482.547376][T29045] kern_path+0x1f/0x50 [ 1482.547397][T29045] lookup_bdev+0xd8/0x2a0 [ 1482.547423][T29045] ? __pfx_lookup_bdev+0x10/0x10 [ 1482.547448][T29045] ? cred_has_capability.isra.0+0x186/0x300 [ 1482.547481][T29045] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1482.547521][T29045] get_tree_bdev_flags+0xbe/0x620 [ 1482.547540][T29045] ? __pfx_bfs_fill_super+0x10/0x10 [ 1482.547561][T29045] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1482.547581][T29045] ? cap_capable+0x107/0x430 [ 1482.547610][T29045] ? bpf_lsm_capable+0x9/0x10 [ 1482.547637][T29045] ? security_capable+0x80/0x260 [ 1482.547664][T29045] vfs_get_tree+0x92/0x320 [ 1482.547692][T29045] path_mount+0x7d0/0x24c0 [ 1482.547724][T29045] ? __pfx_path_mount+0x10/0x10 [ 1482.547756][T29045] ? lockdep_hardirqs_on+0x7d/0x110 [ 1482.547784][T29045] ? putname+0xb1/0x110 [ 1482.547808][T29045] ? kmem_cache_free+0x127/0x6c0 [ 1482.547846][T29045] ? __x64_sys_mount+0x293/0x310 [ 1482.547874][T29045] __x64_sys_mount+0x293/0x310 [ 1482.547904][T29045] ? __pfx___x64_sys_mount+0x10/0x10 [ 1482.547939][T29045] do_syscall_64+0x123/0x790 [ 1482.547965][T29045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1482.547986][T29045] RIP: 0033:0x7fca0ff9e159 [ 1482.548004][T29045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1482.548022][T29045] RSP: 002b:00007fca10dc9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1482.548042][T29045] RAX: ffffffffffffffda RBX: 00007fca10225fa0 RCX: 00007fca0ff9e159 [ 1482.548055][T29045] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000140 [ 1482.548068][T29045] RBP: 00007fca10035024 R08: 0000000000000000 R09: 0000000000000000 [ 1482.548080][T29045] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000000 [ 1482.548092][T29045] R13: 00007fca10226038 R14: 00007fca10225fa0 R15: 00007ffdea1a97c8 [ 1482.548118][T29045] [ 1482.590786][T29045] /dev/nullb0: Can't lookup blockdev [ 1483.081025][T29052] synth uevent: /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:00: unknown uevent action string [ 1483.081234][T29052] acpi device:00: uevent: failed to send synthetic uevent: -22 [ 1485.647813][ T31] audit: type=1400 audit(1788653961.374:6447): avc: denied { write } for pid=29059 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1486.310844][ T31] audit: type=1326 audit(1788653962.034:6448): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29080 comm="syz.8.6162" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f81eb19e159 code=0x0 [ 1486.434721][ T31] audit: type=1400 audit(1788653962.144:6449): avc: denied { write } for pid=29089 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1486.711360][T29104] netlink: 79 bytes leftover after parsing attributes in process `syz.2.6164'. [ 1487.241491][ T31] audit: type=1400 audit(1788653962.964:6450): avc: denied { write } for pid=29095 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1487.368495][ T31] audit: type=1400 audit(1788653963.094:6451): avc: denied { write } for pid=29126 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1488.322079][T29139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6175'. [ 1488.366960][T29139] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6175'. [ 1488.482122][T29137] kvm [29136]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000080 [ 1488.493563][T29137] kvm [29136]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x80 [ 1488.549380][T29150] siw: device registration error -23 [ 1488.800066][ T31] audit: type=1400 audit(1788653964.524:6452): avc: denied { write } for pid=29135 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1489.050822][ T31] audit: type=1400 audit(1788653964.774:6453): avc: denied { write } for pid=29162 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1492.645954][ T31] audit: type=1400 audit(1788653968.374:6454): avc: denied { write } for pid=29178 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1492.719320][T29221] configfs-gadget.g1 gadget.0: afunc_bind:1270 Error! [ 1492.719410][T29221] udc dummy_udc.0: failed to start g1: -19 [ 1492.719761][T29221] UDC core: g1: couldn't find an available UDC or it's busy [ 1493.150977][ T31] audit: type=1400 audit(1788653968.874:6455): avc: denied { write } for pid=29229 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1494.271662][T29248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1494.349433][ T31] audit: type=1400 audit(1788653970.074:6456): avc: denied { write } for pid=29237 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1494.462537][ T31] audit: type=1400 audit(1788653970.184:6457): avc: denied { name_bind } for pid=29259 comm="syz.6.6203" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1495.627456][ T31] audit: type=1400 audit(1788653971.344:6458): avc: denied { write } for pid=29267 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1495.817494][T29274] siw: device registration error -23 [ 1496.267481][ T9] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 1496.945729][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 1496.949192][ T9] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1496.953720][ T9] usb 10-1: config index 0 descriptor too short (expected 51443, got 18) [ 1496.967959][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.967985][ T9] usb 10-1: Product: syz [ 1496.967998][ T9] usb 10-1: Manufacturer: syz [ 1496.968011][ T9] usb 10-1: SerialNumber: syz [ 1497.010181][ T9] r8152-cfgselector 10-1: Unknown version 0x0000 [ 1497.010227][ T9] r8152-cfgselector 10-1: config 0 descriptor?? [ 1497.018673][ T31] audit: type=1400 audit(1788653972.744:6459): avc: denied { write } for pid=29275 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1497.530658][ T30] r8152-cfgselector 10-1: USB disconnect, device number 49 [ 1497.946821][ T31] audit: type=1400 audit(1788653973.674:6460): avc: denied { write } for pid=29303 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1498.086484][T29308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1498.203243][T29311] overlayfs: failed to resolve './file0': -2 [ 1498.234895][ T31] audit: type=1400 audit(1788653973.954:6461): avc: denied { read write } for pid=29309 comm="syz.8.6215" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1498.234968][ T31] audit: type=1400 audit(1788653973.954:6462): avc: denied { open } for pid=29309 comm="syz.8.6215" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1498.247246][T29311] CacheFiles: Empty directory specified [ 1498.265302][T29311] CacheFiles: No cache directory specified [ 1498.642442][ T31] audit: type=1400 audit(1788653974.364:6463): avc: denied { map } for pid=29329 comm="syz.8.6220" path="socket:[118472]" dev="sockfs" ino=118472 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1498.642510][ T31] audit: type=1400 audit(1788653974.364:6464): avc: denied { read write } for pid=29329 comm="syz.8.6220" path="socket:[118472]" dev="sockfs" ino=118472 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1499.936119][ T5783] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1500.066904][T29348] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1500.101290][ T5783] usb 9-1: Using ep0 maxpacket: 16 [ 1500.107808][ T5783] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1500.118653][ T5783] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1500.118682][ T5783] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1500.144401][ T5783] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.144442][ T5783] usb 9-1: Product: syz [ 1500.144471][ T5783] usb 9-1: Manufacturer: syz [ 1500.144488][ T5783] usb 9-1: SerialNumber: syz [ 1500.172026][ T5783] usb 9-1: config 0 descriptor?? [ 1500.193091][ T5783] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1500.204562][ T5783] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1500.386701][T29352] synth uevent: /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:00: unknown uevent action string [ 1500.386956][T29352] acpi device:00: uevent: failed to send synthetic uevent: -22 [ 1500.910784][ T5783] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1500.918169][ T5783] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 1500.927830][ T5783] em28xx 9-1:0.0: AC97 chip type couldn't be determined [ 1500.927851][ T5783] em28xx 9-1:0.0: No AC97 audio processor [ 1501.647709][T29372] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1501.837736][T29383] siw: device registration error -23 [ 1501.989479][ T31] audit: type=1400 audit(1788653977.714:6465): avc: denied { write } for pid=29355 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1502.028849][ T5712] usb 9-1: USB disconnect, device number 23 [ 1502.029983][ T5712] em28xx 9-1:0.0: Disconnecting em28xx [ 1502.109201][ T5712] em28xx: Freeing device [ 1502.117971][T29388] FAULT_INJECTION: forcing a failure. [ 1502.117971][T29388] name failslab, interval 1, probability 0, space 0, times 0 [ 1502.118019][T29388] CPU: 0 UID: 0 PID: 29388 Comm: syz.6.6225 Tainted: G L syzkaller #0 PREEMPT(full) [ 1502.118044][T29388] Tainted: [L]=SOFTLOCKUP [ 1502.118050][T29388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1502.118059][T29388] Call Trace: [ 1502.118065][T29388] [ 1502.118072][T29388] dump_stack_lvl+0x100/0x190 [ 1502.118100][T29388] should_fail_ex.cold+0x5/0xa [ 1502.118125][T29388] should_failslab+0xc2/0x120 [ 1502.118149][T29388] __kmalloc_cache_noprof+0x91/0x6d0 [ 1502.118175][T29388] ? find_held_lock+0x2b/0x80 [ 1502.118199][T29388] ? alloc_fs_context+0x57/0xf40 [ 1502.118226][T29388] alloc_fs_context+0x57/0xf40 [ 1502.118248][T29388] ? __get_fs_type+0xe3/0x200 [ 1502.118273][T29388] path_mount+0xdbd/0x24c0 [ 1502.118299][T29388] ? __pfx_path_mount+0x10/0x10 [ 1502.118320][T29388] ? lockdep_hardirqs_on+0x7d/0x110 [ 1502.118343][T29388] ? putname+0xb1/0x110 [ 1502.118361][T29388] ? kmem_cache_free+0x127/0x6c0 [ 1502.118391][T29388] ? __x64_sys_mount+0x293/0x310 [ 1502.118412][T29388] __x64_sys_mount+0x293/0x310 [ 1502.118441][T29388] ? __pfx___x64_sys_mount+0x10/0x10 [ 1502.118471][T29388] do_syscall_64+0x123/0x790 [ 1502.118494][T29388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.118513][T29388] RIP: 0033:0x7fca0ff9e159 [ 1502.118529][T29388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1502.118546][T29388] RSP: 002b:00007fca10dc9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1502.118565][T29388] RAX: ffffffffffffffda RBX: 00007fca10225fa0 RCX: 00007fca0ff9e159 [ 1502.118578][T29388] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000140 [ 1502.118590][T29388] RBP: 00007fca10035024 R08: 0000000000000000 R09: 0000000000000000 [ 1502.118601][T29388] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000000 [ 1502.118613][T29388] R13: 00007fca10226038 R14: 00007fca10225fa0 R15: 00007ffdea1a97c8 [ 