last executing test programs: 21.859124015s ago: executing program 0 (id=18): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001000)={@cgroup, 0xffffffffffffffff, 0x9, 0x30}, 0x20) 21.805114986s ago: executing program 0 (id=19): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 21.784656586s ago: executing program 0 (id=20): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000400), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000440), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x9, 0x3, &(0x7f0000000780)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x14}}, &(0x7f00000007c0)='GPL\x00', 0x5, 0xc3, &(0x7f0000000800)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) r3 = openat$sysfs(0xffffff9c, 0x0, 0x1c9a82, 0x38) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$NILFS_IOCTL_SET_SUINFO(r4, 0x40186e8d, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x1c, r5, 0x1, 0x8000, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x44) sendfile(r3, 0xffffffffffffffff, 0x0, 0xbc44) 18.125696472s ago: executing program 0 (id=23): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8c16, &(0x7f0000000080)=ANY=[], 0x8, 0x2bf, &(0x7f00000000c0)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) getpid() setns(0xffffffffffffffff, 0x24020000) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000, 0x6, &(0x7f0000872000/0x1000)=nil) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000840)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) write(r0, &(0x7f00000008c0)='n', 0x1) r1 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./tracing\x00', &(0x7f0000000680)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./tracing/events/sched/filter\x00', 0x1, 0x0) write$binfmt_format(r3, &(0x7f0000000700)='0\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./tracing/events/sched/filter\x00', 0x2240, 0x0) readv(r4, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/115, 0x73}], 0x1) read$FUSE(r4, &(0x7f0000002a00)={0x2020}, 0x2020) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) open(0x0, 0x0, 0x44) 17.903932438s ago: executing program 0 (id=28): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="002222000000962313927b7c070c0000007e24591de11d47eadb132a76009b01f6216683"], 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000380), 0x40, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000a80)=""/241) 17.637192154s ago: executing program 0 (id=33): mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount$bpf(0x0, &(0x7f0000004340)='./file0\x00', 0x0, 0x38728a2, 0x0) 17.604395805s ago: executing program 32 (id=33): mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount$bpf(0x0, &(0x7f0000004340)='./file0\x00', 0x0, 0x38728a2, 0x0) 6.714460401s ago: executing program 2 (id=102): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r4, &(0x7f0000001180)={0x2020}, 0x2020) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, 0x0) ioctl$UFFDIO_POISON(r5, 0xc020aa08, &(0x7f0000000900)={{&(0x7f000002a000/0x1000)=nil, 0x1000}, 0x1}) 6.713095501s ago: executing program 3 (id=103): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x42804}, 0x4010) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x6) r0 = openat$incfs(0xffffffffffffff9c, 0x0, 0x1c10c1, 0x9c37611dc13d0db7) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000580)={0x7, 0x0, [{0xc0000000, 0x2, 0x0, 0x7, 0xb60, 0x0, 0x8}, {0x80000019, 0x5, 0x5, 0x9, 0x2ab7, 0x0, 0x6}, {0x7, 0x0, 0x5, 0xb03, 0x3ff, 0x8}, {0x0, 0x40, 0x6, 0x3, 0x1, 0x5, 0x2}, {0x2, 0x6, 0x2, 0x4, 0x8, 0x0, 0x6}, {0x1, 0xb, 0x0, 0xa8, 0x2, 0x6, 0x11a}, {0x4, 0x7, 0x0, 0x7ff, 0x0, 0x2, 0xf}]}) fchown(r0, 0x0, 0xee01) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000480)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) socket$inet(0x2, 0x1, 0x6) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000780)='net/arp\x00') preadv(r2, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/119, 0x77}, {&(0x7f0000001140)=""/4096, 0x1000}], 0x2, 0x5, 0x0) 6.637164913s ago: executing program 3 (id=105): r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x5, 0x150, [0x0, 0x200000000140, 0x200000000170, 0x2000000002d0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x3, 0x10, 0x805, 'pim6reg1\x00', 'bridge_slave_1\x00', 'veth0_to_hsr\x00', 'batadv0\x00', @empty, [0x0, 0xff], @random="985002a26454", [0x0, 0x6430f406b0f790d4, 0xff, 0xff, 0xff, 0xff], 0x0, 0x70, 0x70, 0xc0, [], [], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x10001, {0x9}}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x3, 0xfffffffffffffffc}]}, 0x1c8) 6.586037904s ago: executing program 3 (id=106): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x200000000300, 0x200000000330, 0x200000000360], 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000000000000000000000002200000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000002000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x138) 5.441603321s ago: executing program 3 (id=107): r0 = open(&(0x7f0000000900)='./bus\x00', 0x1c1242, 0x0) ftruncate(r0, 0x2007ffb) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000940), 0x103902, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 5.438135971s ago: executing program 2 (id=109): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket(0x10, 0x3, 0x0) close(0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x6) close(0x3) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r3, 0x0, 0x0, 0x40008c1, 0x0, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x4014}}, 0x40) 5.348972484s ago: executing program 2 (id=112): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x5, 0xbc, &(0x7f0000000340)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x8, 0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x4}, 0x10}, 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48895}, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000080)=0xfffffeff) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x1a) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1000000}) splice(r0, 0x0, r2, &(0x7f0000000580)=0x8d, 0x5, 0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x7f, 0x8000000000000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000680)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000780), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000007c0), 0x80002c1, 0x2, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) r6 = memfd_create(0x0, 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000940), 0xfdef) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x4010d00, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000980)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc\x00', 0x180) mount$overlay(0x0, &(0x7f0000000a00)='./bus\x00', &(0x7f0000000a40), 0x8, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './proc'}}]}) 4.083875314s ago: executing program 2 (id=115): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8c16, &(0x7f0000000080)=ANY=[], 0x8, 0x2bf, &(0x7f00000000c0)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) getpid() setns(0xffffffffffffffff, 0x24020000) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000, 0x6, &(0x7f0000872000/0x1000)=nil) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000840)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) write(r0, &(0x7f00000008c0)='n', 0x1) r1 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./tracing\x00', &(0x7f0000000680)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./tracing/events/sched/filter\x00', 0x1, 0x0) write$binfmt_format(r3, &(0x7f0000000700)='0\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./tracing/events/sched/filter\x00', 0x2240, 0x0) readv(r4, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/115, 0x73}], 0x1) 4.083769583s ago: executing program 3 (id=116): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0xa20, 0x8000c65) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0xc142, 0x1a2) sendfile(r1, r1, 0x0, 0x8000000f3aa6ea) 3.964763426s ago: executing program 2 (id=121): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f00000008c0), 