last executing test programs: 6m0.060450095s ago: executing program 3 (id=319): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000400)={0x50, 0x0, r3, {0x7, 0x2b, 0xc, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0xdd6e2e3f461ee510}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r4, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r4, r5, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000004c0)={0x3, {{0xa, 0x5e22, 0xc, @mcast1, 0x408}}, 0x1}, 0x90) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='pvfs2\x00', 0x800004, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000005c0)=0x8) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) dup2(r0, r8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r8, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={r7, 0x10}, 0x8) 5m57.636008657s ago: executing program 3 (id=324): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xfffffffffffffea7) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0xa5) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100002f00010000000000fbdbdf250401f2800d0018006e6c383032313534000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b00a9ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac643378"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000180)='./bus\x00') 5m54.022141152s ago: executing program 3 (id=328): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xfffffffffffffea7) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0xa5) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100002f00010000000000fbdbdf250401f2800d0018006e6c383032313534000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b00a9ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac643378"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000180)='./bus\x00') 5m52.357556983s ago: executing program 3 (id=332): fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) setns(0xc9, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) ftruncate(r0, 0x80000001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) setns(0xc9, 0x0) socketpair(0x27, 0x3, 0x0, &(0x7f0000000000)) 5m50.615542107s ago: executing program 3 (id=335): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000400)={0x50, 0x0, r3, {0x7, 0x2b, 0xc, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0xdd6e2e3f461ee510}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r4, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r4, r5, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000004c0)={0x3, {{0xa, 0x5e22, 0xc, @mcast1, 0x408}}, 0x1}, 0x90) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='pvfs2\x00', 0x800004, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000005c0)=0x8) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) dup2(r0, r8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r8, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={r7, 0x10}, 0x8) 5m47.435370562s ago: executing program 3 (id=340): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x40015b0b, 0x0) openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x32) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x8000000001, 0xffffffffffffffff, 0x26, {0xffffffffffffffff, 0xffff}, 0x1}, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4008001) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x44}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001e0021002b"], 0x20}, 0x1, 0x0, 0x0, 0x2008800}, 0x4000000) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) recvmmsg(r6, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) 5m31.993597338s ago: executing program 32 (id=340): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x40015b0b, 0x0) openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x32) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x8000000001, 0xffffffffffffffff, 0x26, {0xffffffffffffffff, 0xffff}, 0x1}, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4008001) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x44}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001e0021002b"], 0x20}, 0x1, 0x0, 0x0, 0x2008800}, 0x4000000) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) recvmmsg(r6, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) 4m37.592662858s ago: executing program 4 (id=450): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) syz_emit_ethernet(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000406050000000000000000000a000000050001000700ff01000000000000ac75d749b3a47836a7"], 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020008000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f0000000000)=@framed, 0x0}, 0x94) 4m37.269513875s ago: executing program 4 (id=452): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080060000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000100)=0x2, 0x4) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001dc0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={r3}, 0xc) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x3}, 0x6) ioctl$sock_bt_hci(r5, 0x400448e6, &(0x7f0000000500)="d7") r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./myproc/interrupts\x00', 0x20) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1b) 4m35.504724189s ago: executing program 4 (id=455): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x48, r1, 0x1, 0xffffffff, 0x400000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x48}, 0x1, 0x620b}, 0x0) finit_module(r0, 0x0, 0x0) ioperm(0xd6, 0x9cb8, 0x40) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = epoll_create1(0x0) epoll_pwait2(r4, 0x0, 0x0, 0x0, &(0x7f0000000280)={[0x6]}, 0x8) io_setup(0x6, &(0x7f0000000300)) eventfd2(0x0, 0x0) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f0000000100)="307106092a864886f70d010702a0643062020101310f300d06097e86480165030402010500300b06092a864886f70d010701313f303d023014300f310d300b0603550403130454657374020101300d06096086481165030402010500300d06092a864886f70d01010105000404010203040000", 0x73, 0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x7, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fanotify_init(0x0, 0x0) getpid() syz_clone(0x20b84111, 0x0, 0xffffffffffffff58, 0x0, 0x0, 0x0) 4m28.844107018s ago: executing program 4 (id=465): fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) setns(0xc9, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) ftruncate(r0, 0x80000001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) setns(0xc9, 0x0) socketpair(0x27, 0x3, 0x0, &(0x7f0000000000)) 4m27.695777939s ago: executing program 4 (id=468): mkdirat(0xffffffffffffff9c, 0x0, 0xbd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'geneve0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x60, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xff, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1ff, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x60}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfc, 0x1}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d2}]}, 0x30}}, 0x0) 4m25.577636309s ago: executing program 4 (id=470): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xfffffffffffffea7) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0xa5) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100002f00010000000000fbdbdf250401f2800d0018006e6c383032313534000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b00a9ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac643378"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) unlink(&(0x7f0000000180)='./bus\x00') 4m9.992630407s ago: executing program 33 (id=470): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xfffffffffffffea7) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0xa5) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100002f00010000000000fbdbdf250401f2800d0018006e6c383032313534000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b00a9ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac643378"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) unlink(&(0x7f0000000180)='./bus\x00') 51.219365173s ago: executing program 2 (id=767): syz_usb_connect(0x2, 0x39, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002000000404b0c00010001000000010902270001010080320904000003ff0000000705830308000a070581024000000705020240"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/ttyUSB0\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000500)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/fs/afs/cells\x00', 0x1, 0x0) write(r5, &(0x7f0000000300)='add syz0 127.0.0.1+7003:', 0x18) 38.179603557s ago: executing program 2 (id=779): fsopen(&(0x7f0000000000)='virtiofs\x00', 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x9, 0x0, 0x0, 0x3}) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) add_key(&(0x7f0000000640)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0xfffffffd, 0x32}, 0x2, @in=@loopback, 0x0, 0x1}}, 0xe8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) 37.604560745s ago: executing program 6 (id=780): unshare(0x60000600) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x0) unshare(0x20020a00) setns(0xc9, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/unix\x00') pread64(r1, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000002e40), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r4 = memfd_create(&(0x7f0000000240)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1fb;(\xb5\xe1jS\xd6\x91B\xb4\xe5=\xc1+\xb9\x12\xde0\x02\xcc\x18\xae%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa7^\xff\xf5\x95\xd2q#\xc6\xca\x97\b\x00\x00\x00\x00\x00\x00\x00&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdlC\xec\xe4\x9a\xc2\fX\x0e\xbc\xa4$\x9dU\xab\xbf\xbb\x12\xe6\x9f\x1d\xe4\x8a\x00\x00\x00\x00\x00\x00\x00\xa0W\xf1H\xb4~$\x05bIp+\x81Y\x9d\xd2!\"\x9d]zs\xb7\xfc,\b\xdd9\xc6\xe03t9\tT\n\xe8\x1f\x84\x1f\xf5\xc5\xf6}\xd7\xa3SL\xfa\xda\x97\x84\xa5Oj\x9by\xd3\x03 u(\x19\xd1\xc0\x8dG\xd8a\xad\x90jz\x12\xbc\xc3\xd7\x04~\xbe\xba\xccTO\xc1\xb2:\xdd\xc1M$\xbb\xe1{\x04\xb3\x13>\xf2n\xee\xab\x83%k\x92\x16\t\xe0\xe1\xa0\xa62\xef\x12\x96\x8b\x1es:\xfe&\x00'/318, 0x0) ftruncate(r4, 0x2022ad) fsetxattr$security_ima(r4, &(0x7f0000000080), &(0x7f0000000380)=ANY=[@ANYBLOB="0416"], 0x2, 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 35.453405851s ago: executing program 2 (id=783): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) socket$unix(0x1, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa302, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, 0xffffffffffffffff) syz_open_pts(r2, 0x101843) rt_sigqueueinfo(0x0, 0x21, &(0x7f00000002c0)={0xb, 0x4, 0xfffffffe}) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./dev\x00', &(0x7f0000000280)='ubifs\x00', 0x2000000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/sda\x00', 0x101042, 0x5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1000003) 30.661150611s ago: executing program 6 (id=791): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) socket$unix(0x1, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa302, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, 0xffffffffffffffff) syz_open_pts(r2, 0x101843) rt_sigqueueinfo(0x0, 0x21, &(0x7f00000002c0)={0xb, 0x4, 0xfffffffe}) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./dev\x00', &(0x7f0000000280)='ubifs\x00', 0x2000000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/sda\x00', 0x101042, 0x5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1000003) 29.20597801s ago: executing program 6 (id=795): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xfffffffffffffea7) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0xa5) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100002f00010000000000fbdbdf250401f2800d0018006e6c383032313534000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b00a9ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac643378"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) unlink(&(0x7f0000000180)='./bus\x00') 25.504435036s ago: executing program 5 (id=802): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00c\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="90010000305200001c00128009000100"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sigaltstack(0x0, &(0x7f0000001500)={0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000"], 0x0, 0x4a, 0x0, 0x200a}, 0x28) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0xaf) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x20120) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001f8ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000010000000a0080010000000200000000000000000000000000000001"], 0x110) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f0000000840)={0x0, {{0xa, 0x4e1f, 0x2, @mcast1, 0xf}}, {{0xa, 0x4e24, 0x4, @local, 0x4}}}, 0x108) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) 24.3078765s ago: executing program 5 (id=803): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x48, r1, 0x1, 0xffffffff, 0x400000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x48}, 0x1, 0x620b}, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioperm(0xd6, 0x9cb8, 0x40) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = epoll_create1(0x0) epoll_pwait2(r4, 0x0, 0x0, 0x0, &(0x7f0000000280)={[0x6]}, 0x8) io_setup(0x6, &(0x7f0000000300)) eventfd2(0x0, 0x0) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f0000000100)="307106092a864886f70d010702a0643062020101310f300d06097e86480165030402010500300b06092a864886f70d010701313f303d023014300f310d300b0603550403130454657374020101300d06096086481165030402010500300d06092a864886f70d01010105000404010203040000", 0x73, 0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x7, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fanotify_init(0x0, 0x0) getpid() syz_clone(0x20b84111, 0x0, 0xffffffffffffff58, 0x0, 0x0, 0x0) 21.392643078s ago: executing program 2 (id=804): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xfffffffffffffea7) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0xa5) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100002f00010000000000fbdbdf250401f2800d0018006e6c383032313534000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b00a9ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac643378"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) unlink(&(0x7f0000000180)='./bus\x00') 21.129362356s ago: executing program 1 (id=805): r0 = socket$inet6(0x10, 0x2, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}}, 0x4000100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20004040) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x1, './file1\x00'}, 0x6e) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r4}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000001c0)) migrate_pages(0x0, 0x200, &(0x7f0000000000)=0xffffffff7fffffff, &(0x7f00000000c0)=0x3) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000000, 0x0, 0x0) 20.716828635s ago: executing program 0 (id=806): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xfffffffffffffea7) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0xa5) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100002f00010000000000fbdbdf250401f2800d0018006e6c383032313534000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b00a9ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac643378"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) unlink(&(0x7f0000000180)='./bus\x00') 19.327793182s ago: executing program 1 (id=807): read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r3 = syz_open_procfs(0x0, &(0x7f0000006100)='cmdline\x00') preadv(r3, &(0x7f0000010440)=[{&(0x7f0000000040)=""/160, 0xa0}], 0x1, 0xc03, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@getchain={0x2c, 0x11, 0x839, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xfff3}, {0x3}}, [{0x8, 0xb, 0x7}]}, 0x2c}}, 0x0) 17.806191214s ago: executing program 0 (id=808): openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x48, r1, 0x1, 0xffffffff, 0x400000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x48}, 0x1, 0x620b}, 0x0) ioperm(0xd6, 0x9cb8, 0x40) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = epoll_create1(0x0) epoll_pwait2(r4, 0x0, 0x0, 0x0, &(0x7f0000000280)={[0x6]}, 0x8) io_setup(0x6, &(0x7f0000000300)) eventfd2(0x0, 0x0) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f0000000100)="307106092a864886f70d010702a0643062020101310f300d06097e86480165030402010500300b06092a864886f70d010701313f303d023014300f310d300b0603550403130454657374020101300d06096086481165030402010500300d06092a864886f70d01010105000404010203040000", 0x73, 0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x7, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fanotify_init(0x0, 0x0) getpid() syz_clone(0x20b84111, 0x0, 0xffffffffffffff58, 0x0, 0x0, 0x0) 16.989674066s ago: executing program 1 (id=809): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SIGNAL_MSI(r5, 0x4020aea5, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x140}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, 0x0, 0x0) 16.900473161s ago: executing program 6 (id=810): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) socket$unix(0x1, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa302, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, 0xffffffffffffffff) r3 = syz_open_pts(r2, 0x101843) rt_sigqueueinfo(0x0, 0x21, &(0x7f00000002c0)={0xb, 0x4, 0xfffffffe}) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./dev\x00', &(0x7f0000000280)='ubifs\x00', 0x2000000, 0x0) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/sda\x00', 0x101042, 0x5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1000003) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000100)='./dev/sda\x00', r5, 0x4000, r3}, 0x18) 15.112597216s ago: executing program 6 (id=811): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) socket$unix(0x1, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa302, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, 0xffffffffffffffff) r3 = syz_open_pts(r2, 0x101843) rt_sigqueueinfo(0x0, 0x21, &(0x7f00000002c0)={0xb, 0x4, 0xfffffffe}) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./dev\x00', &(0x7f0000000280)='ubifs\x00', 0x2000000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/sda\x00', 0x101042, 0x5) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000100)='./dev/sda\x00', r5, 0x4000, r3}, 0x18) 14.771455564s ago: executing program 1 (id=812): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xfffffffffffffea7) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0xa5) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100002f00010000000000fbdbdf250401f2800d0018006e6c383032313534000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b00a9ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac643378"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) unlink(&(0x7f0000000180)='./bus\x00') 14.652970652s ago: executing program 0 (id=813): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, r4, 0x1, 0x70bd2f, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x3}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0xfffffff1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x44}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x10}) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r6, &(0x7f0000000380)=ANY=[@ANYBLOB="4f4741494e20274361707475726520566f6c756d65272030303030303030303030303030303030303030300a494741494e0a50486ce2369e9e7101d386d8c8cc4f4e454f55540a535045414b4552202743442043617074757265"], 0xaf) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r9, &(0x7f0000000540)="48696c060a2f686c64bf8fcc6b881b5fa6802c012f6869642d636f72652e63206c696e65cb57e017fcb309130850af815ecccc4d204e9938", 0x38) write(r8, &(0x7f0000000000)="2400000011005f0414f900655e00000000ae00002d000000000000ea08000f0001000000", 0x24) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000040)="01000000000022001000000000000001000000000002080045000074000140004006", 