1502.118636][T29388] [ 1502.345690][ T30] usb 10-1: new full-speed USB device number 50 using dummy_hcd [ 1502.393343][ T31] audit: type=1400 audit(1788653978.114:6466): avc: denied { write } for pid=29400 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1502.415963][ T9] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1502.496265][ T30] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1502.506529][ T30] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1502.506572][ T30] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1502.506625][ T30] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1502.568707][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1502.572884][ T9] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1502.574336][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1502.581276][ T9] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1502.581300][ T9] usb 1-1: Product: syz [ 1502.581312][ T9] usb 1-1: Manufacturer: syz [ 1502.581325][ T9] usb 1-1: SerialNumber: syz [ 1502.589987][ T9] usb 1-1: config 0 descriptor?? [ 1502.590806][T29392] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1502.604113][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 1502.604137][ T9] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1502.813277][ T30] usb 10-1: usb_control_msg returned -32 [ 1502.813333][ T30] usbtmc 10-1:16.0: can't read capabilities [ 1503.525988][ T30] usb 1-1: USB disconnect, device number 79 [ 1504.320294][ T31] audit: type=1400 audit(1788653980.044:6467): avc: denied { write } for pid=29404 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1504.430666][ T31] audit: type=1400 audit(1788653980.154:6468): avc: denied { write } for pid=29437 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1504.783437][ T31] audit: type=1400 audit(1788653980.504:6469): avc: denied { write } for pid=29446 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1504.906664][ T31] audit: type=1400 audit(1788653980.634:6470): avc: denied { write } for pid=29461 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1504.936282][ T9] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1505.106135][ T9] usb 1-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 1505.118020][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1505.118063][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1505.146765][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1505.146804][ T9] usb 1-1: Product: syz [ 1505.146829][ T9] usb 1-1: Manufacturer: syz [ 1505.174298][ T9] mos7840 1-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 1505.225653][ T2326] usb 10-1: USB disconnect, device number 50 [ 1507.411456][ T9] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 1507.440682][ T9] usb 1-1: USB disconnect, device number 80 [ 1507.475399][ T9] mos7840 1-1:1.0: device disconnected [ 1507.530146][T29489] overlayfs: missing 'lowerdir' [ 1507.908527][ T31] audit: type=1400 audit(1788653983.624:6471): avc: denied { read } for pid=29501 comm="syz.2.6260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1508.170091][T29513] FAULT_INJECTION: forcing a failure. [ 1508.170091][T29513] name failslab, interval 1, probability 0, space 0, times 0 [ 1508.182987][T29513] CPU: 0 UID: 0 PID: 29513 Comm: syz.6.6269 Tainted: G L syzkaller #0 PREEMPT(full) [ 1508.183024][T29513] Tainted: [L]=SOFTLOCKUP [ 1508.183033][T29513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1508.183046][T29513] Call Trace: [ 1508.183054][T29513] [ 1508.183063][T29513] dump_stack_lvl+0x100/0x190 [ 1508.183099][T29513] should_fail_ex.cold+0x5/0xa [ 1508.183128][T29513] should_failslab+0xc2/0x120 [ 1508.183154][T29513] __kmalloc_noprof+0xfc/0x840 [ 1508.183176][T29513] ? lsm_blob_alloc+0x68/0x90 [ 1508.183206][T29513] lsm_blob_alloc+0x68/0x90 [ 1508.183232][T29513] security_sb_alloc+0x25/0x240 [ 1508.183258][T29513] sget_fc+0x3ca/0x1f20 [ 1508.183281][T29513] ? __pfx_super_s_dev_test+0x10/0x10 [ 1508.183309][T29513] ? __pfx_super_s_dev_set+0x10/0x10 [ 1508.183339][T29513] ? __pfx_sget_fc+0x10/0x10 [ 1508.183356][T29513] ? mntput+0x70/0xa0 [ 1508.183378][T29513] ? lookup_bdev+0x16b/0x2a0 [ 1508.183404][T29513] ? __pfx_lookup_bdev+0x10/0x10 [ 1508.183427][T29513] ? cred_has_capability.isra.0+0x186/0x300 [ 1508.183460][T29513] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1508.183496][T29513] get_tree_bdev_flags+0x1ba/0x620 [ 1508.183515][T29513] ? __pfx_bfs_fill_super+0x10/0x10 [ 1508.183536][T29513] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1508.183555][T29513] ? cap_capable+0x107/0x430 [ 1508.183583][T29513] ? bpf_lsm_capable+0x9/0x10 [ 1508.183609][T29513] ? security_capable+0x80/0x260 [ 1508.183637][T29513] vfs_get_tree+0x92/0x320 [ 1508.183664][T29513] path_mount+0x7d0/0x24c0 [ 1508.183696][T29513] ? __pfx_path_mount+0x10/0x10 [ 1508.183722][T29513] ? lockdep_hardirqs_on+0x7d/0x110 [ 1508.183748][T29513] ? putname+0xb1/0x110 [ 1508.183773][T29513] ? kmem_cache_free+0x127/0x6c0 [ 1508.183810][T29513] ? __x64_sys_mount+0x293/0x310 [ 1508.183836][T29513] __x64_sys_mount+0x293/0x310 [ 1508.183863][T29513] ? __pfx___x64_sys_mount+0x10/0x10 [ 1508.183899][T29513] do_syscall_64+0x123/0x790 [ 1508.183931][T29513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1508.183952][T29513] RIP: 0033:0x7fca0ff9e159 [ 1508.183970][T29513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1508.183990][T29513] RSP: 002b:00007fca10dc9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1508.184011][T29513] RAX: ffffffffffffffda RBX: 00007fca10225fa0 RCX: 00007fca0ff9e159 [ 1508.184026][T29513] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000140 [ 1508.184040][T29513] RBP: 00007fca10035024 R08: 0000000000000000 R09: 0000000000000000 [ 1508.184051][T29513] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000000 [ 1508.184064][T29513] R13: 00007fca10226038 R14: 00007fca10225fa0 R15: 00007ffdea1a97c8 [ 1508.184090][T29513] [ 1508.411277][ T31] audit: type=1400 audit(1788653984.134:6472): avc: denied { write } for pid=29487 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1509.585261][T29525] input: syz1 as /devices/virtual/input/input213 [ 1510.011864][ T31] audit: type=1400 audit(1788653985.734:6473): avc: denied { write } for pid=29528 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1510.984902][T29552] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1512.863838][T29576] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1513.740196][ T31] audit: type=1400 audit(1788653989.464:6474): avc: denied { write } for pid=29574 comm="syz.6.6286" name="subsystems" dev="configfs" ino=88953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1513.942357][ T31] audit: type=1400 audit(1788653989.634:6475): avc: denied { write } for pid=29537 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1513.979358][ T31] audit: type=1400 audit(1788653989.694:6476): avc: denied { write } for pid=29574 comm="syz.6.6286" name="subsystems" dev="configfs" ino=88953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1514.105161][T29579] nvmet_tcp: address family 255 not supported [ 1514.313257][ T31] audit: type=1400 audit(1788653990.034:6477): avc: denied { write } for pid=29595 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1514.341195][T29600] synth uevent: /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:00: unknown uevent action string [ 1514.341248][T29600] acpi device:00: uevent: failed to send synthetic uevent: -22 [ 1515.564151][T29627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1516.295141][ T31] audit: type=1400 audit(1788653991.624:6478): avc: denied { bind } for pid=29630 comm="syz.0.6301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1516.295220][ T31] audit: type=1400 audit(1788653991.624:6479): avc: denied { connect } for pid=29630 comm="syz.0.6301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1516.995548][T29629] openvswitch: netlink: IP tunnel dst address not specified [ 1517.047405][T29648] 9pnet_fd: p9_fd_create_tcp (29648): problem connecting socket to 127.0.0.1 [ 1517.632777][T29651] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6304'. [ 1517.632829][T29651] openvswitch: netlink: Flow key attr not present in new flow. [ 1519.525881][ T5783] usb 10-1: new full-speed USB device number 51 using dummy_hcd [ 1519.689379][ T5783] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1519.691796][ T5783] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1519.691822][ T5783] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1519.691854][ T5783] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1519.756786][T29671] synth uevent: /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:00: unknown uevent action string [ 1519.756843][T29671] acpi device:00: uevent: failed to send synthetic uevent: -22 [ 1519.902301][ T5783] usb 10-1: usb_control_msg returned -32 [ 1519.902352][ T5783] usbtmc 10-1:16.0: can't read capabilities [ 1520.475168][ T30] usb 10-1: USB disconnect, device number 51 [ 1521.003393][T29683] FAULT_INJECTION: forcing a failure. [ 1521.003393][T29683] name failslab, interval 1, probability 0, space 0, times 0 [ 1521.017696][T29683] CPU: 0 UID: 0 PID: 29683 Comm: syz.8.6318 Tainted: G L syzkaller #0 PREEMPT(full) [ 1521.017731][T29683] Tainted: [L]=SOFTLOCKUP [ 1521.017740][T29683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1521.017751][T29683] Call Trace: [ 1521.017759][T29683] [ 1521.017768][T29683] dump_stack_lvl+0x100/0x190 [ 1521.017804][T29683] should_fail_ex.cold+0x5/0xa [ 1521.017831][T29683] should_failslab+0xc2/0x120 [ 1521.017854][T29683] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1521.017872][T29683] ? __pfx_map_id_range_down+0x10/0x10 [ 1521.017892][T29683] ? rcu_is_watching+0x13/0xc0 [ 1521.017917][T29683] ? security_inode_alloc+0x3b/0x2c0 [ 1521.017949][T29683] security_inode_alloc+0x3b/0x2c0 [ 1521.017978][T29683] inode_init_always_gfp+0xc6f/0xfb0 [ 1521.018005][T29683] alloc_inode+0x8e/0x250 [ 1521.018033][T29683] sock_alloc+0x44/0x280 [ 1521.018053][T29683] ? security_socket_create+0x7f/0x250 [ 1521.018081][T29683] __sock_create+0xc2/0x860 [ 1521.018109][T29683] __sys_socket+0x14d/0x260 [ 1521.018133][T29683] ? __pfx___sys_socket+0x10/0x10 [ 1521.018160][T29683] __x64_sys_socket+0x72/0xb0 [ 1521.018179][T29683] ? lockdep_hardirqs_on+0x7d/0x110 [ 1521.018198][T29683] do_syscall_64+0x123/0x790 [ 1521.018220][T29683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1521.018239][T29683] RIP: 0033:0x7f81eb19e159 [ 1521.018254][T29683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1521.018268][T29683] RSP: 002b:00007f81ec10c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1521.018284][T29683] RAX: ffffffffffffffda RBX: 00007f81eb425fa0 RCX: 00007f81eb19e159 [ 1521.018297][T29683] RDX: 