0x0, 0x10, &(0x7f0000000900)}, 0x42) 3.942212077s ago: executing program 1 (id=123): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0xfffe, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmsg$802154_dgram(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x440480d0}, 0x84) 3.661207693s ago: executing program 1 (id=124): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x6, 0x0, 0x102}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) write(r1, &(0x7f0000000140)="00008847d100582a", 0x8) 3.661062993s ago: executing program 2 (id=125): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000005c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="290e29bd7000fbdbdf0527960000050031000e0000001400300053e0e85290ceb080fb816d3cdadf198b08000200", @ANYRES32=r2, @ANYBLOB='$\x002'], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 3.660977763s ago: executing program 33 (id=125): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000005c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="290e29bd7000fbdbdf0527960000050031000e0000001400300053e0e85290ceb080fb816d3cdadf198b08000200", @ANYRES32=r2, @ANYBLOB='$\x002'], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 3.38951356s ago: executing program 1 (id=127): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x100000000e2) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000000040)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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") utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)={0x81, 0x3ff}) 3.38901892s ago: executing program 3 (id=128): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x140}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f00000000c0)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x400000, 0x1, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000140)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$char_usb(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0) 2.708771306s ago: executing program 4 (id=137): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0xb382, 0x2, 0x3, 0xfffffffe}, &(0x7f0000000580), &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000500)='n', 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) pwritev(r1, 0x0, 0x0, 0x8, 0x4080000) madvise(&(0x7f000048c000/0x1000)=nil, 0x1000, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r3 = syz_io_uring_setup(0xa95, &(0x7f0000000180)={0x0, 0x4d1d, 0x130c8, 0x7, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) r4 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000007c0)={0x10000000}) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "2defbd1ccdd59bac", "b0ad0cd933caf9dbdfc37796bc1019ba", "779d4176"}, 0x28) writev(r2, &(0x7f0000000300)=[{&(0x7f00000005c0)="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", 0xffffffa0}, {&(0x7f0000000340)="bf67a361000138944b854b78cc4e2237f68791bd7786513b715bf9ad6389844bc809b10b216304437e8d4b9e9cec7b31a34a02854029d58ba77b51b6479ef73e43d95fb478cc230a625897", 0x4b}, {&(0x7f0000000440)="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", 0x149}], 0x3) 2.708647346s ago: executing program 4 (id=138): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0xa20, 0x8000c65) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0xc142, 0x1a2) sendfile(r1, r1, 0x0, 0x8000000f3aa6ea) 2.648916687s ago: executing program 6 (id=126): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x5, 0xbc, &(0x7f0000000340)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x8, 0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x4}, 0x10}, 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48895}, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000080)=0xfffffeff) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x1a) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1000000}) splice(r0, 0x0, r2, &(0x7f0000000580)=0x8d, 0x5, 0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x7f, 0x8000000000000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000680)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000780), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000007c0), 0x80002c1, 0x2, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) r6 = memfd_create(0x0, 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000940), 0xfdef) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x4010d00, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000980)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc\x00', 0x180) mount$overlay(0x0, &(0x7f0000000a00)='./bus\x00', &(0x7f0000000a40), 0x8, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './proc'}}]}) 1.107571663s ago: executing program 1 (id=139): setns(0xc9, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x408001, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x7}, 0x1c) 1.035379575s ago: executing program 4 (id=140): close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000196c0)={[0x7d]}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000400)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000019400)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000019440)={0x1, 0x2a, &(0x7f0000019500)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8fdffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa20000000000000702000000feffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000019680)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.035307635s ago: executing program 5 (id=34): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, r2, 0x47550000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 876.151429ms ago: executing program 6 (id=126): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x5, 0xbc, &(0x7f0000000340)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x8, 0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x4}, 0x10}, 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48895}, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000080)=0xfffffeff) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x1a) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1000000}) splice(r0, 0x0, r2, &(0x7f0000000580)=0x8d, 0x5, 0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x7f, 0x8000000000000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000680)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000780), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000007c0), 0x80002c1, 0x2, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) r6 = memfd_create(0x0, 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000940), 0xfdef) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x4010d00, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000980)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc\x00', 0x180) mount$overlay(0x0, &(0x7f0000000a00)='./bus\x00', &(0x7f0000000a40), 0x8, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './proc'}}]}) 771.440161ms ago: executing program 5 (id=34): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, r2, 0x47550000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 664.843834ms ago: executing program 6 (id=126): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x5, 0xbc, &(0x7f0000000340)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x8, 0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x4}, 0x10}, 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48895}, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000080)=0xfffffeff) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x1a) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1000000}) splice(r0, 0x0, r2, &(0x7f0000000580)=0x8d, 0x5, 0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x7f, 0x8000000000000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000680)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000780), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000007c0), 0x80002c1, 0x2, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) r6 = memfd_create(0x0, 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000940), 