last executing test programs: 17.099105526s ago: executing program 1 (id=201): syz_open_dev$vim2m(&(0x7f0000000040), 0x3ffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000003c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r2, &(0x7f0000000200)="2e000000010002", 0x7) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') r5 = memfd_create(&(0x7f0000000480)='D\xa3\xd5Wj\x00\x00x0\xc1\xac*\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9\xd0\xc0\xa9\b\x98\xfc:\x1b\xc4\x80!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x00\x02\xdf\b~\xd5)\xa4\x80\xad\x97\'\x1b\xfd}\x96&\xd2\x0eGp\x8e\x1a\x19o\xf1\x14\xe2]J\xf2\xb5h\x9bt*\xd2\xfbT\x01ci\x87\x18\xc9\x13=\x1b\xadl;}\x9d\xbe\x9a\xee\x1a\xfc\x96 \x93\x12@\x19|f\x98\xdc,\x82SlA\x19\xcb\xfe\xccSKO}\xb2U\xd6\xc5\xa7=\xf8s\x1dp\xe0\x14\xe5\x92\xfd)\bB\xcd\xc2\xb6\x85$%nV\xd3*\x00`OE\x8e\xf0\xf9\xd2!KZ%\xad\xa1\x92b\x1e%\x9f!\xd8mV$\x1d?\xc2\f\xcc\xc5x\x9fJ#\xce\x90\xc5\x82\xfb\x97\xd2\xb7\xb5\xed\xb5\'J\xfc\xf4Z.\rS\x88\f\xd0zK\xc7\x81\xbe\xd5\xc2\xce\x89\xbc\x1e\xb78\xf6Z\xd5\x1b\xf1\x9bMD\f\xf6\xc5V\xe1\x12j\xdfW\x87\xf09\n\x1e\x1b\f\xe5p\xab\x9e\xe5}\x96\x9b\xea\x86\x0f\xca\xcf\x16\x96\x0e6\x8d\x11\xd2&\"eKKV\x8b?]<\xa7]\x93\xad\x1d\xfe\x13\xee\xca\xdc\x97\xa9\a\b\xac\xdd\xa0\xfe\x97\xa1?\xa2F\xae\xb7f\x85\xda', 0x0) write(r5, &(0x7f0000000680)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4, 0x11, r5, 0x0) r6 = dup3(r4, r3, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) mkdirat(r6, &(0x7f0000000740)='./file1\x00', 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='cgroup.kill\x00', 0x275a, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000007c0)=0x53fffffe) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x14, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc6) 14.740899879s ago: executing program 2 (id=203): syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f000014c000/0x4000)=nil, 0x4000, 0x15) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x503, 0xffffffff, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x44}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0xfd}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000721000a58000000060a0b040000000000000000020000002c0004802800018008000100666962001c0002800800034000000012080001400000000108000240000000010900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18, 0x4008800}, 0x40800) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0xfffffffe}], 0x1, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000840)=""/196, 0xc4}], 0x1}, 0x10000) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x40, 0x0, 0x0, 0x1, 0x0}) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 14.562505757s ago: executing program 1 (id=204): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x200000000000002, {0xa, 0x4e23, 0x7, @remote, 0x5}}}, 0x38) syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000020240), 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000020300)={'wlan0\x00', 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000020340), 0x4a0000, 0x0) modify_ldt$write2(0x11, &(0x7f0000020380)={0xcb, 0x0, 0x2000, 0x1}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000203c0)={0x22800000, 0x0, 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write(0xffffffffffffffff, &(0x7f0000020440)="3c0000003b00050001000000000000000a01000025000100534d432d4250", 0x1e) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000020480)={0x2, 0x5000, @loopback}, 0x10) listen(0xffffffffffffffff, 0x800000a) socket$inet_smc(0x2b, 0x1, 0x0) r4 = geteuid() quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff80000901, r4, &(0x7f00000204c0)) connect$inet(r3, &(0x7f0000020540)={0x2, 0x4fff, @loopback}, 0x10) r5 = accept(r3, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000020580)="140000003b000103030000000000000004010000", 0x14) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000205c0)={0x0, 0x30, &(0x7f0000020600)={&(0x7f0000020640)=ANY=[@ANYRESDEC=r5, @ANYRESDEC=r1, @ANYRES16=0x0, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32], 0x14}, 0x1, 0x0, 0x0, 0x4818}, 0x48010) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000020680)='source\x00', &(0x7f00000206c0)='[:/\x00\x00\x00\x00\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000020700)='addr\x00', &(0x7f0000020740)='::1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 14.425161448s ago: executing program 1 (id=206): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="80ee2357f8c7f8ab6f10da43176f77c2f3add0653674cf9d48917a639870103871b2fd8d61e04e401a764a9c58562971b0a8dec67f2d408d3fa161d148cf0cc618cfcfe0a65e79f4f7c0bf27f2cd5483dab78d9883", @ANYRES16=r1, @ANYBLOB="010027bd7000fddbdf250700000004480000000000000000000004000180"], 0x24}, 0x1, 0x0, 0x0, 0x24000140}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x10004004) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) syz_usb_connect(0x3, 0x5c, &(0x7f00000009c0)=ANY=[@ANYBLOB="12010002ffffff40c505020000010102030109024a0001010080fa0904000008ffffff0007058102000200070502020002000705830200020007050402000200070585020002000705060200020007058702000200070508020002"], 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd0, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8001}, {0x6, 0x16, 0x7}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4044}, 0x40000) 13.168248133s ago: executing program 2 (id=210): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea8, 0x4, @remote, 0x8}, 0x1c) setxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x2) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x40000, 0x0) ioctl$COMEDI_BUFCONFIG(r3, 0x8020640d, &(0x7f0000000080)={0x0, 0x44a3f1ed, 0x0, 0x8000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000001280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000001300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000001380), 0x651, 0x0) recvmmsg(r6, &(0x7f00000013c0), 0x10106, 0x2, 0x0) read(r4, &(0x7f0000001400)=""/96, 0x60) sched_setscheduler(0x0, 0x2, &(0x7f0000001480)=0x6) add_key(&(0x7f00000014c0)='pkcs7_test\x00', 0x0, &(0x7f0000001500)="100c0601000000", 0x7, 0xfffffffffffffffe) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001540)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000015c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) r9 = landlock_create_ruleset(&(0x7f0000001a80)={0x100}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r9, 0x1, &(0x7f0000001ac0)={0x0, r9}, 0x1) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000001b00)={{0x2, 0x4e23, @empty}, {0x0, @multicast}, 0x4a, {0x2, 0x1, @loopback}, 'lo\x00'}) 12.074267055s ago: executing program 4 (id=212): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0xfff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(&(0x7f0000000580)=@filename='none\x00', 0x0, &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000006c0), 0x2, 0x143102) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000740)="94", 