0x22}, {&(0x7f0000000ec0)="00d8e1369d20050e00005b731e4eb5071febe9f8cb54afe2e5e68b36", 0x1c}], 0x2) 12.847544475s ago: executing program 1 (id=814): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) socket$unix(0x1, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa302, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, 0xffffffffffffffff) r3 = syz_open_pts(r2, 0x101843) rt_sigqueueinfo(0x0, 0x21, &(0x7f00000002c0)={0xb, 0x4, 0xfffffffe}) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./dev\x00', &(0x7f0000000280)='ubifs\x00', 0x2000000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/sda\x00', 0x101042, 0x5) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000100)='./dev/sda\x00', r5, 0x4000, r3}, 0x18) 12.620027821s ago: executing program 0 (id=815): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r2, 0x1, 0xffffffff, 0x400000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x40}, 0x1, 0x620b}, 0x0) finit_module(r0, 0x0, 0x0) ioperm(0xd6, 0x9cb8, 0x40) r3 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = epoll_create1(0x0) epoll_pwait2(r5, 0x0, 0x0, 0x0, &(0x7f0000000280)={[0x6]}, 0x8) io_setup(0x6, &(0x7f0000000300)) eventfd2(0x0, 0x0) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f0000000100)="307106092a864886f70d010702a0643062020101310f300d06097e86480165030402010500300b06092a864886f70d010701313f303d023014300f310d300b0603550403130454657374020101300d06096086481165030402010500300d06092a864886f70d01010105000404010203040000", 0x73, 0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x7, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fanotify_init(0x0, 0x0) getpid() syz_clone(0x20b84111, 0x0, 0xffffffffffffff58, 0x0, 0x0, 0x0) 11.898181747s ago: executing program 1 (id=816): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$IOMMU_VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1f7) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) openat$kvm(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000014c0)=""/4082, 0xff2, 0x10000000a) pread64(0xffffffffffffffff, &(0x7f0000000680)=""/133, 0x85, 0x2a) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e20, 0x7, @loopback, 0xc88}}, 0x0, 0x0, 0xa, 0x0, "25c633e7eb9cc056ed394ba71b6e5d7bf4d988ea7c340885973233ddc0946fbd53f014e2854b661b3f9f55a7e67ba35c3537ea83c3817a08930cf99a34dfc5e167b887734921da2397b9cc8b1e235b95"}, 0xd8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r3, 0x0, 0x48f, &(0x7f0000000600)="060000007f00000100150000000000006d6800"/38, 0x26) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r6, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000011c0)="b9feddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 11.356046512s ago: executing program 5 (id=817): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a0005"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24000004) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) openat$vga_arbiter(0xffffff9c, 0x0, 0x10000, 0x0) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x0, 0x0) read(r7, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5400000010000506fcffffff8300000000000000", @ANYRES32=0x0, @ANYBLOB="01100000000000002c0012800b0001006d616373656300001c00028005000a00010000000500090000000000050008000000000008000500", @ANYRES32=r4], 0x54}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010028bd70bbfedbdf2507af"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x20008800) 9.22906251s ago: executing program 0 (id=818): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x3, 0xa) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d000400000000000e000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) r3 = socket$inet_smc(0x2b, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) poll(&(0x7f0000000080)=[{r1, 0x1}, {r1, 0x100}], 0x2, 0x7) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r4 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r4, &(0x7f0000000040)="0600", 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000180)=ANY=[], 0xe) sendfile(r4, r4, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x18f4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x1, 0x8001, 0x7ff, 0x8}, {0xf6, 0x1, 0x200, 0x8, 0x80, 0x4f8a}, 0x400, 0x2, 0x214d}}, @TCA_TBF_RATE64={0xc, 0x4, 0x5a1ccac5ff343b9d}, @TCA_TBF_PRATE64={0xc, 0x5, 0xb2e970420df8c45a}]}}]}, 0x78}}, 0x2004c854) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000000)={{0x2, 0x4e20, @broadcast}, {0x6, @multicast}, 0xe, {0x2, 0x4e20, @local}, 'team_slave_0\x00'}) syz_emit_ethernet(0x6a, &(0x7f0000000780)={@local, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x6, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x2c, 0x64, 0x1, 0x6, [{@local, 0x5}, {@loopback, 0xfff}, {@broadcast, 0x3}, {@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x23b}]}]}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x18, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @loopback, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) write(r1, &(0x7f0000000340), 0x11000) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000280)={0x2, 0x0, 0x98, &(0x7f00000001c0)={0x8, 0x5, 0xa}}) 9.116295453s ago: executing program 5 (id=819): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat(r1, 0x0, 0x0, 0x80) read(r2, 0x0, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r3, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r4, &(0x7f0000001040)={0x27, 0x0, 0xfefffffd, 0x5, 0x0, 0xfd, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000080000200000000001900", 0x3c}, 0x60) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x23ca59a3}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2008010}, 0x2400c804) 9.058150224s ago: executing program 2 (id=820): fsopen(&(0x7f0000000000)='virtiofs\x00', 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x9, 0x0, 0x0, 0x3}) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) add_key(&(0x7f0000000640)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0xfffffffd, 0x32}, 0x2, @in=@loopback, 0x0, 0x1}}, 0xe8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x1, 0x8048, 0x800, 0x1, {{0xa, 0x4, 0x1, 0x4, 0x28, 0x66, 0x0, 0x3, 0x4, 0x0, @multicast1, @broadcast, {[@timestamp_addr={0x44, 0xc, 0xc6, 0x1, 0x9, [{@multicast1, 0x1}]}, @rr={0x7, 0x7, 0xee, [@rand_addr=0x64010100]}]}}}}}) 7.166565829s ago: executing program 5 (id=821): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000340)='[27.0.0.1:/export\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000380), 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) shutdown(r3, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000100)={0x0, 0x7, 0x4, 0x1000, 0x8}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000002180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x40009, 0x0, 0x0, 0x10}]}}, 0x0, 0x26}, 0x28) add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020) 5.816448226s ago: executing program 6 (id=822): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) socket$unix(0x1, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa302, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, 0xffffffffffffffff) r3 = syz_open_pts(r2, 0x101843) rt_sigqueueinfo(0x0, 0x21, &(0x7f00000002c0)={0xb, 0x4, 0xfffffffe}) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./dev\x00', &(0x7f0000000280)='ubifs\x00', 0x2000000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/sda\x00', 0x101042, 0x5) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000100)='./dev/sda\x00', r5, 0x4000, r3}, 0x18) 3.021732452s ago: executing program 5 (id=823): syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@volatile={0xc, 0x0, 0x0, 0x9, 0x3}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x4, 0x1}]}, {0x0, [0x30, 0x0]}}, &(0x7f0000000240)=""/153, 0x38, 0x99, 0x1, 0x7, 0x10000}, 0x28) r1 = openat(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x80040, 0x54) fsetxattr$system_posix_acl(r1, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000004c0)={{}, {}, [], {}, [], {0x10, 0x3}, {0x20, 0x1}}, 0x24, 0x0) getxattr(&(0x7f0000002a80)='./file0\x00', &(0x7f0000002ac0)=@known='system.posix_acl_access\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xffffff52, '\x00', 0x0, r0, 0x5, 0x1, 0x1}, 0x50) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x21, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@call={0x85, 0x0, 0x0, 0xb0}, @cb_func={0x18, 0xc05122879d1b0f30, 0x4, 0x0, 0xfffffffffffffff9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0xffff}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xa}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x4}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}, @jmp={0x5, 0x1, 0x0, 0x2, 0x2, 0x40, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000ac0)='syzkaller\x00', 0x81, 0x0, 0x0, 0x40f00, 0x45, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000b00)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000b40)={0x1, 0x6, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000b80)=[0xffffffffffffffff, r3, 0xffffffffffffffff, r3, r2, 0xffffffffffffffff], &(0x7f0000000bc0)=[{0x4, 0x2, 0xd, 0x8}], 0x10, 0xd1c4}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000cc0)={r4, r5}) socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="200f11000000", @ANYRES16=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet6_opts(r7, 0x29, 0x1, 0x0, &(0x7f0000002700)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000003f00010001000000000000000101000000000000090001006f767330000000000800020000000000080009002a000000"], 0x34}}, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="48000000420001000200000000000000030100002a0000001200010000112233445566778899aabb08000000040002801800038014001980080001000100000008000200aabbccdd"], 0x48}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) 1.576872819s ago: executing program 0 (id=824): mkdirat(0xffffffffffffff9c, 0x0, 0xbd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r5, @ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r4, &(0x7f0000001140), 0x700, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000000)={0x0, r0}, &(0x7f0000000280)={0x1, 0x4, 0x40, 0x4, 0x7ff, 0x20}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x5c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1ff, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 0s ago: executing program 2 (id=825): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() setrlimit(0xa, &(0x7f00000000c0)={0x9, 0x6}) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) write(r2, &(0x7f0000000000)="5a000300010003", 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) read(r4, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000180)={0x335, @time={0x101, 0x10001}, 0x1b, {}, 0x2, 0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r4, 0x40045304, &(0x7f0000000000)) tkill(r3, 0x7) syz_emit_ethernet(0x4e, &(0x7f0000002540)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="68c200009078000003020000"], 0x0) mount(0x0, &(0x7f0000000000)='./tracing\x00', 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 8419] ? __lock_acquire+0x5c0/0x1f40 [ 420.180963][ T8419] ? lock_acquire+0x1d1/0x380 [ 420.180975][ T8419] ? unwind_next_frame+0xbd/0x2090 [ 420.180993][ T8419] ? lock_acquire+0x1d1/0x380 [ 420.181009][ T8419] ? bpf_ksym_find+0x128/0x1c0 [ 420.181020][ T8419] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 420.181036][ T8419] ? arch_stack_walk+0xa6/0xf0 [ 420.181054][ T8419] ? __sigqueue_free+0xbe/0x2a0 [ 420.181070][ T8419] ? stack_trace_save+0x8e/0xc0 [ 420.181080][ T8419] ? __pfx_stack_trace_save+0x10/0x10 [ 420.181092][ T8419] ? stack_depot_save_flags+0x27/0x9f0 [ 420.181108][ T8419] ? __lock_acquire+0x5c0/0x1f40 [ 420.181143][ T8419] ? proc_coredump_connector+0x2d3/0x4f0 [ 420.181155][ T8419] ? __pfx_proc_coredump_connector+0x10/0x10 [ 420.181170][ T8419] ? rcu_is_watching+0x13/0xc0 [ 420.181188][ T8419] get_signal+0x1f2a/0x21e0 [ 420.181206][ T8419] ? __pfx_get_signal+0x10/0x10 [ 420.181222][ T8419] arch_do_signal_or_restart+0x91/0x7e0 [ 420.181240][ T8419] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 420.181265][ T8419] irqentry_exit+0x402/0xa10 [ 420.181279][ T8419] asm_exc_page_fault+0x26/0x30 [ 420.181290][ T8419] RIP: 0033:0x7fc5e959e161 [ 420.181299][ T8419] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 420.181310][ T8419] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 420.181319][ T8419] RAX: 0000000000000000 RBX: 00007fc5e9826090 RCX: 00007fc5e959e159 [ 420.181326][ T8419] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 420.181333][ T8419] RBP: 00007fc5e963506b R08: 0000000000000000 R09: 0000000000000000 [ 420.181339][ T8419] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 420.181346][ T8419] R13: 00007fc5e9826128 R14: 00007fc5e9826090 R15: 00007ffdaa19efa8 [ 420.181360][ T8419] [ 420.181365][ T8419] memory: usage 307200kB, limit 307200kB, failcnt 31 [ 420.181372][ T8419] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 420.181378][ T8419] kmem: usage 2124kB, limit 9007199254740988kB, failcnt 0 [ 420.181385][ T8419] Memory cgroup stats for /syz5: [ 420.181454][ T8419] cache 311762944 [ 420.181459][ T8419] rss 516096 [ 420.181463][ T8419] rss_huge 0 [ 420.181466][ T8419] shmem 311762944 [ 420.181470][ T8419] mapped_file 133156864 [ 420.181474][ T8419] dirty 0 [ 420.181478][ T8419] writeback 0 [ 420.181482][ T8419] workingset_refault_anon 0 [ 420.181486][ T8419] workingset_refault_file 0 [ 420.181490][ T8419] swap 0 [ 420.181493][ T8419] swapcached 12288 [ 420.181497][ T8419] pgpgin 196358 [ 420.181501][ T8419] pgpgout 120118 [ 420.181505][ T8419] pgfault 67108 [ 420.181508][ T8419] pgmajfault 1 [ 420.181512][ T8419] inactive_anon 0 [ 420.181516][ T8419] active_anon 312270848 [ 420.181520][ T8419] inactive_file 0 [ 420.181524][ T8419] active_file 0 [ 420.181528][ T8419] unevictable 0 [ 420.181531][ T8419] hierarchical_memory_limit 314572800 [ 420.181536][ T8419] hierarchical_memsw_limit 9223372036854771712 [ 420.181541][ T8419] total_cache 311762944 [ 420.181545][ T8419] total_rss 516096 [ 420.181549][ T8419] total_rss_huge 0 [ 420.181552][ T8419] total_shmem 311762944 [ 420.181556][ T8419] total_mapped_file 133156864 [ 420.181561][ T8419] total_dirty 0 [ 420.181564][ T8419] total_writeback 0 [ 420.181568][ T8419] total_workingset_refault_anon 0 [ 420.181573][ T8419] total_workingset_refault_file 0 [ 420.181577][ T8419] total_swap 0 [ 420.181581][ T8419] total_swapcached 12288 [ 420.181585][ T8419] total_pgpgin 196358 [ 420.181589][ T8419] total_pgpgout 120118 [ 420.181593][ T8419] total_pgfault 67108 [ 420.181597][ T8419] total_pgmajfault 1 [ 420.181601][ T8419] total_inactive_anon 0 [ 420.181605][ T8419] total_active_anon 312270848 [ 420.181609][ T8419] total_inactive_file 0 [ 420.181613][ T8419] total_active_file 0 [ 420.181617][ T8419] total_unevictable 0 [ 420.181621][ T8419] anon_cost 0 [ 420.181624][ T8419] file_cost 0 [ 420.181628][ T8419] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.500,pid=8123,uid=0 [ 420.181678][ T8419] Memory cgroup out of memory: Killed process 8123 (syz.5.500) total-vm:200560kB, anon-rss:1428kB, file-rss:20548kB, shmem-rss:118556kB, UID:0 pgtables:344kB oom_score_adj:1000 [ 421.193455][ T8416] socket: no more sockets [ 421.584427][ T32] oom_reaper: reaped process 7799 (syz.2.440), now anon-rss:0kB, file-rss:20480kB, shmem-rss:90304kB [ 421.637532][ T8419] syz.5.563 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 421.637556][ T8419] CPU: 0 UID: 0 PID: 8419 Comm: syz.5.563 Tainted: G L syzkaller #0 PREEMPT(full) [ 421.637570][ T8419] Tainted: [L]=SOFTLOCKUP [ 421.637574][ T8419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 421.637581][ T8419] Call Trace: [ 421.637585][ T8419] [ 421.637590][ T8419] dump_stack_lvl+0x100/0x190 [ 421.637609][ T8419] dump_header+0xfb/0x606 [ 421.637623][ T8419] oom_kill_process.cold+0xd/0x380 [ 421.637643][ T8419] out_of_memory+0x340/0x14f0 [ 421.637672][ T8419] ? __pfx_out_of_memory+0x10/0x10 [ 421.637703][ T8419] mem_cgroup_out_of_memory+0xc6/0x130 [ 421.637720][ T8419] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 421.637733][ T8419] ? find_held_lock+0x2b/0x80 [ 421.637753][ T8419] ? do_raw_spin_unlock+0x145/0x1e0 [ 421.637769][ T8419] ? _raw_spin_unlock+0x28/0x50 [ 421.637787][ T8419] try_charge_memcg+0x783/0xf60 [ 421.637806][ T8419] ? __pfx_try_charge_memcg+0x10/0x10 [ 421.637823][ T8419] ? find_held_lock+0x2b/0x80 [ 421.637839][ T8419] ? rcu_read_unlock+0x17/0x60 [ 421.637849][ T8419] ? rcu_read_unlock+0x17/0x60 [ 421.637859][ T8419] ? find_held_lock+0x2b/0x80 [ 421.637876][ T8419] ? rcu_read_unlock+0x17/0x60 [ 421.637890][ T8419] charge_memcg+0x1ae/0x210 [ 421.637901][ T8419] __mem_cgroup_charge+0x2b/0x1c0 [ 421.637914][ T8419] shmem_alloc_and_add_folio+0x451/0xd40 [ 421.637936][ T8419] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 421.637955][ T8419] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 421.637977][ T8419] shmem_get_folio_gfp+0x75b/0x1980 [ 421.637998][ T8419] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 421.638021][ T8419] shmem_write_begin+0x1a4/0x420 [ 421.638034][ T8419] ? __pfx_shmem_write_begin+0x10/0x10 [ 421.638045][ T8419] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 421.638060][ T8419] generic_perform_write+0x292/0xa40 [ 421.638075][ T8419] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 421.638091][ T8419] ? __pfx_generic_perform_write+0x10/0x10 [ 421.638108][ T8419] ? file_update_time_flags+0x38c/0x520 [ 421.638121][ T8419] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 421.638133][ T8419] shmem_file_write_iter+0x10e/0x140 [ 421.638147][ T8419] __kernel_write_iter+0x2ac/0x930 [ 421.638161][ T8419] ? __pfx___kernel_write_iter+0x10/0x10 [ 421.638174][ T8419] ? __up_read+0x333/0x980 [ 421.638190][ T8419] ? dump_user_range+0x65e/0xad0 [ 421.638206][ T8419] dump_user_range+0x3f9/0xad0 [ 421.638222][ T8419] ? __pfx_dump_user_range+0x10/0x10 [ 421.638239][ T8419] ? __pfx_writenote+0x10/0x10 [ 421.638253][ T8419] ? elf_core_dump+0x1f25/0x3d20 [ 421.638268][ T8419] elf_core_dump+0x2d68/0x3d20 [ 421.638289][ T8419] ? __pfx_elf_core_dump+0x10/0x10 [ 421.638303][ T8419] ? kasan_save_stack+0x3f/0x50 [ 421.638316][ T8419] ? kasan_save_stack+0x30/0x50 [ 421.638328][ T8419] ? kasan_save_track+0x14/0x30 [ 421.638341][ T8419] ? __kasan_kmalloc+0xaa/0xb0 [ 421.638354][ T8419] ? vfs_coredump+0x21f6/0x54a0 [ 421.638366][ T8419] ? get_signal+0x1f2a/0x21e0 [ 421.638377][ T8419] ? arch_do_signal_or_restart+0x91/0x7e0 [ 421.638397][ T8419] ? 