0000000000000084 RSI: 0000000000000005 RDI: 000000000000000a [ 1521.018309][T29683] RBP: 00007f81eb235024 R08: 0000000000000000 R09: 0000000000000000 [ 1521.018321][T29683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1521.018330][T29683] R13: 00007f81eb426038 R14: 00007f81eb425fa0 R15: 00007ffefa561df8 [ 1521.018360][T29683] [ 1521.018539][T29683] socket: no more sockets [ 1521.153638][T29683] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1521.264804][T29687] netlink: del zone limit has 4 unknown bytes [ 1522.171393][T29711] synth uevent: /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:00: unknown uevent action string [ 1522.171452][T29711] acpi device:00: uevent: failed to send synthetic uevent: -22 [ 1522.258138][ T31] audit: type=1400 audit(1788653997.984:6480): avc: denied { mounton } for pid=29715 comm="syz.2.6326" path="/" dev="configfs" ino=1052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1522.809309][ T31] audit: type=1326 audit(1788653998.534:6481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29712 comm="syz.0.6327" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe71819e159 code=0x0 [ 1522.845686][ T10] usb 9-1: new full-speed USB device number 24 using dummy_hcd [ 1522.926636][ T31] audit: type=1400 audit(1788653998.654:6482): avc: denied { write } for pid=29691 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1523.029155][ T10] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1523.042019][ T10] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1523.042059][ T10] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1523.042102][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.075664][ T31] audit: type=1400 audit(1788653998.794:6483): avc: denied { write } for pid=29730 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1523.140278][T29734] FAULT_INJECTION: forcing a failure. [ 1523.140278][T29734] name failslab, interval 1, probability 0, space 0, times 0 [ 1523.140334][T29734] CPU: 1 UID: 0 PID: 29734 Comm: syz.0.6332 Tainted: G L syzkaller #0 PREEMPT(full) [ 1523.140360][T29734] Tainted: [L]=SOFTLOCKUP [ 1523.140366][T29734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1523.140374][T29734] Call Trace: [ 1523.140380][T29734] [ 1523.140387][T29734] dump_stack_lvl+0x100/0x190 [ 1523.140416][T29734] should_fail_ex.cold+0x5/0xa [ 1523.140442][T29734] should_failslab+0xc2/0x120 [ 1523.140463][T29734] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 1523.140482][T29734] ? sock_alloc_inode+0x26/0x2c0 [ 1523.140505][T29734] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1523.140525][T29734] sock_alloc_inode+0x26/0x2c0 [ 1523.140544][T29734] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1523.140561][T29734] alloc_inode+0x68/0x250 [ 1523.140586][T29734] sock_alloc+0x44/0x280 [ 1523.140602][T29734] ? security_socket_create+0x7f/0x250 [ 1523.140626][T29734] __sock_create+0xc2/0x860 [ 1523.140651][T29734] __sys_socket+0x14d/0x260 [ 1523.140673][T29734] ? __pfx___sys_socket+0x10/0x10 [ 1523.140700][T29734] __x64_sys_socket+0x72/0xb0 [ 1523.140720][T29734] ? lockdep_hardirqs_on+0x7d/0x110 [ 1523.140739][T29734] do_syscall_64+0x123/0x790 [ 1523.140760][T29734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1523.140783][T29734] RIP: 0033:0x7fe71819e159 [ 1523.140798][T29734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1523.140815][T29734] RSP: 002b:00007fe719036028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1523.140832][T29734] RAX: ffffffffffffffda RBX: 00007fe718425fa0 RCX: 00007fe71819e159 [ 1523.140844][T29734] RDX: 0000000000000084 RSI: 0000000000000005 RDI: 000000000000000a [ 1523.140854][T29734] RBP: 00007fe718235024 R08: 0000000000000000 R09: 0000000000000000 [ 1523.140865][T29734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1523.140876][T29734] R13: 00007fe718426038 R14: 00007fe718425fa0 R15: 00007fff9835d768 [ 1523.140901][T29734] [ 1523.140910][T29734] socket: no more sockets [ 1523.144395][T29734] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1523.308572][ T10] usb 9-1: usb_control_msg returned -32 [ 1523.308615][ T10] usbtmc 9-1:16.0: can't read capabilities [ 1523.643519][ T31] audit: type=1400 audit(1788653999.364:6484): avc: denied { write } for pid=29741 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1523.828677][ T31] audit: type=1400 audit(1788653999.554:6485): avc: denied { write } for pid=29753 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1523.876862][T20965] usb 9-1: USB disconnect, device number 24 [ 1525.401606][T29793] synth uevent: /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:00: unknown uevent action string [ 1525.401660][T29793] acpi device:00: uevent: failed to send synthetic uevent: -22 [ 1526.755214][ T31] audit: type=1400 audit(1788654002.474:6486): avc: denied { write } for pid=29808 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1526.854825][ T31] audit: type=1400 audit(1788654002.574:6487): avc: denied { write } for pid=29830 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1532.059480][T29891] FAULT_INJECTION: forcing a failure. [ 1532.059480][T29891] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1532.059534][T29891] CPU: 0 UID: 0 PID: 29891 Comm: syz.6.6375 Tainted: G L syzkaller #0 PREEMPT(full) [ 1532.059559][T29891] Tainted: [L]=SOFTLOCKUP [ 1532.059565][T29891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1532.059574][T29891] Call Trace: [ 1532.059579][T29891] [ 1532.059585][T29891] dump_stack_lvl+0x100/0x190 [ 1532.059614][T29891] should_fail_ex.cold+0x5/0xa [ 1532.059646][T29891] get_futex_key+0x1d0/0x14f0 [ 1532.059670][T29891] ? __pfx_get_futex_key+0x10/0x10 [ 1532.059692][T29891] ? find_held_lock+0x2b/0x80 [ 1532.059716][T29891] ? futex_wake+0x4ea/0x5e0 [ 1532.059746][T29891] futex_wake+0xf4/0x5e0 [ 1532.059772][T29891] ? __pfx_futex_wake+0x10/0x10 [ 1532.059798][T29891] ? rcu_read_lock_any_held+0x6a/0x90 [ 1532.059828][T29891] do_futex+0x2b2/0x440 [ 1532.059850][T29891] ? __pfx_do_futex+0x10/0x10 [ 1532.059877][T29891] __x64_sys_futex+0x34f/0x4d0 [ 1532.059900][T29891] ? fdget_pos+0x2c0/0x380 [ 1532.059921][T29891] ? __pfx___x64_sys_futex+0x10/0x10 [ 1532.059941][T29891] ? ksys_write+0x1ac/0x250 [ 1532.059956][T29891] ? __pfx_ksys_write+0x10/0x10 [ 1532.059978][T29891] do_syscall_64+0x123/0x790 [ 1532.060000][T29891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1532.060018][T29891] RIP: 0033:0x7fca0ff9e159 [ 1532.060033][T29891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1532.060049][T29891] RSP: 002b:00007fca10dc90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1532.060066][T29891] RAX: ffffffffffffffda RBX: 00007fca10225fa8 RCX: 00007fca0ff9e159 [ 1532.060077][T29891] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fca10225fac [ 1532.060087][T29891] RBP: 00007fca10225fa0 R08: 0000000000000001 R09: 0000000000000000 [ 1532.060101][T29891] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1532.060112][T29891] R13: 00007fca10226038 R14: 00007ffdea1a96e0 R15: 00007ffdea1a97c8 [ 1532.060136][T29891] [ 1532.076865][T29895] netlink: del zone limit has 8 unknown bytes [ 1533.088359][T29891] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1533.344844][ T31] audit: type=1400 audit(1788654009.064:6488): avc: denied { write } for pid=29906 comm="syz.6.6381" name="/" dev="configfs" ino=1052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1533.369744][ T31] audit: type=1400 audit(1788654009.094:6489): avc: denied { write } for pid=29906 comm="syz.6.6381" name="nullb" dev="configfs" ino=3533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1533.419199][ T31] audit: type=1400 audit(1788654009.144:6490): avc: denied { write } for pid=29868 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1533.538030][ T31] audit: type=1400 audit(1788654009.264:6491): avc: denied { write } for pid=29914 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1533.585163][T29916] configfs-gadget.g1 gadget.0: afunc_bind:1270 Error! [ 1533.585301][T29916] udc dummy_udc.0: failed to start g1: -19 [ 1533.585947][T29916] UDC core: g1: couldn't find an available UDC or it's busy [ 1536.224176][ T31] audit: type=1400 audit(1788654011.944:6492): avc: denied { write } for pid=29931 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1537.318062][ T31] audit: type=1400 audit(1788654013.044:6493): avc: denied { write } for pid=29967 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1537.410857][T15140] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1537.422331][T15140] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1537.431327][T15140] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1537.433809][T15140] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1537.438018][T15140] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1537.507908][T29981] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1537.507968][T29981] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1538.480986][T30024] configfs-gadget.g1 gadget.0: afunc_bind:1270 Error! [ 1538.481130][T30024] udc dummy_udc.0: failed to start g1: -19 [ 1538.481719][T30024] UDC core: g1: couldn't find an available UDC or it's busy [ 1538.532369][ T31] audit: type=1400 audit(1788654014.254:6494): avc: denied { write } for pid=29986 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1538.542149][T30028] overlayfs: failed to clone upperpath [ 1538.609397][T30032] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1538.744815][ T31] audit: type=1400 audit(1788654014.464:6495): avc: denied { write } for pid=30034 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1539.133727][T29972] bridge0: port 1(bridge_slave_0) entered blocking state [ 1539.135450][T29972] bridge0: port 1(bridge_slave_0) entered disabled state [ 1539.135848][T29972] bridge_slave_0: entered allmulticast mode [ 1539.144858][T29972] bridge_slave_0: entered promiscuous mode [ 1539.151852][T29972] bridge0: port 2(bridge_slave_1) entered blocking state [ 1539.152551][T29972] bridge0: port 2(bridge_slave_1) entered disabled state [ 1539.152668][T29972] bridge_slave_1: entered allmulticast mode [ 1539.160778][T29972] bridge_slave_1: entered promiscuous mode [ 1539.298253][T29972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1539.339532][T29972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1539.478998][T29972] team0: Port device team_slave_0 added [ 1539.492908][T29972] team0: Port device team_slave_1 added [ 1539.495753][T15140] Bluetooth: hci2: command tx timeout [ 1539.633145][T30071] overlayfs: conflicting options: nfs_export=on,index=off [ 