0xf000}, {0x0}], 0x2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000780), 0x1c3902, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000008c0)='addr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0) syz_usb_connect(0x5, 0x59, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000940)='source\x00', &(0x7f0000000980)='127.0.0.1:/export\x00', 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x201f00) mount(0x0, &(0x7f0000000040)='./trace\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000400)='./trace\x00', 0x444a02, 0x8) socket$kcm(0xa, 0x922000000003, 0x11) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000a}, 0x94) 9.796537513s ago: executing program 0 (id=214): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0xd, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x10, 0x5, 0x7}]}, @ptr]}}, 0x0, 0x3e}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000070000000000ed002b9f549318110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000400bf090000000000005509f6155269109f8f0af649716cb40100000000009500000000000000bf91000000000000b7020000020004008500000084000000b70000"], &(0x7f0000000400)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)=[{0x0, 0x2, 0x8, 0x6}], 0x10, 0x10001}, 0x94) r5 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r5, &(0x7f000001a080)=""/102386, 0x18ff2) sched_setaffinity(r3, 0x47, &(0x7f0000019b80)=0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x40) capset(&(0x7f0000019bc0)={0x19980330}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f0000019c00)=0x1, 0x4) sendmmsg$inet(r6, &(0x7f0000019c40)=[{{&(0x7f0000019c80)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000019cc0)=[{&(0x7f0000019d00)="b9cd14c222ee", 0x6}], 0x1}}], 0x1, 0x20008800) recvmmsg(r6, &(0x7f0000019d40)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000019dc0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000019e40)=""/191, 0xbf}, {&(0x7f0000019f00)=""/18, 0x12}], 0x5}, 0x1}], 0x2, 0x100, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000019f40)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000019fc0)="5351e31d94", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x403}, 0x50) r7 = syz_open_dev$sg(&(0x7f000001a000), 0x6f5e, 0x2) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f0000000480)={0x0, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, @tipc=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x4}}, @isdn={0x22, 0x1, 0x9, 0x8}, 0x2, 0x0, 0x0, 0x0, 0x8001, &(0x7f0000000200)='vcan0\x00', 0x2, 0xc, 0x5}) ioctl$FIBMAP(r7, 0x1, &(0x7f000001a040)=0x85) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r8 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) tkill(r8, 0xb) 9.485186437s ago: executing program 1 (id=215): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000000100)={0x0, 0x39c4, 0x2, 0x3, 0xfffffffe}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000240)='n', 0x1) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0xffffffffffffcfff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000072000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a8000000"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newtfilter={0x44, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x2, 0x2}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x2}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x2}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x102, 0x2}, {0xfff1, 0xffff}, {0x3, 0x1}}}, 0x24}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000940)={r5}, 0xc) write$binfmt_script(r3, &(0x7f0000000580), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010002000000406a053b030000000000010902"], 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) preadv(r3, &(0x7f0000000680)=[{&(0x7f00000006c0)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0xaaaaaaaaaaaac8f, 0x44, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088d0}, 0x48000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x10122, 0x0) 8.727482439s ago: executing program 2 (id=216): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeed, 0x20010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x5813, 0x10001, 0x4000000}, 0x10) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20000800) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000480)=0x0) ptrace$setregset(0x4205, r4, 0x2, 0x0) r5 = epoll_create1(0x0) r6 = syz_open_dev$media(&(0x7f0000000380), 0x103, 0x108002) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a2a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f010500000001000000000624fdee7c1b0905810308000300000904010000020d00"], 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000600)={0x36, 0x1, 0x4, "ff050000007eefad00000000ffffffff000000000000000000000900", 0x20385655}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="500100001000010000000000000000007f0000010000edffffff0000000000007f00000100000000000000000000000000000000000000000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000be3412320000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002000000000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060"], 0x150}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[], 0x94}}, 0x840) io_uring_setup(0x4c25, &(0x7f0000000080)={0x0, 0xfa5b, 0x1, 0x8000000, 0x355}) 8.588534555s ago: executing program 4 (id=217): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x200000000000002, {0xa, 0x4e23, 0x7, @remote, 0x5}}}, 0x38) syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000020240), 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000020300)={'wlan0\x00', 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000020340), 0x4a0000, 0x0) modify_ldt$write2(0x11, &(0x7f0000020380)={0xcb, 0x0, 0x2000, 0x1}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000203c0)={0x22800000, 0x0, 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$nl_generic(0x10, 0x3, 0x10) write(r3, &(0x7f0000020440)="3c0000003b00050001000000000000000a01000025000100534d432d4250", 0x1e) write(r3, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r4, &(0x7f0000020480)={0x2, 0x5000, @loopback}, 0x10) listen(0xffffffffffffffff, 0x800000a) socket$inet_smc(0x2b, 0x1, 0x0) r5 = geteuid() quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff80000901, r5, &(0x7f00000204c0)) connect$inet(r4, &(0x7f0000020540)={0x2, 0x4fff, @loopback}, 0x10) r6 = accept(r4, 0x0, 0x0) write(r3, &(0x7f0000020580)="140000003b000103030000000000000004010000", 0x14) sendmsg$nl_generic(r3, &(0x7f00000205c0)={0x0, 0x30, &(0x7f0000020600)={&(0x7f0000020640)=ANY=[@ANYRESDEC=r6, @ANYRESDEC=r1, @ANYRES16=0x0, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32], 0x14}, 0x1, 0x0, 0x0, 0x4818}, 0x48010) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000020680)='source\x00', &(0x7f00000206c0)='[:/\x00\x00\x00\x00\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000020700)='addr\x00', &(0x7f0000020740)='::1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 