0xffffffffff600000 [ 421.638423][ T8419] ? lock_acquire+0x1d1/0x380 [ 421.638435][ T8419] ? get_signal+0x1f2a/0x21e0 [ 421.638451][ T8419] ? vfs_coredump+0x281a/0x54a0 [ 421.638463][ T8419] vfs_coredump+0x281a/0x54a0 [ 421.638480][ T8419] ? __pfx_vfs_coredump+0x10/0x10 [ 421.638492][ T8419] ? __lock_acquire+0x5c0/0x1f40 [ 421.638508][ T8419] ? __lock_acquire+0x5c0/0x1f40 [ 421.638522][ T8419] ? lock_acquire+0x1d1/0x380 [ 421.638534][ T8419] ? unwind_next_frame+0xbd/0x2090 [ 421.638553][ T8419] ? lock_acquire+0x1d1/0x380 [ 421.638569][ T8419] ? bpf_ksym_find+0x128/0x1c0 [ 421.638579][ T8419] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 421.638596][ T8419] ? arch_stack_walk+0xa6/0xf0 [ 421.638615][ T8419] ? __sigqueue_free+0xbe/0x2a0 [ 421.638630][ T8419] ? stack_trace_save+0x8e/0xc0 [ 421.638641][ T8419] ? __pfx_stack_trace_save+0x10/0x10 [ 421.638653][ T8419] ? stack_depot_save_flags+0x27/0x9f0 [ 421.638668][ T8419] ? __lock_acquire+0x5c0/0x1f40 [ 421.638704][ T8419] ? proc_coredump_connector+0x2d3/0x4f0 [ 421.638717][ T8419] ? __pfx_proc_coredump_connector+0x10/0x10 [ 421.638732][ T8419] ? rcu_is_watching+0x13/0xc0 [ 421.638750][ T8419] get_signal+0x1f2a/0x21e0 [ 421.638768][ T8419] ? __pfx_get_signal+0x10/0x10 [ 421.638785][ T8419] arch_do_signal_or_restart+0x91/0x7e0 [ 421.638808][ T8419] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 421.638833][ T8419] irqentry_exit+0x402/0xa10 [ 421.638847][ T8419] asm_exc_page_fault+0x26/0x30 [ 421.638858][ T8419] RIP: 0033:0x7fc5e959e161 [ 421.638867][ T8419] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 421.638877][ T8419] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 421.638887][ T8419] RAX: 0000000000000000 RBX: 00007fc5e9826090 RCX: 00007fc5e959e159 [ 421.638893][ T8419] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 421.638900][ T8419] RBP: 00007fc5e963506b R08: 0000000000000000 R09: 0000000000000000 [ 421.638907][ T8419] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 421.638913][ T8419] R13: 00007fc5e9826128 R14: 00007fc5e9826090 R15: 00007ffdaa19efa8 [ 421.638928][ T8419] [ 421.638986][ T8419] memory: usage 307200kB, limit 307200kB, failcnt 5877 [ 421.638994][ T8419] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 421.639001][ T8419] kmem: usage 1996kB, limit 9007199254740988kB, failcnt 0 [ 421.639007][ T8419] Memory cgroup stats for /syz5: [ 421.639076][ T8419] cache 312127488 [ 421.639081][ T8419] rss 401408 [ 421.639085][ T8419] rss_huge 0 [ 421.639088][ T8419] shmem 312127488 [ 421.639092][ T8419] mapped_file 126570496 [ 421.639096][ T8419] dirty 0 [ 421.639099][ T8419] writeback 0 [ 421.639103][ T8419] workingset_refault_anon 0 [ 421.639107][ T8419] workingset_refault_file 0 [ 421.639111][ T8419] swap 0 [ 421.639114][ T8419] swapcached 12288 [ 421.639118][ T8419] pgpgin 196449 [ 421.639122][ T8419] pgpgout 120148 [ 421.639126][ T8419] pgfault 67118 [ 421.639129][ T8419] pgmajfault 1 [ 421.639133][ T8419] inactive_anon 0 [ 421.639136][ T8419] active_anon 312528896 [ 421.639140][ T8419] inactive_file 0 [ 421.639144][ T8419] active_file 0 [ 421.639147][ T8419] unevictable 0 [ 421.639151][ T8419] hierarchical_memory_limit 314572800 [ 421.639155][ T8419] hierarchical_memsw_limit 9223372036854771712 [ 421.639160][ T8419] total_cache 312127488 [ 421.639164][ T8419] total_rss 401408 [ 421.639168][ T8419] total_rss_huge 0 [ 421.639172][ T8419] total_shmem 312127488 [ 421.639176][ T8419] total_mapped_file 126570496 [ 421.639180][ T8419] total_dirty 0 [ 421.639183][ T8419] total_writeback 0 [ 421.639187][ T8419] total_workingset_refault_anon 0 [ 421.639191][ T8419] total_workingset_refault_file 0 [ 421.639196][ T8419] total_swap 0 [ 421.639199][ T8419] total_swapcached 12288 [ 421.639203][ T8419] total_pgpgin 196449 [ 421.639207][ T8419] total_pgpgout 120148 [ 421.639211][ T8419] total_pgfault 67118 [ 421.639215][ T8419] total_pgmajfault 1 [ 421.639219][ T8419] total_inactive_anon 0 [ 421.639223][ T8419] total_active_anon 312528896 [ 421.639227][ T8419] total_inactive_file 0 [ 421.639231][ T8419] total_active_file 0 [ 421.639235][ T8419] total_unevictable 0 [ 421.639238][ T8419] anon_cost 0 [ 421.639242][ T8419] file_cost 0 [ 421.639246][ T8419] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.563,pid=8419,uid=0 [ 421.639296][ T8419] Memory cgroup out of memory: Killed process 8419 (syz.5.563) total-vm:102384kB, anon-rss:1428kB, file-rss:61508kB, shmem-rss:11480kB, UID:0 pgtables:228kB oom_score_adj:1000 [ 421.888663][ T32] oom_reaper: reaped process 8056 (syz.2.485), now anon-rss:0kB, file-rss:20480kB, shmem-rss:70608kB [ 422.252792][ T32] oom_reaper: reaped process 8123 (syz.5.500), now anon-rss:0kB, file-rss:20480kB, shmem-rss:89768kB [ 423.122071][ T8425] netlink: 'syz.2.559': attribute type 11 has an invalid length. [ 423.122099][ T8425] netlink: 220 bytes leftover after parsing attributes in process `syz.2.559'. [ 424.663108][ T30] audit: type=1400 audit(1790959279.622:854): avc: denied { sqpoll } for pid=8426 comm="syz.1.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 425.178156][ T30] audit: type=1400 audit(1790959280.202:855): avc: denied { read } for pid=8436 comm="syz.0.567" name="sg0" dev="devtmpfs" ino=1100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 425.178205][ T30] audit: type=1400 audit(1790959280.202:856): avc: denied { open } for pid=8436 comm="syz.0.567" path="/dev/sg0" dev="devtmpfs" ino=1100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 425.179539][ T30] audit: type=1400 audit(1790959280.212:857): avc: denied { ioctl } for pid=8436 comm="syz.0.567" path="/dev/sg0" dev="devtmpfs" ino=1100 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 426.325560][ T30] audit: type=1400 audit(1790959281.352:858): avc: denied { block_suspend } for pid=8443 comm="syz.2.569" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 428.635936][ T30] audit: type=1400 audit(1790959283.662:859): avc: denied { write } for pid=8447 comm="syz.5.564" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 429.733403][ T8463] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 429.733427][ T8463] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 429.735501][ T8463] vhci_hcd vhci_hcd.0: Device attached [ 429.825962][ T8472] netlink: 'syz.1.572': attribute type 1 has an invalid length. [ 429.825982][ T8472] netlink: 224 bytes leftover after parsing attributes in process `syz.1.572'. [ 429.951539][ T30] audit: type=1400 audit(1790959284.972:860): avc: denied { setopt } for pid=8454 comm="syz.6.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 430.086593][ T30] audit: type=1400 audit(1790959285.112:861): avc: denied { module_load } for pid=8473 comm="syz.2.573" path="/sys/power/pm_trace_dev_match" dev="sysfs" ino=1410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 430.139168][ T984] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 430.229549][ T8464] vhci_hcd: connection reset by peer [ 430.233618][ T1171] vhci_hcd vhci_hcd.6: stop threads [ 430.234079][ T1171] vhci_hcd vhci_hcd.6: release socket [ 430.255006][ T1171] vhci_hcd vhci_hcd.6: disconnect device [ 430.431158][ T8484] serio: Serial port ptm0 [ 431.214114][ T30] audit: type=1400 audit(1790959286.212:862): avc: denied { write } for pid=8479 comm="syz.5.576" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 431.251298][ T30] audit: type=1400 audit(1790959286.282:863): avc: denied { write } for pid=8479 comm="syz.5.576" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 431.252805][ T30] audit: type=1400 audit(1790959286.282:864): avc: denied { open } for pid=8479 comm="syz.5.576" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 431.654488][ T8493] netlink: 'syz.6.577': attribute type 11 has an invalid length. [ 431.654517][ T8493] netlink: 220 bytes leftover after parsing attributes in process `syz.6.577'. [ 432.951760][ T8497] input: syz1 as /devices/virtual/input/input12 [ 433.436476][ T50] rpcbind: server 127.0.0.1 not responding, timed out [ 434.120583][ T30] audit: type=1400 audit(1790959289.152:865): avc: denied { create } for pid=8506 comm="syz.5.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 434.122645][ T30] audit: type=1400 audit(1790959289.152:866): avc: denied { bind } for pid=8506 comm="syz.5.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 434.126116][ T30] audit: type=1400 audit(1790959289.152:867): avc: denied { write } for pid=8506 comm="syz.5.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 434.218522][ T30] audit: type=1400 audit(1790959289.252:868): avc: denied { open } for pid=8506 comm="syz.5.582" path="/dev/ptyqe" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 434.270678][ T30] audit: type=1400 audit(1790959289.292:869): avc: denied { ioctl } for pid=8506 comm="syz.5.582" path="/dev/ptyqe" dev="devtmpfs" ino=133 ioctlcmd=0x545d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 434.419524][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.419569][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 435.379836][ T984] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 435.893776][ T30] audit: type=1400 audit(1790959290.922:870): avc: denied { getopt } for pid=8496 comm="syz.1.578" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 435.918554][ T30] audit: type=1400 audit(1790959290.932:871): avc: denied { getopt } for pid=8496 comm="syz.1.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 436.205195][ T8056] syz.2.485 (8056) used greatest stack depth: 18072 bytes left [ 436.765968][ T8521] netlink: 'syz.6.585': attribute type 1 has an invalid length. [ 436.765987][ T8521] netlink: 224 bytes leftover after parsing attributes in process `syz.6.585'. [ 438.220002][ T30] audit: type=1400 audit(1790959293.252:872): avc: denied { write } for pid=8531 comm="syz.1.587" name="sg0" dev="devtmpfs" ino=1100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 439.069096][ T30] audit: type=1400 audit(1790959294.102:873): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 442.697920][ T30] audit: type=1400 audit(1790959297.693:874): avc: denied { mount } for pid=8550 comm="syz.0.593" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 442.698625][ T30] audit: type=1400 audit(1790959297.733:875): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 445.168370][ T30] audit: type=1400 audit(1790959300.203:876): avc: denied { create } for pid=8563 comm="syz.5.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 446.386454][ T30] audit: type=1400 audit(1790959301.413:877): avc: denied { connect } for pid=8563 comm="syz.5.598" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 446.466391][ T7799] syz.2.440 (7799) used greatest stack depth: 18008 bytes left [ 448.415309][ T30] audit: type=1400 audit(1790959303.383:878): avc: denied { write } for pid=8570 comm="syz.5.600" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 448.990784][ T30] audit: type=1400 audit(1790959303.953:879): avc: denied { read write } for pid=8577 comm="syz.6.588" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 448.990833][ T30] audit: type=1400 audit(1790959303.953:880): avc: denied { open } for pid=8577 comm="syz.6.588" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 448.990871][ T30] audit: type=1400 audit(1790959303.963:881): avc: denied { ioctl } for pid=8577 comm="syz.6.588" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 449.930260][ T8589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.185686][ T6414] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.189056][ T1171] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.193249][ T1171] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.282154][ T1171] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.737859][ T8598] netlink: 'syz.2.604': attribute type 11 has an invalid length. [ 450.737888][ T8598] netlink: 220 bytes leftover after parsing attributes in process `syz.2.604'. [ 453.406919][ T30] audit: type=1400 audit(1790959307.703:882): avc: denied { read write } for pid=8608 comm="syz.1.607" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 453.406968][ T30] audit: type=1400 audit(1790959307.703:883): avc: denied { open } for pid=8608 comm="syz.1.607" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 453.407001][ T30] audit: type=1400 audit(1790959307.783:884): avc: denied { ioctl } for pid=8608 comm="syz.1.607" path="socket:[19369]" dev="sockfs" ino=19369 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 453.690422][ T8619] netlink: 'syz.0.608': attribute type 11 has an invalid length. [ 453.690450][ T8619] netlink: 220 bytes leftover after parsing attributes in process `syz.0.608'. [ 455.165049][ T30] audit: type=1400 audit(1790959309.833:885): avc: denied { map } for pid=8621 comm="syz.5.612" path="/dev/comedi0" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 455.165096][ T30] audit: type=1400 audit(1790959309.833:886): avc: denied { execute } for pid=8621 comm="syz.5.612" path="/dev/comedi0" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 455.253889][ T30] audit: type=1400 audit(1790959310.283:887): avc: denied { append } for pid=8623 comm="syz.6.610" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 455.308313][ T30] audit: type=1400 audit(1790959310.343:888): avc: denied { bind } for pid=8627 comm="syz.0.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 455.308703][ T30] audit: type=1400 audit(1790959310.343:889): avc: denied { listen } for pid=8627 comm="syz.0.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 455.314963][ T30] audit: type=1400 audit(1790959310.343:890): avc: denied { getopt } for pid=8627 comm="syz.0.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 455.484856][ T8615] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.485330][ T8615] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.566353][ T8624] loop5: detected capacity change from 0 to 7 [ 455.569841][ T8624] Dev loop5: unable to read RDB block 7 [ 455.569871][ T8624] loop5: unable to read partition table [ 455.570023][ T8624] loop5: partition table beyond EOD, truncated [ 455.570039][ T8624] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 456.015579][ T8615] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.543534][ T30] audit: type=1400 audit(1790959311.573:891): avc: denied { ioctl } for pid=8635 comm="syz.0.616" path="socket:[19434]" dev="sockfs" ino=19434 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 456.579685][ T30] audit: type=1400 audit(1790959311.613:892): avc: denied { bind } for pid=8635 comm="syz.0.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 456.580032][ T8637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.616'. [ 457.442644][ T8644] netlink: 'syz.6.617': attribute type 11 has an invalid length. [ 457.442669][ T8644] netlink: 220 bytes leftover after parsing attributes in process `syz.6.617'. [ 458.803336][ T115] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.803368][ T115] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.803415][ T115] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.803438][ T115] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.803468][ T115] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.803497][ T115] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.896540][ T50] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.896574][ T50] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.004271][ T8648] netlink: 'syz.6.618': attribute type 11 has an invalid length. [ 459.004338][ T8648] netlink: 220 bytes leftover after parsing attributes in process `syz.6.618'. [ 460.050197][ T8652] netlink: 'syz.2.619': attribute type 11 has an invalid length. [ 460.050227][ T8652] netlink: 220 bytes leftover after parsing attributes in process `syz.2.619'. [ 461.048300][ T30] audit: type=1326 audit(1790959316.084:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8653 comm="syz.0.620" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb8c79e159 code=0x0 [ 462.768388][ T30] audit: type=1400 audit(1790959317.804:894): avc: denied { create } for pid=8653 comm="syz.0.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 463.343693][ T30] audit: type=1400 audit(1790959318.374:895): avc: denied { ioctl } for pid=8671 comm="syz.2.622" path="socket:[20250]" dev="sockfs" ino=20250 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 463.545578][ T8680] No source specified [ 463.585421][ T30] audit: type=1400 audit(1790959318.584:896): avc: denied { write } for pid=8675 comm="syz.6.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 464.658453][ T30] audit: type=1400 audit(1790959319.694:897): avc: denied { shutdown } for pid=8681 comm="syz.1.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 465.347250][ T8694] netlink: 'syz.1.628': attribute type 11 has an invalid length. [ 465.347279][ T8694] netlink: 220 bytes leftover after parsing attributes in process `syz.1.628'. [ 465.496789][ T8692] fuse: Bad value for 'fd' [ 465.842050][ T8695] orangefs_mount: mount request failed with -4 [ 466.671973][ T8702] netlink: 'syz.1.630': attribute type 11 has an invalid length. [ 466.671999][ T8702] netlink: 220 bytes leftover after parsing attributes in process `syz.1.630'. [ 467.660514][ T8706] netlink: 'syz.0.631': attribute type 11 has an invalid length. [ 467.660540][ T8706] netlink: 220 bytes leftover after parsing attributes in process `syz.0.631'. [ 468.626178][ T8710] netlink: 'syz.1.632': attribute type 11 has an invalid length. [ 468.626233][ T8710] netlink: 220 bytes leftover after parsing attributes in process `syz.1.632'. [ 471.095810][ T30] audit: type=1326 audit(1790959326.134:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8722 comm="syz.2.637" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707219e159 code=0x7ffc0000 [ 471.096002][ T30] audit: type=1326 audit(1790959326.134:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8722 comm="syz.2.637" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707219e159 code=0x7ffc0000 [ 471.100230][ T30] audit: type=1326 audit(1790959326.134:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8722 comm="syz.2.637" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f707219e159 code=0x7ffc0000 [ 471.350111][ T30] audit: type=1400 audit(1790959326.384:901): avc: denied { setopt } for pid=8726 comm="syz.5.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 471.645605][ T30] audit: type=1400 audit(1790959326.544:902): avc: denied { read write } for pid=8722 comm="syz.2.637" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 471.645714][ T30] audit: type=1400 audit(1790959326.544:903): avc: denied { open } for pid=8722 comm="syz.2.637" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 474.843000][ T8740] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 475.112514][ T8740] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 477.881596][ T30] audit: type=1400 audit(1790959332.914:904): avc: denied { write } for pid=8754 comm="syz.5.644" path="socket:[20691]" dev="sockfs" ino=20691 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 478.000179][ T30] audit: type=1400 audit(1790959333.024:905): avc: denied { unlink } for pid=8756 comm="syz.1.645" name="#3" dev="tmpfs" ino=824 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 478.057075][ T8760] evm: overlay not supported [ 478.074960][ T30] audit: type=1400 audit(1790959333.034:906): avc: denied { mount } for pid=8756 comm="syz.1.645" name="/" dev="overlay" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 479.832017][ T30] audit: type=1400 audit(1790959334.705:907): avc: denied { name_connect } for pid=8762 comm="syz.0.646" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 480.912887][ T8776] fuse: Bad value for 'fd' [ 481.267074][ T30] audit: type=1400 audit(1790959336.305:908): avc: denied { listen } for pid=8778 comm="syz.5.650" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 481.269619][ T30] audit: type=1400 audit(1790959336.305:909): avc: denied { accept } for pid=8778 comm="syz.5.650" lport=49129 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 481.720732][ T8776] orangefs_mount: mount request failed with -4 [ 483.672214][ T30] audit: type=1400 audit(1790959338.705:910): avc: denied { create } for pid=8784 comm="syz.2.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 483.716340][ T30] audit: type=1400 audit(1790959338.755:911): avc: denied { bind } for pid=8784 comm="syz.2.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 483.750911][ T30] audit: type=1400 audit(1790959338.785:912): avc: denied { map } for pid=8784 comm="syz.2.652" path="socket:[20386]" dev="sockfs" ino=20386 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 483.750936][ T30] audit: type=1400 audit(1790959338.785:913): avc: denied { read } for pid=8784 comm="syz.2.652" path="socket:[20386]" dev="sockfs" ino=20386 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 483.806915][ T30] audit: type=1400 audit(1790959338.845:914): avc: denied { listen } for pid=8784 comm="syz.2.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 484.758770][ T30] audit: type=1400 audit(1790959339.315:915): avc: denied { write } for pid=8784 comm="syz.2.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 486.102024][ T8799] netlink: 'syz.6.643': attribute type 11 has an invalid length. [ 486.102048][ T8799] netlink: 220 bytes leftover after parsing attributes in process `syz.6.643'. [ 488.714957][ T30] audit: type=1400 audit(1790959343.455:916): avc: denied { connect } for pid=8804 comm="syz.6.