0xfdef) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x4010d00, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000980)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc\x00', 0x180) mount$overlay(0x0, &(0x7f0000000a00)='./bus\x00', &(0x7f0000000a40), 0x8, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './proc'}}]}) 526.420387ms ago: executing program 5 (id=34): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, r2, 0x47550000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 424.35814ms ago: executing program 4 (id=141): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x10}]}}, @TCA_RATE={0x4, 0x5, {0x5, 0x9}}]}, 0x40}}, 0x4800) listen(r0, 0x3) 424.19472ms ago: executing program 6 (id=126): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x5, 0xbc, &(0x7f0000000340)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x8, 0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x4}, 0x10}, 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48895}, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000080)=0xfffffeff) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x1a) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1000000}) splice(r0, 0x0, r2, &(0x7f0000000580)=0x8d, 0x5, 0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x7f, 0x8000000000000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000680)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000780), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000007c0), 0x80002c1, 0x2, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) r6 = memfd_create(0x0, 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000940), 0xfdef) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x4010d00, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000980)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc\x00', 0x180) mount$overlay(0x0, &(0x7f0000000a00)='./bus\x00', &(0x7f0000000a40), 0x8, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './proc'}}]}) 319.759912ms ago: executing program 5 (id=34): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, r2, 0x47550000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 238.251114ms ago: executing program 4 (id=142): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00', @ANYBLOB="100029bd7000ffdb"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x9, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x2, 0x5, 0x401, 0x1, 0x405, 0x864e, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf782, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x5, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x2, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd8, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xa, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000000408001d"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 237.977374ms ago: executing program 1 (id=143): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000100)=0x1, 0x12) 237.661844ms ago: executing program 6 (id=126): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x5, 0xbc, &(0x7f0000000340)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x8, 0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x4}, 0x10}, 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48895}, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000080)=0xfffffeff) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x1a) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1000000}) splice(r0, 0x0, r2, &(0x7f0000000580)=0x8d, 0x5, 0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x7f, 0x8000000000000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000680)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000780), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000007c0), 0x80002c1, 0x2, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) r6 = memfd_create(0x0, 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000940), 0xfdef) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x4010d00, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000980)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc\x00', 0x180) mount$overlay(0x0, &(0x7f0000000a00)='./bus\x00', &(0x7f0000000a40), 0x8, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './proc'}}]}) 155.476616ms ago: executing program 5 (id=34): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, r2, 0x47550000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 82.910888ms ago: executing program 1 (id=144): r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./tracing/events/sched/filter\x00', 0x1, 0x0) write$binfmt_format(r0, &(0x7f0000000700)='0\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./tracing/events/sched/filter\x00', 0x2240, 0x0) readv(r1, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/115, 0x73}], 0x1) 82.737048ms ago: executing program 4 (id=145): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/kernel/watchdog\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='0', 0x1) write(r0, 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/sys/kernel/watchdog_thresh\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='2', 0x1) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(&(0x7f0000000340)=@filename='none\x00', 0x0, &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 82.564888ms ago: executing program 6 (id=126): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x5, 0xbc, &(0x7f0000000340)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x8, 0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x4}, 0x10}, 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48895}, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000080)=0xfffffeff) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x1a) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1000000}) splice(r0, 0x0, r2, &(0x7f0000000580)=0x8d, 0x5, 0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x7f, 0x8000000000000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000680)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000780), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000007c0), 0x80002c1, 0x2, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) r6 = memfd_create(0x0, 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000940), 0xfdef) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x4010d00, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000980)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc\x00', 0x180) mount$overlay(0x0, &(0x7f0000000a00)='./bus\x00', &(0x7f0000000a40), 0x8, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './proc'}}]}) 0s ago: executing program 5 (id=34): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, r2, 0x47550000) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.67' (ED25519) to the list of known hosts. [ 22.129074][ T30] audit: type=1400 audit(1792103701.307:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.132826][ T277] cgroup: Unknown subsys name 'net' [ 22.151768][ T30] audit: type=1400 audit(1792103701.307:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.179205][ T30] audit: type=1400 audit(1792103701.337:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.179699][ T277] cgroup: Unknown subsys name 'devices' [ 22.328470][ T277] cgroup: Unknown subsys name 'hugetlb' [ 22.334122][ T277] cgroup: Unknown subsys name 'rlimit' [ 22.474319][ T30] audit: type=1400 audit(1792103701.647:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.497620][ T30] audit: type=1400 audit(1792103701.647:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.515719][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.523143][ T30] audit: type=1400 audit(1792103701.647:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.554282][ T30] audit: type=1400 audit(1792103701.707:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.579900][ T30] audit: type=1400 audit(1792103701.707:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.612445][ T30] audit: type=1400 audit(1792103701.787:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.638088][ T30] audit: type=1400 