1540.548540][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1540.548608][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1540.645055][T30074] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1540.664632][T29972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1540.683115][T29972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1540.711403][T29972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1540.856137][T29972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1540.864367][T29972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1540.892651][T29972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1541.531202][T29972] hsr_slave_0: entered promiscuous mode [ 1541.531927][T29972] hsr_slave_1: entered promiscuous mode [ 1541.532380][T29972] debugfs: 'hsr0' already exists in 'hsr' [ 1541.532395][T29972] Cannot create hsr debugfs directory [ 1541.615736][T15140] Bluetooth: hci2: command tx timeout [ 1541.679443][T30093] configfs-gadget.g1 gadget.0: afunc_bind:1270 Error! [ 1541.683199][T30093] udc dummy_udc.0: failed to start g1: -19 [ 1541.684736][T30093] UDC core: g1: couldn't find an available UDC or it's busy [ 1542.156887][T30107] overlayfs: failed to clone upperpath [ 1542.220269][T30103] synth uevent: /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:00: unknown uevent action string [ 1542.244580][T30103] acpi device:00: uevent: failed to send synthetic uevent: -22 [ 1542.269959][T30113] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1542.491960][T30120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6440'. [ 1543.167988][T30128] configfs-gadget.g1 gadget.0: afunc_bind:1270 Error! [ 1543.168132][T30128] udc dummy_udc.0: failed to start g1: -19 [ 1543.170833][T30128] UDC core: g1: couldn't find an available UDC or it's busy [ 1543.561276][T30135] nvmet: failed to open block device ./file0: (-2) [ 1543.577421][T29972] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.663152][T15140] Bluetooth: hci2: command tx timeout [ 1544.427130][T30142] overlayfs: overlapping lowerdir path [ 1544.929723][T29972] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.736687][T15140] Bluetooth: hci2: command tx timeout [ 1545.932917][T30170] nvmet: failed to open block device ./file0: (-2) [ 1547.729691][T29972] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.817927][T30183] fuse: Bad value for 'fd' [ 1548.090015][T29972] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1548.671646][T30196] overlayfs: failed to clone upperpath [ 1549.097723][T30200] nvmet: failed to open block device ./file0: (-2) [ 1549.668877][T30211] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1549.779325][T29972] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1549.809910][T29972] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1549.816948][T29972] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1549.837530][T29972] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1549.838245][T29972] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1549.885053][T30218] synth uevent: /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:00: unknown uevent action string [ 1549.887400][T30218] acpi device:00: uevent: failed to send synthetic uevent: -22 [ 1549.992504][T29972] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1550.526535][T29972] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1550.926167][T29972] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1551.297362][T29972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1551.350632][T29972] 8021q: adding VLAN 0 to HW filter on device team0 [ 1551.362948][ T9696] bridge0: port 1(bridge_slave_0) entered blocking state [ 1551.366669][ T9696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1551.395519][ T6245] bridge0: port 2(bridge_slave_1) entered blocking state [ 1551.395639][ T6245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1551.494415][T29972] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1551.507018][T29972] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1551.809197][T30253] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1551.903651][T30258] netlink: 'syz.2.6486': attribute type 4 has an invalid length. [ 1552.039165][T29972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1552.497848][T30275] configfs-gadget.g1 gadget.0: afunc_bind:1270 Error! [ 1552.497990][T30275] udc dummy_udc.0: failed to start g1: -19 [ 1552.498591][T30275] UDC core: g1: couldn't find an available UDC or it's busy [ 1553.073880][T30281] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1553.813497][T29972] veth0_vlan: entered promiscuous mode [ 1553.843361][T29972] veth1_vlan: entered promiscuous mode [ 1554.032497][T29972] veth0_macvtap: entered promiscuous mode [ 1554.061161][T29972] veth1_macvtap: entered promiscuous mode [ 1554.100548][T30294] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1554.138069][T29972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1554.171769][T29972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1554.215732][ T6245] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1554.215789][ T6245] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1554.215817][ T6245] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1554.215839][ T6245] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.541773][T30313] configfs-gadget.g1 gadget.0: afunc_bind:1270 Error! [ 1555.541927][T30313] udc dummy_udc.0: failed to start g1: -19 [ 1555.545145][T30313] UDC core: g1: couldn't find an available UDC or it's busy [ 1555.615351][T30303] synth uevent: /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:00: unknown uevent action string [ 1555.615701][T30303] acpi device:00: uevent: failed to send synthetic uevent: -22 [ 1555.686164][T30314] input: syz0 as /devices/virtual/input/input214 [ 1555.734077][ T9698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1555.734106][ T9698] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1556.188444][ T6245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1556.188478][ T6245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1557.591366][T30334] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1558.048723][T30346] configfs-gadget.g1 gadget.0: afunc_bind:1270 Error! [ 1558.048869][T30346] udc dummy_udc.0: failed to start g1: -19 [ 1558.049452][T30346] UDC core: g1: couldn't find an available UDC or it's busy [ 1558.295878][T15824] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1558.446237][T15824] usb 9-1: Using ep0 maxpacket: 32 [ 1558.447305][T15824] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1558.448417][T15824] usb 9-1: config index 0 descriptor too short (expected 27632, got 27) [ 1558.448438][T15824] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1558.448455][T15824] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1558.448472][T15824] usb 9-1: config 1 has no interface number 0 [ 1558.448501][T15824] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1558.448521][T15824] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1558.448549][T15824] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1558.453579][T30363] fuse: Bad value for 'fd' [ 1558.501103][T15824] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 1558.849578][T15824] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now attached [ 1559.256222][T20965] usb 9-1: USB disconnect, device number 25 [ 1559.257049][T20965] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 1560.125900][T30380] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1562.153382][T30407] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1562.425696][ T10] usb 9-1: new full-speed USB device number 26 using dummy_hcd [ 1562.626476][ T10] usb 9-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1562.627825][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.255958][ T31] audit: type=1400 audit(1788654038.984:6496): avc: denied { write } for pid=30426 comm="syz.5.6541" name="/" dev="configfs" ino=1052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1563.308792][T30427] null_blk: nullb1: using native zone append [ 1563.365061][ T31] audit: type=1400 audit(1788654039.084:6497): avc: denied { write } for pid=30426 comm="syz.5.6541" name="nullb" dev="configfs" ino=3533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1563.551899][ T10] usb 9-1: selecting invalid altsetting 3 [ 1563.551937][ T10] comedi comedi5: could not set alternate setting 3 in high speed [ 1563.551967][ T10] usbduxsigma 9-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 1563.632981][ T10] usbduxsigma 9-1:128.0: probe with driver usbduxsigma failed with error -22 [ 1564.802610][ T5335] usb 9-1: USB disconnect, device number 26 [ 1565.346578][T30427] null_blk: disk nullb1 created [ 1567.296892][ T31] audit: type=1400 audit(1788654043.024:6498): avc: denied { nlmsg_read } for pid=30470 comm="syz.6.6556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1568.944973][T30486] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6561'. [ 1569.575492][ T5783] libceph: connect (1)[c::]:6789 error -101 [ 1569.576766][ T5783] libceph: mon0 (1)[c::]:6789 connect error [ 1569.837206][T20965] libceph: connect (1)[c::]:6789 error -101 [ 1569.881632][T20965] libceph: mon0 (1)[c::]:6789 connect error [ 1570.309038][T30513] ceph: No mds server is up or the cluster is laggy [ 1572.856240][ T5783] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1573.028496][ T5783] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1573.040757][ T5783] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.054456][ T5783] usb 9-1: config 0 descriptor?? [ 1573.599505][T30582] synth uevent: /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:00: unknown uevent action string [ 1573.599576][T30582] acpi device:00: uevent: failed to send synthetic uevent: -22 [ 1574.094996][ T31] audit: type=1400 audit(1788654049.734:6499): avc: denied { ioctl } for pid=30587 comm="syz.0.6600" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0xae41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1575.460068][ T5783] usb 9-1: Cannot set autoneg [ 1575.460248][ T5783] MOSCHIP usb-ethernet driver 9-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1575.485444][ T5783] usb 9-1: USB disconnect, device number 27 [ 1578.178817][T30635] synth uevent: /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:00: unknown uevent action string [ 1578.179056][T30635] acpi device:00: uevent: failed to send synthetic uevent: -22 [ 1578.602737][T30640] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1579.791872][ T31] audit: type=1400 audit(1788654055.514:6500): avc: denied { create } for pid=30652 comm="syz.8.6624" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1580.000503][T30653] erofs (device loop17): cannot find valid erofs superblock [ 1580.134436][ T31] audit: type=1400 audit(1788654055.854:6501): avc: denied { unlink } for pid=24499 comm="syz-executor" name="file0" dev="tmpfs" ino=1491 