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 490.193400][ T30] audit: type=1400 audit(1790959344.335:917): avc: denied { ioctl } for pid=8806 comm="syz.0.648" path="socket:[20801]" dev="sockfs" ino=20801 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 490.193452][ T30] audit: type=1400 audit(1790959344.355:918): avc: denied { write } for pid=8806 comm="syz.0.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 492.935432][ T5601] Bluetooth: hci1: command 0x0406 tx timeout [ 494.567369][ T8831] syz.1.663 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 494.567393][ T8831] CPU: 0 UID: 0 PID: 8831 Comm: syz.1.663 Tainted: G L syzkaller #0 PREEMPT(full) [ 494.567408][ T8831] Tainted: [L]=SOFTLOCKUP [ 494.567413][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 494.567419][ T8831] Call Trace: [ 494.567423][ T8831] [ 494.567427][ T8831] dump_stack_lvl+0x100/0x190 [ 494.567458][ T8831] dump_header+0xfb/0x606 [ 494.567471][ T8831] oom_kill_process.cold+0xd/0x380 [ 494.567485][ T8831] out_of_memory+0x340/0x14f0 [ 494.567504][ T8831] ? __pfx_out_of_memory+0x10/0x10 [ 494.567523][ T8831] mem_cgroup_out_of_memory+0xc6/0x130 [ 494.567538][ T8831] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 494.567551][ T8831] ? find_held_lock+0x2b/0x80 [ 494.567570][ T8831] ? do_raw_spin_unlock+0x145/0x1e0 [ 494.567586][ T8831] ? _raw_spin_unlock+0x28/0x50 [ 494.567604][ T8831] try_charge_memcg+0x783/0xf60 [ 494.567618][ T8831] ? __pfx_try_charge_memcg+0x10/0x10 [ 494.567635][ T8831] ? find_held_lock+0x2b/0x80 [ 494.567651][ T8831] ? rcu_read_unlock+0x17/0x60 [ 494.567661][ T8831] ? rcu_read_unlock+0x17/0x60 [ 494.567671][ T8831] ? find_held_lock+0x2b/0x80 [ 494.567688][ T8831] ? rcu_read_unlock+0x17/0x60 [ 494.567706][ T8831] charge_memcg+0x1ae/0x210 [ 494.567717][ T8831] __mem_cgroup_charge+0x2b/0x1c0 [ 494.567730][ T8831] shmem_alloc_and_add_folio+0x451/0xd40 [ 494.567750][ T8831] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 494.567770][ T8831] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 494.567791][ T8831] shmem_get_folio_gfp+0x75b/0x1980 [ 494.567812][ T8831] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 494.567831][ T8831] ? vm_normal_page+0x1d1/0x380 [ 494.567845][ T8831] ? __pfx_vm_normal_page+0x10/0x10 [ 494.567861][ T8831] shmem_write_begin+0x1a4/0x420 [ 494.567873][ T8831] ? __pfx_shmem_write_begin+0x10/0x10 [ 494.567885][ T8831] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 494.567900][ T8831] generic_perform_write+0x292/0xa40 [ 494.567914][ T8831] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 494.567931][ T8831] ? __pfx_generic_perform_write+0x10/0x10 [ 494.567947][ T8831] ? file_update_time_flags+0x38c/0x520 [ 494.567960][ T8831] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 494.567973][ T8831] shmem_file_write_iter+0x10e/0x140 [ 494.567987][ T8831] __kernel_write_iter+0x2ac/0x930 [ 494.568001][ T8831] ? __pfx___kernel_write_iter+0x10/0x10 [ 494.568014][ T8831] ? __up_read+0x333/0x980 [ 494.568030][ T8831] ? dump_user_range+0x65e/0xad0 [ 494.568046][ T8831] dump_user_range+0x3f9/0xad0 [ 494.568061][ T8831] ? __pfx_dump_user_range+0x10/0x10 [ 494.568079][ T8831] ? __pfx_writenote+0x10/0x10 [ 494.568092][ T8831] ? elf_core_dump+0x1f25/0x3d20 [ 494.568108][ T8831] elf_core_dump+0x2d68/0x3d20 [ 494.568129][ T8831] ? __pfx_elf_core_dump+0x10/0x10 [ 494.568142][ T8831] ? kasan_save_stack+0x3f/0x50 [ 494.568156][ T8831] ? kasan_save_stack+0x30/0x50 [ 494.568169][ T8831] ? kasan_save_track+0x14/0x30 [ 494.568182][ T8831] ? __kasan_kmalloc+0xaa/0xb0 [ 494.568195][ T8831] ? vfs_coredump+0x21f6/0x54a0 [ 494.568206][ T8831] ? get_signal+0x1f2a/0x21e0 [ 494.568218][ T8831] ? arch_do_signal_or_restart+0x91/0x7e0 [ 494.568238][ T8831] ? 0xffffffffff600000 [ 494.568264][ T8831] ? lock_acquire+0x1d1/0x380 [ 494.568276][ T8831] ? get_signal+0x1f2a/0x21e0 [ 494.568292][ T8831] ? vfs_coredump+0x281a/0x54a0 [ 494.568304][ T8831] vfs_coredump+0x281a/0x54a0 [ 494.568321][ T8831] ? __pfx_vfs_coredump+0x10/0x10 [ 494.568334][ T8831] ? __lock_acquire+0x5c0/0x1f40 [ 494.568350][ T8831] ? __lock_acquire+0x5c0/0x1f40 [ 494.568364][ T8831] ? lock_acquire+0x1d1/0x380 [ 494.568377][ T8831] ? unwind_next_frame+0xbd/0x2090 [ 494.568395][ T8831] ? lock_acquire+0x1d1/0x380 [ 494.568411][ T8831] ? bpf_ksym_find+0x128/0x1c0 [ 494.568422][ T8831] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 494.568438][ T8831] ? arch_stack_walk+0xa6/0xf0 [ 494.568457][ T8831] ? __sigqueue_free+0xbe/0x2a0 [ 494.568472][ T8831] ? stack_trace_save+0x8e/0xc0 [ 494.568483][ T8831] ? __pfx_stack_trace_save+0x10/0x10 [ 494.568495][ T8831] ? stack_depot_save_flags+0x27/0x9f0 [ 494.568511][ T8831] ? __lock_acquire+0x5c0/0x1f40 [ 494.568547][ T8831] ? proc_coredump_connector+0x2d3/0x4f0 [ 494.568559][ T8831] ? __pfx_proc_coredump_connector+0x10/0x10 [ 494.568574][ T8831] ? rcu_is_watching+0x13/0xc0 [ 494.568592][ T8831] get_signal+0x1f2a/0x21e0 [ 494.568610][ T8831] ? __pfx_get_signal+0x10/0x10 [ 494.568626][ T8831] arch_do_signal_or_restart+0x91/0x7e0 [ 494.568644][ T8831] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 494.568669][ T8831] irqentry_exit+0x402/0xa10 [ 494.568683][ T8831] asm_exc_page_fault+0x26/0x30 [ 494.568694][ T8831] RIP: 0033:0x7f771bb9e161 [ 494.568707][ T8831] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 494.568718][ T8831] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 494.568728][ T8831] RAX: 0000000000000000 RBX: 00007f771be26090 RCX: 00007f771bb9e159 [ 494.568735][ T8831] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 494.568742][ T8831] RBP: 00007f771bc3506b R08: 0000000000000000 R09: 0000000000000000 [ 494.568748][ T8831] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 494.568754][ T8831] R13: 00007f771be26128 R14: 00007f771be26090 R15: 00007ffe2e33ae88 [ 494.568769][ T8831] [ 494.568773][ T8831] memory: usage 307200kB, limit 307200kB, failcnt 27206 [ 494.568780][ T8831] memory+swap: usage 316160kB, limit 9007199254740988kB, failcnt 0 [ 494.568787][ T8831] kmem: usage 1704kB, limit 9007199254740988kB, failcnt 0 [ 494.568793][ T8831] Memory cgroup stats for /syz1: [ 494.568862][ T8831] cache 312455168 [ 494.568867][ T8831] rss 233472 [ 494.568871][ T8831] rss_huge 0 [ 494.568875][ T8831] shmem 312414208 [ 494.568879][ T8831] mapped_file 11755520 [ 494.568883][ T8831] dirty 0 [ 494.568886][ T8831] writeback 0 [ 494.568890][ T8831] workingset_refault_anon 60 [ 494.568894][ T8831] workingset_refault_file 5630 [ 494.568898][ T8831] swap 9175040 [ 494.568902][ T8831] swapcached 54358016 [ 494.568906][ T8831] pgpgin 831699 [ 494.568909][ T8831] pgpgout 755849 [ 494.568913][ T8831] pgfault 317165 [ 494.568917][ T8831] pgmajfault 55 [ 494.568921][ T8831] inactive_anon 253964288 [ 494.568925][ T8831] active_anon 58769408 [ 494.568929][ T8831] inactive_file 8192 [ 494.568933][ T8831] active_file 32768 [ 494.568937][ T8831] unevictable 0 [ 494.568941][ T8831] hierarchical_memory_limit 314572800 [ 494.568945][ T8831] hierarchical_memsw_limit 9223372036854771712 [ 494.568950][ T8831] total_cache 312455168 [ 494.568954][ T8831] total_rss 233472 [ 494.568958][ T8831] total_rss_huge 0 [ 494.568962][ T8831] total_shmem 312414208 [ 494.568966][ T8831] total_mapped_file 11755520 [ 494.568970][ T8831] total_dirty 0 [ 494.568974][ T8831] total_writeback 0 [ 494.568977][ T8831] total_workingset_refault_anon 60 [ 494.568982][ T8831] total_workingset_refault_file 5630 [ 494.568986][ T8831] total_swap 9175040 [ 494.568990][ T8831] total_swapcached 54358016 [ 494.568994][ T8831] total_pgpgin 831699 [ 494.568998][ T8831] total_pgpgout 755849 [ 494.569002][ T8831] total_pgfault 317165 [ 494.569006][ T8831] total_pgmajfault 55 [ 494.569010][ T8831] total_inactive_anon 253964288 [ 494.569014][ T8831] total_active_anon 58769408 [ 494.569018][ T8831] total_inactive_file 8192 [ 494.569022][ T8831] total_active_file 32768 [ 494.569026][ T8831] total_unevictable 0 [ 494.569030][ T8831] anon_cost 0 [ 494.569034][ T8831] file_cost 0 [ 494.569038][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.663,pid=8831,uid=0 [ 494.569088][ T8831] Memory cgroup out of memory: Killed process 8831 (syz.1.663) total-vm:104432kB, anon-rss:1444kB, file-rss:55100kB, shmem-rss:11480kB, UID:0 pgtables:232kB oom_score_adj:1000 [ 494.975269][ T30] audit: type=1400 audit(1790959350.015:919): avc: denied { create } for pid=8837 comm="syz.2.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 495.882906][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 495.882954][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 497.629738][ T8863] netlink: 'syz.2.667': attribute type 11 has an invalid length. [ 497.629791][ T8863] netlink: 220 bytes leftover after parsing attributes in process `syz.2.667'. [ 499.661937][ T8867] syz.2.669 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 499.661960][ T8867] CPU: 1 UID: 0 PID: 8867 Comm: syz.2.669 Tainted: G L syzkaller #0 PREEMPT(full) [ 499.661975][ T8867] Tainted: [L]=SOFTLOCKUP [ 499.661979][ T8867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 499.661985][ T8867] Call Trace: [ 499.661990][ T8867] [ 499.661995][ T8867] dump_stack_lvl+0x100/0x190 [ 499.662014][ T8867] dump_header+0xfb/0x606 [ 499.662028][ T8867] oom_kill_process.cold+0xd/0x380 [ 499.662042][ T8867] out_of_memory+0x340/0x14f0 [ 499.662061][ T8867] ? __pfx_out_of_memory+0x10/0x10 [ 499.662080][ T8867] mem_cgroup_out_of_memory+0xc6/0x130 [ 499.662095][ T8867] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 499.662108][ T8867] ? find_held_lock+0x2b/0x80 [ 499.662127][ T8867] ? do_raw_spin_unlock+0x145/0x1e0 [ 499.662143][ T8867] ? _raw_spin_unlock+0x28/0x50 [ 499.662165][ T8867] try_charge_memcg+0x783/0xf60 [ 499.662179][ T8867] ? __pfx_try_charge_memcg+0x10/0x10 [ 499.662196][ T8867] ? find_held_lock+0x2b/0x80 [ 499.662212][ T8867] ? rcu_read_unlock+0x17/0x60 [ 499.662223][ T8867] ? rcu_read_unlock+0x17/0x60 [ 499.662233][ T8867] ? find_held_lock+0x2b/0x80 [ 499.662250][ T8867] ? rcu_read_unlock+0x17/0x60 [ 499.662264][ T8867] charge_memcg+0x1ae/0x210 [ 499.662274][ T8867] __mem_cgroup_charge+0x2b/0x1c0 [ 499.662288][ T8867] shmem_alloc_and_add_folio+0x451/0xd40 [ 499.662309][ T8867] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 499.662328][ T8867] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 499.662350][ T8867] shmem_get_folio_gfp+0x75b/0x1980 [ 499.662371][ T8867] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 499.662390][ T8867] ? vm_normal_page+0x1d1/0x380 [ 499.662404][ T8867] ? __pfx_vm_normal_page+0x10/0x10 [ 499.662420][ T8867] shmem_write_begin+0x1a4/0x420 [ 499.662432][ T8867] ? __pfx_shmem_write_begin+0x10/0x10 [ 499.662444][ T8867] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 499.662458][ T8867] generic_perform_write+0x292/0xa40 [ 499.662473][ T8867] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 499.662490][ T8867] ? __pfx_generic_perform_write+0x10/0x10 [ 499.662506][ T8867] ? file_update_time_flags+0x38c/0x520 [ 499.662520][ T8867] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 499.662532][ T8867] shmem_file_write_iter+0x10e/0x140 [ 499.662546][ T8867] __kernel_write_iter+0x2ac/0x930 [ 499.662560][ T8867] ? __pfx___kernel_write_iter+0x10/0x10 [ 499.662573][ T8867] ? __up_read+0x333/0x980 [ 499.662589][ T8867] ? dump_user_range+0x65e/0xad0 [ 499.662605][ T8867] dump_user_range+0x3f9/0xad0 [ 499.662621][ T8867] ? __pfx_dump_user_range+0x10/0x10 [ 499.662638][ T8867] ? __pfx_writenote+0x10/0x10 [ 499.662651][ T8867] ? elf_core_dump+0x1f25/0x3d20 [ 499.662667][ T8867] elf_core_dump+0x2d68/0x3d20 [ 499.662688][ T8867] ? __pfx_elf_core_dump+0x10/0x10 [ 499.662701][ T8867] ? kasan_save_stack+0x3f/0x50 [ 499.662715][ T8867] ? kasan_save_stack+0x30/0x50 [ 499.662728][ T8867] ? kasan_save_track+0x14/0x30 [ 499.662741][ T8867] ? __kasan_kmalloc+0xaa/0xb0 [ 499.662754][ T8867] ? vfs_coredump+0x21f6/0x54a0 [ 499.662765][ T8867] ? get_signal+0x1f2a/0x21e0 [ 499.662776][ T8867] ? arch_do_signal_or_restart+0x91/0x7e0 [ 499.662796][ T8867] ? 0xffffffffff600000 [ 499.662821][ T8867] ? lock_acquire+0x1d1/0x380 [ 499.662834][ T8867] ? get_signal+0x1f2a/0x21e0 [ 499.662850][ T8867] ? vfs_coredump+0x281a/0x54a0 [ 499.662862][ T8867] vfs_coredump+0x281a/0x54a0 [ 499.662879][ T8867] ? __pfx_vfs_coredump+0x10/0x10 [ 499.662891][ T8867] ? __lock_acquire+0x5c0/0x1f40 [ 499.662907][ T8867] ? __lock_acquire+0x5c0/0x1f40 [ 499.662921][ T8867] ? lock_acquire+0x1d1/0x380 [ 499.662933][ T8867] ? unwind_next_frame+0xbd/0x2090 [ 499.662952][ T8867] ? lock_acquire+0x1d1/0x380 [ 499.662968][ T8867] ? bpf_ksym_find+0x128/0x1c0 [ 499.662978][ T8867] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 499.662995][ T8867] ? arch_stack_walk+0xa6/0xf0 [ 499.663013][ T8867] ? __sigqueue_free+0xbe/0x2a0 [ 499.663028][ T8867] ? stack_trace_save+0x8e/0xc0 [ 499.663039][ T8867] ? __pfx_stack_trace_save+0x10/0x10 [ 499.663051][ T8867] ? stack_depot_save_flags+0x27/0x9f0 [ 499.663066][ T8867] ? __lock_acquire+0x5c0/0x1f40 [ 499.663102][ T8867] ? proc_coredump_connector+0x2d3/0x4f0 [ 499.663114][ T8867] ? __pfx_proc_coredump_connector+0x10/0x10 [ 499.663129][ T8867] ? rcu_is_watching+0x13/0xc0 [ 499.663146][ T8867] get_signal+0x1f2a/0x21e0 [ 499.663170][ T8867] ? __pfx_get_signal+0x10/0x10 [ 499.663187][ T8867] arch_do_signal_or_restart+0x91/0x7e0 [ 499.663205][ T8867] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 499.663230][ T8867] irqentry_exit+0x402/0xa10 [ 499.663250][ T8867] asm_exc_page_fault+0x26/0x30 [ 499.663267][ T8867] RIP: 0033:0x7f707219e161 [ 499.663281][ T8867] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 499.663293][ T8867] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 499.663303][ T8867] RAX: 0000000000000000 RBX: 00007f7072426090 RCX: 00007f707219e159 [ 499.663310][ T8867] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 499.663316][ T8867] RBP: 00007f707223506b R08: 0000000000000000 R09: 0000000000000000 [ 499.663323][ T8867] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 499.663329][ T8867] R13: 00007f7072426128 R14: 00007f7072426090 R15: 00007ffe3afe11f8 [ 499.663344][ T8867] [ 499.663403][ T8867] memory: usage 307200kB, limit 307200kB, failcnt 66910 [ 499.663412][ T8867] memory+swap: usage 308248kB, limit 9007199254740988kB, failcnt 0 [ 499.663419][ T8867] kmem: usage 3080kB, limit 9007199254740988kB, failcnt 0 [ 499.663425][ T8867] Memory cgroup stats for /syz2: [ 499.663493][ T8867] cache 311050240 [ 499.663498][ T8867] rss 274432 [ 499.663502][ T8867] rss_huge 0 [ 499.663506][ T8867] shmem 311050240 [ 499.663510][ T8867] mapped_file 130342912 [ 499.663514][ T8867] dirty 0 [ 499.663517][ T8867] writeback 0 [ 499.663521][ T8867] workingset_refault_anon 18 [ 499.663525][ T8867] workingset_refault_file 5684 [ 499.663529][ T8867] swap 1073152 [ 499.663533][ T8867] swapcached 239616000 [ 499.663537][ T8867] pgpgin 776385 [ 499.663540][ T8867] pgpgout 700889 [ 499.663544][ T8867] pgfault 330348 [ 499.663548][ T8867] pgmajfault 40 [ 499.663551][ T8867] inactive_anon 4251648 [ 499.663555][ T8867] active_anon 307073024 [ 499.663559][ T8867] inactive_file 0 [ 499.663563][ T8867] active_file 0 [ 499.663567][ T8867] unevictable 0 [ 499.663571][ T8867] hierarchical_memory_limit 314572800 [ 499.663575][ T8867] hierarchical_memsw_limit 9223372036854771712 [ 499.663580][ T8867] total_cache 311050240 [ 499.663583][ T8867] total_rss 274432 [ 499.663587][ T8867] total_rss_huge 0 [ 499.663591][ T8867] total_shmem 311050240 [ 499.663595][ T8867] total_mapped_file 130342912 [ 499.663599][ T8867] total_dirty 0 [ 499.663603][ T8867] total_writeback 0 [ 499.663607][ T8867] total_workingset_refault_anon 18 [ 499.663611][ T8867] total_workingset_refault_file 5684 [ 499.663615][ T8867] total_swap 1073152 [ 499.663619][ T8867] total_swapcached 239616000 [ 499.663623][ T8867] total_pgpgin 776385 [ 499.663627][ T8867] total_pgpgout 700889 [ 499.663631][ T8867] total_pgfault 330348 [ 499.663635][ T8867] total_pgmajfault 40 [ 499.663639][ T8867] total_inactive_anon 4251648 [ 499.663643][ T8867] total_active_anon 307073024 [ 499.663647][ T8867] total_inactive_file 0 [ 499.663651][ T8867] total_active_file 0 [ 499.663655][ T8867] total_unevictable 0 [ 499.663659][ T8867] anon_cost 0 [ 499.663663][ T8867] file_cost 0 [ 499.663667][ T8867] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.573,pid=8490,uid=0 [ 499.663716][ T8867] Memory cgroup out of memory: Killed process 8490 (syz.2.573) total-vm:200692kB, anon-rss:1276kB, file-rss:20548kB, shmem-rss:125412kB, UID:0 pgtables:368kB oom_score_adj:1000 [ 500.597710][ T8867] syz.2.669 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 500.597730][ T8867] CPU: 1 UID: 0 PID: 8867 Comm: syz.2.669 Tainted: G L syzkaller #0 PREEMPT(full) [ 500.597745][ T8867] Tainted: [L]=SOFTLOCKUP [ 500.597749][ T8867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 500.597756][ T8867] Call Trace: [ 500.597760][ T8867] [ 500.597765][ T8867] dump_stack_lvl+0x100/0x190 [ 500.597784][ T8867] dump_header+0xfb/0x606 [ 500.597798][ T8867] oom_kill_process.cold+0xd/0x380 [ 500.597812][ T8867] out_of_memory+0x340/0x14f0 [ 500.597831][ T8867] ? __pfx_out_of_memory+0x10/0x10 [ 500.597850][ T8867] mem_cgroup_out_of_memory+0xc6/0x130 [ 500.597865][ T8867] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 500.597877][ T8867] ? find_held_lock+0x2b/0x80 [ 500.597897][ T8867] ? do_raw_spin_unlock+0x145/0x1e0 [ 500.597913][ T8867] ? _raw_spin_unlock+0x28/0x50 [ 500.597931][ T8867] try_charge_memcg+0x783/0xf60 [ 500.597945][ T8867] ? __pfx_try_charge_memcg+0x10/0x10 [ 500.597962][ T8867] ? find_held_lock+0x2b/0x80 [ 500.597978][ T8867] ? rcu_read_unlock+0x17/0x60 [ 500.597988][ T8867] ? rcu_read_unlock+0x17/0x60 [ 500.597998][ T8867] ? find_held_lock+0x2b/0x80 [ 500.598015][ T8867] ? rcu_read_unlock+0x17/0x60 [ 500.598028][ T8867] charge_memcg+0x1ae/0x210 [ 500.598041][ T8867] __mem_cgroup_charge+0x2b/0x1c0 [ 500.598061][ T8867] shmem_alloc_and_add_folio+0x451/0xd40 [ 500.598085][ T8867] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 500.598105][ T8867] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 500.598126][ T8867] shmem_get_folio_gfp+0x75b/0x1980 [ 500.598147][ T8867] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 500.598170][ T8867] ? vm_normal_page+0x1d1/0x380 [ 500.598184][ T8867] ? __pfx_vm_normal_page+0x10/0x10 [ 500.598200][ T8867] shmem_write_begin+0x1a4/0x420 [ 500.598212][ T8867] ? __pfx_shmem_write_begin+0x10/0x10 [ 500.598223][ T8867] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 500.598238][ T8867] generic_perform_write+0x292/0xa40 [ 500.598253][ T8867] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 500.598270][ T8867] ? __pfx_generic_perform_write+0x10/0x10 [ 500.598286][ T8867] ? file_update_time_flags+0x38c/0x520 [ 500.598299][ T8867] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 500.598311][ T8867] shmem_file_write_iter+0x10e/0x140 [ 500.598325][ T8867] __kernel_write_iter+0x2ac/0x930 [ 500.598339][ T8867] ? __pfx___kernel_write_iter+0x10/0x10 [ 500.598352][ T8867] ? __up_read+0x333/0x980 [ 500.598367][ T8867] ? dump_user_range+0x65e/0xad0 [ 500.598384][ T8867] dump_user_range+0x3f9/0xad0 [ 500.598399][ T8867] ? __pfx_dump_user_range+0x10/0x10 [ 500.598416][ T8867] ? __pfx_writenote+0x10/0x10 [ 500.598430][ T8867] ? elf_core_dump+0x1f25/0x3d20 [ 500.598445][ T8867] elf_core_dump+0x2d68/0x3d20 [ 500.598466][ T8867] ? __pfx_elf_core_dump+0x10/0x10 [ 500.598479][ T8867] ? kasan_save_stack+0x3f/0x50 [ 500.598492][ T8867] ? kasan_save_stack+0x30/0x50 [ 500.598505][ T8867] ? kasan_save_track+0x14/0x30 [ 500.598518][ T8867] ? __kasan_kmalloc+0xaa/0xb0 [ 500.598531][ T8867] ? vfs_coredump+0x21f6/0x54a0 [ 500.598543][ T8867] ? get_signal+0x1f2a/0x21e0 [ 500.598554][ T8867] ? arch_do_signal_or_restart+0x91/0x7e0 [ 500.598573][ T8867] ? 