audit(1792103701.787:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.638128][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.272886][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.280009][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.287540][ T285] device bridge_slave_0 entered promiscuous mode [ 23.295490][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.302581][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.309998][ T285] device bridge_slave_1 entered promiscuous mode [ 23.385462][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.392697][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.400335][ T286] device bridge_slave_0 entered promiscuous mode [ 23.408900][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.415980][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.423588][ T286] device bridge_slave_1 entered promiscuous mode [ 23.447057][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.454131][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.461651][ T287] device bridge_slave_0 entered promiscuous mode [ 23.483142][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.490240][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.497802][ T287] device bridge_slave_1 entered promiscuous mode [ 23.550463][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.557583][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.565032][ T289] device bridge_slave_0 entered promiscuous mode [ 23.574811][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.581925][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.589484][ T289] device bridge_slave_1 entered promiscuous mode [ 23.598740][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.605820][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.613311][ T288] device bridge_slave_0 entered promiscuous mode [ 23.621691][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.628807][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.636197][ T288] device bridge_slave_1 entered promiscuous mode [ 23.770914][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.778013][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.785355][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.792525][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.800873][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.807970][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.815245][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.822313][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.845949][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.853053][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.860360][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.867420][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.899920][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.907016][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.914300][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.921394][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.949209][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.956749][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.963890][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.972130][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.979777][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.987123][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.995372][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.003237][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.010635][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.045138][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.053521][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.060598][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.069168][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.076919][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.084307][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.092577][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.099615][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.107100][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.115229][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.122437][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.146082][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.153596][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.161960][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.169063][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.176806][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.184955][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.192062][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.199478][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.207629][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.215529][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.223598][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.231672][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.239258][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.259536][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.267722][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.274741][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.282264][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.290758][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.297883][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.316680][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.324991][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.333257][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.341565][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.349760][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.357326][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.364717][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.373207][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.381401][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.388475][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.396156][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.404561][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.412823][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.419922][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.431773][ T287] device veth0_vlan entered promiscuous mode [ 24.450286][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.458801][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.467401][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.475296][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.483638][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.491976][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.499982][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.508450][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.516919][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.524764][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.533023][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.540574][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.548193][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.555590][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.563796][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.572139][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.585365][ T287] device veth1_macvtap entered promiscuous mode [ 24.592239][ T285] device veth0_vlan entered promiscuous mode [ 24.599167][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.607565][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.615740][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.623666][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.631949][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.640652][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.648896][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.671665][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.680100][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.688744][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.697821][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.709497][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.717967][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.735425][ T289] device veth0_vlan entered promiscuous mode [ 24.745412][ T285] device veth1_macvtap entered promiscuous mode [ 24.752860][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.761076][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.769917][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.779281][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.787715][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.787729][ T287] request_module fs-gadgetfs succeeded, but still no fs? [ 24.796747][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.811021][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.819498][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.827405][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.835400][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.843049][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.850728][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.858343][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.866228][ T288] device veth0_vlan entered promiscuous mode [ 24.873478][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.882094][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.902161][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.917512][ T286] device veth0_vlan entered promiscuous mode [ 24.934082][ T289] device veth1_macvtap entered promiscuous mode [ 24.943184][ T310] Zero length message leads to an empty skb [ 24.946223][ T288] device veth1_macvtap entered promiscuous mode [ 24.956689][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.965367][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.974028][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.982873][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.991705][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.000302][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.008793][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.017407][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.024930][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.040157][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.049282][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.068737][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.077275][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.085713][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.094589][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.103069][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.111389][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.119937][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.128522][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.144620][ T286] device veth1_macvtap entered promiscuous mode [ 25.172284][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.184082][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.194097][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.219422][ T324] process 'syz.4.6' launched './file0' with NULL argv: empty string added [ 25.233344][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.248734][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.265895][ T326] capability: warning: `syz.1.7' uses 32-bit capabilities (legacy support in use) [ 25.276391][ T326] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 25.317637][ T332] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.360758][ T337] loop1: detected capacity change from 0 to 128 [ 25.381743][ T339] loop2: detected capacity change from 0 to 1024 [ 25.390620][ T337] ======================================================= [ 25.390620][ T337] WARNING: The mand mount option has been deprecated and [ 25.390620][ T337] and is ignored by this kernel. Remove the mand [ 25.390620][ T337] option from the mount to silence this warning. [ 25.390620][ T337] ======================================================= [ 25.449555][ T339] EXT4-fs (loop2): Ignoring removed bh option [ 25.469930][ T337] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,quota,,errors=continue. Quota mode: writeback. [ 25.473809][ T339] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 25.485918][ T337] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 25.746527][ T293] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 25.754113][ T306] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.766278][ T350] loop1: detected capacity change from 0 to 256 [ 26.002978][ T356] loop1: detected capacity change from 0 to 1024 [ 26.053285][ T356] EXT4-fs (loop1): Ignoring removed bh option [ 26.068820][ T356] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 26.166630][ T293] usb 5-1: unable to get BOS descriptor or descriptor too short [ 26.246694][ T293] usb 5-1: config 1 interface 0 has no altsetting 0 [ 26.286663][ T306] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 26.297643][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.306526][ T306] usb 4-1: Product: syz [ 26.310837][ T306] usb 4-1: Manufacturer: syz [ 26.315628][ T306] usb 4-1: SerialNumber: syz [ 26.486636][ T293] usb 5-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.40 [ 26.501862][ T293] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.511097][ T293] usb 5-1: Product: syz [ 26.515420][ T293] usb 5-1: Manufacturer: syz [ 26.522158][ T293] usb 5-1: SerialNumber: syz [ 28.249427][ T371] sched: RT throttling activated [ 29.251897][ T30] kauditd_printk_skb: 88 callbacks suppressed [ 29.251912][ T30] audit: type=1400 audit(1792103708.427:162): avc: denied { mounton } for pid=374 comm="syz.3.22" path="/proc/4/task" dev="proc" ino=15263 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 30.022358][ T380] loop0: detected capacity change from 0 to 256 [ 30.039752][ T30] audit: type=1400 audit(1792103709.217:163): avc: denied { create } for pid=381 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 30.076774][ T293] usbhid 5-1:1.0: can't add hid device: -71 [ 30.083651][ T293] usbhid: probe of 5-1:1.0 failed with error -71 [ 30.119457][ T30] audit: type=1400 audit(1792103709.237:164): avc: denied { getopt } for pid=381 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 30.142623][ T293] usb 5-1: USB disconnect, device number 2 [ 30.150656][ T30] audit: type=1400 audit(1792103709.267:165): avc: denied { perfmon } for pid=379 comm="syz.0.23" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 30.171412][ T30] audit: type=1400 audit(1792103709.267:166): avc: denied { map_read map_write } for pid=379 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 30.191666][ T30] audit: type=1400 audit(1792103709.277:167): avc: denied { mounton } for pid=379 comm="syz.0.23" path="/6/file0/tracing" dev="loop0" ino=1048641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 30.230414][ T285] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 30.239349][ T285] FAT-fs (loop0): Filesystem has been set read-only [ 30.253334][ T30] audit: type=1400 audit(1792103709.277:168): avc: denied { mount } for pid=379 comm="syz.0.23" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 30.253463][ T285] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 30.296480][ T30] audit: type=1400 audit(1792103709.287:169): avc: denied { search } for pid=379 comm="syz.0.23" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 30.323298][ T30] audit: type=1400 audit(1792103709.287:170): avc: denied { write } for pid=379 comm="syz.0.23" name="filter" dev="tracefs" ino=2480 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 30.353950][ T30] audit: type=1400 audit(1792103709.287:171): avc: denied { open } for pid=379 comm="syz.0.23" path="/6/file0/tracing/events/sched/filter" dev="tracefs" ino=2480 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 30.447876][ T285] syz-executor (285) used greatest stack depth: 21976 bytes left [ 30.457064][ T402] loop0: detected capacity change from 