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1581.734343][ T31] audit: type=1400 audit(1788654056.834:6502): avc: denied { accept } for pid=30666 comm="syz.6.6616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1582.179253][ T31] audit: type=1400 audit(1788654057.904:6503): avc: denied { ioctl } for pid=30683 comm="syz.5.6634" path="socket:[124203]" dev="sockfs" ino=124203 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1584.063541][ T31] audit: type=1400 audit(1788654059.784:6504): avc: denied { bind } for pid=30702 comm="syz.2.6641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1584.065539][ T31] audit: type=1400 audit(1788654059.784:6505): avc: denied { setopt } for pid=30702 comm="syz.2.6641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1584.242847][T30706] binder: BINDER_SET_CONTEXT_MGR already set [ 1584.242875][T30706] binder: 30705:30706 ioctl 4018620d 200000004a80 returned -16 [ 1584.243865][ T31] audit: type=1400 audit(1788654059.964:6506): avc: denied { ioctl } for pid=30705 comm="syz.0.6642" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1584.409772][ T31] audit: type=1400 audit(1788654060.134:6507): avc: denied { read write } for pid=30713 comm="syz.8.6646" name="mouse0" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1584.409834][ T31] audit: type=1400 audit(1788654060.134:6508): avc: denied { open } for pid=30713 comm="syz.8.6646" path="/dev/input/mouse0" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1584.425222][T30716] fuse: Bad value for 'fd' [ 1585.336928][T30728] input: syz0 as /devices/virtual/input/input215 [ 1586.181081][T30744] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1586.337377][T15824] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1586.486470][T15824] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1586.487353][T15824] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1586.487389][T15824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 3840, setting to 64 [ 1586.488304][T15824] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1586.488324][T15824] usb 1-1: Manufacturer: syz [ 1586.496735][T15824] usb 1-1: config 0 descriptor?? [ 1586.499002][T15824] igorplugusb 1-1:0.0: endpoint incorrect [ 1586.751198][T15824] usb 1-1: USB disconnect, device number 81 [ 1588.641556][ T31] audit: type=1400 audit(1788654064.364:6509): avc: denied { read } for pid=30797 comm="syz.5.6676" name="kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 1588.641616][ T31] audit: type=1400 audit(1788654064.364:6510): avc: denied { open } for pid=30797 comm="syz.5.6676" path="/34/proc/kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 1591.215642][ T31] audit: type=1400 audit(1788654066.924:6511): avc: denied { create } for pid=30843 comm="syz.0.6691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1591.215708][ T31] audit: type=1400 audit(1788654066.934:6512): avc: denied { sys_admin } for pid=30843 comm="syz.0.6691" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1591.326820][T30850] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1592.761477][T30865] jffs2: notice: (30865) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1593.949507][ T31] audit: type=1400 audit(1788654069.674:6513): avc: denied { shutdown } for pid=30892 comm="syz.0.6705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1597.361793][ T31] audit: type=1400 audit(1788654073.084:6514): avc: denied { ioctl } for pid=30941 comm="syz.2.6726" path="socket:[125202]" dev="sockfs" ino=125202 ioctlcmd=0x2101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1597.372510][T30948] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1598.145740][T30957] Bluetooth: MGMT ver 1.23 [ 1599.340441][ T31] audit: type=1326 audit(1788654075.064:6515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30987 comm="syz.6.6742" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0ff9e159 code=0x7ffc0000 [ 1599.372092][ T31] audit: type=1326 audit(1788654075.094:6516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30987 comm="syz.6.6742" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0ff9e159 code=0x7ffc0000 [ 1599.423991][ T31] audit: type=1326 audit(1788654075.144:6517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30987 comm="syz.6.6742" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fca0ff9e159 code=0x7ffc0000 [ 1599.424067][ T31] audit: type=1326 audit(1788654075.144:6518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30987 comm="syz.6.6742" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0ff9e159 code=0x7ffc0000 [ 1599.424098][ T31] audit: type=1326 audit(1788654075.144:6519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30987 comm="syz.6.6742" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0ff9e159 code=0x7ffc0000 [ 1599.424133][ T31] audit: type=1326 audit(1788654075.144:6520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30987 comm="syz.6.6742" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fca0ff9e159 code=0x7ffc0000 [ 1599.424171][ T31] audit: type=1326 audit(1788654075.144:6521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30987 comm="syz.6.6742" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0ff9e159 code=0x7ffc0000 [ 1599.424204][ T31] audit: type=1326 audit(1788654075.144:6522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30987 comm="syz.6.6742" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0ff9e159 code=0x7ffc0000 [ 1599.446453][ T31] audit: type=1326 audit(1788654075.164:6523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30987 comm="syz.6.6742" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fca0ff5e98e code=0x7ffc0000 [ 1599.446497][ T31] audit: type=1326 audit(1788654075.174:6524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30987 comm="syz.6.6742" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fca0ff9ddeb code=0x7ffc0000 [ 1601.897284][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1601.897350][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1602.003107][T31022] FAULT_INJECTION: forcing a failure. [ 1602.003107][T31022] name failslab, interval 1, probability 0, space 0, times 0 [ 1602.003146][T31022] CPU: 0 UID: 0 PID: 31022 Comm: syz.0.6749 Tainted: G L syzkaller #0 PREEMPT(full) [ 1602.003173][T31022] Tainted: [L]=SOFTLOCKUP [ 1602.003180][T31022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1602.003191][T31022] Call Trace: [ 1602.003196][T31022] [ 1602.003202][T31022] dump_stack_lvl+0x100/0x190 [ 1602.003231][T31022] should_fail_ex.cold+0x5/0xa [ 1602.003258][T31022] should_failslab+0xc2/0x120 [ 1602.003280][T31022] __kmalloc_cache_noprof+0x91/0x6d0 [ 1602.003302][T31022] ? find_held_lock+0x2b/0x80 [ 1602.003326][T31022] ? alloc_fs_context+0x57/0xf40 [ 1602.003353][T31022] alloc_fs_context+0x57/0xf40 [ 1602.003375][T31022] ? __get_fs_type+0xe3/0x200 [ 1602.003403][T31022] path_mount+0xdbd/0x24c0 [ 1602.003432][T31022] ? __pfx_path_mount+0x10/0x10 [ 1602.003455][T31022] ? lockdep_hardirqs_on+0x7d/0x110 [ 1602.003477][T31022] ? putname+0xb1/0x110 [ 1602.003496][T31022] ? kmem_cache_free+0x127/0x6c0 [ 1602.003526][T31022] ? __x64_sys_mount+0x293/0x310 [ 1602.003548][T31022] __x64_sys_mount+0x293/0x310 [ 1602.003570][T31022] ? __pfx___x64_sys_mount+0x10/0x10 [ 1602.003598][T31022] do_syscall_64+0x123/0x790 [ 1602.003620][T31022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1602.003645][T31022] RIP: 0033:0x7fe71819e159 [ 1602.003660][T31022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1602.003678][T31022] RSP: 002b:00007fe719036028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1602.003696][T31022] RAX: ffffffffffffffda RBX: 00007fe718425fa0 RCX: 00007fe71819e159 [ 1602.003710][T31022] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000140 [ 1602.003722][T31022] RBP: 00007fe718235024 R08: 0000000000000000 R09: 0000000000000000 [ 1602.003734][T31022] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000000 [ 1602.003745][T31022] R13: 00007fe718426038 R14: 00007fe718425fa0 R15: 00007fff9835d768 [ 1602.003777][T31022] [ 1602.343701][T31027] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 1602.453580][ T5335] libceph: connect (1)[c::]:6789 error -101 [ 1602.470993][ T5335] libceph: mon0 (1)[c::]:6789 connect error [ 1602.599293][T31030] ceph: No mds server is up or the cluster is laggy [ 1602.769500][ T5783] libceph: connect (1)[c::]:6789 error -101 [ 1602.770111][ T5783] libceph: mon0 (1)[c::]:6789 connect error [ 1607.503949][T31066] configfs-gadget.g1 gadget.0: afunc_bind:1270 Error! [ 1607.504093][T31066] udc dummy_udc.0: failed to start g1: -19 [ 1607.509804][T31066] UDC core: g1: couldn't find an available UDC or it's busy [ 1607.671732][ T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1607.816230][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 1607.823194][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1607.836382][ T10] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1607.849648][ T10] usb 6-1: config 4 interface 0 has no altsetting 0 [ 1607.862371][ T10] usb 6-1: string descriptor 0 read error: -22 [ 1607.862460][ T10] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1608.158246][ T10] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1608.372910][ T10] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1608.373183][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1608.373233][ T10] usb 6-1: media controller created [ 1609.307256][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1609.359673][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 1609.428126][ T10] usb 6-1: USB disconnect, device number 18 [ 1615.532147][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 1615.532189][ T31] audit: type=1400 audit(1788654090.774:6528): avc: denied { append } for pid=31138 comm="syz.6.6796" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1615.665789][ T5335] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1615.818518][ T5335] usb 6-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 1615.830285][ T5335] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1615.830322][ T5335] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1615.851588][ T5335] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1615.851625][ T5335] usb 6-1: Product: syz [ 1615.851651][ T5335] usb 6-1: Manufacturer: syz [ 1617.974888][ T5712] usb 6-1: USB disconnect, device number 19 [ 1618.915872][ T5712] libceph: connect (1)[c::]:6789 error -101 [ 1618.923314][ T5712] libceph: mon0 (1)[c::]:6789 connect error [ 1618.983320][ T5712] libceph: connect (1)[c::]:6789 error -101 [ 1618.983494][ T5712] libceph: mon0 (1)[c::]:6789 connect error [ 1619.210016][T31176] ceph: No mds server is up or the cluster is laggy [ 1619.210148][T31179] ceph: No mds