0xffffffffff600000 [ 500.598598][ T8867] ? lock_acquire+0x1d1/0x380 [ 500.598611][ T8867] ? get_signal+0x1f2a/0x21e0 [ 500.598627][ T8867] ? vfs_coredump+0x281a/0x54a0 [ 500.598639][ T8867] vfs_coredump+0x281a/0x54a0 [ 500.598658][ T8867] ? __pfx_vfs_coredump+0x10/0x10 [ 500.598671][ T8867] ? __lock_acquire+0x5c0/0x1f40 [ 500.598687][ T8867] ? __lock_acquire+0x5c0/0x1f40 [ 500.598701][ T8867] ? lock_acquire+0x1d1/0x380 [ 500.598713][ T8867] ? unwind_next_frame+0xbd/0x2090 [ 500.598731][ T8867] ? lock_acquire+0x1d1/0x380 [ 500.598747][ T8867] ? bpf_ksym_find+0x128/0x1c0 [ 500.598757][ T8867] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 500.598774][ T8867] ? arch_stack_walk+0xa6/0xf0 [ 500.598792][ T8867] ? __sigqueue_free+0xbe/0x2a0 [ 500.598807][ T8867] ? stack_trace_save+0x8e/0xc0 [ 500.598818][ T8867] ? __pfx_stack_trace_save+0x10/0x10 [ 500.598830][ T8867] ? stack_depot_save_flags+0x27/0x9f0 [ 500.598845][ T8867] ? __lock_acquire+0x5c0/0x1f40 [ 500.598881][ T8867] ? proc_coredump_connector+0x2d3/0x4f0 [ 500.598893][ T8867] ? __pfx_proc_coredump_connector+0x10/0x10 [ 500.598908][ T8867] ? rcu_is_watching+0x13/0xc0 [ 500.598926][ T8867] get_signal+0x1f2a/0x21e0 [ 500.598943][ T8867] ? __pfx_get_signal+0x10/0x10 [ 500.598960][ T8867] arch_do_signal_or_restart+0x91/0x7e0 [ 500.598977][ T8867] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 500.599002][ T8867] irqentry_exit+0x402/0xa10 [ 500.599016][ T8867] asm_exc_page_fault+0x26/0x30 [ 500.599026][ T8867] RIP: 0033:0x7f707219e161 [ 500.599035][ T8867] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 500.599050][ T8867] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 500.599064][ T8867] RAX: 0000000000000000 RBX: 00007f7072426090 RCX: 00007f707219e159 [ 500.599073][ T8867] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 500.599080][ T8867] RBP: 00007f707223506b R08: 0000000000000000 R09: 0000000000000000 [ 500.599086][ T8867] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 500.599092][ T8867] R13: 00007f7072426128 R14: 00007f7072426090 R15: 00007ffe3afe11f8 [ 500.599107][ T8867] [ 500.599111][ T8867] memory: usage 307200kB, limit 307200kB, failcnt 70108 [ 500.599118][ T8867] memory+swap: usage 308248kB, limit 9007199254740988kB, failcnt 0 [ 500.599124][ T8867] kmem: usage 3080kB, limit 9007199254740988kB, failcnt 0 [ 500.599131][ T8867] Memory cgroup stats for /syz2: [ 500.599202][ T8867] cache 311140352 [ 500.599207][ T8867] rss 278528 [ 500.599210][ T8867] rss_huge 0 [ 500.599214][ T8867] shmem 311140352 [ 500.599218][ T8867] mapped_file 125583360 [ 500.599221][ T8867] dirty 0 [ 500.599225][ T8867] writeback 0 [ 500.599229][ T8867] workingset_refault_anon 18 [ 500.599233][ T8867] workingset_refault_file 5684 [ 500.599237][ T8867] swap 1073152 [ 500.599241][ T8867] swapcached 239616000 [ 500.599244][ T8867] pgpgin 776408 [ 500.599248][ T8867] pgpgout 700889 [ 500.599252][ T8867] pgfault 330351 [ 500.599255][ T8867] pgmajfault 40 [ 500.599259][ T8867] inactive_anon 4251648 [ 500.599263][ T8867] active_anon 307167232 [ 500.599267][ T8867] inactive_file 0 [ 500.599270][ T8867] active_file 0 [ 500.599274][ T8867] unevictable 0 [ 500.599277][ T8867] hierarchical_memory_limit 314572800 [ 500.599282][ T8867] hierarchical_memsw_limit 9223372036854771712 [ 500.599286][ T8867] total_cache 311140352 [ 500.599290][ T8867] total_rss 278528 [ 500.599294][ T8867] total_rss_huge 0 [ 500.599298][ T8867] total_shmem 311140352 [ 500.599301][ T8867] total_mapped_file 125583360 [ 500.599306][ T8867] total_dirty 0 [ 500.599309][ T8867] total_writeback 0 [ 500.599313][ T8867] total_workingset_refault_anon 18 [ 500.599317][ T8867] total_workingset_refault_file 5684 [ 500.599321][ T8867] total_swap 1073152 [ 500.599325][ T8867] total_swapcached 239616000 [ 500.599329][ T8867] total_pgpgin 776408 [ 500.599333][ T8867] total_pgpgout 700889 [ 500.599337][ T8867] total_pgfault 330351 [ 500.599341][ T8867] total_pgmajfault 40 [ 500.599345][ T8867] total_inactive_anon 4251648 [ 500.599349][ T8867] total_active_anon 307167232 [ 500.599353][ T8867] total_inactive_file 0 [ 500.599357][ T8867] total_active_file 0 [ 500.599361][ T8867] total_unevictable 0 [ 500.599365][ T8867] anon_cost 0 [ 500.599368][ T8867] file_cost 0 [ 500.599372][ T8867] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.669,pid=8867,uid=0 [ 500.599421][ T8867] Memory cgroup out of memory: Killed process 8867 (syz.2.669) total-vm:104432kB, anon-rss:1432kB, file-rss:54900kB, shmem-rss:1940kB, UID:0 pgtables:232kB oom_score_adj:1000 [ 500.846286][ T8871] netlink: 'syz.6.658': attribute type 11 has an invalid length. [ 500.846311][ T8871] netlink: 220 bytes leftover after parsing attributes in process `syz.6.658'. [ 502.510449][ T8876] syz.2.670 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 502.510474][ T8876] CPU: 1 UID: 0 PID: 8876 Comm: syz.2.670 Tainted: G L syzkaller #0 PREEMPT(full) [ 502.510489][ T8876] Tainted: [L]=SOFTLOCKUP [ 502.510493][ T8876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 502.510499][ T8876] Call Trace: [ 502.510503][ T8876] [ 502.510508][ T8876] dump_stack_lvl+0x100/0x190 [ 502.510528][ T8876] dump_header+0xfb/0x606 [ 502.510542][ T8876] oom_kill_process.cold+0xd/0x380 [ 502.510556][ T8876] out_of_memory+0x340/0x14f0 [ 502.510575][ T8876] ? __pfx_out_of_memory+0x10/0x10 [ 502.510594][ T8876] mem_cgroup_out_of_memory+0xc6/0x130 [ 502.510608][ T8876] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 502.510621][ T8876] ? find_held_lock+0x2b/0x80 [ 502.510641][ T8876] ? do_raw_spin_unlock+0x145/0x1e0 [ 502.510656][ T8876] ? _raw_spin_unlock+0x28/0x50 [ 502.510674][ T8876] try_charge_memcg+0x783/0xf60 [ 502.510688][ T8876] ? __pfx_try_charge_memcg+0x10/0x10 [ 502.510705][ T8876] ? find_held_lock+0x2b/0x80 [ 502.510721][ T8876] ? rcu_read_unlock+0x17/0x60 [ 502.510732][ T8876] ? rcu_read_unlock+0x17/0x60 [ 502.510742][ T8876] ? find_held_lock+0x2b/0x80 [ 502.510759][ T8876] ? rcu_read_unlock+0x17/0x60 [ 502.510773][ T8876] charge_memcg+0x1ae/0x210 [ 502.510783][ T8876] __mem_cgroup_charge+0x2b/0x1c0 [ 502.510796][ T8876] shmem_alloc_and_add_folio+0x451/0xd40 [ 502.510818][ T8876] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 502.510837][ T8876] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 502.510856][ T8876] ? __lock_acquire+0x5c0/0x1f40 [ 502.510870][ T8876] shmem_get_folio_gfp+0x75b/0x1980 [ 502.510891][ T8876] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 502.510908][ T8876] ? inode_set_ctime_current+0x9c/0x850 [ 502.510925][ T8876] ? find_held_lock+0x2b/0x80 [ 502.510943][ T8876] ? timestamp_truncate+0x22e/0x2f0 [ 502.510961][ T8876] shmem_write_begin+0x1a4/0x420 [ 502.510973][ T8876] ? __pfx_shmem_write_begin+0x10/0x10 [ 502.510984][ T8876] ? inode_set_ctime_current+0x283/0x850 [ 502.511001][ T8876] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 502.511013][ T8876] ? inode_maybe_inc_iversion+0x169/0x220 [ 502.511029][ T8876] generic_perform_write+0x292/0xa40 [ 502.511044][ T8876] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 502.511061][ T8876] ? __pfx_generic_perform_write+0x10/0x10 [ 502.511076][ T8876] ? mnt_put_write_access_file+0x4e/0x100 [ 502.511093][ T8876] ? file_update_time_flags+0x38c/0x520 [ 502.511105][ T8876] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 502.511117][ T8876] shmem_file_write_iter+0x10e/0x140 [ 502.511131][ T8876] __kernel_write_iter+0x2ac/0x930 [ 502.511150][ T8876] ? __pfx___kernel_write_iter+0x10/0x10 [ 502.511163][ T8876] ? __up_read+0x333/0x980 [ 502.511179][ T8876] ? dump_user_range+0x65e/0xad0 [ 502.511195][ T8876] dump_user_range+0x3f9/0xad0 [ 502.511211][ T8876] ? __pfx_dump_user_range+0x10/0x10 [ 502.511228][ T8876] ? __pfx_writenote+0x10/0x10 [ 502.511241][ T8876] ? elf_core_dump+0x1f25/0x3d20 [ 502.511257][ T8876] elf_core_dump+0x2d68/0x3d20 [ 502.511278][ T8876] ? __pfx_elf_core_dump+0x10/0x10 [ 502.511291][ T8876] ? kasan_save_stack+0x3f/0x50 [ 502.511304][ T8876] ? kasan_save_stack+0x30/0x50 [ 502.511317][ T8876] ? kasan_save_track+0x14/0x30 [ 502.511330][ T8876] ? __kasan_kmalloc+0xaa/0xb0 [ 502.511343][ T8876] ? vfs_coredump+0x21f6/0x54a0 [ 502.511355][ T8876] ? get_signal+0x1f2a/0x21e0 [ 502.511366][ T8876] ? arch_do_signal_or_restart+0x91/0x7e0 [ 502.511386][ T8876] ? 0xffffffffff600000 [ 502.511412][ T8876] ? lock_acquire+0x1d1/0x380 [ 502.511424][ T8876] ? get_signal+0x1f2a/0x21e0 [ 502.511440][ T8876] ? vfs_coredump+0x281a/0x54a0 [ 502.511452][ T8876] vfs_coredump+0x281a/0x54a0 [ 502.511469][ T8876] ? __pfx_vfs_coredump+0x10/0x10 [ 502.511482][ T8876] ? __lock_acquire+0x5c0/0x1f40 [ 502.511498][ T8876] ? __lock_acquire+0x5c0/0x1f40 [ 502.511512][ T8876] ? lock_acquire+0x1d1/0x380 [ 502.511524][ T8876] ? unwind_next_frame+0xbd/0x2090 [ 502.511542][ T8876] ? lock_acquire+0x1d1/0x380 [ 502.511558][ T8876] ? bpf_ksym_find+0x128/0x1c0 [ 502.511569][ T8876] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 502.511585][ T8876] ? arch_stack_walk+0xa6/0xf0 [ 502.511604][ T8876] ? __sigqueue_free+0xbe/0x2a0 [ 502.511619][ T8876] ? stack_trace_save+0x8e/0xc0 [ 502.511629][ T8876] ? __pfx_stack_trace_save+0x10/0x10 [ 502.511641][ T8876] ? stack_depot_save_flags+0x27/0x9f0 [ 502.511658][ T8876] ? __lock_acquire+0x5c0/0x1f40 [ 502.511693][ T8876] ? proc_coredump_connector+0x2d3/0x4f0 [ 502.511705][ T8876] ? __pfx_proc_coredump_connector+0x10/0x10 [ 502.511720][ T8876] ? rcu_is_watching+0x13/0xc0 [ 502.511738][ T8876] get_signal+0x1f2a/0x21e0 [ 502.511756][ T8876] ? __pfx_get_signal+0x10/0x10 [ 502.511772][ T8876] arch_do_signal_or_restart+0x91/0x7e0 [ 502.511790][ T8876] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 502.511815][ T8876] irqentry_exit+0x402/0xa10 [ 502.511829][ T8876] asm_exc_page_fault+0x26/0x30 [ 502.511839][ T8876] RIP: 0033:0x7f707219e161 [ 502.511849][ T8876] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 502.511859][ T8876] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 502.511869][ T8876] RAX: 0000000000000000 RBX: 00007f7072426090 RCX: 00007f707219e159 [ 502.511876][ T8876] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 502.511882][ T8876] RBP: 00007f707223506b R08: 0000000000000000 R09: 0000000000000000 [ 502.511888][ T8876] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 502.511895][ T8876] R13: 00007f7072426128 R14: 00007f7072426090 R15: 00007ffe3afe11f8 [ 502.511909][ T8876] [ 502.511913][ T8876] memory: usage 307200kB, limit 307200kB, failcnt 75618 [ 502.511920][ T8876] memory+swap: usage 308232kB, limit 9007199254740988kB, failcnt 0 [ 502.511927][ T8876] kmem: usage 3120kB, limit 9007199254740988kB, failcnt 0 [ 502.511933][ T8876] Memory cgroup stats for /syz2: [ 502.512001][ T8876] cache 311054336 [ 502.512006][ T8876] rss 249856 [ 502.512010][ T8876] rss_huge 0 [ 502.512013][ T8876] shmem 311025664 [ 502.512017][ T8876] mapped_file 62984192 [ 502.512021][ T8876] dirty 0 [ 502.512025][ T8876] writeback 0 [ 502.512029][ T8876] workingset_refault_anon 18 [ 502.512033][ T8876] workingset_refault_file 11002 [ 502.512037][ T8876] swap 1056768 [ 502.512041][ T8876] swapcached 239726592 [ 502.512044][ T8876] pgpgin 795056 [ 502.512048][ T8876] pgpgout 719564 [ 502.512052][ T8876] pgfault 334111 [ 502.512055][ T8876] pgmajfault 108 [ 502.512059][ T8876] inactive_anon 258027520 [ 502.512063][ T8876] active_anon 53252096 [ 502.512067][ T8876] inactive_file 0 [ 502.512071][ T8876] active_file 4096 [ 502.512075][ T8876] unevictable 0 [ 502.512078][ T8876] hierarchical_memory_limit 314572800 [ 502.512083][ T8876] hierarchical_memsw_limit 9223372036854771712 [ 502.512087][ T8876] total_cache 311054336 [ 502.512091][ T8876] total_rss 249856 [ 502.512095][ T8876] total_rss_huge 0 [ 502.512099][ T8876] total_shmem 311025664 [ 502.512102][ T8876] total_mapped_file 62984192 [ 502.512106][ T8876] total_dirty 0 [ 502.512110][ T8876] total_writeback 0 [ 502.512114][ T8876] total_workingset_refault_anon 18 [ 502.512118][ T8876] total_workingset_refault_file 11002 [ 502.512123][ T8876] total_swap 1056768 [ 502.512127][ T8876] total_swapcached 239726592 [ 502.512131][ T8876] total_pgpgin 795056 [ 502.512138][ T8876] total_pgpgout 719564 [ 502.512143][ T8876] total_pgfault 334111 [ 502.512147][ T8876] total_pgmajfault 108 [ 502.512150][ T8876] total_inactive_anon 258027520 [ 502.512155][ T8876] total_active_anon 53252096 [ 502.512159][ T8876] total_inactive_file 0 [ 502.512162][ T8876] total_active_file 4096 [ 502.512166][ T8876] total_unevictable 0 [ 502.512170][ T8876] anon_cost 0 [ 502.512174][ T8876] file_cost 0 [ 502.512178][ T8876] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.670,pid=8876,uid=0 [ 502.512227][ T8876] Memory cgroup out of memory: Killed process 8876 (syz.2.670) total-vm:104432kB, anon-rss:1316kB, file-rss:54364kB, shmem-rss:0kB, UID:0 pgtables:216kB oom_score_adj:1000 [ 502.584012][ T32] oom_reaper: reaped process 8490 (syz.2.573), now anon-rss:0kB, file-rss:20480kB, shmem-rss:50004kB [ 504.265836][ T1171] rpcbind: server 127.0.0.1 not responding, timed out [ 504.905563][ T8889] No source specified [ 505.743214][ T5704] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 505.896657][ T5704] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 505.898777][ T5704] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 505.898800][ T5704] usb 7-1: config 0 has no interface number 0 [ 505.898831][ T5704] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 505.941223][ T5704] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.941247][ T5704] usb 7-1: Product: syz [ 505.941261][ T5704] usb 7-1: Manufacturer: syz [ 505.941274][ T5704] usb 7-1: SerialNumber: syz [ 506.002549][ T5704] usb 7-1: config 0 descriptor?? [ 506.071489][ T5704] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 506.733209][ T30] audit: type=1400 audit(1790959361.736:920): avc: denied { append } for pid=8882 comm="syz.6.673" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 506.733402][ T30] audit: type=1400 audit(1790959361.746:921): avc: denied { ioctl } for pid=8882 comm="syz.6.673" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 506.895829][ T30] audit: type=1400 audit(1790959361.936:922): avc: denied { name_bind } for pid=8902 comm="syz.5.675" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 506.896774][ T30] audit: type=1400 audit(1790959361.936:923): avc: denied { node_bind } for pid=8902 comm="syz.5.675" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 508.271755][ T10] usb 7-1: USB disconnect, device number 2 [ 509.385283][ T10] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 511.271446][ T8928] input: syz1 as /devices/virtual/input/input14 [ 511.929816][ T8933] MINIX-fs: unable to read superblock [ 512.620387][ T8937] netlink: 8 bytes leftover after parsing attributes in process `syz.6.682'. [ 512.620436][ T8937] netlink: 4 bytes leftover after parsing attributes in process `syz.6.682'. [ 512.620531][ T8937] netlink: 'syz.6.682': attribute type 14 has an invalid length. [ 512.620564][ T8937] netlink: 'syz.6.682': attribute type 12 has an invalid length. [ 513.066585][ T8940] : renamed from bond_slave_0 (while UP) [ 514.464586][ T8952] netlink: 'syz.0.686': attribute type 11 has an invalid length. [ 514.464615][ T8952] netlink: 220 bytes leftover after parsing attributes in process `syz.0.686'. [ 515.313367][ T8957] fuse: Bad value for 'rootmode' [ 515.698316][ T8957] orangefs_mount: mount request failed with -4 [ 517.422391][ T30] audit: type=1400 audit(1790959372.397:924): avc: denied { create } for pid=8978 comm="syz.0.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 517.737525][ T5704] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 517.849178][ T30] audit: type=1400 audit(1790959372.887:925): avc: denied { write } for pid=8978 comm="syz.0.696" name="loop2" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 517.891777][ T8983] loop2: detected capacity change from 0 to 2640 [ 517.969108][ T8983] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 517.969211][ T8983] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 517.969289][ T8983] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 517.969363][ T8983] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 517.969476][ T8983] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 517.969561][ T8983] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 517.969629][ T8983] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 517.969724][ T8983] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 517.969802][ T8983] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 517.970017][ T8983] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 517.982972][ T5704] usb 2-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 517.996098][ T5704] usb 2-1: config 0 has an invalid interface number: 6 but max is 0 [ 517.996118][ T5704] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.996134][ T5704] usb 2-1: config 0 has no interface number 0 [ 517.996162][ T5704] usb 2-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 517.996184][ T5704] usb 2-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 65054, setting to 64 [ 518.263397][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.263419][ T5704] usb 2-1: Product: syz [ 518.263433][ T5704] usb 2-1: Manufacturer: syz [ 518.263447][ T5704] usb 2-1: SerialNumber: syz [ 518.427627][ T5704] usb 2-1: config 0 descriptor?? [ 518.484167][ T8973] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 518.484352][ T8973] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 519.817050][ T5704] comedi comedi4: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 519.843492][ T5704] usb 2-1: USB disconnect, device number 7 [ 521.777937][ T9000] fuse: Bad value for 'rootmode' [ 521.859601][ T9003] fuse: Invalid rootmode [ 522.612506][ T9000] orangefs_mount: mount request failed with -4 [ 522.691443][ T9003] orangefs_mount: mount request failed with -4 [ 524.992258][ T30] audit: type=1400 audit(1790959379.947:926): avc: denied { mount } for pid=9023 comm="syz.1.708" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 524.992307][ T30] audit: type=1400 audit(1790959379.967:927): avc: denied { map } for pid=9023 comm="syz.1.708" path="/158/dev/sda" dev="devtmpfs" ino=1116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 529.797151][ T9053] fuse: Invalid rootmode [ 530.621611][ T9053] orangefs_mount: mount request failed with -4 [ 532.274223][ T1171] IPVS: starting estimator thread 0... [ 532.357402][ T30] audit: type=1400 audit(1790959387.398:928): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 532.383814][ T9066] IPVS: using max 75 ests per chain, 180000 per kthread [ 532.625307][ T30] audit: type=1400 audit(1790959387.668:929): avc: denied { listen } for pid=9067 comm="syz.6.