7.62808325s ago: executing program 0 (id=218): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x740, 0x1800, 0x6, 0xac, 0x5}, 0x4}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x486}]}, {0x3}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x50, r2, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac06}]}]}, 0x50}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x40, r2, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @random="321b692c8bf2"}, @NL80211_ATTR_IE={0x9, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x40, 0x8}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x480d1) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) 7.220065636s ago: executing program 3 (id=219): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xb, 0x4) sendto$packet(r0, &(0x7f0000000280)="0b031260feffffff02005400f6a13bb1000000086086dd4803", 0x19, 0x0, &(0x7f0000000140)={0x11, 0x86dd}, 0x14) 6.790569355s ago: executing program 4 (id=220): r0 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) sendmmsg(r0, &(0x7f0000002640)=[{{&(0x7f0000000500)=@un=@file={0x0, './debug/split_huge_pages\x00'}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000580)="3842d4f35ba05405d0e3e25a598b93828560e762818b53987e93c439ca8528832be5cc88555e9be155d7a0fe4912d1f8e3ed0bb16ea7ad6492476aad2f1bf406b6f1f733dca94bb7f0d4e90f355646301c4cbed28089f646448fb46adda8e888754e07b47c97c8fd79746d566a78170c96b7b7da873374741c4b0101922e189e707407", 0x83}, {&(0x7f0000000640)="ab75af37ba108353da07f9fa98d132d7211e9a8296e3b4fe5a611dd8212bda89be0c676f8ec20e6c7df0bc5a1dba9d0296cc69c95662ccb1248160b543bf33a9", 0x40}], 0x2, &(0x7f0000000880)=[{0xa0, 0x104, 0x7, "a69db3ba6f7ae5bab245a8afd1ebae80d12ba0fae0b52ea0cc60d3559f25992a69eed7f5e6a235092187ce10ae75fe4b84cc017723d1c350cbd2a3f767d97df6ba6fde669e02691bd3dfc5e69c2dec2461df89a5cccccf73af85ead343728987f2baa0836882a823da6dff7eafff21d670c3d4bc93941fb305423a3f9633f8a2e32b0bcd476f6c23dbed"}, {0x100, 0x118, 0x2, "09c4f26b334320d19b3bd801b9d4bec43829fdb048379b56b5e01cee7c753bce51fc8363b782d701514087db5e5cf491b3e82ca58ca82b00795cb723c443a6064ef31ec63c73bec3dedf4a5ee9d9cd4c8b6e4eabe5966a4acbc38249435dd6ddb07389d8f1cec4926ca88c29d20225982bd66e7b6f93454653adbb32d81cffdb6b2b7973c585bf7e920f47e2476f882073a10b0c8a5da50f16dc88b6cd8339dc79f5d9f7b34fdb4104cc248e58bea02f0a6906c326b9e1206b2930795a847d4aaefe759095789f5b9617b52d8b270da35680eb2ec03129181d5ea31c96e33f6b1a2d726d26c153b37541"}], 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000a40)="e0064fb3407f9cbd77d907ecfd837f109e2b51c67c6680c5d136d616cbdaf85a689c882c35b96ca3fd8007615617709f1a10c9fbf95a08933aa3ebcd5c2323a06199663092d277ddb74237bab708a8ab8288d13cdbe3ef5b1cc61a89a44e3aec4adda788a4e45b46392ce6ffda80a2cbc500dba5155dae77e1837a5dd076d14afafb748b6b20e66303e1b0dae413ae9b4862917efec26e4c404d458d65b03e1e75eec15c28c4df209b6b3172bdd02d9588e32fcd1bf6", 0xb6}, {&(0x7f0000000b00)="70f94254cf1a0646434b3bc364745ca2b910e4c10102f0219dde4498ad5a10f7c8b3d7170e3eedc493b827d53e287046459787582c22ed598421b78f9486c93db7880d0b6ed8250d503793f4f4d20228738d6b9898a16088a3561b85e3770496f5d0c25bdbe91d13074725a6424c1cf3be5a37f6557fc427380f37b2208daf168708f91bf79ad821c233a468f8d9b8925b7a5b9131e0b634804d6c73cc110e11b0e41be5c3d5f01aeeabac291d2fc54ad110692e663843b03d49dbccc5b6f782112da0d39844dbf4c2b024", 0xcb}, {&(0x7f0000000c00)="6457fd71f6d30c4523467e5f2b0e422138a38abc0e37d9a4628374081d2729c3e7a8f7710ad00bb68d1194b5fed0e787be00e6c91a4c8b1cb903d68e15638541a6584eba3d9f2aadcb7acf1b3d0988f6e0052ee3e2e6e79a2ec790184ed8ddf4adbdb3fb8cf316eaa9183e077dac94bcba808d27def6e14c958e6491ab1534a39da5c56e5690454a521be747eae3d036d6ce4d01e52a39c7abc98e677dd46604e22dc76f2a46d926981b8898dd9e459de333a8", 0xb3}, {&(0x7f0000000cc0)="03f8d5451267d069db38ab0eb9a49edd5b62b506932f5965bcac4ff97a281184cde8c1bd84338deb0f8a89e7189ce29e64d4731c6cb52813a9e200fb20e7dc4326c1a0e039697e953968b377897384b743385eebbebeaa7fe544ed0742cbce", 0x5f}, {&(0x7f0000000d40)="a6bcadaef2fd8520d97ada457316df8427ea54b0e3001685e0adc38015580bf8016ab91d59e32b2ec1eae6e5a39bef56e1b9df7ca47212fd2229d3ab8ab37174a8c7ee5b865ef0ebf9c1b508c8f69582e291580e1710462a34fb0340613c31346098da9a2f428cb55726b100e5af2477d578be32aca1f0ca6e0e9f08c225ab4c919567230b4f582dd990de31c3e62c2ae949a8d3ff2b2f76fbabe19e863984c6ea2cd4b06d1bc6b6e428cb2f", 0xac}], 0x5, &(0x7f0000000e80)=[{0xa8, 0x116, 0xfff, "c6af0cb58170053e27244e37bed5c387e6c1aa262d7064149fb8716214217eb7daf7be8882e77b63915c6a60c6d5be5657dd31c3ebe9d9f0711b9e22e87e3b7f838f7c511b59211f6227a3589dd749829e5c00fbade027091921be0f9331895ff62a36ecd09f159601da012fdccfb1be2caf7c904fa93eb495ea1e9922b0d31786b83cdfca4ba46a035855267654209bca7e97f994ba"}, {0x60, 0x1b, 0x6, "b53eefcc4d70cbdd7aab07d39632e29623bdc8dda7edd376c661b1a42c944639330773c118aa815bf17961f6abdd1fdd34aea76d929d242ede2834525d02d781377250aa25255f167fb6"}, {0x10, 0x29, 0x471}], 0x118}}, {{&(0x7f0000000fc0)=@nl, 0x80, &(0x7f00000024c0)=[{&(0x7f0000001040)="10fa72d2f6ffcc91741f754441e8ede220d0e4219e70134030a10844fa7ea93cb6e12a9931fb40c1daf7d7cdf638df1e60eade0722ed5078c8e34fa8975172932329e8bc6a645b97043149997b4a2641958f0b5fec0bcbbf1584e32fd8ef989a70d63e312fe2a7322a23874d", 0x6c}, {&(0x7f00000010c0)="9c3efc743eb5096315833e99147e97eb6ae574439f5067d51818efea59a369c9f2da1f26c2e25a087d764cc5b3db96ac83661c65f429ff13a7bc96458b349c2393673cc7ad97", 0x46}, {&(0x7f0000001140)="46a82f05c0f668539119617b3db5bc38021d7f40fbe9103cb7ad2c64ec49887806f10753d937ee08aac3d184c6b9c36494e9b72fa7e972355a499d348f3ee998b2d0f6779bea4393120242e89d047a587863225d9e6c5588533d245c1b9ed3cbbca49571f02287741ca596ce4e7220815cf658ec6cc6aeee4e38d27cf397c63726ca9b4d308dfe8f2b166c4e0d601574c700a2246b1e38333e495758217e04140967456a1733241d001d11", 0xab}, {&(0x7f0000001200)="9d2729754ab9ee2e4776cc34c2270a2054c3d14c0c06881abdd5189017ce5fd46c8ab8dbdb705e0036476be02124c65a81f7d727831be3035ff429c7efc5d8795ce27ea52895649ac35cfff76b0e32dd", 0x50}, {&(0x7f0000001280)="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", 0xff0}, {&(0x7f0000002280)}, {&(0x7f0000002300)="5d6ba636f355be50c7f8174174e124da57ebc50aac78f5d87a91921aaf52103ade8d79ac6603c8b89555a9ab1d00a84fe867b2182bffece5537b87db3aa978d3236f4dfd8792a8dfe70799", 0x4b}, {&(0x7f0000002380)="5cc4cd0ae78738b07638e92cf20c57f1a1950783e05075b16f7055f8239bb69a310c7e5598975536da0431aaa3637d3e6e73e8d1d11b576d99243c940f64572f252dec47719c81e66ee4ff7c64a6057536969583a473679f0982528ecdd5a5194384e8ca6a5a898fec", 0x69}, {&(0x7f0000002400)="78edbb8869a5a5575310a51aa4d2b14d12e58b85be21305c68b2c91740b121ca5c2b7395f9883f633f750510e9769415e70e17e36d67844eb23aee349f13a521549f5e603ae19cb1722d8c43a9715962699aa29eb27f2568d15b829dafe29f4f513b01d8218018cc01fa369e9c465aeb6a3102ad6dc8a60ee39ececb91bc0582bee87a", 0x83}], 0x9, &(0x7f0000002580)=[{0x90, 0x113, 