0 to 4096 [ 30.499106][ T402] loop0: [ 30.541214][ T405] loop2: detected capacity change from 0 to 256 [ 30.567409][ T405] exfat: Deprecated parameter 'utf8' [ 30.579057][ T405] exfat: Deprecated parameter 'utf8' [ 30.598822][ T405] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 30.735492][ T408] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.749282][ T408] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.815424][ T419] loop2: detected capacity change from 0 to 256 [ 30.852276][ T408] device bridge_slave_0 entered promiscuous mode [ 30.901014][ T419] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 31.129297][ T408] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.156037][ T408] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.185324][ T408] device bridge_slave_1 entered promiscuous mode [ 31.297242][ T408] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.304347][ T408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.311716][ T408] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.318808][ T408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.381476][ T408] device veth0_vlan entered promiscuous mode [ 31.404983][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.413322][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.422763][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.443938][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.459813][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.485148][ T427] pit: kvm: requested 182704 ns i8254 timer period limited to 200000 ns [ 31.491724][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.502254][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.510476][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.518908][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.544397][ T427] pit: kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 31.553448][ T427] pit: kvm: requested 46933 ns i8254 timer period limited to 200000 ns [ 31.562320][ T427] pit: kvm: requested 58666 ns i8254 timer period limited to 200000 ns [ 31.571318][ T427] pit: kvm: requested 93866 ns i8254 timer period limited to 200000 ns [ 31.580289][ T427] pit: kvm: requested 36876 ns i8254 timer period limited to 200000 ns [ 31.589619][ T427] pit: kvm: requested 125714 ns i8254 timer period limited to 200000 ns [ 31.598435][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.614622][ T408] device veth1_macvtap entered promiscuous mode [ 31.621589][ T427] pit: kvm: requested 26819 ns i8254 timer period limited to 200000 ns [ 31.629125][ T431] loop1: detected capacity change from 0 to 4096 [ 31.638450][ T369] udevd[369]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 31.648976][ T427] pit: kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 31.657617][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.667026][ T427] pit: kvm: requested 139123 ns i8254 timer period limited to 200000 ns [ 31.677116][ T369] udevd[369]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 31.680643][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.696665][ T369] udevd[369]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 31.696688][ T431] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 31.714148][ T433] loop2: detected capacity change from 0 to 1024 [ 31.715952][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.729764][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.738164][ T369] udevd[369]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 31.773979][ T433] EXT4-fs (loop2): Ignoring removed bh option [ 31.783479][ T360] device bridge_slave_1 left promiscuous mode [ 31.790685][ T369] udevd[369]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 31.799557][ T360] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.808498][ T360] device bridge_slave_0 left promiscuous mode [ 31.814996][ T360] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.815758][ T369] udevd[369]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 31.832473][ T433] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 31.862406][ T433] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 31.875640][ T360] device veth1_macvtap left promiscuous mode [ 31.889010][ T360] device veth0_vlan left promiscuous mode [ 31.959871][ T369] udevd[369]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 31.977323][ T446] loop4: detected capacity change from 0 to 1024 [ 31.979692][ T369] udevd[369]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 32.000662][ T369] udevd[369]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 32.010927][ T369] udevd[369]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 32.058064][ T446] EXT4-fs (loop4): Ignoring removed bh option [ 32.112072][ T446] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 32.436570][ T306] rtl8150 4-1:1.0: couldn't reset the device [ 32.444029][ T306] rtl8150: probe of 4-1:1.0 failed with error -5 [ 32.493828][ T306] usb 4-1: USB disconnect, device number 2 [ 33.217486][ T360] device bridge_slave_1 left promiscuous mode [ 33.231597][ T360] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.279911][ T360] device bridge_slave_0 left promiscuous mode [ 33.286181][ T360] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.314575][ T360] device veth1_macvtap left promiscuous mode [ 33.338426][ T360] device veth0_vlan left promiscuous mode [ 33.458689][ T486] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 33.460657][ T492] netlink: 48 bytes leftover after parsing attributes in process `syz.2.59'. [ 33.540779][ T495] FAULT_INJECTION: forcing a failure. [ 33.540779][ T495] name failslab, interval 1, probability 0, space 0, times 1 [ 33.586477][ T495] CPU: 0 PID: 495 Comm: syz.1.60 Not tainted syzkaller #0 [ 33.593746][ T495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.603864][ T495] Call Trace: [ 33.607166][ T495] [ 33.610108][ T495] __dump_stack+0x21/0x30 [ 33.614461][ T495] dump_stack_lvl+0x110/0x170 [ 33.619147][ T495] ? show_regs_print_info+0x20/0x20 [ 33.624363][ T495] dump_stack+0x15/0x20 [ 33.628529][ T495] should_fail+0x3ab/0x500 [ 33.632956][ T495] __should_failslab+0xa4/0xe0 [ 33.637732][ T495] should_failslab+0x9/0x20 [ 33.642283][ T495] slab_pre_alloc_hook+0x39/0xd0 [ 33.647282][ T495] ? key_alloc+0x306/0xef0 [ 33.651716][ T495] __kmalloc_track_caller+0x6c/0x2c0 [ 33.657018][ T495] ? key_alloc+0x306/0xef0 [ 33.661474][ T495] kmemdup+0x26/0x60 [ 33.665381][ T495] key_alloc+0x306/0xef0 [ 33.669642][ T495] request_key_and_link+0x5a4/0x1120 [ 33.674937][ T495] ? key_task_permission+0x36d/0x4a0 [ 33.680232][ T495] ? complete_request_key+0xa0/0xa0 [ 33.685457][ T495] ? downgrade_write+0x440/0x440 [ 33.690415][ T495] ? asymmetric_key_cmp+0x250/0x250 [ 33.695631][ T495] ? keyring_search_rcu+0x290/0x290 [ 33.700858][ T495] __se_sys_request_key+0x293/0x350 [ 33.706072][ T495] ? __x64_sys_request_key+0xb0/0xb0 [ 33.711373][ T495] ? __kasan_check_write+0x14/0x20 [ 33.716498][ T495] ? switch_fpu_return+0x15d/0x2c0 [ 33.721627][ T495] __x64_sys_request_key+0x9b/0xb0 [ 33.726847][ T495] x64_sys_call+0x6f7/0x9a0 [ 33.731394][ T495] do_syscall_64+0x4c/0xa0 [ 33.735829][ T495] ? clear_bhb_loop+0x50/0xa0 [ 33.740525][ T495] ? clear_bhb_loop+0x50/0xa0 [ 33.745213][ T495] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 33.751118][ T495] RIP: 0033:0x7f8acf992559 [ 33.755547][ T495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.775171][ T495] RSP: 002b:00007f8ace3eb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 33.783627][ T495] RAX: ffffffffffffffda RBX: 00007f8acfc19fa0 RCX: 00007f8acf992559 [ 33.791615][ T495] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 33.799600][ T495] RBP: 00007f8acfa298b0 R08: 0000000000000000 R09: 0000000000000000 [ 33.807608][ T495] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 33.815601][ T495] R13: 00007f8acfc1a038 R14: 00007f8acfc19fa0 R15: 00007ffe0eba6548 [ 33.823586][ T495] [ 34.274992][ T504] loop4: detected capacity change from 0 to 256 [ 34.530238][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 34.530253][ T30] audit: type=1400 audit(1792103713.707:208): avc: denied { sys_module } for pid=515 comm="syz.4.66" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 34.611228][ T30] audit: type=1400 audit(1792103713.747:209): avc: denied { read write } for pid=515 comm="syz.4.66" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 34.664562][ T30] audit: type=1400 audit(1792103713.747:210): avc: denied { open } for pid=515 comm="syz.4.66" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 34.687514][ T30] audit: type=1400 audit(1792103713.747:211): avc: denied { ioctl } for pid=515 comm="syz.4.66" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 34.711913][ T30] audit: type=1400 audit(1792103713.827:212): avc: denied { create } for pid=511 comm="syz.2.