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 533.389503][ T9079] netlink: 'syz.5.720': attribute type 1 has an invalid length. [ 533.389550][ T9079] netlink: 224 bytes leftover after parsing attributes in process `syz.5.720'. [ 535.494143][ T30] audit: type=1400 audit(1790959390.538:930): avc: denied { create } for pid=9070 comm="syz.1.709" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 535.637100][ T9091] netlink: 'syz.0.711': attribute type 11 has an invalid length. [ 535.637118][ T9091] netlink: 220 bytes leftover after parsing attributes in process `syz.0.711'. [ 537.473649][ T9101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.480393][ T9101] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.917147][ T9101] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 537.917164][ T9101] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 537.919297][ T9101] veth1_vlan: left promiscuous mode [ 537.919779][ T9101] veth0_vlan: left promiscuous mode [ 537.920473][ T9101] veth0_vlan: entered promiscuous mode [ 537.921559][ T9101] veth1_vlan: entered promiscuous mode [ 537.923662][ T9101] veth1_macvtap: left promiscuous mode [ 537.924143][ T9101] veth0_macvtap: left promiscuous mode [ 537.924616][ T9101] veth0_macvtap: entered promiscuous mode [ 537.925068][ T9101] veth1_macvtap: entered promiscuous mode [ 537.928005][ T9101] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 537.928957][ T9101] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 537.929768][ T9101] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 537.930277][ T9101] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 537.931814][ T9101] 8021q: adding VLAN 0 to HW filter on device bond1 [ 538.019965][ T81] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.132002][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.132092][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.161709][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.161781][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.431903][ T1171] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.553673][ T9108] No source specified [ 538.720949][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.378639][ T9111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.729'. [ 539.378688][ T9111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.729'. [ 539.378781][ T9111] netlink: 'syz.1.729': attribute type 14 has an invalid length. [ 539.378812][ T9111] netlink: 'syz.1.729': attribute type 12 has an invalid length. [ 539.746886][ T6009] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.727717][ T9123] netlink: 'syz.2.734': attribute type 1 has an invalid length. [ 540.727764][ T9123] netlink: 224 bytes leftover after parsing attributes in process `syz.2.734'. [ 542.482090][ T9131] netlink: 'syz.2.736': attribute type 11 has an invalid length. [ 542.482118][ T9131] netlink: 220 bytes leftover after parsing attributes in process `syz.2.736'. [ 544.639765][ T9133] netlink: 'syz.1.737': attribute type 11 has an invalid length. [ 544.639841][ T9133] netlink: 220 bytes leftover after parsing attributes in process `syz.1.737'. [ 547.245009][ T9147] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 547.250811][ T9147] qnx6: wrong signature (magic) in superblock #1. [ 547.250861][ T9147] qnx6: unable to read the first superblock [ 548.101505][ T9154] No source specified [ 550.850610][ T9173] netlink: 'syz.0.746': attribute type 1 has an invalid length. [ 550.850664][ T9173] netlink: 224 bytes leftover after parsing attributes in process `syz.0.746'. [ 552.860475][ T30] audit: type=1400 audit(1790959407.539:931): avc: denied { append } for pid=9176 comm="syz.0.748" name="uprobe_events" dev="tracefs" ino=1061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 552.968654][ T9183] netlink: 'syz.1.749': attribute type 11 has an invalid length. [ 552.968683][ T9183] netlink: 220 bytes leftover after parsing attributes in process `syz.1.749'. [ 553.402040][ T9188] Bluetooth: MGMT ver 1.23 [ 553.490379][ T30] audit: type=1400 audit(1790959408.439:932): avc: denied { bind } for pid=9185 comm="syz.6.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 553.490597][ T30] audit: type=1400 audit(1790959408.449:933): avc: denied { write } for pid=9185 comm="syz.6.750" path="socket:[22135]" dev="sockfs" ino=22135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 557.285639][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.285687][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.332137][ T9206] xt_policy: output policy not valid in PREROUTING and INPUT [ 557.521915][ T9211] netlink: 'syz.5.741': attribute type 11 has an invalid length. [ 557.521939][ T9211] netlink: 220 bytes leftover after parsing attributes in process `syz.5.741'. [ 560.089929][ T9230] netlink: 'syz.5.758': attribute type 1 has an invalid length. [ 560.089944][ T9230] netlink: 224 bytes leftover after parsing attributes in process `syz.5.758'. [ 560.541962][ T9238] No source specified [ 563.364467][ T30] audit: type=1400 audit(1790959418.409:934): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 564.240204][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 564.477281][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 564.920058][ T9263] ip6gre1: entered allmulticast mode [ 564.926460][ T1171] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 566.338260][ T9268] netlink: 'syz.0.768': attribute type 11 has an invalid length. [ 566.340238][ T9268] netlink: 220 bytes leftover after parsing attributes in process `syz.0.768'. [ 567.120319][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 567.120345][ T9] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 567.121089][ T9] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 567.121119][ T9] usb 6-1: can't read configurations, error -71 [ 567.397280][ T5690] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 567.541582][ T5690] usb 7-1: Using ep0 maxpacket: 8 [ 567.581448][ T9280] No source specified [ 567.599517][ T5690] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 567.609024][ T5690] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 567.609104][ T5690] usb 7-1: config 0 has no interface number 0 [ 567.633677][ T5690] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 567.633896][ T5690] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.160299][ T5690] usb 7-1: config 0 descriptor?? [ 568.612771][ T30] audit: type=1400 audit(1790959423.650:935): avc: denied { ioctl } for pid=9269 comm="syz.6.769" path="socket:[22668]" dev="sockfs" ino=22668 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 568.616723][ T30] audit: type=1400 audit(1790959423.650:936): avc: denied { map } for pid=9269 comm="syz.6.769" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 568.696033][ T5690] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 568.998276][ T190] usb 7-1: USB disconnect, device number 3 [ 569.119482][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 569.194615][ T30] audit: type=1400 audit(1790959424.230:937): avc: denied { setopt } for pid=9285 comm="syz.0.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 571.474274][ T9300] ubi0: attaching mtd0 [ 571.487001][ T9300] ubi0: scanning is finished [ 571.487030][ T9300] ubi0: empty MTD device detected [ 571.859288][ T190] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 571.975455][ T9300] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 571.975470][ T9300] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 571.975480][ T9300] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 571.975488][ T9300] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 571.975497][ T9300] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 571.975505][ T9300] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 571.975514][ T9300] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1721878813 [ 571.975525][ T9300] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 571.975961][ T9303] ubi0: background thread "ubi_bgt0d" started, PID 9303 [ 572.059561][ T190] usb 3-1: not running at top speed; connect to a high speed hub [ 572.059661][ T190] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 572.064171][ T190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.285196][ T9304] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 573.103842][ T190] cyberjack 3-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 576.649575][ T190] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 576.663101][ T190] usb 3-1: USB disconnect, device number 6 [ 577.011637][ T190] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 577.012226][ T190] cyberjack 3-1:1.0: device disconnected [ 577.761044][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 579.073652][ T30] audit: type=1400 audit(1790959434.110:938): avc: denied { execute } for pid=9318 comm="syz.6.780" dev="tmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 579.111770][ T30] audit: type=1400 audit(1790959434.110:939): avc: denied { execute_no_trans } for pid=9318 comm="syz.6.780" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 580.457924][ T9342] No source specified [ 581.218730][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 581.369890][ T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 581.371469][ T9] usb 2-1: config 0 has no interfaces? [ 581.395332][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.395379][ T9] usb 2-1: Product: syz [ 581.395454][ T9] usb 2-1: Manufacturer: syz [ 581.395526][ T9] usb 2-1: SerialNumber: syz [ 581.438076][ T9] usb 2-1: config 0 descriptor?? [ 581.457209][ T9347] netlink: 'syz.5.786': attribute type 11 has an invalid length. [ 581.457247][ T9347] netlink: 220 bytes leftover after parsing attributes in process `syz.5.786'. [ 583.539154][ T30] audit: type=1400 audit(1790959438.580:940): avc: denied { read write } for pid=9335 comm="syz.1.784" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 583.540677][ T30] audit: type=1400 audit(1790959438.580:941): avc: denied { open } for pid=9335 comm="syz.1.784" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 583.793820][ T30] audit: type=1400 audit(1790959438.830:942): avc: denied { read } for pid=9354 comm="syz.5.789" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 583.793864][ T30] audit: type=1400 audit(1790959438.830:943): avc: denied { open } for pid=9354 comm="syz.5.789" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 583.801459][ T5705] usb 2-1: USB disconnect, device number 8 [ 584.448922][ T30] audit: type=1400 audit(1790959439.460:944): avc: denied { create } for pid=9358 comm="syz.5.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 584.449078][ T30] audit: type=1400 audit(1790959439.470:945): avc: denied { connect } for pid=9358 comm="syz.5.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 584.449205][ T30] audit: type=1400 audit(1790959439.470:946): avc: denied { name_bind } for pid=9358 comm="syz.5.790" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 584.977158][ T9365] No source specified [ 585.675463][ T9369] netlink: 'syz.0.792': attribute type 11 has an invalid length. [ 585.675506][ T9369] netlink: 220 bytes leftover after parsing attributes in process `syz.0.792'. [ 587.852696][ T9387] No source specified [ 588.678766][ T9390] netlink: 'syz.5.799': attribute type 11 has an invalid length. [ 588.678795][ T9390] netlink: 220 bytes leftover after parsing attributes in process `syz.5.799'. [ 590.481412][ T5761] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 590.481591][ T30] audit: type=1400 audit(1790959445.161:947): avc: denied { read } for pid=9398 comm="syz.5.802" name="usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 590.481632][ T30] audit: type=1400 audit(1790959445.161:948): avc: denied { open } for pid=9398 comm="syz.5.802" path="/dev/usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 590.635007][ T5761] usb 2-1: unable to get BOS descriptor or descriptor too short [ 590.635049][ T5761] usb 2-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=69.74 [ 590.637829][ T5761] usb 2-1: config 2 has an invalid interface number: 124 but max is 0 [ 590.637853][ T5761] usb 2-1: config 2 has no interface number 0 [ 590.672720][ T5761] usb 2-1: string descriptor 0 read error: -22 [ 590.672794][ T5761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.989445][ T5761] cypress_cy7c63 2-1:2.124: Cypress CY7C63xxx device now attached [ 591.443265][ T9392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.466717][ T9392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.787422][ T9415] No source specified [ 593.549250][ T5690] usb 2-1: USB disconnect, device number 9 [ 593.549823][ T5690] cypress_cy7c63 2-1:2.124: Cypress CY7C63xxx device now disconnected [ 594.398055][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 595.827802][ T9425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.807'. [ 596.250926][ T9426] netlink: 'syz.0.806': attribute type 11 has an invalid length. [ 596.250979][ T9426] netlink: 220 bytes leftover after parsing attributes in process `syz.0.806'. [ 597.140054][ T9430] netlink: 'syz.6.795': attribute type 11 has an invalid length. [ 597.140108][ T9430] netlink: 220 bytes leftover after parsing attributes in process `syz.6.795'. [ 598.111732][ T9440] No source specified [ 599.680978][ T30] audit: type=1400 audit(1790959454.721:949): avc: denied { read } for pid=9433 comm="syz.1.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 599.751646][ T30] audit: type=1400 audit(1790959454.791:950): avc: denied { write } for pid=9433 comm="syz.1.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 600.329758][ T9446] netlink: 'syz.1.812': attribute type 11 has an invalid length. [ 600.329784][ T9446] netlink: 220 bytes leftover after parsing attributes in process `syz.1.812'. [ 601.559235][ T9450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.813'. [ 601.962403][ T9450] hsr_slave_0 (unregistering): left promiscuous mode [ 602.083420][ T9447] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 602.295848][ T9457] No source specified [ 603.084250][ T9463] netlink: 'syz.2.804': attribute type 11 has an invalid length. [ 603.084263][ T9463] netlink: 220 bytes leftover after parsing attributes in process `syz.2.804'. [ 604.076841][ T9470] ip6gretap0: entered promiscuous mode [ 605.734609][ T30] audit: type=1400 audit(1790959460.772:951): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 605.771820][ T30] audit: type=1400 audit(1790959460.812:952): avc: denied { search } for pid=5263 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 605.773369][ T30] audit: type=1400 audit(1790959460.812:953): avc: denied { search } for pid=5263 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 605.773409][ T30] audit: type=1400 audit(1790959460.812:954): avc: denied { search } for pid=5263 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 605.773444][ T30] audit: type=1400 audit(1790959460.812:955): avc: denied { read } for pid=5263 comm="dhcpcd" name="n37" dev="tmpfs" ino=2458 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 605.773480][ T30] audit: type=1400 audit(1790959460.812:956): avc: denied { open } for pid=5263 comm="dhcpcd" path="/run/udev/data/n37" dev="tmpfs" ino=2458 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 605.773516][ T30] audit: type=1400 audit(1790959460.812:957): avc: denied { getattr } for pid=5263 comm="dhcpcd" path="/run/udev/data/n37" dev="tmpfs" ino=2458 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 608.293968][ T9492] No source specified [ 608.578222][ T9491] syz.6.811 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 608.578246][ T9491] CPU: 0 UID: 0 PID: 9491 Comm: syz.6.811 Tainted: G L syzkaller #0 PREEMPT(full) [ 608.578261][ T9491] Tainted: [L]=SOFTLOCKUP [ 608.578264][ T9491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 608.578271][ T9491] Call Trace: [ 608.578280][ T9491] [ 608.578285][ T9491] dump_stack_lvl+0x100/0x190 [ 608.578306][ T9491] dump_header+0xfb/0x606 [ 608.578320][ T9491] oom_kill_process.cold+0xd/0x380 [ 608.578333][ T9491] out_of_memory+0x340/0x14f0 [ 608.578353][ T9491] ? __pfx_out_of_memory+0x10/0x10 [ 608.578373][ T9491] mem_cgroup_out_of_memory+0xc6/0x130 [ 608.578388][ T9491] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 608.578401][ T9491] ? find_held_lock+0x2b/0x80 [ 608.578420][ T9491] ? do_raw_spin_unlock+0x145/0x1e0 [ 608.578436][ T9491] ? _raw_spin_unlock+0x28/0x50 [ 608.578455][ T9491] try_charge_memcg+0x783/0xf60 [ 608.578468][ T9491] ? __pfx_try_charge_memcg+0x10/0x10 [ 608.578485][ T9491] ? find_held_lock+0x2b/0x80 [ 608.578501][ T9491] ? rcu_read_unlock+0x17/0x60 [ 608.578512][ T9491] ? rcu_read_unlock+0x17/0x60 [ 608.578522][ T9491] ? find_held_lock+0x2b/0x80 [ 608.578539][ T9491] ? rcu_read_unlock+0x17/0x60 [ 608.578553][ T9491] charge_memcg+0x1ae/0x210 [ 608.578564][ T9491] __mem_cgroup_charge+0x2b/0x1c0 [ 608.578577][ T9491] shmem_alloc_and_add_folio+0x451/0xd40 [ 608.578598][ T9491] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 608.578617][ T9491] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 608.578638][ T9491] shmem_get_folio_gfp+0x75b/0x1980 [ 608.578660][ T9491] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 608.578679][ T9491] ? vm_normal_page+0x1d1/0x380 [ 608.578692][ T9491] ? __pfx_vm_normal_page+0x10/0x10 [ 608.578708][ T9491] shmem_write_begin+0x1a4/0x420 [ 608.578720][ T9491] ? __pfx_shmem_write_begin+0x10/0x10 [ 608.578732][ T9491] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 608.578747][ T9491] generic_perform_write+0x292/0xa40 [ 608.578761][ T9491] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 608.578778][ T9491] ? __pfx_generic_perform_write+0x10/0x10 [ 608.578794][ T9491] ? file_update_time_flags+0x38c/0x520 [ 608.578808][ T9491] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 608.578820][ T9491] shmem_file_write_iter+0x10e/0x140 [ 608.578833][ T9491] __kernel_write_iter+0x2ac/0x930 [ 608.578848][ T9491] ? __pfx___kernel_write_iter+0x10/0x10 [ 608.578861][ T9491] ? __up_read+0x333/0x980 [ 608.578876][ T9491] ? dump_user_range+0x65e/0xad0 [ 608.578892][ T9491] dump_user_range+0x3f9/0xad0 [ 608.578907][ T9491] ? __pfx_dump_user_range+0x10/0x10 [ 608.578925][ T9491] ? __pfx_writenote+0x10/0x10 [ 608.578938][ T9491] ? elf_core_dump+0x1f25/0x3d20 [ 608.578954][ T9491] elf_core_dump+0x2d68/0x3d20 [ 608.578975][ T9491] ? __pfx_elf_core_dump+0x10/0x10 [ 608.578988][ T9491] ? kasan_save_stack+0x3f/0x50 [ 608.579001][ T9491] ? kasan_save_stack+0x30/0x50 [ 608.579014][ T9491] ? kasan_save_track+0x14/0x30 [ 608.579028][ T9491] ? __kasan_kmalloc+0xaa/0xb0 [ 608.579041][ T9491] ? vfs_coredump+0x21f6/0x54a0 [ 608.579052][ T9491] ? get_signal+0x1f2a/0x21e0 [ 608.579064][ T9491] ? arch_do_signal_or_restart+0x91/0x7e0 [ 608.579083][ T9491] ? 