0xd68f, "386c0c01b4e7dc2ff978845f06832676e02567969f11d8fdf81b0f44a27442c4d467f962e3e4bd10d1b261da39457ffea5a388233bcdca34268aaa5368c0de8e46c0cc1eb0ae9e113b30a6ea1b9ec4b04564f5b636c850b302a0febd0c2e9cfe016bd2c8df535e7877e7ef9a22a8dfa01d088e254192c81614966fe82120a328"}, {0x28, 0x10e, 0x8, "366b28b603ae5e852e78bf54c8bd4116b9be9f"}], 0xb8}}], 0x3, 0x0) keyctl$chown(0x4, r2, 0xffffffffffffffff, 0x0) syz_emit_vhci(0x0, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./debug\x00', &(0x7f0000000400)='debugfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='/,0x-', 0x5) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) readlink(&(0x7f00000006c0)='./debug/split_huge_pages\x00', &(0x7f0000000700)=""/194, 0xc2) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, r7, 0x534, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40050}, 0x4050) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0xb8, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) 6.540385957s ago: executing program 3 (id=221): syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f000014c000/0x4000)=nil, 0x4000, 0x15) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x503, 0xffffffff, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x44}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0xfd}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000721000a58000000060a0b040000000000000000020000002c0004802800018008000100666962001c0002800800034000000012080001400000000108000240000000010900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18, 0x4008800}, 0x40800) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0xfffffffe}], 0x1, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000840)=""/196, 0xc4}], 0x1}, 0x10000) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x40, 0x0, 0x0, 0x1, 0x0}) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 6.518761473s ago: executing program 0 (id=222): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r0, 0x3) semop(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$tmpfs(0x0, 0x0, &(0x7f0000000180), 0x400, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) mount$tmpfs(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000280), 0x2810081, &(0x7f0000000300)={[{@quota}]}) pause() r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 5.252797281s ago: executing program 2 (id=223): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'team0\x00', @broadcast}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000024c0), 0x2c81, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES32=r5, @ANYBLOB="46060900030705002400128009000100626f6e640000000014000280080003000500000008000400090000e5"], 0x44}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0xa, 0x0, 0x7c, 0x7fffffff}]}) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r6) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000001500)={0x0, 0x5, 0x400}, &(0x7f0000001580)=0x0, &(0x7f00000015c0)=0x0, &(0x7f0000001600)=0x0) setuid(0xee01) syz_ublk_add_dev(0xffffffffffffffff, r8, r9, r10, &(0x7f0000001640)={0x2e, 0x0, 0x0, r7, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000016c0)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, 0x0) socket(0x10, 0x803, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00040007"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r13, 0xd1383000) ioctl$FS_IOC_RESVSP(r13, 0x40305829, &(0x7f0000000040)={0x1100, 0x2, 0x8, 0x10003}) r14 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r14, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x0, {0x2008000, 0x1000, 0x2, 0x7fff}}) r15 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') quotactl_fd$Q_SYNC(r15, 0xffffffff80000101, 0x0, 0x0) 4.81019264s ago: executing program 4 (id=224): syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x7) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000003c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x777) mount(0x0, &(0x7f0000001440)='./proc\x00', &(0x7f0000001480)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000001500)=0x7ff, 0x12) r1 = landlock_create_ruleset(&(0x7f0000001540)={0x1010, 0x3}, 0x30, 0x0) landlock_restrict_self(r1, 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r2, 0x84, 0x7f, 0x0, &(0x7f0000000180)) epoll_create1(0x0) 4.484604375s ago: executing program 1 (id=225): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x4000080) 1.900183849s ago: executing program 0 (id=226): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000006c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000800)=ANY=[@ANYBLOB="baa8a2c5", @ANYRES16=r2, @ANYBLOB="01042cbd700000000000010000000800010002000000d40008803400078008000500ce56d26d080006007f00000008000500abdde32a08000600ad000000080005004b18c61508000600e50000001c0007800800050074d87c6c08000500f845747c08000600360000003400078008000500b09ed928080005002cdace32080006006100000008000500fca18c130800060075000000080006007c0000004c000780080005002e08781908000600040000000800060081000000080006007300000008000600430000000800050015c6883808000500ac2e5a64080006002e00000008000600730000000800020003000000"], 0xf8}, 0x1, 0x0, 0x0, 0x30002001}, 0x8000) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@t={0x81, 0x8, 0x3, 0x5}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000280)={0x1, 0x0, [{0x1, 0x4, 0x40080, 0xff, 0x2eaa}]}) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f00000003c0)=[{{&(0x7f0000000440)={0xa, 0x0, 0x2, @private0, 0xa}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000004c0)='`', 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e24, 0xffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000580)='D', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r6, 0x1) timer_create(0x0, &(0x7f0000000340)={0x0, 0x21, 0x2}, &(0x7f0000000780)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000007c0)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r7, 0x1, &(0x7f0000000900)={{0x77359400}}, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) process_madvise(r9, 0x0, 0x0, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f00000005c0)={0x0, 0x8d7, 0x9, 0x7ff, 0xf5e, 0x4, 0x7, 0x24a3, {0x0, @in={{0x2, 0x4e23, @loopback}}, 0xfffffff8, 0x401, 0x4, 0x6, 0x37e4dcea}}, &(0x7f0000000680)=0xb0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x480, 0x0, 0xd8100011e57ed0}]}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r10, 0xc138fd05, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00') write(0xffffffffffffffff, &(0x7f0000000380)='nfsd 127.0.0.1 2000000000 localhost', 0x23) ioctl$vim2m_VIDIOC_QBUF(r10, 0xc058560f, &(0x7f00000001c0)=@multiplanar_userptr={0xfab, 0x3, 0x4, 0x0, 0x80000000, {0x77359400}, {0x1, 0x1, 0xf, 0x7, 0x6, 0xb, "0740fcf6"}, 0x81, 0x2, {&(0x7f0000000140)=[{0x7f, 0xffff, {&(0x7f00000000c0)}, 0x9}, {0x4, 0x3, {&(0x7f0000000100)}, 0x1000}]}, 0x9}) 1.824329155s ago: executing program 3 (id=227): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r2 = getpgrp(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000019700)='./binderfs/custom0\x00', 0x800, 