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 34.930891][ T30] audit: type=1400 audit(1792103714.107:213): avc: denied { create } for pid=525 comm="syz.4.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.962936][ T30] audit: type=1400 audit(1792103714.107:214): avc: denied { setopt } for pid=525 comm="syz.4.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.021815][ T30] audit: type=1400 audit(1792103714.157:215): avc: denied { ioctl } for pid=524 comm="syz.3.70" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17118 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 35.100777][ T30] audit: type=1400 audit(1792103714.277:216): avc: denied { read } for pid=539 comm="syz.4.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 35.134934][ T30] audit: type=1400 audit(1792103714.307:217): avc: denied { unlink } for pid=541 comm="syz.2.74" name="#3" dev="tmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 35.854910][ T556] Need at least one configuration in g1. [ 35.895699][ T556] udc dummy_udc.0: failed to start g1: -22 [ 36.284003][ T563] syz.4.81 (563) used greatest stack depth: 20256 bytes left [ 36.306512][ T306] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 36.626546][ T306] usb 3-1: not running at top speed; connect to a high speed hub [ 36.701405][ T572] netlink: 'syz.3.84': attribute type 1 has an invalid length. [ 36.706979][ T306] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.719339][ T572] netlink: 48 bytes leftover after parsing attributes in process `syz.3.84'. [ 36.726795][ T306] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 36.743256][ T306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.787272][ T306] usb 3-1: Found UVC 1.00 device (046d:0825) [ 37.016554][ T306] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 37.036553][ T306] uvcvideo 3-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 37.045449][ T306] uvcvideo 3-1:1.1: Failed to initialize the device (-5). [ 37.055052][ T306] usb 3-1: USB disconnect, device number 2 [ 37.565000][ T590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.89'. [ 37.622792][ T590] FAULT_INJECTION: forcing a failure. [ 37.622792][ T590] name failslab, interval 1, probability 0, space 0, times 0 [ 37.655387][ T590] CPU: 0 PID: 590 Comm: syz.2.89 Not tainted syzkaller #0 [ 37.662557][ T590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.672641][ T590] Call Trace: [ 37.675949][ T590] [ 37.678903][ T590] __dump_stack+0x21/0x30 [ 37.683281][ T590] dump_stack_lvl+0x110/0x170 [ 37.687994][ T590] ? show_regs_print_info+0x20/0x20 [ 37.693233][ T590] dump_stack+0x15/0x20 [ 37.697425][ T590] should_fail+0x3ab/0x500 [ 37.701878][ T590] __should_failslab+0xa4/0xe0 [ 37.706693][ T590] should_failslab+0x9/0x20 [ 37.711240][ T590] slab_pre_alloc_hook+0x39/0xd0 [ 37.716224][ T590] kmem_cache_alloc_trace+0x48/0x270 [ 37.721685][ T590] ? assoc_array_insert+0x3ff/0x3210 [ 37.727193][ T590] assoc_array_insert+0x3ff/0x3210 [ 37.732405][ T590] ? __kasan_check_write+0x14/0x20 [ 37.737560][ T590] ? rwsem_read_trylock+0x2af/0x640 [ 37.742851][ T590] ? __kasan_check_write+0x14/0x20 [ 37.748014][ T590] ? mutex_lock+0x9b/0x1c0 [ 37.752471][ T590] __key_link_begin+0xe1/0x210 [ 37.757325][ T590] key_create_or_update+0x4d4/0x9c0 [ 37.762610][ T590] ? key_type_put+0x20/0x20 [ 37.767155][ T590] ? lookup_user_key_possessed+0x40/0x40 [ 37.772833][ T590] ? __kasan_check_write+0x14/0x20 [ 37.777995][ T590] ? _copy_from_user+0x95/0xd0 [ 37.782789][ T590] __se_sys_add_key+0x34b/0x410 [ 37.787655][ T590] ? __x64_sys_add_key+0xd0/0xd0 [ 37.792597][ T590] ? __kasan_check_write+0x14/0x20 [ 37.798151][ T590] __x64_sys_add_key+0xbf/0xd0 [ 37.802956][ T590] x64_sys_call+0x713/0x9a0 [ 37.807490][ T590] do_syscall_64+0x4c/0xa0 [ 37.811940][ T590] ? clear_bhb_loop+0x50/0xa0 [ 37.816658][ T590] ? clear_bhb_loop+0x50/0xa0 [ 37.821368][ T590] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 37.827271][ T590] RIP: 0033:0x7f858e079559 [ 37.831689][ T590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.851295][ T590] RSP: 002b:00007f858cad2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 37.859730][ T590] RAX: ffffffffffffffda RBX: 00007f858e300fa0 RCX: 00007f858e079559 [ 37.867706][ T590] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000000080 [ 37.875675][ T590] RBP: 00007f858e1108b0 R08: fffffffffffffffe R09: 0000000000000000 [ 37.883645][ T590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.891628][ T590] R13: 00007f858e301038 R14: 00007f858e300fa0 R15: 00007ffd16b77788 [ 37.899621][ T590] [ 38.053792][ T20] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 38.296541][ T20] usb 4-1: Using ep0 maxpacket: 16 [ 38.416755][ T20] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.427980][ T20] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.437867][ T20] usb 4-1: config 0 interface 0 has no altsetting 0 [ 38.444494][ T20] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 38.454733][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.463912][ T20] usb 4-1: config 0 descriptor?? [ 39.124300][ T20] hid-generic 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 39.132398][ T20] hid-generic 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 39.141566][ T20] hid-generic 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 39.396896][ T20] hid-generic 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 39.410297][ T20] hid-generic 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 39.446793][ T20] hid-generic 0003:04D8:00DD.0001: hidraw0: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 39.470694][ T20] usb 4-1: USB disconnect, device number 3 [ 39.535644][ T615] udevd[615]: open /dev/null failed: Not a directory [ 39.829722][ T621] loop4: detected capacity change from 0 to 4096 [ 39.837499][ T369] udevd[369]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 39.877468][ T621] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 39.886902][ T626] FAULT_INJECTION: forcing a failure. [ 39.886902][ T626] name failslab, interval 1, probability 0, space 0, times 0 [ 39.899943][ T626] CPU: 1 PID: 626 Comm: syz.2.101 Not tainted syzkaller #0 [ 39.907309][ T626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.917385][ T626] Call Trace: [ 39.920698][ T626] [ 39.923642][ T626] __dump_stack+0x21/0x30 [ 39.928083][ T626] dump_stack_lvl+0x110/0x170 [ 39.932794][ T626] ? show_regs_print_info+0x20/0x20 [ 39.938013][ T626] dump_stack+0x15/0x20 [ 39.942186][ T626] should_fail+0x3ab/0x500 [ 39.946622][ T626] __should_failslab+0xa4/0xe0 [ 39.951405][ T626] should_failslab+0x9/0x20 [ 39.955945][ T626] slab_pre_alloc_hook+0x39/0xd0 [ 39.960903][ T626] __kmalloc+0x6d/0x2c0 [ 39.965075][ T626] ? __vmalloc_node_range+0x384/0xad0 [ 39.970460][ T626] __vmalloc_node_range+0x384/0xad0 [ 39.975675][ T626] ? should_failslab+0x9/0x20 [ 39.980362][ T626] dup_task_struct+0x41e/0xc70 [ 39.985161][ T626] ? copy_process+0x5e0/0x3230 [ 39.989945][ T626] copy_process+0x5e0/0x3230 [ 39.994555][ T626] ? __kasan_check_write+0x14/0x20 [ 39.999683][ T626] ? proc_fail_nth_write+0x180/0x200 [ 40.005008][ T626] ? __pidfd_prepare+0x150/0x150 [ 40.009971][ T626] kernel_clone+0x233/0x960 [ 40.014488][ T626] ? create_io_thread+0x170/0x170 [ 40.019527][ T626] ? __kasan_check_write+0x14/0x20 [ 40.024652][ T626] ? mutex_unlock+0x8f/0x230 [ 40.029260][ T626] __x64_sys_clone+0x198/0x210 [ 40.034033][ T626] ? __kasan_check_write+0x14/0x20 [ 40.039161][ T626] ? __ia32_sys_vfork+0x130/0x130 [ 40.044294][ T626] ? __kasan_check_write+0x14/0x20 [ 40.049421][ T626] ? switch_fpu_return+0x15d/0x2c0 [ 40.054544][ T626] x64_sys_call+0x41f/0x9a0 [ 40.059056][ T626] do_syscall_64+0x4c/0xa0 [ 40.063484][ T626] ? clear_bhb_loop+0x50/0xa0 [ 40.068172][ T626] ? clear_bhb_loop+0x50/0xa0 [ 40.072861][ T626] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 40.078764][ T626] RIP: 0033:0x7f858e079559 [ 40.083195][ T626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.102806][ T626] RSP: 002b:00007f858cad1fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 40.111330][ T626] RAX: ffffffffffffffda RBX: 00007f858e300fa0 RCX: 00007f858e079559 [ 40.119312][ T626] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 40.127291][ T626] RBP: 00007f858e1108b0 R08: 0000000000000000 R09: 0000000000000000 [ 40.135279][ T626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.143255][ T626] R13: 00007f858e301038 R14: 00007f858e300fa0 R15: 00007ffd16b77788 [ 40.151241][ T626] [ 40.154865][ T621] EXT4-fs (loop4): Test dummy encryption mode enabled [ 40.161880][ T621] EXT4-fs (loop4): Ignoring removed orlov option [ 40.170278][ T621] EXT4-fs (loop4): mounted filesystem without journal. Opts: mblk_io_submit,nouid32,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,nobarrier,,errors=continue. Quota mode: writeback. [ 40.196012][ T621] EXT4-fs (loop4): shut down requested (1) [ 40.202473][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 40.202488][ T30] audit: type=1400 audit(1792103719.377:233): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 40.235484][ T30] audit: type=1400 audit(1792103719.377:234): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.263035][ T30] audit: type=1400 audit(1792103719.377:235): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.284585][ T30] audit: type=1400 audit(1792103719.377:236): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.305338][ T20] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 40.329129][ T30] audit: type=1400 audit(1792103719.377:237): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.351789][ T30] audit: type=1400 audit(1792103719.377:238): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.375297][ T30] audit: type=1400 audit(1792103719.377:239): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.521304][ T30] audit: type=1400 audit(1792103719.697:240): avc: denied { write } for pid=620 comm="syz.4.100" name="001" dev="devtmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 40.548767][ T631] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 40.646565][ T20] usb 2-1: not running at top speed; connect to a high speed hub [ 40.776586][ T20] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.796014][ T20] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 40.806095][ T20] usb 2-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 40.819356][ T20] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 40.828552][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.888271][ T369] udevd[369]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 40.898280][ T369] udevd[369]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 41.081110][ T306] usb 2-1: USB disconnect, device number 2 [ 41.427388][ T30] audit: type=1400 audit(1792103720.607:241): avc: denied { create } for pid=634 comm="syz.3.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.515542][ T30] audit: type=1400 audit(1792103720.607:242): avc: denied { ioctl } for pid=634 comm="syz.3.103" path="socket:[18190]" dev="sockfs" ino=18190 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.708301][ T650] loop4: detected capacity change from 0 to 128 [ 42.749505][ T369] udevd[369]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 42.835041][ T663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.113'. [ 42.850984][ T650] EXT4-fs (loop4): Test dummy encryption mode enabled [ 42.878367][ T650] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 42.894383][ T650] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 42.964377][ T650] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 43.908663][ T369] udevd[369]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 43.918835][ T369] udevd[369]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 44.057125][ T676] loop2: detected capacity change from 0 to 256 [ 44.069238][ T680] fuse: Bad value for 'fd' [ 44.077691][ T369] udevd[369]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 44.156972][ T288] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 44.164580][ T288] FAT-fs (loop2): Filesystem has been set read-only [ 44.205018][ T288] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 44.362399][ T369] udevd[369]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 44.387845][ T369] udevd[369]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 44.791206][ T709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.130'. [ 44.863585][ T711] loop1: detected capacity change from 0 to 256 [ 44.877041][ T369] udevd[369]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 44.908065][ T711] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 45.207947][ T360] device bridge_slave_1 left promiscuous mode [ 45.226890][ T360] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.237882][ T360] device bridge_slave_0 left promiscuous mode [ 45.244088][ T360] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.273656][ T360] device veth1_macvtap left promiscuous mode [ 45.282914][ T360] device veth0_vlan left promiscuous mode [ 45.353599][ T724] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 45.651440][ T369] udevd[369]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 45.656599][ T56] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 45.667607][ T369] udevd[369]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 45.916499][ T56] usb 4-1: Using ep0 maxpacket: 8 [ 46.036660][ T56] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 46.045110][ T56] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 46.055539][ T56] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 46.068781][ T56] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 46.078027][ T56] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.761593][ T758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.141'. SYZFAIL: mount(dev) failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=5 req=34 state=3 status=67 (errno 32: Broken pipe) [ 48.136455][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 48.136472][ T30] audit: type=1400 audit(1792103727.307:250): avc: denied { write } for pid=277 comm="syz-executor" path="pipe:[14560]" dev="pipefs" ino=14560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 48.311237][ T56] usb 4-1: USB disconnect, device number 4 [ 49.058001][ T360] device bridge_slave_1 left promiscuous mode [ 49.064167][ T360] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.071768][ T360] device bridge_slave_0 left promiscuous mode [ 49.078328][ T360] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.086876][ T360] device bridge_slave_1 left promiscuous mode [ 49.093001][ T360] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.100644][ T360] device bridge_slave_0 left promiscuous mode [ 49.106847][ T360] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.114750][ T360] device bridge_slave_1 left promiscuous mode [ 49.121219][ T360] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.128874][ T360] device bridge_slave_0 left promiscuous mode [ 49.135000][ T360] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.143404][ T360] device veth1_macvtap left promiscuous mode [ 49.149442][ T360] device veth0_vlan left promiscuous mode [ 49.155297][ T360] device veth1_macvtap left promiscuous mode [ 49.161379][ T360] device veth0_vlan left promiscuous mode [ 49.167252][ T360] device veth1_macvtap left promiscuous mode [ 49.173257][ T360] device veth0_vlan left promiscuous mode