0xffffffffff600000 [ 608.579109][ T9491] ? lock_acquire+0x1d1/0x380 [ 608.579121][ T9491] ? get_signal+0x1f2a/0x21e0 [ 608.579137][ T9491] ? vfs_coredump+0x281a/0x54a0 [ 608.579149][ T9491] vfs_coredump+0x281a/0x54a0 [ 608.579166][ T9491] ? __pfx_vfs_coredump+0x10/0x10 [ 608.579179][ T9491] ? __lock_acquire+0x5c0/0x1f40 [ 608.579194][ T9491] ? __lock_acquire+0x5c0/0x1f40 [ 608.579209][ T9491] ? lock_acquire+0x1d1/0x380 [ 608.579221][ T9491] ? unwind_next_frame+0xbd/0x2090 [ 608.579239][ T9491] ? lock_acquire+0x1d1/0x380 [ 608.579255][ T9491] ? bpf_ksym_find+0x128/0x1c0 [ 608.579266][ T9491] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 608.579286][ T9491] ? arch_stack_walk+0xa6/0xf0 [ 608.579305][ T9491] ? __sigqueue_free+0xbe/0x2a0 [ 608.579320][ T9491] ? stack_trace_save+0x8e/0xc0 [ 608.579331][ T9491] ? __pfx_stack_trace_save+0x10/0x10 [ 608.579342][ T9491] ? stack_depot_save_flags+0x27/0x9f0 [ 608.579358][ T9491] ? __lock_acquire+0x5c0/0x1f40 [ 608.579393][ T9491] ? proc_coredump_connector+0x2d3/0x4f0 [ 608.579405][ T9491] ? __pfx_proc_coredump_connector+0x10/0x10 [ 608.579420][ T9491] ? rcu_is_watching+0x13/0xc0 [ 608.579438][ T9491] get_signal+0x1f2a/0x21e0 [ 608.579456][ T9491] ? __pfx_get_signal+0x10/0x10 [ 608.579472][ T9491] arch_do_signal_or_restart+0x91/0x7e0 [ 608.579490][ T9491] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 608.579515][ T9491] irqentry_exit+0x402/0xa10 [ 608.579528][ T9491] asm_exc_page_fault+0x26/0x30 [ 608.579539][ T9491] RIP: 0033:0x7f381b39e161 [ 608.579548][ T9491] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 608.579558][ T9491] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 608.579568][ T9491] RAX: 0000000000000000 RBX: 00007f381b625fa0 RCX: 00007f381b39e159 [ 608.579575][ T9491] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 608.579582][ T9491] RBP: 00007f381b43506b R08: 0000000000000000 R09: 0000000000000000 [ 608.579588][ T9491] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 608.579594][ T9491] R13: 00007f381b626038 R14: 00007f381b625fa0 R15: 00007ffff880a5a8 [ 608.579608][ T9491] [ 608.579613][ T9491] memory: usage 307200kB, limit 307200kB, failcnt 21884 [ 608.579620][ T9491] memory+swap: usage 381764kB, limit 9007199254740988kB, failcnt 0 [ 608.579626][ T9491] kmem: usage 2620kB, limit 9007199254740988kB, failcnt 0 [ 608.579632][ T9491] Memory cgroup stats for /syz6: [ 608.579702][ T9491] cache 311664640 [ 608.579706][ T9491] rss 200704 [ 608.579710][ T9491] rss_huge 0 [ 608.579714][ T9491] shmem 311664640 [ 608.579717][ T9491] mapped_file 168202240 [ 608.579722][ T9491] dirty 0 [ 608.579725][ T9491] writeback 0 [ 608.579729][ T9491] workingset_refault_anon 1 [ 608.579733][ T9491] workingset_refault_file 0 [ 608.579737][ T9491] swap 76353536 [ 608.579740][ T9491] swapcached 82169856 [ 608.579744][ T9491] pgpgin 399382 [ 608.579748][ T9491] pgpgout 323237 [ 608.579752][ T9491] pgfault 120504 [ 608.579756][ T9491] pgmajfault 3 [ 608.579760][ T9491] inactive_anon 206594048 [ 608.579764][ T9491] active_anon 105271296 [ 608.579768][ T9491] inactive_file 0 [ 608.579771][ T9491] active_file 0 [ 608.579775][ T9491] unevictable 0 [ 608.579779][ T9491] hierarchical_memory_limit 314572800 [ 608.579783][ T9491] hierarchical_memsw_limit 9223372036854771712 [ 608.579788][ T9491] total_cache 311664640 [ 608.579791][ T9491] total_rss 200704 [ 608.579795][ T9491] total_rss_huge 0 [ 608.579799][ T9491] total_shmem 311664640 [ 608.579803][ T9491] total_mapped_file 168202240 [ 608.579807][ T9491] total_dirty 0 [ 608.579811][ T9491] total_writeback 0 [ 608.579815][ T9491] total_workingset_refault_anon 1 [ 608.579819][ T9491] total_workingset_refault_file 0 [ 608.579823][ T9491] total_swap 76353536 [ 608.579827][ T9491] total_swapcached 82169856 [ 608.579831][ T9491] total_pgpgin 399382 [ 608.579835][ T9491] total_pgpgout 323237 [ 608.579839][ T9491] total_pgfault 120504 [ 608.579843][ T9491] total_pgmajfault 3 [ 608.579847][ T9491] total_inactive_anon 206594048 [ 608.579851][ T9491] total_active_anon 105271296 [ 608.579856][ T9491] total_inactive_file 0 [ 608.579859][ T9491] total_active_file 0 [ 608.579863][ T9491] total_unevictable 0 [ 608.579867][ T9491] anon_cost 0 [ 608.579871][ T9491] file_cost 0 [ 608.579875][ T9491] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.724,pid=9146,uid=0 [ 608.579924][ T9491] Memory cgroup out of memory: Killed process 9146 (syz.6.724) total-vm:200692kB, anon-rss:1248kB, file-rss:20548kB, shmem-rss:92612kB, UID:0 pgtables:296kB oom_score_adj:1000 [ 609.090206][ T30] audit: type=1400 audit(1790959464.132:958): avc: denied { ioctl } for pid=9479 comm="syz.0.818" path="socket:[23853]" dev="sockfs" ino=23853 ioctlcmd=0x8953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 610.871664][ T30] audit: type=1400 audit(1790959465.912:959): avc: denied { read } for pid=9496 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 610.882218][ T9491] syz.6.811 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 610.882243][ T9491] CPU: 0 UID: 0 PID: 9491 Comm: syz.6.811 Tainted: G L syzkaller #0 PREEMPT(full) [ 610.882269][ T9491] Tainted: [L]=SOFTLOCKUP [ 610.882275][ T9491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 610.882284][ T9491] Call Trace: [ 610.882290][ T9491] [ 610.882296][ T9491] dump_stack_lvl+0x100/0x190 [ 610.882323][ T9491] dump_header+0xfb/0x606 [ 610.882342][ T9491] oom_kill_process.cold+0xd/0x380 [ 610.882362][ T9491] out_of_memory+0x340/0x14f0 [ 610.882390][ T9491] ? __pfx_out_of_memory+0x10/0x10 [ 610.882418][ T9491] mem_cgroup_out_of_memory+0xc6/0x130 [ 610.882438][ T9491] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 610.882456][ T9491] ? find_held_lock+0x2b/0x80 [ 610.882483][ T9491] ? do_raw_spin_unlock+0x145/0x1e0 [ 610.882505][ T9491] ? _raw_spin_unlock+0x28/0x50 [ 610.882530][ T9491] try_charge_memcg+0x783/0xf60 [ 610.882551][ T9491] ? __pfx_try_charge_memcg+0x10/0x10 [ 610.882573][ T9491] ? find_held_lock+0x2b/0x80 [ 610.882595][ T9491] ? rcu_read_unlock+0x17/0x60 [ 610.882610][ T9491] ? rcu_read_unlock+0x17/0x60 [ 610.882626][ T9491] ? find_held_lock+0x2b/0x80 [ 610.882648][ T9491] ? rcu_read_unlock+0x17/0x60 [ 610.882668][ T9491] charge_memcg+0x1ae/0x210 [ 610.882685][ T9491] __mem_cgroup_charge+0x2b/0x1c0 [ 610.882704][ T9491] shmem_alloc_and_add_folio+0x451/0xd40 [ 610.882734][ T9491] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 610.882760][ T9491] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 610.882790][ T9491] shmem_get_folio_gfp+0x75b/0x1980 [ 610.882820][ T9491] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 610.882846][ T9491] ? vm_normal_page+0x1d1/0x380 [ 610.882865][ T9491] ? __pfx_vm_normal_page+0x10/0x10 [ 610.882889][ T9491] shmem_write_begin+0x1a4/0x420 [ 610.882907][ T9491] ? __pfx_shmem_write_begin+0x10/0x10 [ 610.882924][ T9491] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 610.882946][ T9491] generic_perform_write+0x292/0xa40 [ 610.882967][ T9491] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 610.882990][ T9491] ? __pfx_generic_perform_write+0x10/0x10 [ 610.883014][ T9491] ? file_update_time_flags+0x38c/0x520 [ 610.883033][ T9491] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 610.883051][ T9491] shmem_file_write_iter+0x10e/0x140 [ 610.883071][ T9491] __kernel_write_iter+0x2ac/0x930 [ 610.883091][ T9491] ? __pfx___kernel_write_iter+0x10/0x10 [ 610.883109][ T9491] ? __up_read+0x333/0x980 [ 610.883132][ T9491] ? dump_user_range+0x65e/0xad0 [ 610.883155][ T9491] dump_user_range+0x3f9/0xad0 [ 610.883178][ T9491] ? __pfx_dump_user_range+0x10/0x10 [ 610.883204][ T9491] ? __pfx_writenote+0x10/0x10 [ 610.883223][ T9491] ? elf_core_dump+0x1f25/0x3d20 [ 610.883246][ T9491] elf_core_dump+0x2d68/0x3d20 [ 610.883283][ T9491] ? __pfx_elf_core_dump+0x10/0x10 [ 610.883301][ T9491] ? kasan_save_stack+0x3f/0x50 [ 610.883320][ T9491] ? kasan_save_stack+0x30/0x50 [ 610.883338][ T9491] ? kasan_save_track+0x14/0x30 [ 610.883356][ T9491] ? __kasan_kmalloc+0xaa/0xb0 [ 610.883374][ T9491] ? vfs_coredump+0x21f6/0x54a0 [ 610.883390][ T9491] ? get_signal+0x1f2a/0x21e0 [ 610.883406][ T9491] ? arch_do_signal_or_restart+0x91/0x7e0 [ 610.883433][ T9491] ? 0xffffffffff600000 [ 610.883475][ T9491] ? lock_acquire+0x1d1/0x380 [ 610.883492][ T9491] ? get_signal+0x1f2a/0x21e0 [ 610.883517][ T9491] ? vfs_coredump+0x281a/0x54a0 [ 610.883534][ T9491] vfs_coredump+0x281a/0x54a0 [ 610.883560][ T9491] ? __pfx_vfs_coredump+0x10/0x10 [ 610.883578][ T9491] ? __lock_acquire+0x5c0/0x1f40 [ 610.883602][ T9491] ? __lock_acquire+0x5c0/0x1f40 [ 610.883622][ T9491] ? lock_acquire+0x1d1/0x380 [ 610.883639][ T9491] ? unwind_next_frame+0xbd/0x2090 [ 610.883666][ T9491] ? lock_acquire+0x1d1/0x380 [ 610.883689][ T9491] ? bpf_ksym_find+0x128/0x1c0 [ 610.883705][ T9491] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 610.883729][ T9491] ? arch_stack_walk+0xa6/0xf0 [ 610.883757][ T9491] ? __sigqueue_free+0xbe/0x2a0 [ 610.883777][ T9491] ? stack_trace_save+0x8e/0xc0 [ 610.883793][ T9491] ? __pfx_stack_trace_save+0x10/0x10 [ 610.883810][ T9491] ? stack_depot_save_flags+0x27/0x9f0 [ 610.883832][ T9491] ? __lock_acquire+0x5c0/0x1f40 [ 610.883890][ T9491] ? proc_coredump_connector+0x2d3/0x4f0 [ 610.883907][ T9491] ? __pfx_proc_coredump_connector+0x10/0x10 [ 610.883930][ T9491] ? rcu_is_watching+0x13/0xc0 [ 610.883955][ T9491] get_signal+0x1f2a/0x21e0 [ 610.883981][ T9491] ? __pfx_get_signal+0x10/0x10 [ 610.884006][ T9491] arch_do_signal_or_restart+0x91/0x7e0 [ 610.884030][ T9491] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 610.884068][ T9491] irqentry_exit+0x402/0xa10 [ 610.884088][ T9491] asm_exc_page_fault+0x26/0x30 [ 610.884103][ T9491] RIP: 0033:0x7f381b39e161 [ 610.884117][ T9491] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 610.884131][ T9491] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 610.884145][ T9491] RAX: 0000000000000000 RBX: 00007f381b625fa0 RCX: 00007f381b39e159 [ 610.884155][ T9491] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 610.884164][ T9491] RBP: 00007f381b43506b R08: 0000000000000000 R09: 0000000000000000 [ 610.884173][ T9491] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 610.884182][ T9491] R13: 00007f381b626038 R14: 00007f381b625fa0 R15: 00007ffff880a5a8 [ 610.884205][ T9491] [ 610.884212][ T9491] memory: usage 307200kB, limit 307200kB, failcnt 26191 [ 610.884222][ T9491] memory+swap: usage 381764kB, limit 9007199254740988kB, failcnt 0 [ 610.884232][ T9491] kmem: usage 2600kB, limit 9007199254740988kB, failcnt 0 [ 610.884241][ T9491] Memory cgroup stats for /syz6: [ 610.884334][ T9491] cache 311697408 [ 610.884341][ T9491] rss 200704 [ 610.884346][ T9491] rss_huge 0 [ 610.884351][ T9491] shmem 311697408 [ 610.884357][ T9491] mapped_file 168202240 [ 610.884363][ T9491] dirty 0 [ 610.884368][ T9491] writeback 0 [ 610.884374][ T9491] workingset_refault_anon 1 [ 610.884380][ T9491] workingset_refault_file 0 [ 610.884386][ T9491] swap 76353536 [ 610.884391][ T9491] swapcached 82169856 [ 610.884397][ T9491] pgpgin 399390 [ 610.884402][ T9491] pgpgout 323243 [ 610.884408][ T9491] pgfault 120507 [ 610.884413][ T9491] pgmajfault 3 [ 610.884419][ T9491] inactive_anon 206594048 [ 610.884425][ T9491] active_anon 105304064 [ 610.884431][ T9491] inactive_file 0 [ 610.884436][ T9491] active_file 0 [ 610.884442][ T9491] unevictable 0 [ 610.884447][ T9491] hierarchical_memory_limit 314572800 [ 610.884453][ T9491] hierarchical_memsw_limit 9223372036854771712 [ 610.884460][ T9491] total_cache 311697408 [ 610.884466][ T9491] total_rss 200704 [ 610.884472][ T9491] total_rss_huge 0 [ 610.884477][ T9491] total_shmem 311697408 [ 610.884483][ T9491] total_mapped_file 168202240 [ 610.884488][ T9491] total_dirty 0 [ 610.884494][ T9491] total_writeback 0 [ 610.884499][ T9491] total_workingset_refault_anon 1 [ 610.884506][ T9491] total_workingset_refault_file 0 [ 610.884512][ T9491] total_swap 76353536 [ 610.884517][ T9491] total_swapcached 82169856 [ 610.884523][ T9491] total_pgpgin 399390 [ 610.884529][ T9491] total_pgpgout 323243 [ 610.884535][ T9491] total_pgfault 120507 [ 610.884541][ T9491] total_pgmajfault 3 [ 610.884546][ T9491] total_inactive_anon 206594048 [ 610.884552][ T9491] total_active_anon 105304064 [ 610.884558][ T9491] total_inactive_file 0 [ 610.884563][ T9491] total_active_file 0 [ 610.884569][ T9491] total_unevictable 0 [ 610.884575][ T9491] anon_cost 0 [ 610.884580][ T9491] file_cost 0 [ 610.884586][ T9491] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.753,pid=9229,uid=0 [ 610.884655][ T9491] Memory cgroup out of memory: Killed process 9229 (syz.6.753) total-vm:200560kB, anon-rss:1248kB, file-rss:20548kB, shmem-rss:71652kB, UID:0 pgtables:256kB oom_score_adj:1000 [ 610.901153][ T30] audit: type=1400 audit(1790959465.952:960): avc: denied { read open } for pid=9496 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 611.804676][ T30] audit: type=1400 audit(1790959466.812:961): avc: denied { getattr } for pid=9496 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 612.874442][ T32] oom_reaper: reaped process 9146 (syz.6.724), now anon-rss:0kB, file-rss:20480kB, shmem-rss:75816kB [ 612.895627][ T9491] syz.6.811 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 612.895651][ T9491] CPU: 0 UID: 0 PID: 9491 Comm: syz.6.811 Tainted: G L syzkaller #0 PREEMPT(full) [ 612.895672][ T9491] Tainted: [L]=SOFTLOCKUP [ 612.895678][ T9491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 612.895687][ T9491] Call Trace: [ 612.895693][ T9491] [ 612.895699][ T9491] dump_stack_lvl+0x100/0x190 [ 612.895726][ T9491] dump_header+0xfb/0x606 [ 612.895746][ T9491] oom_kill_process.cold+0xd/0x380 [ 612.895767][ T9491] out_of_memory+0x340/0x14f0 [ 612.895795][ T9491] ? __pfx_out_of_memory+0x10/0x10 [ 612.895824][ T9491] mem_cgroup_out_of_memory+0xc6/0x130 [ 612.895843][ T9491] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 612.895861][ T9491] ? find_held_lock+0x2b/0x80 [ 612.895889][ T9491] ? do_raw_spin_unlock+0x145/0x1e0 [ 612.895910][ T9491] ? _raw_spin_unlock+0x28/0x50 [ 612.895936][ T9491] try_charge_memcg+0x783/0xf60 [ 612.895956][ T9491] ? __pfx_try_charge_memcg+0x10/0x10 [ 612.895979][ T9491] ? find_held_lock+0x2b/0x80 [ 612.896000][ T9491] ? rcu_read_unlock+0x17/0x60 [ 612.896015][ T9491] ? rcu_read_unlock+0x17/0x60 [ 612.896031][ T9491] ? find_held_lock+0x2b/0x80 [ 612.896053][ T9491] ? rcu_read_unlock+0x17/0x60 [ 612.896073][ T9491] charge_memcg+0x1ae/0x210 [ 612.896089][ T9491] __mem_cgroup_charge+0x2b/0x1c0 [ 612.896108][ T9491] shmem_alloc_and_add_folio+0x451/0xd40 [ 612.896138][ T9491] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 612.896164][ T9491] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 612.896194][ T9491] shmem_get_folio_gfp+0x75b/0x1980 [ 612.896224][ T9491] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 612.896255][ T9491] ? vm_normal_page+0x1d1/0x380 [ 612.896274][ T9491] ? __pfx_vm_normal_page+0x10/0x10 [ 612.896297][ T9491] shmem_write_begin+0x1a4/0x420 [ 612.896315][ T9491] ? __pfx_shmem_write_begin+0x10/0x10 [ 612.896332][ T9491] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 612.896354][ T9491] generic_perform_write+0x292/0xa40 [ 612.896375][ T9491] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 612.896399][ T9491] ? __pfx_generic_perform_write+0x10/0x10 [ 612.896423][ T9491] ? file_update_time_flags+0x38c/0x520 [ 612.896442][ T9491] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 612.896460][ T9491] shmem_file_write_iter+0x10e/0x140 [ 612.896480][ T9491] __kernel_write_iter+0x2ac/0x930 [ 612.896500][ T9491] ? __pfx___kernel_write_iter+0x10/0x10 [ 612.896518][ T9491] ? __up_read+0x333/0x980 [ 612.896540][ T9491] ? dump_user_range+0x65e/0xad0 [ 612.896563][ T9491] dump_user_range+0x3f9/0xad0 [ 612.896586][ T9491] ? __pfx_dump_user_range+0x10/0x10 [ 612.896612][ T9491] ? __pfx_writenote+0x10/0x10 [ 612.896631][ T9491] ? elf_core_dump+0x1f25/0x3d20 [ 612.896654][ T9491] elf_core_dump+0x2d68/0x3d20 [ 612.896686][ T9491] ? __pfx_elf_core_dump+0x10/0x10 [ 612.896704][ T9491] ? kasan_save_stack+0x3f/0x50 [ 612.896723][ T9491] ? kasan_save_stack+0x30/0x50 [ 612.896741][ T9491] ? kasan_save_track+0x14/0x30 [ 612.896759][ T9491] ? __kasan_kmalloc+0xaa/0xb0 [ 612.896777][ T9491] ? vfs_coredump+0x21f6/0x54a0 [ 612.896793][ T9491] ? get_signal+0x1f2a/0x21e0 [ 612.896809][ T9491] ? arch_do_signal_or_restart+0x91/0x7e0 [ 612.896837][ T9491] ? 0xffffffffff600000 [ 612.896881][ T9491] ? lock_acquire+0x1d1/0x380 [ 612.896899][ T9491] ? get_signal+0x1f2a/0x21e0 [ 612.896923][ T9491] ? vfs_coredump+0x281a/0x54a0 [ 612.896940][ T9491] vfs_coredump+0x281a/0x54a0 [ 612.896967][ T9491] ? __pfx_vfs_coredump+0x10/0x10 [ 612.896984][ T9491] ? __lock_acquire+0x5c0/0x1f40 [ 612.897008][ T9491] ? __lock_acquire+0x5c0/0x1f40 [ 612.897028][ T9491] ? lock_acquire+0x1d1/0x380 [ 612.897045][ T9491] ? unwind_next_frame+0xbd/0x2090 [ 612.897070][ T9491] ? lock_acquire+0x1d1/0x380 [ 612.897093][ T9491] ? bpf_ksym_find+0x128/0x1c0 [ 612.897109][ T9491] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 612.897134][ T9491] ? arch_stack_walk+0xa6/0xf0 [ 612.897162][ T9491] ? __sigqueue_free+0xbe/0x2a0 [ 612.897183][ T9491] ? stack_trace_save+0x8e/0xc0 [ 612.897199][ T9491] ? __pfx_stack_trace_save+0x10/0x10 [ 612.897215][ T9491] ? stack_depot_save_flags+0x27/0x9f0 [ 612.897237][ T9491] ? __lock_acquire+0x5c0/0x1f40 [ 612.897301][ T9491] ? proc_coredump_connector+0x2d3/0x4f0 [ 612.897318][ T9491] ? __pfx_proc_coredump_connector+0x10/0x10 [ 612.897340][ T9491] ? rcu_is_watching+0x13/0xc0 [ 612.897366][ T9491] get_signal+0x1f2a/0x21e0 [ 612.897392][ T9491] ? __pfx_get_signal+0x10/0x10 [ 612.897416][ T9491] arch_do_signal_or_restart+0x91/0x7e0 [ 612.897441][ T9491] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 612.897478][ T9491] irqentry_exit+0x402/0xa10 [ 612.897498][ T9491] asm_exc_page_fault+0x26/0x30 [ 612.897514][ T9491] RIP: 0033:0x7f381b39e161 [ 612.897527][ T9491] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 612.897540][ T9491] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 612.897554][ T9491] RAX: 0000000000000000 RBX: 00007f381b625fa0 RCX: 00007f381b39e159 [ 612.897564][ T9491] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 612.897574][ T9491] RBP: 00007f381b43506b R08: 0000000000000000 R09: 0000000000000000 [ 612.897583][ T9491] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 612.897593][ T9491] R13: 00007f381b626038 R14: 00007f381b625fa0 R15: 00007ffff880a5a8 [ 612.897616][ T9491] [ 612.897647][ T9491] memory: usage 307200kB, limit 307200kB, failcnt 31290 [ 612.897657][ T9491] memory+swap: usage 381704kB, limit 9007199254740988kB, failcnt 0 [ 612.897667][ T9491] kmem: usage 2440kB, limit 9007199254740988kB, failcnt 0 [ 612.897676][ T9491] Memory cgroup stats for /syz6: [ 612.897776][ T9491] cache 311869440 [ 612.897783][ T9491] rss 204800 [ 612.897788][ T9491] rss_huge 0 [ 612.897793][ T9491] shmem 311869440 [ 612.897798][ T9491] mapped_file 148897792 [ 612.897804][ T9491] dirty 0 [ 612.897809][ T9491] writeback 0 [ 612.897814][ T9491] workingset_refault_anon 1 [ 612.897820][ T9491] workingset_refault_file 0 [ 612.897826][ T9491] swap 76292096 [ 612.897831][ T9491] swapcached 82300928 [ 612.897837][ T9491] pgpgin 399465 [ 612.897842][ T9491] pgpgout 323275 [ 612.897847][ T9491] pgfault 120510 [ 612.897853][ T9491] pgmajfault 3 [ 612.897858][ T9491] inactive_anon 206462976 [ 612.897864][ T9491] active_anon 105611264 [ 612.897869][ T9491] inactive_file 0 [ 612.897875][ T9491] active_file 0 [ 612.897880][ T9491] unevictable 0 [ 612.897885][ T9491] hierarchical_memory_limit 314572800 [ 612.897892][ T9491] hierarchical_memsw_limit 9223372036854771712 [ 612.897898][ T9491] total_cache 311869440 [ 612.897904][ T9491] total_rss 204800 [ 612.897909][ T9491] total_rss_huge 0 [ 612.897915][ T9491] total_shmem 311869440 [ 612.897921][ T9491] total_mapped_file 148897792 [ 612.897927][ T9491] total_dirty 0 [ 612.897932][ T9491] total_writeback 0 [ 612.897938][ T9491] total_workingset_refault_anon 1 [ 612.897944][ T9491] total_workingset_refault_file 0 [ 612.897950][ T9491] total_swap 76292096 [ 612.897956][ T9491] total_swapcached 82300928 [ 612.897961][ T9491] total_pgpgin 399465 [ 612.897967][ T9491] total_pgpgout 323275 [ 612.897972][ T9491] total_pgfault 120510 [ 612.897978][ T9491] total_pgmajfault 3 [ 612.897983][ T9491] total_inactive_anon 206462976 [ 612.897990][ T9491] total_active_anon 105611264 [ 612.897996][ T9491] total_inactive_file 0 [ 612.898002][ T9491] total_active_file 0 [ 612.898007][ T9491] total_unevictable 0 [ 612.898013][ T9491] anon_cost 0 [ 612.898018][ T9491] file_cost 0 [ 612.898024][ T9491] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.811,pid=9491,uid=0 [ 612.898093][ T9491] Memory cgroup out of memory: Killed process 9491 (syz.6.811) total-vm:102252kB, anon-rss:1424kB, file-rss:61508kB, shmem-rss:0kB, UID:0 pgtables:208kB oom_score_adj:1000 [ 613.021387][ T32] oom_reaper: reaped process 9229 (syz.6.753), now anon-rss:0kB, file-rss:20480kB, shmem-rss:61816kB [ 613.666903][ T190] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 614.900348][ T190] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 614.994398][ T190] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 614.994423][ T190] usb 6-1: Product: syz [ 614.994438][ T190] usb 6-1: SerialNumber: syz [ 615.164536][ T9509] syz.0.824 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 615.164556][ T9509] CPU: 0 UID: 0 PID: 9509 Comm: syz.0.824 Tainted: G L syzkaller #0 PREEMPT(full) [ 615.164572][ T9509] Tainted: [L]=SOFTLOCKUP [ 615.164576][ T9509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 615.164582][ T9509] Call Trace: [ 615.164586][ T9509] [ 615.164590][ T9509] dump_stack_lvl+0x100/0x190 [ 615.164611][ T9509] dump_header+0xfb/0x606 [ 615.164624][ T9509] oom_kill_process.cold+0xd/0x380 [ 615.164638][ T9509] out_of_memory+0x340/0x14f0 [ 615.164657][ T9509] ? __pfx_out_of_memory+0x10/0x10 [ 615.164677][ T9509] mem_cgroup_out_of_memory+0xc6/0x130 [ 615.164691][ T9509] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 615.164704][ T9509] ? find_held_lock+0x2b/0x80 [ 615.164724][ T9509] ? do_raw_spin_unlock+0x145/0x1e0 [ 615.164740][ T9509] ? _raw_spin_unlock+0x28/0x50 [ 615.164758][ T9509] try_charge_memcg+0x783/0xf60 [ 615.164771][ T9509] ? __pfx_try_charge_memcg+0x10/0x10 [ 615.164788][ T9509] ? find_held_lock+0x2b/0x80 [ 615.164804][ T9509] ? rcu_read_unlock+0x17/0x60 [ 615.164815][ T9509] ? rcu_read_unlock+0x17/0x60 [ 615.164825][ T9509] ? find_held_lock+0x2b/0x80 [ 615.164842][ T9509] ? rcu_read_unlock+0x17/0x60 [ 615.164855][ T9509] charge_memcg+0x1ae/0x210 [ 615.164866][ T9509] __mem_cgroup_charge+0x2b/0x1c0 [ 615.164879][ T9509] shmem_alloc_and_add_folio+0x451/0xd40 [ 615.164900][ T9509] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 615.164919][ T9509] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 615.164941][ T9509] shmem_get_folio_gfp+0x75b/0x1980 [ 615.164962][ T9509] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 615.164981][ T9509] ? vm_normal_page+0x1d1/0x380 [ 615.164994][ T9509] ? __pfx_vm_normal_page+0x10/0x10 [ 615.165011][ T9509] shmem_write_begin+0x1a4/0x420 [ 615.165023][ T9509] ? __pfx_shmem_write_begin+0x10/0x10 [ 615.165034][ T9509] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 615.165049][ T9509] generic_perform_write+0x292/0xa40 [ 615.165064][ T9509] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 615.165080][ T9509] ? __pfx_generic_perform_write+0x10/0x10 [ 615.165097][ T9509] ? file_update_time_flags+0x38c/0x520 [ 615.165110][ T9509] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 615.165123][ T9509] shmem_file_write_iter+0x10e/0x140 [ 615.165137][ T9509] __kernel_write_iter+0x2ac/0x930 [ 615.165151][ T9509] ? __pfx___kernel_write_iter+0x10/0x10 [ 615.165164][ T9509] ? __up_read+0x333/0x980 [ 615.165180][ T9509] ? dump_user_range+0x65e/0xad0 [ 615.165196][ T9509] dump_user_range+0x3f9/0xad0 [ 615.165211][ T9509] ? __pfx_dump_user_range+0x10/0x10 [ 615.165233][ T9509] ? __pfx_writenote+0x10/0x10 [ 615.165246][ T9509] ? elf_core_dump+0x1f25/0x3d20 [ 615.165262][ T9509] elf_core_dump+0x2d68/0x3d20 [ 615.165283][ T9509] ? __pfx_elf_core_dump+0x10/0x10 [ 615.165296][ T9509] ? kasan_save_stack+0x3f/0x50 [ 615.165309][ T9509] ? kasan_save_stack+0x30/0x50 [ 615.165322][ T9509] ? kasan_save_track+0x14/0x30 [ 615.165335][ T9509] ? __kasan_kmalloc+0xaa/0xb0 [ 615.165348][ T9509] ? vfs_coredump+0x21f6/0x54a0 [ 615.165359][ T9509] ? get_signal+0x1f2a/0x21e0 [ 615.165371][ T9509] ? arch_do_signal_or_restart+0x91/0x7e0 [ 615.165390][ T9509] ? 