0x0) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, r1, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000280), 0xc9, 0x0) read$msr(r5, &(0x7f0000000380)=""/102392, 0x18ff8) bpf$TOKEN_CREATE(0x24, &(0x7f0000019380)={0x0, r5}, 0x8) r6 = syz_io_uring_complete(0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000193c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRESOCT=r2, @ANYRESHEX, @ANYRES32=0x0, @ANYRES16=0x0, @ANYBLOB='\x00'/18], 0x50) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x1, 0x300043) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./pipefs\x00', 0x1ff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xfffffffffffffffd, 0x100}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f00000001c0)=0x7) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x5bc) 1.676842669s ago: executing program 3 (id=228): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0b01a320"], 0xe) r0 = memfd_create(&(0x7f0000000300)='y\x105\xfb\xf7u\x83%:b\xc2\xb9x\xa4q\xdf\x14>:\xf6{l\xca\xb3\x17\xea_\x8cb7\xcda\x9b\x11X\x0e\xa1\x00\x00\x00\x80\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x06\x00\x01\x04\xf2', 0x5) keyctl$get_keyring_id(0x0, 0x0, 0x6) fcntl$addseals(r0, 0x409, 0x7) 1.391643356s ago: executing program 4 (id=229): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newqdisc={0x34, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000100)={0x18, r3, 0x2, 0x0, &(0x7f0000000140)=[{0x0, 0x1}, {0x3, 0x7}]}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x7, r3, 0x0, &(0x7f00000001c0)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000200)={0x18, r3}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000240)={0x18, r3, 0x5, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r3, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000300)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000580)={0x28, 0x7, r4, 0x0, &(0x7f0000000a00)="1f916517513617964c4c4c4c4c4c4c4f4c4c4c4c4c4c4c4c4c4c4c1dbe60afc3b11cd404975c31ba9e0587bc3a4c60aad7ab05103ae97c66bb18b29bbd0b5252b04c8b1861130d", 0x47, 0x40}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000003c0)={0x28, 0x7, r4, r3, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000400)={0x18, r4, 0x3, 0x1c}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000440)={0xfd85, r3}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000540)={0x18, r3}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000380)={0x18, r4, 0x9, 0x0, &(0x7f0000000ac0)=[{0x1, 0x3e4}, {0x8, 0x1}, {0x0, 0x2d1c0000000000}, {0xffff, 0x100000001}, {0x3, 0x100000001}, {0x4, 0xc}, {0xffffffff}, {0x5, 0x292640a7}, {0xeaf, 0x9}]}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000005c0)={0x48, 0x1, r3, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000640)={0xfffffffffffffe9e, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000006c0)={0x28, 0x7, r3, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000700)={0x48, 0x3, r6, 0x0, 0x1004000, 0x0, &(0x7f0000000780)}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f00000007c0)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000000840), 0x1}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000880)={0x18, 0x0, 0x42, 0x1004002}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f00000008c0)={0x8, r5}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000900)={0x48, 0x5, r3, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000980)={0x28, 0x7, r3, 0x0, &(0x7f00000009c0)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000a80)={0x10, 0x1}) 1.129724367s ago: executing program 2 (id=230): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x200000000000002, {0xa, 0x4e23, 0x7, @remote, 0x5}}}, 0x38) syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000020240), 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000020300)={'wlan0\x00', 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000020340), 0x4a0000, 0x0) modify_ldt$write2(0x11, &(0x7f0000020380)={0xcb, 0x0, 0x2000, 0x1}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000203c0)={0x22800000, 0x0, 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$nl_generic(0x10, 0x3, 0x10) write(r3, &(0x7f0000020440)="3c0000003b00050001000000000000000a01000025000100534d432d4250", 0x1e) write(r3, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r4, &(0x7f0000020480)={0x2, 0x5000, @loopback}, 0x10) listen(0xffffffffffffffff, 0x800000a) socket$inet_smc(0x2b, 0x1, 0x0) r5 = geteuid() quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff80000901, r5, &(0x7f00000204c0)) connect$inet(r4, &(0x7f0000020540)={0x2, 0x4fff, @loopback}, 0x10) r6 = accept(r4, 0x0, 0x0) write(r3, &(0x7f0000020580)="140000003b000103030000000000000004010000", 0x14) sendmsg$nl_generic(r3, &(0x7f00000205c0)={0x0, 0x30, &(0x7f0000020600)={&(0x7f0000020640)=ANY=[@ANYRESDEC=r6, @ANYRESDEC=r1, @ANYRES16=0x0, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32], 0x14}, 0x1, 0x0, 0x0, 0x4818}, 0x48010) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000020680)='source\x00', &(0x7f00000206c0)='[:/\x00\x00\x00\x00\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000020700)='addr\x00', &(0x7f0000020740)='::1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 845.491131ms ago: executing program 4 (id=231): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000000300)={0x0, 0xd748, 0x100, 0x3, 0x1}, &(0x7f0000000180), &(0x7f0000000040), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000240)='n', 0x1) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0xffffffffffffcfff) io_uring_setup(0x383a, &(0x7f00000000c0)={0x0, 0x4178, 0x40, 0x3, 0x3d6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x289c2, 0x1) prlimit64(0x0, 0xd, &(0x7f0000000000)={0xa, 0x7fff7fffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000740)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000007c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000980), 0x0, 0x0) read$msr(r4, &(0x7f00000009c0)=""/102392, 0x18ff8) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x6a040300) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f00000199c0)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r6 = socket(0x1, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000019a00), 0xffffffffffffffff) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000019a40)=@req={0x3fc}, 0x10) sendmmsg(r5, &(0x7f0000019a80), 0x4000000000000e4, 0x0) madvise(&(0x7f0000a9c000/0x2000)=nil, 0x2000, 0xb) 762.202746ms ago: executing program 0 (id=232): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xb, 0x4) sendto$packet(r0, &(0x7f0000000280)="0b031260feffffff02005400f6a13bb1000000086086dd4803", 0x19, 0x0, &(0x7f0000000140)={0x11, 0x86dd}, 0x14) 624.908616ms ago: executing program 3 (id=233): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x0, r0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000085000000bc00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, r4, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000280)={@random="67ed837beee5", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @val={@void, {0x8100, 