server is up or the cluster is laggy [ 1619.238986][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1619.239363][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1619.240488][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1619.241052][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1620.697070][T31198] syz.5.6809 (31198): attempted to duplicate a private mapping with mremap. This is not supported. [ 1623.198103][T31255] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6830'. [ 1623.409034][T31259] configfs-gadget.g1 gadget.0: afunc_bind:1270 Error! [ 1623.409170][T31259] udc dummy_udc.0: failed to start g1: -19 [ 1623.409745][T31259] UDC core: g1: couldn't find an available UDC or it's busy [ 1623.505673][ T30] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1623.745667][ T30] usb 9-1: Using ep0 maxpacket: 16 [ 1623.751396][ T30] usb 9-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1623.820628][ T30] usb 9-1: config 0 has no interfaces? [ 1623.837865][ T30] usb 9-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1623.837905][ T30] usb 9-1: Product: syz [ 1623.837923][ T30] usb 9-1: Manufacturer: syz [ 1623.837940][ T30] usb 9-1: SerialNumber: syz [ 1623.866384][ T30] usb 9-1: config 0 descriptor?? [ 1624.140447][ T31] audit: type=1400 audit(1788654099.864:6529): avc: denied { create } for pid=31268 comm="syz.6.6837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1624.271631][ T31] audit: type=1400 audit(1788654099.994:6530): avc: denied { create } for pid=31268 comm="syz.6.6837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1624.933715][ T10] usb 9-1: USB disconnect, device number 28 [ 1627.451917][T31323] null_blk: disk nullb2 created [ 1628.315639][ T30] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1628.466341][ T30] usb 9-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1628.476461][ T30] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1628.476508][ T30] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1628.498275][ T30] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1628.506571][ T30] usb 9-1: Product: syz [ 1628.510918][ T30] usb 9-1: Manufacturer: syz [ 1628.516416][ T30] usb 9-1: SerialNumber: syz [ 1628.526703][ T30] usb 9-1: config 0 descriptor?? [ 1628.543846][ T30] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1628.694178][ T30] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1628.706483][ T30] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1628.706544][ T30] usb 9-1: media controller created [ 1628.733742][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1628.769308][T31350] fuse: Bad value for 'fd' [ 1628.872119][ T30] DVB: Unable to find symbol tda10046_attach() [ 1628.872147][ T30] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1628.872177][ T30] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1628.957267][ T31] audit: type=1326 audit(1788654104.674:6531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31352 comm="syz.2.6860" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb2699e159 code=0x7ffc0000 [ 1628.958831][ T31] audit: type=1326 audit(1788654104.684:6532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31352 comm="syz.2.6860" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb2699e159 code=0x7ffc0000 [ 1628.977426][ T31] audit: type=1326 audit(1788654104.704:6533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31352 comm="syz.2.6860" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fdb2699e159 code=0x7ffc0000 [ 1628.977470][ T31] audit: type=1326 audit(1788654104.704:6534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31352 comm="syz.2.6860" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb2699e159 code=0x7ffc0000 [ 1628.977503][ T31] audit: type=1326 audit(1788654104.704:6535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31352 comm="syz.2.6860" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb2699e159 code=0x7ffc0000 [ 1628.980689][ T31] audit: type=1326 audit(1788654104.704:6536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31352 comm="syz.2.6860" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdb2699e159 code=0x7ffc0000 [ 1629.014287][ T31] audit: type=1326 audit(1788654104.734:6537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31352 comm="syz.2.6860" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb2699e159 code=0x7ffc0000 [ 1629.014343][ T31] audit: type=1326 audit(1788654104.734:6538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31352 comm="syz.2.6860" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb2699e159 code=0x7ffc0000 [ 1630.462911][T31376] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6868'. [ 1630.463580][T31376] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1630.929570][ T30] dvb_usb_m920x 9-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1630.932591][ T30] usb 9-1: USB disconnect, device number 29 [ 1631.354667][T31392] input: syz0 as /devices/virtual/input/input216 [ 1632.052663][T31400] netlink: 48 bytes leftover after parsing attributes in process `syz.8.6877'. [ 1634.826172][ T31] kauditd_printk_skb: 35 callbacks suppressed [ 1634.826215][ T31] audit: type=1400 audit(1788654110.274:6574): avc: denied { write } for pid=31424 comm="syz.8.6886" name="c.1" dev="configfs" ino=111213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1634.826261][ T31] audit: type=1400 audit(1788654110.274:6575): avc: denied { write } for pid=31424 comm="syz.8.6886" name="c.1" dev="configfs" ino=111213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1636.157822][T31438] input: syz0 as /devices/virtual/input/input217 [ 1637.190059][T31446] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8) [ 1637.190080][T31446] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1637.190151][T31446] vhci_hcd vhci_hcd.0: Device attached [ 1637.204524][T31447] vhci_hcd: connection closed [ 1637.204753][T25441] vhci_hcd vhci_hcd.8: stop threads [ 1637.204781][T25441] vhci_hcd vhci_hcd.8: release socket [ 1637.204798][T25441] vhci_hcd vhci_hcd.8: disconnect device [ 1637.796033][T31457] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6888'. [ 1637.929437][ T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1638.010960][T31466] synth uevent: /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:00: unknown uevent action string [ 1638.011018][T31466] acpi device:00: uevent: failed to send synthetic uevent: -22 [ 1638.766804][ T10] usb 6-1: New USB device found, idVendor=9710, idProduct=7840, bcdDevice= 0.00 [ 1638.767683][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1638.767704][ T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1638.769351][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.769370][ T10] usb 6-1: Product: syz [ 1638.769383][ T10] usb 6-1: Manufacturer: syz [ 1638.769396][ T10] usb 6-1: SerialNumber: syz [ 1638.777828][ T10] mos7840 6-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 1638.994557][ T10] mos7840 6-1:1.0: probe with driver mos7840 failed with error -71 [ 1639.100145][ T10] usb 6-1: USB disconnect, device number 20 [ 1641.778872][T31507] configfs-gadget.g1 gadget.0: afunc_bind:1270 Error! [ 1641.778988][T31507] udc dummy_udc.0: failed to start g1: -19 [ 1641.779511][T31507] UDC core: g1: couldn't find an available UDC or it's busy [ 1642.266564][ T31] audit: type=1400 audit(1788654117.994:6576): avc: denied { write } for pid=31497 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1642.788591][ T31] audit: type=1400 audit(1788654118.514:6577): avc: denied { write } for pid=31518 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1643.187845][T31530] input: syz0 as /devices/virtual/input/input218 [ 1644.036538][ T31] audit: type=1400 audit(1788654119.754:6578): avc: denied { write } for pid=31549 comm="syz.6.6921" name="functions" dev="configfs" ino=111208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1644.945053][ T31] audit: type=1400 audit(1788654120.664:6579): avc: denied { write } for pid=31549 comm="syz.6.6921" name="header" dev="configfs" ino=128482 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1644.990209][ T31] audit: type=1400 audit(1788654120.714:6580): avc: denied { write } for pid=31526 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1645.326574][ T31] audit: type=1400 audit(1788654121.054:6581): avc: denied { write } for pid=31571 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1646.416394][ T31] audit: type=1400 audit(1788654122.144:6582): avc: denied { getopt } for pid=31584 comm="syz.8.6931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1647.720547][T31591] netlink: Failed to add batadv0 helper -22 [ 1647.720598][T31591] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1648.709999][ T30] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1648.837156][ T30] usb 1-1: device descriptor read/64, error -71 [ 1648.923921][T31625] retu-mfd 0-0001: could not read Retu revision: -5 [ 1648.927341][T31625] retu-mfd 0-0001: probe with driver retu-mfd failed with error -5 [ 1648.927544][T31625] i2c i2c-0: new_device: Instantiated device retu at 0x01 [ 1649.096504][ T30] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1649.225641][ T30] usb 1-1: device descriptor read/64, error -71 [ 1649.346042][ T30] usb usb1-port1: attempt power cycle [ 1649.695636][ T30] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1649.717048][ T30] usb 1-1: device descriptor read/8, error -71 [ 1649.980764][ T30] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1650.016603][ T30] usb 1-1: device descriptor read/8, error -71 [ 1650.125918][ T30] usb usb1-port1: unable to enumerate USB device [ 1650.138400][ T31] audit: type=1400 audit(1788654125.864:6583): avc: denied { mounton } for pid=31638 comm="syz.2.6947" path="/410/file0" dev="tmpfs" ino=2262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 1650.138425][T31639] fuse: fd is not a fuse device [ 1650.235678][ T9] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1650.355642][T20965] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 1650.387536][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 1650.388795][ T9] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1650.389633][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1650.389669][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.392736][ T9] usb 9-1: config 0 descriptor?? [ 1650.516269][T20965] usb 6-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 1650.526364][T20965] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1650.526406][T20965] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1650.526452][T20965] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.562235][T20965] usb 6-1: config 0 descriptor?? [ 1650.600909][ T9] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1650.994427][T20965] hid-led 