0xffffffffff600000 [ 615.165416][ T9509] ? lock_acquire+0x1d1/0x380 [ 615.165428][ T9509] ? get_signal+0x1f2a/0x21e0 [ 615.165445][ T9509] ? vfs_coredump+0x281a/0x54a0 [ 615.165457][ T9509] vfs_coredump+0x281a/0x54a0 [ 615.165474][ T9509] ? __pfx_vfs_coredump+0x10/0x10 [ 615.165486][ T9509] ? __lock_acquire+0x5c0/0x1f40 [ 615.165502][ T9509] ? __lock_acquire+0x5c0/0x1f40 [ 615.165516][ T9509] ? lock_acquire+0x1d1/0x380 [ 615.165528][ T9509] ? unwind_next_frame+0xbd/0x2090 [ 615.165547][ T9509] ? lock_acquire+0x1d1/0x380 [ 615.165562][ T9509] ? bpf_ksym_find+0x128/0x1c0 [ 615.165573][ T9509] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 615.165589][ T9509] ? arch_stack_walk+0xa6/0xf0 [ 615.165608][ T9509] ? __sigqueue_free+0xbe/0x2a0 [ 615.165623][ T9509] ? stack_trace_save+0x8e/0xc0 [ 615.165634][ T9509] ? __pfx_stack_trace_save+0x10/0x10 [ 615.165645][ T9509] ? stack_depot_save_flags+0x27/0x9f0 [ 615.165662][ T9509] ? __lock_acquire+0x5c0/0x1f40 [ 615.165697][ T9509] ? proc_coredump_connector+0x2d3/0x4f0 [ 615.165709][ T9509] ? __pfx_proc_coredump_connector+0x10/0x10 [ 615.165724][ T9509] ? rcu_is_watching+0x13/0xc0 [ 615.165742][ T9509] get_signal+0x1f2a/0x21e0 [ 615.165760][ T9509] ? __pfx_get_signal+0x10/0x10 [ 615.165776][ T9509] arch_do_signal_or_restart+0x91/0x7e0 [ 615.165794][ T9509] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 615.165819][ T9509] irqentry_exit+0x402/0xa10 [ 615.165833][ T9509] asm_exc_page_fault+0x26/0x30 [ 615.165844][ T9509] RIP: 0033:0x7fdb8c79e161 [ 615.165853][ T9509] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 615.165863][ T9509] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 615.165873][ T9509] RAX: 0000000000000000 RBX: 00007fdb8ca26090 RCX: 00007fdb8c79e159 [ 615.165880][ T9509] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 615.165886][ T9509] RBP: 00007fdb8c83506b R08: 0000000000000000 R09: 0000000000000000 [ 615.165893][ T9509] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 615.165899][ T9509] R13: 00007fdb8ca26128 R14: 00007fdb8ca26090 R15: 00007ffc35735338 [ 615.165913][ T9509] [ 615.165917][ T9509] memory: usage 307200kB, limit 307200kB, failcnt 88681 [ 615.165924][ T9509] memory+swap: usage 311704kB, limit 9007199254740988kB, failcnt 0 [ 615.165931][ T9509] kmem: usage 3540kB, limit 9007199254740988kB, failcnt 0 [ 615.165937][ T9509] Memory cgroup stats for /syz0: [ 615.166006][ T9509] cache 310030336 [ 615.166011][ T9509] rss 917504 [ 615.166014][ T9509] rss_huge 0 [ 615.166018][ T9509] shmem 309878784 [ 615.166022][ T9509] mapped_file 114491392 [ 615.166026][ T9509] dirty 0 [ 615.166029][ T9509] writeback 0 [ 615.166033][ T9509] workingset_refault_anon 21 [ 615.166037][ T9509] workingset_refault_file 2751 [ 615.166041][ T9509] swap 4612096 [ 615.166045][ T9509] swapcached 162287616 [ 615.166049][ T9509] pgpgin 1275460 [ 615.166053][ T9509] pgpgout 1201078 [ 615.166057][ T9509] pgfault 414319 [ 615.166060][ T9509] pgmajfault 31 [ 615.166064][ T9509] inactive_anon 308867072 [ 615.166068][ T9509] active_anon 1929216 [ 615.166072][ T9509] inactive_file 40960 [ 615.166076][ T9509] active_file 45056 [ 615.166079][ T9509] unevictable 0 [ 615.166083][ T9509] hierarchical_memory_limit 314572800 [ 615.166088][ T9509] hierarchical_memsw_limit 9223372036854771712 [ 615.166092][ T9509] total_cache 310030336 [ 615.166096][ T9509] total_rss 917504 [ 615.166100][ T9509] total_rss_huge 0 [ 615.166103][ T9509] total_shmem 309878784 [ 615.166107][ T9509] total_mapped_file 114491392 [ 615.166111][ T9509] total_dirty 0 [ 615.166115][ T9509] total_writeback 0 [ 615.166119][ T9509] total_workingset_refault_anon 21 [ 615.166123][ T9509] total_workingset_refault_file 2751 [ 615.166128][ T9509] total_swap 4612096 [ 615.166131][ T9509] total_swapcached 162287616 [ 615.166135][ T9509] total_pgpgin 1275460 [ 615.166139][ T9509] total_pgpgout 1201078 [ 615.166143][ T9509] total_pgfault 414319 [ 615.166147][ T9509] total_pgmajfault 31 [ 615.166151][ T9509] total_inactive_anon 308867072 [ 615.166155][ T9509] total_active_anon 1929216 [ 615.166159][ T9509] total_inactive_file 40960 [ 615.166163][ T9509] total_active_file 45056 [ 615.166167][ T9509] total_unevictable 0 [ 615.166171][ T9509] anon_cost 0 [ 615.166175][ T9509] file_cost 0 [ 615.166178][ T9509] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.778,pid=9315,uid=0 [ 615.166231][ T9509] Memory cgroup out of memory: Killed process 9315 (syz.0.778) total-vm:200824kB, anon-rss:1248kB, file-rss:20548kB, shmem-rss:45684kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 628.956901][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 700.632084][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 720.110843][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 721.141097][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P190/1:b..l P5600/1:b..l [ 721.150050][ C1] rcu: (detected by 1, t=10603 jiffies, g=39997, q=694 ncpus=2) [ 721.157755][ C1] task:syz-executor state:R running task stack:22072 pid:5600 tgid:5600 ppid:5592 task_flags:0x400140 flags:0x00080000 [ 721.171233][ C1] Call Trace: [ 721.174505][ C1] [ 721.177431][ C1] __schedule+0x1259/0x6920 [ 721.181948][ C1] ? arch_stack_walk+0xa6/0xf0 [ 721.186713][ C1] ? __pfx___schedule+0x10/0x10 [ 721.191566][ C1] ? mark_held_locks+0x40/0x70 [ 721.196326][ C1] preempt_schedule_irq+0x4e/0x90 [ 721.201339][ C1] irqentry_exit+0x205/0xa10 [ 721.205924][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 721.211897][ C1] RIP: 0010:__nr_to_section+0x2/0x100 [ 721.217270][ C1] Code: fe ff ff 48 8b 3c 24 e8 dc be f3 ff e9 d6 fd ff ff 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 54 <55> 53 48 89 fb 49 89 dc 49 c1 ec 07 e8 bd 53 80 ff e9 a5 00 00 00 [ 721.236871][ C1] RSP: 0018:ffffc900041d7568 EFLAGS: 00000207 [ 721.242929][ C1] RAX: 1ffffffff1cca3ee RBX: 000000000004fd94 RCX: 0000000000000000 [ 721.250888][ C1] RDX: dffffc0000000000 RSI: ffffffff828bfa10 RDI: 0000000000000009 [ 721.258850][ C1] RBP: ffffea00013f6500 R08: 0000000000000001 R09: 0000000000000000 [ 721.266815][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: ffffea00013f6500 [ 721.274776][ C1] R13: 0000008f3606bf75 R14: 0000000000000000 R15: dffffc0000000000 [ 721.282744][ C1] ? lookup_page_ext+0x10/0x100 [ 721.287597][ C1] lookup_page_ext+0x46/0x100 [ 721.292271][ C1] page_ext_get+0x58/0x1a0 [ 721.296682][ C1] __reset_page_owner+0x2b/0x190 [ 721.301618][ C1] free_unref_folios+0xa4a/0x1790 [ 721.306641][ C1] ? folios_put_refs+0x51d/0xaa0 [ 721.311573][ C1] ? folios_put_refs+0x51d/0xaa0 [ 721.316510][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 721.322317][ C1] folios_put_refs+0x585/0xaa0 [ 721.327084][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 721.332368][ C1] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 721.338690][ C1] shmem_undo_range+0x5e5/0x1570 [ 721.343626][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 721.349006][ C1] ? kernel_text_address+0x8d/0x100 [ 721.354205][ C1] ? __kernel_text_address+0xd/0x30 [ 721.359394][ C1] ? unwind_get_return_address+0x59/0xa0 [ 721.365021][ C1] ? arch_stack_walk+0xa6/0xf0 [ 721.369800][ C1] ? kasan_save_stack+0x3f/0x50 [ 721.374648][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 721.380017][ C1] shmem_evict_inode+0x3b1/0xca0 [ 721.384951][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 721.390404][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 721.396466][ C1] ? lock_acquire+0x1d1/0x380 [ 721.401139][ C1] ? find_held_lock+0x2b/0x80 [ 721.405813][ C1] ? evict+0x37e/0xad0 [ 721.409877][ C1] ? evict+0x37e/0xad0 [ 721.413939][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 721.419407][ C1] evict+0x3c2/0xad0 [ 721.423299][ C1] ? __pfx_evict+0x10/0x10 [ 721.427708][ C1] ? lock_acquire+0x1d1/0x380 [ 721.432385][ C1] ? iput.part.0+0x981/0x1050 [ 721.437058][ C1] iput.part.0+0x989/0x1050 [ 721.441560][ C1] iput+0x35/0x40 [ 721.445189][ C1] filename_unlinkat+0x466/0x730 [ 721.450127][ C1] ? __pfx_filename_unlinkat+0x10/0x10 [ 721.455591][ C1] ? do_getname+0x191/0x390 [ 721.460086][ C1] __x64_sys_unlink+0x46/0x70 [ 721.464760][ C1] do_syscall_64+0x123/0x790 [ 721.469346][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.475232][ C1] RIP: 0033:0x7f707219d247 [ 721.479658][ C1] RSP: 002b:00007ffe3afe0468 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 721.488064][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f707219d247 [ 721.496023][ C1] RDX: 00007ffe3afe0490 RSI: 00007ffe3afe0520 RDI: 00007ffe3afe0520 [ 721.503983][ C1] RBP: 00007ffe3afe0520 R08: 00007ffe3afe1520 R09: 00000000ffffffff [ 721.511944][ C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffe3afe15b0 [ 721.519906][ C1] R13: 00007f70722344bb R14: 0000000000094602 R15: 00007ffe3afe15f0 [ 721.527884][ C1] [ 721.530895][ C1] task:kworker/0:2 state:R running task stack:22568 pid:190 tgid:190 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 721.544459][ C1] Workqueue: usb_hub_wq hub_event [ 721.549483][ C1] Call Trace: [ 721.552749][ C1] [ 721.555672][ C1] __schedule+0x1259/0x6920 [ 721.560181][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 721.565118][ C1] ? __pfx___schedule+0x10/0x10 [ 721.569970][ C1] ? mark_held_locks+0x40/0x70 [ 721.574728][ C1] preempt_schedule_irq+0x4e/0x90 [ 721.579743][ C1] irqentry_exit+0x205/0xa10 [ 721.584329][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 721.590299][ C1] RIP: 0010:lock_is_held_type+0xf5/0x140 [ 721.595921][ C1] Code: ff ff ff ff 65 0f c1 15 f1 e5 ba 08 83 fa 01 8b 44 24 04 75 2d 9c 5a 80 e6 02 75 47 41 f7 c5 00 02 00 00 74 01 fb 48 83 c4 08 <5b> 5d 41 5c 41 5d 41 5e 41 5f e9 4c 46 03 00 e9 47 46 03 00 31 c0 [ 721.615517][ C1] RSP: 0018:ffffc9000304f5d0 EFLAGS: 00000292 [ 721.621573][ C1] RAX: 0000000000000001 RBX: ffffffff8edec5a0 RCX: 0000000000000001 [ 721.629537][ C1] RDX: 0000000000000046 RSI: ffffffff8e3683a1 RDI: ffffffff8c623980 [ 721.637500][ C1] RBP: ffff888021f4cb00 R08: 0000000000000005 R09: 0000000000000000 [ 721.645460][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: 00000000ffffffff [ 721.653419][ C1] R13: 0000000000000246 R14: ffff888021f4d750 R15: 0000000000000004 [ 721.661396][ C1] kernfs_root+0x20e/0x2a0 [ 721.665813][ C1] kernfs_find_and_get_ns+0x20/0x70 [ 721.671015][ C1] sysfs_merge_group+0xcb/0x340 [ 721.675871][ C1] ? __pfx_sysfs_merge_group+0x10/0x10 [ 721.681328][ C1] ? __pfx_sysfs_add_file_to_group+0x10/0x10 [ 721.687303][ C1] ? blocking_notifier_call_chain+0x53/0xa0 [ 721.693196][ C1] ? __pfx___might_resched+0x10/0x10 [ 721.698479][ C1] usb_create_sysfs_dev_files+0xe8/0x390 [ 721.704107][ C1] usb_bus_notify+0xd4/0x110 [ 721.708691][ C1] notifier_call_chain+0x99/0x3f0 [ 721.713720][ C1] blocking_notifier_call_chain+0x69/0xa0 [ 721.719438][ C1] bus_notify+0x56/0x80 [ 721.723586][ C1] device_add+0x1169/0x1970 [ 721.728094][ C1] ? __pfx_device_add+0x10/0x10 [ 721.732947][ C1] ? add_device_randomness+0xc9/0x110 [ 721.738317][ C1] usb_new_device.part.0+0xcc2/0x1686 [ 721.743693][ C1] ? do_raw_spin_lock+0x128/0x260 [ 721.748717][ C1] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 721.754524][ C1] ? mark_held_locks+0x40/0x70 [ 721.759286][ C1] hub_event.cold+0x1e3/0xe90 [ 721.763982][ C1] ? __pfx_hub_event+0x10/0x10 [ 721.768747][ C1] ? __bfs+0x1b0/0x2a0 [ 721.772809][ C1] ? lock_acquire+0x1d1/0x380 [ 721.777477][ C1] ? process_one_work+0xa2c/0x1b10 [ 721.782590][ C1] ? process_one_work+0x906/0x1b10 [ 721.787699][ C1] ? process_one_work+0x906/0x1b10 [ 721.792813][ C1] process_one_work+0xac7/0x1b10 [ 721.797764][ C1] ? __pfx_process_one_work+0x10/0x10 [ 721.803133][ C1] ? lock_acquire+0x1d1/0x380 [ 721.807811][ C1] ? __pfx_hub_event+0x10/0x10 [ 721.812576][ C1] worker_thread+0x5ef/0xe50 [ 721.817164][ C1] ? __pfx_worker_thread+0x10/0x10 [ 721.822278][ C1] ? kthread+0x13a/0x450 [ 721.826516][ C1] ? __pfx_worker_thread+0x10/0x10 [ 721.831626][ C1] kthread+0x373/0x450 [ 721.835693][ C1] ? __pfx_kthread+0x10/0x10 [ 721.840280][ C1] ret_from_fork+0x730/0xd60 [ 721.844869][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 721.849975][ C1] ? __switch_to+0x800/0x10f0 [ 721.854647][ C1] ? __pfx_kthread+0x10/0x10 [ 721.859235][ C1] ret_from_fork_asm+0x1a/0x30 [ 721.864005][ C1] [ 721.867015][ C1] rcu: rcu_preempt kthread starved for 10670 jiffies! g39997 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 721.878021][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 721.887974][ C1] rcu: RCU grace-period kthread stack dump: [ 721.893847][ C1] task:rcu_preempt state:R running task stack:27560 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 721.907335][ C1] Call Trace: [ 721.910600][ C1] [ 721.913522][ C1] __schedule+0x1259/0x6920 [ 721.918025][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 721.922970][ C1] ? __pfx___schedule+0x10/0x10 [ 721.927820][ C1] ? find_held_lock+0x2b/0x80 [ 721.932501][ C1] ? schedule+0x225/0x2c0 [ 721.936836][ C1] schedule+0xdd/0x2c0 [ 721.940909][ C1] schedule_timeout+0x127/0x280 [ 721.945756][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 721.951125][ C1] ? __pfx_process_timeout+0x10/0x10 [ 721.956405][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 721.962208][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 721.967664][ C1] rcu_gp_fqs_loop+0x1a9/0x8f0 [ 721.972424][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 721.977704][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 721.982636][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 721.987828][ C1] ? rcu_is_watching+0x13/0xc0 [ 721.992594][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 721.998401][ C1] rcu_gp_kthread+0x17a/0x220 [ 722.003070][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 722.008260][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 722.014067][ C1] ? __kthread_parkme+0x18f/0x230 [ 722.019089][ C1] ? kthread+0x13a/0x450 [ 722.023327][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 722.028519][ C1] kthread+0x373/0x450 [ 722.032579][ C1] ? __pfx_kthread+0x10/0x10 [ 722.037158][ C1] ret_from_fork+0x730/0xd60 [ 722.041725][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 722.046807][ C1] ? __switch_to+0x800/0x10f0 [ 722.051457][ C1] ? __pfx_kthread+0x10/0x10 [ 722.056032][ C1] ret_from_fork_asm+0x1a/0x30 [ 722.060785][ C1] [ 722.063777][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 722.070065][ C1] Sending NMI from CPU 1 to CPUs 0: [ 722.075244][ C0] NMI backtrace for cpu 0 [ 722.075256][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 722.075275][ C0] Tainted: [L]=SOFTLOCKUP [ 722.075280][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 722.075289][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 722.075304][ C0] Code: 47 93 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 38 19 00 fb f4 0c 50 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 722.075318][ C0] RSP: 0000:ffffffff8ea07cf0 EFLAGS: 00000246 [ 722.075330][ C0] RAX: 00000000026617e1 RBX: ffffffff8ea91580 RCX: ffffffff8bd28215 [ 722.075339][ C0] RDX: 0000000000000001 RSI: ffffffff8e38e858 RDI: ffffffff8c623980 [ 722.075349][ C0] RBP: fffffbfff1d522b0 R08: 0000000000000001 R09: ffffed10170867bd [ 722.075364][ C0] R10: ffff8880b8433deb R11: 0000000000000001 R12: 0000000000000000 [ 722.075373][ C0] R13: 0000000000000000 R14: 1ffffffff1d40fa2 R15: dffffc0000000000 [ 722.075383][ C0] FS: 0000000000000000(0000) GS:ffff888123b4f000(0000) knlGS:0000000000000000 [ 722.075397][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 722.075406][ C0] CR2: 0000001b327f5ff8 CR3: 0000000034864000 CR4: 00000000003526f0 [ 722.075415][ C0] Call Trace: [ 722.075420][ C0] [ 722.075425][ C0] default_idle+0x9/0x10 [ 722.075439][ C0] default_idle_call+0x6c/0xb0 [ 722.075454][ C0] do_idle+0x3ae/0x5b0 [ 722.075471][ C0] ? __pfx_do_idle+0x10/0x10 [ 722.075489][ C0] ? do_idle+0x392/0x5b0 [ 722.075507][ C0] cpu_startup_entry+0x4f/0x60 [ 722.075525][ C0] rest_init+0x2d3/0x2e0 [ 722.075540][ C0] ? __pfx_rest_init+0x10/0x10 [ 722.075556][ C0] ? __pfx_acpi_read_bit_register+0x10/0x10 [ 722.075570][ C0] ? lock_acquire+0x1d1/0x380 [ 722.075587][ C0] ? __pfx_kernel_init+0x10/0x10 [ 722.075604][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 722.075618][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 722.075633][ C0] ? acpi_enable_subsystem+0x4d9/0x4f0 [ 722.075649][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 722.075667][ C0] start_kernel+0x48e/0x490 [ 722.075684][ C0] x86_64_start_reservations+0x24/0x30 [ 722.075699][ C0] x86_64_start_kernel+0x12b/0x130 [ 722.075716][ C0] common_startup_64+0x13e/0x158 [ 722.075738][ C0] [ 724.141931][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 724.141973][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 724.142916][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 724.142953][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 727.058538][ T190] usb 6-1: config 0 descriptor?? [ 727.106746][ T9504] syz.0.824 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 727.106768][ T9504] CPU: 0 UID: 0 PID: 9504 Comm: syz.0.824 Tainted: G L syzkaller #0 PREEMPT(full) [ 727.106784][ T9504] Tainted: [L]=SOFTLOCKUP [ 727.106788][ T9504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 727.106795][ T9504] Call Trace: [ 727.106799][ T9504] [ 727.106803][ T9504] dump_stack_lvl+0x100/0x190 [ 727.106824][ T9504] dump_header+0xfb/0x606