0x2, 0x1, 0x3}}, {@ipv6={0x86dd, @udp={0x4, 0x6, "1575cf", 0xc, 0x11, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, {[], {0x4e22, 0x4e24, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x6, 0x0, @void}}}}}}}}, 0x0) tkill(r1, 0x1f) 532.94252ms ago: executing program 2 (id=234): r0 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) sendmmsg(r0, &(0x7f0000002640)=[{{&(0x7f0000000500)=@un=@file={0x0, './debug/split_huge_pages\x00'}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000580)="3842d4f35ba05405d0e3e25a598b93828560e762818b53987e93c439ca8528832be5cc88555e9be155d7a0fe4912d1f8e3ed0bb16ea7ad6492476aad2f1bf406b6f1f733dca94bb7f0d4e90f355646301c4cbed28089f646448fb46adda8e888754e07b47c97c8fd79746d566a78170c96b7b7da873374741c4b0101922e189e707407", 0x83}, {&(0x7f0000000640)="ab75af37ba108353da07f9fa98d132d7211e9a8296e3b4fe5a611dd8212bda89be0c676f8ec20e6c7df0bc5a1dba9d0296cc69c95662ccb1248160b543bf33a9", 0x40}], 0x2, &(0x7f0000000880)=[{0xa0, 0x104, 0x7, "a69db3ba6f7ae5bab245a8afd1ebae80d12ba0fae0b52ea0cc60d3559f25992a69eed7f5e6a235092187ce10ae75fe4b84cc017723d1c350cbd2a3f767d97df6ba6fde669e02691bd3dfc5e69c2dec2461df89a5cccccf73af85ead343728987f2baa0836882a823da6dff7eafff21d670c3d4bc93941fb305423a3f9633f8a2e32b0bcd476f6c23dbed"}, {0x100, 0x118, 0x2, "09c4f26b334320d19b3bd801b9d4bec43829fdb048379b56b5e01cee7c753bce51fc8363b782d701514087db5e5cf491b3e82ca58ca82b00795cb723c443a6064ef31ec63c73bec3dedf4a5ee9d9cd4c8b6e4eabe5966a4acbc38249435dd6ddb07389d8f1cec4926ca88c29d20225982bd66e7b6f93454653adbb32d81cffdb6b2b7973c585bf7e920f47e2476f882073a10b0c8a5da50f16dc88b6cd8339dc79f5d9f7b34fdb4104cc248e58bea02f0a6906c326b9e1206b2930795a847d4aaefe759095789f5b9617b52d8b270da35680eb2ec03129181d5ea31c96e33f6b1a2d726d26c153b37541"}], 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000a40)="e0064fb3407f9cbd77d907ecfd837f109e2b51c67c6680c5d136d616cbdaf85a689c882c35b96ca3fd8007615617709f1a10c9fbf95a08933aa3ebcd5c2323a06199663092d277ddb74237bab708a8ab8288d13cdbe3ef5b1cc61a89a44e3aec4adda788a4e45b46392ce6ffda80a2cbc500dba5155dae77e1837a5dd076d14afafb748b6b20e66303e1b0dae413ae9b4862917efec26e4c404d458d65b03e1e75eec15c28c4df209b6b3172bdd02d9588e32fcd1bf6", 0xb6}, {&(0x7f0000000b00)="70f94254cf1a0646434b3bc364745ca2b910e4c10102f0219dde4498ad5a10f7c8b3d7170e3eedc493b827d53e287046459787582c22ed598421b78f9486c93db7880d0b6ed8250d503793f4f4d20228738d6b9898a16088a3561b85e3770496f5d0c25bdbe91d13074725a6424c1cf3be5a37f6557fc427380f37b2208daf168708f91bf79ad821c233a468f8d9b8925b7a5b9131e0b634804d6c73cc110e11b0e41be5c3d5f01aeeabac291d2fc54ad110692e663843b03d49dbccc5b6f782112da0d39844dbf4c2b024", 0xcb}, {&(0x7f0000000c00)="6457fd71f6d30c4523467e5f2b0e422138a38abc0e37d9a4628374081d2729c3e7a8f7710ad00bb68d1194b5fed0e787be00e6c91a4c8b1cb903d68e15638541a6584eba3d9f2aadcb7acf1b3d0988f6e0052ee3e2e6e79a2ec790184ed8ddf4adbdb3fb8cf316eaa9183e077dac94bcba808d27def6e14c958e6491ab1534a39da5c56e5690454a521be747eae3d036d6ce4d01e52a39c7abc98e677dd46604e22dc76f2a46d926981b8898dd9e459de333a8", 0xb3}, {&(0x7f0000000cc0)="03f8d5451267d069db38ab0eb9a49edd5b62b506932f5965bcac4ff97a281184cde8c1bd84338deb0f8a89e7189ce29e64d4731c6cb52813a9e200fb20e7dc4326c1a0e039697e953968b377897384b743385eebbebeaa7fe544ed0742cbce", 0x5f}, {&(0x7f0000000d40)="a6bcadaef2fd8520d97ada457316df8427ea54b0e3001685e0adc38015580bf8016ab91d59e32b2ec1eae6e5a39bef56e1b9df7ca47212fd2229d3ab8ab37174a8c7ee5b865ef0ebf9c1b508c8f69582e291580e1710462a34fb0340613c31346098da9a2f428cb55726b100e5af2477d578be32aca1f0ca6e0e9f08c225ab4c919567230b4f582dd990de31c3e62c2ae949a8d3ff2b2f76fbabe19e863984c6ea2cd4b06d1bc6b6e428cb2f", 0xac}], 0x5, &(0x7f0000000e80)=[{0xa8, 0x116, 0xfff, "c6af0cb58170053e27244e37bed5c387e6c1aa262d7064149fb8716214217eb7daf7be8882e77b63915c6a60c6d5be5657dd31c3ebe9d9f0711b9e22e87e3b7f838f7c511b59211f6227a3589dd749829e5c00fbade027091921be0f9331895ff62a36ecd09f159601da012fdccfb1be2caf7c904fa93eb495ea1e9922b0d31786b83cdfca4ba46a035855267654209bca7e97f994ba"}, {0x60, 0x1b, 0x6, "b53eefcc4d70cbdd7aab07d39632e29623bdc8dda7edd376c661b1a42c944639330773c118aa815bf17961f6abdd1fdd34aea76d929d242ede2834525d02d781377250aa25255f167fb6"}, {0x10, 0x29, 0x471}], 0x118}}, {{&(0x7f0000000fc0)=@nl, 0x80, &(0x7f00000024c0)=[{&(0x7f0000001040)="10fa72d2f6ffcc91741f754441e8ede220d0e4219e70134030a10844fa7ea93cb6e12a9931fb40c1daf7d7cdf638df1e60eade0722ed5078c8e34fa8975172932329e8bc6a645b97043149997b4a2641958f0b5fec0bcbbf1584e32fd8ef989a70d63e312fe2a7322a23874d", 0x6c}, {&(0x7f00000010c0)="9c3efc743eb5096315833e99147e97eb6ae574439f5067d51818efea59a369c9f2da1f26c2e25a087d764cc5b3db96ac83661c65f429ff13a7bc96458b349c2393673cc7ad97", 0x46}, {&(0x7f0000001140)="46a82f05c0f668539119617b3db5bc38021d7f40fbe9103cb7ad2c64ec49887806f10753d937ee08aac3d184c6b9c36494e9b72fa7e972355a499d348f3ee998b2d0f6779bea4393120242e89d047a587863225d9e6c5588533d245c1b9ed3cbbca49571f02287741ca596ce4e7220815cf658ec6cc6aeee4e38d27cf397c63726ca9b4d308dfe8f2b166c4e0d601574c700a2246b1e38333e495758217e04140967456a1733241d001d11", 0xab}, {&(0x7f0000001200)="9d2729754ab9ee2e4776cc34c2270a2054c3d14c0c06881abdd5189017ce5fd46c8ab8dbdb705e0036476be02124c65a81f7d727831be3035ff429c7efc5d8795ce27ea52895649ac35cfff76b0e32dd", 0x50}, {&(0x7f0000001280)="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", 0xff0}, {&(0x7f0000002280)}, {&(0x7f0000002300)="5d6ba636f355be50c7f8174174e124da57ebc50aac78f5d87a91921aaf52103ade8d79ac6603c8b89555a9ab1d00a84fe867b2182bffece5537b87db3aa978d3236f4dfd8792a8dfe70799", 0x4b}, {&(0x7f0000002380)="5cc4cd0ae78738b07638e92cf20c57f1a1950783e05075b16f7055f8239bb69a310c7e5598975536da0431aaa3637d3e6e73e8d1d11b576d99243c940f64572f252dec47719c81e66ee4ff7c64a6057536969583a473679f0982528ecdd5a5194384e8ca6a5a898fec", 0x69}, {&(0x7f0000002400)="78edbb8869a5a5575310a51aa4d2b14d12e58b85be21305c68b2c91740b121ca5c2b7395f9883f633f750510e9769415e70e17e36d67844eb23aee349f13a521549f5e603ae19cb1722d8c43a9715962699aa29eb27f2568d15b829dafe29f4f513b01d8218018cc01fa369e9c465aeb6a3102ad6dc8a60ee39ececb91bc0582bee87a", 0x83}], 0x9, &(0x7f0000002580)=[{0x90, 0x113, 0xd68f, "386c0c01b4e7dc2ff978845f06832676e02567969f11d8fdf81b0f44a27442c4d467f962e3e4bd10d1b261da39457ffea5a388233bcdca34268aaa5368c0de8e46c0cc1eb0ae9e113b30a6ea1b9ec4b04564f5b636c850b302a0febd0c2e9cfe016bd2c8df535e7877e7ef9a22a8dfa01d088e254192c81614966fe82120a328"}, {0x28, 0x10e, 0x8, "366b28b603ae5e852e78bf54c8bd4116b9be9f"}], 0xb8}}], 0x3, 0x0) keyctl$chown(0x4, r2, 0xffffffffffffffff, 0x0) syz_emit_vhci(0x0, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./debug\x00', &(0x7f0000000400)='debugfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='/,0x-', 0x5) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) readlink(&(0x7f00000006c0)='./debug/split_huge_pages\x00', &(0x7f0000000700)=""/194, 