0003:1294:1320.002D: unknown main item tag 0x0 [ 1651.003193][T20965] hid-led 0003:1294:1320.002D: unknown main item tag 0x0 [ 1651.010371][T20965] hid-led 0003:1294:1320.002D: unknown main item tag 0x0 [ 1651.017533][T20965] hid-led 0003:1294:1320.002D: unknown main item tag 0x0 [ 1651.017584][T20965] hid-led 0003:1294:1320.002D: unknown main item tag 0x0 [ 1651.017609][T20965] hid-led 0003:1294:1320.002D: unknown main item tag 0x0 [ 1651.017634][T20965] hid-led 0003:1294:1320.002D: unknown main item tag 0x0 [ 1651.017657][T20965] hid-led 0003:1294:1320.002D: unknown main item tag 0x0 [ 1651.017682][T20965] hid-led 0003:1294:1320.002D: unknown main item tag 0x0 [ 1651.017705][T20965] hid-led 0003:1294:1320.002D: unknown main item tag 0x0 [ 1651.072561][T20965] hid-led 0003:1294:1320.002D: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.5-1/input0 [ 1651.115242][T20965] hid-led 0003:1294:1320.002D: Riso Kagaku Webmail Notifier initialized [ 1651.126526][ T9] usb 9-1: USB disconnect, device number 30 [ 1651.253962][ T10] usb 6-1: USB disconnect, device number 21 [ 1651.291937][ T5981] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 1651.307579][T25651] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 1651.313011][ T1423] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 1652.298206][T20965] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1652.455990][T20965] usb 6-1: device descriptor read/64, error -71 [ 1652.651611][T31686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6966'. [ 1652.667172][T31686] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1652.695858][T20965] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1652.825666][T20965] usb 6-1: device descriptor read/64, error -71 [ 1653.162306][T20965] usb usb6-port1: attempt power cycle [ 1653.535739][T20965] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1653.557253][T20965] usb 6-1: device descriptor read/8, error -71 [ 1653.835727][T20965] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1653.859083][T20965] usb 6-1: device descriptor read/8, error -71 [ 1653.976031][T20965] usb usb6-port1: unable to enumerate USB device [ 1656.668178][ T31] audit: type=1326 audit(1788654132.394:6584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31736 comm="syz.2.6986" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb2699e159 code=0x7ffc0000 [ 1656.702048][ T31] audit: type=1326 audit(1788654132.424:6585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31736 comm="syz.2.6986" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb2699e159 code=0x7ffc0000 [ 1656.801096][ T31] audit: type=1326 audit(1788654132.524:6586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31736 comm="syz.2.6986" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fdb2699e159 code=0x7ffc0000 [ 1656.835629][ T31] audit: type=1326 audit(1788654132.554:6587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31736 comm="syz.2.6986" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb2699e159 code=0x7ffc0000 [ 1656.869552][ T31] audit: type=1326 audit(1788654132.584:6588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31736 comm="syz.2.6986" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb2699e159 code=0x7ffc0000 [ 1656.902981][ T31] audit: type=1326 audit(1788654132.624:6589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31736 comm="syz.2.6986" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdb2699e159 code=0x7ffc0000 [ 1656.995908][ T31] audit: type=1326 audit(1788654132.714:6590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31736 comm="syz.2.6986" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb2699e159 code=0x7ffc0000 [ 1657.028526][ T31] audit: type=1326 audit(1788654132.754:6591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31736 comm="syz.2.6986" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb2699e159 code=0x7ffc0000 [ 1657.138624][ T31] audit: type=1326 audit(1788654132.864:6592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31736 comm="syz.2.6986" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb2699e159 code=0x7ffc0000 [ 1657.138686][ T31] audit: type=1326 audit(1788654132.864:6593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31736 comm="syz.2.6986" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb2699e159 code=0x7ffc0000 [ 1657.335172][T31742] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1657.737927][ T5335] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1657.882237][T31749] bridge_slave_0: left allmulticast mode [ 1657.882282][T31749] bridge_slave_0: left promiscuous mode [ 1657.882423][T31749] bridge0: port 1(bridge_slave_0) entered disabled state [ 1657.901246][ T5335] usb 6-1: Using ep0 maxpacket: 16 [ 1657.909315][ T5335] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1657.915822][T31749] bridge_slave_1: left allmulticast mode [ 1657.915846][T31749] bridge_slave_1: left promiscuous mode [ 1657.915975][T31749] bridge0: port 2(bridge_slave_1) entered disabled state [ 1657.945686][ T5335] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1657.945741][ T5335] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1657.959366][T31749] bond0: (slave bond_slave_0): Releasing backup interface [ 1657.991507][ T5335] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1657.991545][ T5335] usb 6-1: Product: syz [ 1657.991573][ T5335] usb 6-1: Manufacturer: syz [ 1657.991595][ T5335] usb 6-1: SerialNumber: syz [ 1658.026754][ T5335] usb 6-1: config 0 descriptor?? [ 1658.033285][T31749] bond0: (slave bond_slave_1): Releasing backup interface [ 1658.084549][T31749] team0: Port device team_slave_0 removed [ 1658.119256][T31749] team0: Port device team_slave_1 removed [ 1658.119891][T31749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1658.119907][T31749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1658.141379][T31749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1658.141400][T31749] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1658.171383][T31749] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1658.224271][ T9] syz1: Port: 1 Link DOWN [ 1661.115109][ T5335] usb 6-1: USB disconnect, device number 26 [ 1661.677954][T31787] Cannot find add_set index 4 as target [ 1663.597313][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1663.597379][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1664.468715][T31809] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1665.241793][T31809] kvm: pic: level sensitive irq not supported [ 1665.242068][T31809] kvm: pic: non byte read [ 1665.254655][T31809] kvm: pic: level sensitive irq not supported [ 1665.255653][T31809] kvm: pic: non byte read [ 1665.268721][T31809] kvm: pic: level sensitive irq not supported [ 1665.269128][T31809] kvm: pic: non byte read [ 1665.281919][T31809] kvm: pic: level sensitive irq not supported [ 1665.282024][T31809] kvm: pic: non byte read [ 1665.282162][T31809] kvm: pic: level sensitive irq not supported [ 1665.282256][T31809] kvm: pic: non byte read [ 1665.845593][T31828] netlink: 36 bytes leftover after parsing attributes in process `syz.8.7009'. [ 1667.268660][T31853] xt_policy: output policy not valid in PREROUTING and INPUT [ 1670.163790][T31893] siw: device registration error -23 [ 1671.203045][T31899] overlayfs: failed to clone lowerpath [ 1672.009394][ T31] kauditd_printk_skb: 12 callbacks suppressed [ 1672.009432][ T31] audit: type=1400 audit(1788654147.734:6606): avc: denied { listen } for pid=31904 comm="syz.8.7038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1672.105955][ T31] audit: type=1400 audit(1788654147.814:6607): avc: denied { setopt } for pid=31904 comm="syz.8.7038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1672.506135][T15824] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1672.667064][T15824] usb 6-1: Using ep0 maxpacket: 16 [ 1672.687879][T15824] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1672.718651][T15824] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1672.734814][T15824] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1672.831069][T15824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1672.831123][T15824] usb 6-1: Product: syz [ 1672.831198][T15824] usb 6-1: Manufacturer: syz [ 1672.831264][T15824] usb 6-1: SerialNumber: syz [ 1672.991439][T15824] usb 6-1: config 0 descriptor?? [ 1673.521879][ T31] audit: type=1400 audit(1788654149.244:6608): avc: denied { create } for pid=31921 comm="syz.6.7043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1673.566572][ T31] audit: type=1400 audit(1788654149.294:6609): avc: denied { connect } for pid=31921 comm="syz.6.7043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1674.175587][T31935] siw: device registration error -23 [ 1674.393110][ T31] audit: type=1400 audit(1788654150.114:6610): avc: denied { write } for pid=31937 comm="syz.6.7047" name="functions" dev="configfs" ino=111208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1674.393901][T31938] file system registered [ 1674.420786][ T31] audit: type=1400 audit(1788654150.114:6611): avc: denied { write } for pid=31937 comm="syz.6.7047" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1674.420838][ T31] audit: type=1400 audit(1788654150.114:6612): avc: denied { mount } for pid=31937 comm="syz.6.7047" name="/" dev="functionfs" ino=127937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 1675.048626][ T5335] usb 6-1: USB disconnect, device number 27 [ 1676.056641][ T31] audit: type=1400 audit(1788654151.774:6613): avc: denied { unmount } for pid=23776 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 1676.085789][T23776] ffs_data_put(): freeing [ 1676.794887][ T32] INFO: task syz.9.6323:29701 blocked for more than 143 seconds. [ 1676.805477][ T32] Tainted: G L syzkaller #0 [ 1676.805554][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1676.805563][ T32] task:syz.9.6323 state:D stack:28728 pid:29701 tgid:29695 ppid:24359 task_flags:0x400040 flags:0x00080002 [ 1676.805618][ T32] Call Trace: [ 1676.805624][ T32] [ 1676.805633][ T32] __schedule+0x1259/0x6920 [ 1676.805655][ ** replaying previous printk message ** [ 1676.805655][ T32] ? __lock_acquire+0x4c5/0x1ec0 [ 1676.805685][ T32] ? __pfx___schedule+0x10/0x10 [ 1676.805700][ T32] ? find_held_lock+0x2b/0x80 [ 1676.805723][ T32] ? schedule+0x225/0x2c0 [ 1676.805743][ T32] schedule+0xdd/0x2c0 [ 1676.805759][ T32] cgroup_lock_and_drain_offline+0x383/0x800 [ 1676.805789][ T32] ? __pfx_cgroup_lock_and_drain_offline+0x10/0x10 [ 1676.805814][ T32] ? kernfs_root+0xee/0x2a0 [ 1676.805836][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1676.805861][ T32] ? cgroup_kn_lock_live+0xf4/0x520 [ 1676.805885][ T32] ? kernfs_root+0xf8/0x2a0 [ 1676.805909][ T32] cgroup_kn_lock_live+0x188/0x520 [ 1676.805936][ T32] cgroup_subtree_control_write+0x3dd/0xe90 [ 1676.805959][ T32] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 1676.805978][ T32] ? kernfs_root+0xf8/0x2a0 [ 1676.806002][ T32] cgroup_file_write+0x1e6/0x8a0 [ 1676.806021][ T32] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 1676.806039][ T32] ? __pfx_cgroup_file_write+0x10/0x10 [ 1676.806058][ T32] ? __kmalloc_noprof+0x350/0x840 [ 1676.806080][ T32] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1676.806096][ T32] ? __pfx_cgroup_file_write+0x10/0x10 [ 1676.806119][ T32] vfs_write+0x6af/0x1050 [ 1676.806136][ T32] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1676.806154][ T32] ? __pfx_vfs_write+0x10/0x10 [ 1676.806168][ T32] ? find_held_lock+0x2b/0x80 [ 1676.806204][ T32] ksys_write+0x12a/0x250 [ 1676.806219][ T32] ? __pfx_ksys_write+0x10/0x10 [ 1676.806233][ T32] ? kcov_ioctl+0x17a/0x760 [ 1676.806257][ T32] do_syscall_64+0x123/0x790 [ 1676.806278][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1676.806295][ T32] RIP: 0033:0x7fecb919e159 [ 1676.806309][ T32] RSP: 002b:00007fecb73d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1676.806330][ T32] RAX: ffffffffffffffda RBX: 00007fecb9426090 RCX: 00007fecb919e159 [ 1676.806342][ T32] RDX: 000000000000000b RSI: 0000200000000180 RDI: 0000000000000005 [ 1676.806352][ T32] RBP: 00007fecb9235024 R08: 0000000000000000 R09: 0000000000000000 [ 1676.806362][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1676.806372][ T32] R13: 00007fecb9426128 R14: 00007fecb9426090 R15: 00007ffdc04bfcb8 [ 1676.806394][ T32] [ 1676.806411][ T32] [ 1676.806411][ T32] Showing all locks held in the system: [ 1676.806418][ T32] locks held by pr/ttyS0/16: 2, last CPU#0: [ 1676.806430][ T32] #0: ffffffff8edd8338 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 1676.806472][ T32] #1: ffffffff9bc65c78 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x64/0xc0 [ 1676.806517][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 1676.806528][ T32] #0: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1676.806595][ T32] locks held by getty/5357: 2, on CPU#0: [ 1676.806606][ T32] #0: ffff888033d080a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1676.806662][ T32] #1: ffffc9000321e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1676.806705][ T32] locks held by kworker/u8:3/19964: 3, last CPU#1: [ 1676.806717][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1676.806761][ T32] #1: ffffc90004077d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1676.806807][ T32] #2: ffff88802d0e1258 (&devlink->lock_key#22){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 1676.806853][ T32] locks held by syz.5.5075/23462: 4, last CPU#1: [ 1676.806864][ T32] #0: ffff888076ead5f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1676.877965][ T32] #1: ffff888055c50088 (&iter->mutex){+.+.}-{4:4}, at: tracing_read_pipe+0x6c/0xd60 [ 1676.878012][ T32] #2: ffffffff8ee8b1e8 (trace_event_sem){++++}-{4:4}, at: tracing_read_pipe+0x4b2/0xd60 [ 1676.878070][ T32] #3: ffffffff8ee81fc8 (all_cpu_access_lock){+.+.}-{4:4}, at: tracing_read_pipe+0x92e/0xd60 [ 1676.878121][ T32] locks held by syz-executor/24372: 3, last CPU#1: [ 1676.878135][ T32] #0: ffffffff8ef3cc30 (dup_mmap_sem){++++}-{0:0}, at: copy_process+0x4806/0x8370 [ 1676.878177][ T32] #1: ffff88807aca9078 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x127/0x2370 [ 1676.878221][ T32] #2: ffff8880666329f8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1c9/0x2370 [ 1676.878270][ T32] locks held by syz-executor/24499: 2, last CPU#1: [ 1676.878282][ T32] #0: ffff88807db72460 (sb_writers#6){.+.+}-{0:0}, at: filename_unlinkat+0x1ad/0x730 [ 1676.878338][ T32] #1: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 1676.878389][ T32] locks held by kworker/u8:7/25651: 3, last CPU#1: [ 1676.878402][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1676.878450][ T32] #1: ffffc9000649fd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1676.878501][ T32] #2: ffff88802d4da258 (&devlink->lock_key#23){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 1676.878555][ T32] locks held by syz.9.6323/29701: 3, on CPU#0: [ 1676.878568][ T32] #0: ffff888076e1e9b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1676.878612][ T32] #1: ffff88802e424460 (sb_writers#10){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1676.878656][ T32] #2: ffff88802a999880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1676.878700][ T32] locks held by syz.6.7054/31960: 3, last CPU#1: [ 1676.878713][ T32] #0: ffff88807b0c97b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1676.878757][ T32] #1: ffff8880667e4460 (sb_writers#6){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1676.878800][ T32] #2: ffff888021fae910 (&sb->s_type->i_mutex_key#15){++++}-{4:4}, at: shmem_file_write_iter+0x86/0x140 [ 1676.878865][ T32] locks held by syz.6.7054/31963: 1, last CPU#1: [ 1676.878878][ T32] #0: ffff88805735b6b8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 [ 1676.878920][ T32] [ 1676.878925][ T32] ============================================= [ 1676.878925][ T32] [ 1676.878933][ T32] NMI backtrace for cpu 1 [ 1676.878947][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1676.878974][ T32] Tainted: [L]=SOFTLOCKUP [ 1676.878981][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1676.878992][ T32] Call Trace: [ 1676.878998][ T32] [ 1676.879005][ T32] dump_stack_lvl+0x100/0x190 [ 1676.879032][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1676.879059][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1676.879079][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 1676.879110][ T32] sys_info+0x141/0x190 [ 1676.879134][ T32] watchdog+0xcb1/0x1030 [ 1676.879158][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1676.879178][ T32] ? __pfx_watchdog+0x10/0x10 [ 1676.879197][ T32] ? __kthread_parkme+0x18f/0x230 [ 1676.879221][ T32] ? kthread+0x13a/0x450 [ 1676.879243][ T32] ? __pfx_watchdog+0x10/0x10 [ 1676.879260][ T32] kthread+0x373/0x450 [ 1676.879283][ T32] ? __pfx_kthread+0x10/0x10 [ 1676.879306][ T32] ret_from_fork+0x730/0xd60 [ 1676.879331][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1676.879348][ T32] ? __switch_to+0x800/0x10f0 [ 1676.879370][ T32] ? __pfx_kthread+0x10/0x10 [ 1676.879393][ T32] ret_from_fork_asm+0x1a/0x30 [ 1676.879420][ T32] [ 1676.879442][ T32] Sending NMI from CPU 1 to CPUs 0: [ 1676.879462][ C0] NMI backtrace for cpu 0 [ 1676.879474][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1676.879494][ C0] Tainted: [L]=SOFTLOCKUP [ 1676.879499][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1676.879507][ C0] RIP: 0010:io_serial_out+0x8f/0xb0 [ 1676.879529][ C0] Code: 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1c 66 03 5d 40 44 89 e8 89 da ee <5b> 5d 41 5c 41 5d e9 46 2c 23 06 e8 b1 09 cf fc eb a0 e8 3a 0a cf [ 1676.879542][ C0] RSP: 0018:ffffc900001579e0 EFLAGS: 00000002 [ 1676.879554][ C0] RAX: 0000000000000020 RBX: 00000000000003f8 RCX: 0000000000000000 [ 1676.879563][ C0] RDX: 00000000000003f8 RSI: ffffffff85b009e5 RDI: ffffffff9bc65ca0 [ 1676.879572][ C0] RBP: ffffffff9bc65c60 R08: 0000000000000001 R09: 000000000000001f [ 1676.879581][ C0] R10: 0000000000000000 R11: 205d323354202020 R12: 0000000000000000 [ 1676.879589][ C0] R13: 0000000000000020 R14: 000000000000000f R15: ffffc90000157da8 [ 1676.879599][ C0] FS: 0000000000000000(0000) GS:ffff888123b5f000(0000) knlGS:0000000000000000 [ 1676.879613][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1676.879623][ C0] CR2: 0000001b31922ff8 CR3: 000000000eb96000 CR4: 00000000003526f0 [ 1676.879632][ C0] DR0: 0000000000000000 DR1: 0000000000000071 DR2: 0000000000000000 [ 1676.879640][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1676.879649][ C0] Call Trace: [ 1676.879654][ C0] [ 1676.879661][ C0] __serial8250_console_fifo_write+0xd6/0x290 [ 1676.879675][ C0] ? __pfx_io_serial_out+0x10/0x10 [ 1676.879696][ C0] serial8250_console_write+0xf46/0x1330 [ 1676.879716][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1676.879732][ C0] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 1676.879754][ C0] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 1676.879777][ C0] nbcon_emit_next_record+0x8f7/0xa70 [ 1676.879799][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1676.879819][ C0] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 1676.879860][ C0] ? do_raw_spin_lock+0x90/0x260 [ 1676.879879][ C0] ? __pfx___cant_migrate+0x10/0x10 [ 1676.879896][ C0] ? _raw_spin_lock_irqsave+0x42/0x60 [ 1676.879910][ C0] nbcon_emit_one+0x1a8/0x2b0 [ 1676.879929][ C0] ? __pfx_nbcon_emit_one+0x10/0x10 [ 1676.879951][ C0] nbcon_kthread_func+0x613/0x7d0 [ 1676.879973][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1676.879994][ C0] ? __kthread_parkme+0x18f/0x230 [ 1676.880010][ C0] ? kthread+0x13a/0x450 [ 1676.880026][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1676.880045][ C0] kthread+0x373/0x450 [ 1676.880062][ C0] ? __pfx_kthread+0x10/0x10 [ 1676.880080][ C0] ret_from_fork+0x730/0xd60 [ 1676.880095][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1676.880110][ C0] ? __switch_to+0x800/0x10f0 [ 1676.880127][ C0] ? __pfx_kthread+0x10/0x10 [ 1676.880144][ C0] ret_from_fork_asm+0x1a/0x30 [ 1676.880163][ C0] [ 1676.889827][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1677.882234][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1677.892902][ T32] Tainted: [L]=SOFTLOCKUP [ 1677.897228][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1677.907271][ T32] Call Trace: [ 1677.910534][ T32] [ 1677.913442][ T32] dump_stack_lvl+0x100/0x190 [ 1677.918120][ T32] vpanic+0x553/0x970 [ 1677.922107][ T32] ? __pfx_vpanic+0x10/0x10 [ 1677.926648][ T32] panic+0xd1/0xe0 [ 1677.930380][ T32] ? __pfx_panic+0x10/0x10 [ 1677.934773][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 1677.940916][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 1677.947049][ T32] ? watchdog.cold+0x1ec/0x234 [ 1677.951794][ T32] watchdog.cold+0x1fd/0x234 [ 1677.956378][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1677.962161][ T32] ? __pfx_watchdog+0x10/0x10 [ 1677.966832][ T32] ? __kthread_parkme+0x18f/0x230 [ 1677.971873][ T32] ? kthread+0x13a/0x450 [ 1677.976135][ T32] ? __pfx_watchdog+0x10/0x10 [ 1677.980837][ T32] kthread+0x373/0x450 [ 1677.984929][ T32] ? __pfx_kthread+0x10/0x10 [ 1677.989537][ T32] ret_from_fork+0x730/0xd60 [ 1677.994139][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1677.999265][ T32] ? __switch_to+0x800/0x10f0 [ 1678.003960][ T32] ? __pfx_kthread+0x10/0x10 [ 1678.008558][ T32] ret_from_fork_asm+0x1a/0x30 [ 1678.013318][ T32] [ 1678.016445][ T32] Kernel Offset: disabled [ 1678.020751][ T32] Rebooting in 86400 seconds..