0xc2) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, r7, 0x534, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40050}, 0x4050) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0xb8, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) 280.673245ms ago: executing program 3 (id=235): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000000100)={0x0, 0x39c4, 0x2, 0x3, 0xfffffffe}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000240)='n', 0x1) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0xffffffffffffcfff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000072000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newtfilter={0x44, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x2, 0x2}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x2}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x2}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x102, 0x2}, {0xfff1, 0xffff}, {0x3, 0x1}}}, 0x24}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000940)={r4}, 0xc) write$binfmt_script(r3, &(0x7f0000000580), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010002000000406a053b030000000000010902"], 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) preadv(r3, &(0x7f0000000680)=[{&(0x7f00000006c0)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0xaaaaaaaaaaaac8f, 0x44, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088d0}, 0x48000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x10122, 0x0) 188.262892ms ago: executing program 1 (id=236): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000140)='8', 0x1) write(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb09001800000000000013540000005400000007000000000000000909000d0000000003000000020000000200000003000000090000000500000005000000040000000d0000000500000000000000000001000000010000000100"], &(0x7f0000000280)=""/19, 0x73, 0x13, 0x1, 0x2}, 0x28) 0s ago: executing program 0 (id=237): syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f000014c000/0x4000)=nil, 0x4000, 0x15) sendmsg$nl_route(r2, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000721000a58000000060a0b040000000000000000020000002c0004802800018008000100666962001c0002800800034000000012080001400000000108000240000000010900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18, 0x4008800}, 0x40800) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0xfffffffe}], 0x1, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000840)=""/196, 0xc4}], 0x1}, 0x10000) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x40, 0x0, 0x0, 0x1, 0x0}) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) kernel console output (not intermixed with test programs): t: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 79.214125][ T5610] RDS/IB: rxe0: added [ 79.214356][ T5610] smc: adding ib device rxe0 with port count 1 [ 79.214419][ T5610] smc: ib device rxe0 port 1 has no pnetid [ 79.238824][ T5627] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.265491][ T5610] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.529405][ T5610] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.817012][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.817380][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.817462][ T5611] bridge_slave_0: entered allmulticast mode [ 79.818542][ T5611] bridge_slave_0: entered promiscuous mode [ 79.824542][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.824623][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.824728][ T5611] bridge_slave_1: entered allmulticast mode [ 79.826241][ T5611] bridge_slave_1: entered promiscuous mode [ 79.877033][ T5610] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.953921][ T4926] Bluetooth: hci1: command tx timeout [ 79.954061][ T4926] Bluetooth: hci2: command tx timeout [ 79.954156][ T4926] Bluetooth: hci0: command tx timeout [ 80.003823][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.032910][ T5615] Bluetooth: hci4: command tx timeout [ 80.059389][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.059578][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.059684][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.059871][ T5617] bridge_slave_0: entered allmulticast mode [ 80.060690][ T5617] bridge_slave_0: entered promiscuous mode [ 80.064106][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.064186][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.064735][ T5617] bridge_slave_1: entered allmulticast mode [ 80.066250][ T5617] bridge_slave_1: entered promiscuous mode [ 80.067795][ T5610] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.096389][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.096468][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.096773][ T5609] bridge_slave_0: entered allmulticast mode [ 80.098254][ T5609] bridge_slave_0: entered promiscuous mode [ 80.116368][ T5615] Bluetooth: hci3: command tx timeout [ 80.127563][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.127643][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.127749][ T5621] bridge_slave_0: entered allmulticast mode [ 80.132196][ T5621] bridge_slave_0: entered promiscuous mode [ 80.217437][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.217526][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.217890][ T5609] bridge_slave_1: entered allmulticast mode [ 80.220304][ T5609] bridge_slave_1: entered promiscuous mode [ 80.234370][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.234450][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.234553][ T5621] bridge_slave_1: entered allmulticast mode [ 80.236182][ T5621] bridge_slave_1: entered promiscuous mode [ 80.240148][ T5611] team0: Port device team_slave_0 added [ 80.244043][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.281095][ T5611] team0: Port device team_slave_1 added [ 80.302130][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.309539][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.315446][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.319673][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.387936][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.413817][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.413839][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.413863][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.428621][ T5609] team0: Port device team_slave_0 added [ 80.440499][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.440512][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.440535][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.454720][ T5617] team0: Port device team_slave_0 added [ 80.459180][ T5617] team0: Port device team_slave_1 added [ 80.462741][ T5609] team0: Port device team_slave_1 added [ 80.536891][ T5621] team0: Port device team_slave_0 added [ 80.563124][ T5621] team0: Port device team_slave_1 added [ 80.586896][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.586910][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.586932][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.587809][ T5610] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.629674][ T5611] hsr_slave_0: entered promiscuous mode [ 80.630822][ T5611] hsr_slave_1: entered promiscuous mode [ 80.632271][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.632283][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.632306][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.634395][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.634408][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.634443][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.643548][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.643560][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.643582][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.645567][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.645579][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.645602][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.652219][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.652232][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.652255][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.876025][ T5609] hsr_slave_0: entered promiscuous mode [ 80.878421][ T5609] hsr_slave_1: entered promiscuous mode [ 80.879062][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 80.879132][ T5609] Cannot create hsr debugfs directory [ 80.904213][ T5617] hsr_slave_0: entered promiscuous mode [ 80.905100][ T5617] hsr_slave_1: entered promiscuous mode [ 80.905743][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 80.905761][ T5617] Cannot create hsr debugfs directory [ 80.958232][ T5621] hsr_slave_0: entered promiscuous mode [ 80.959131][ T5621] hsr_slave_1: entered promiscuous mode [ 80.959775][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 80.959792][ T5621] Cannot create hsr debugfs directory [ 81.330243][ T29] cfg80211: failed to load regulatory.db [ 81.417339][ T5611] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.442151][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.451421][ T5611] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.467570][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.483020][ T5611] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.490131][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.532220][ T5611] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.546373][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.676795][ T5609] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.679265][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.680230][ T5609] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.704171][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.727433][ T5609] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.731592][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.747269][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.747352][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.747446][ T5610] bridge_slave_0: entered allmulticast mode [ 81.748807][ T5610] bridge_slave_0: entered promiscuous mode [ 81.751257][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.751370][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.751662][ T5610] bridge_slave_1: entered allmulticast mode [ 81.753323][ T5610] bridge_slave_1: entered promiscuous mode [ 81.804261][ T5609] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.806610][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.841672][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.867436][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.913621][ T5610] team0: Port device team_slave_0 added [ 81.913676][ T5617] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.916304][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.916866][ T5617] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.920491][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.921491][ T5617] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.927514][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.940415][ T5610] team0: Port device team_slave_1 added [ 81.982708][ T5617] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.992870][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.996563][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.996575][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.996596][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.043477][ T5615] Bluetooth: hci0: command tx timeout [ 82.043504][ T5615] Bluetooth: hci2: command tx timeout [ 82.043526][ T5615] Bluetooth: hci1: command tx timeout [ 82.049210][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.049223][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.049246][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.095622][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.107922][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.116211][ T4926] Bluetooth: hci4: command tx timeout [ 82.148818][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.148889][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.150447][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.150516][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.193167][ T4926] Bluetooth: hci3: command tx timeout [ 82.208959][ T5610] hsr_slave_0: entered promiscuous mode [ 82.209481][ T5610] hsr_slave_1: entered promiscuous mode [ 82.209877][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 82.209894][ T5610] Cannot create hsr debugfs directory [ 82.266009][ T5621] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.268251][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.295142][ T5621] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.298375][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.320473][ T5621] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.324370][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.348551][ T5621] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.351475][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.399044][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.492322][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.537692][ T4226] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.537786][ T4226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.544032][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.579353][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.579441][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.628369][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.637280][ T5610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.642529][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.650003][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.650091][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.658858][ T5610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.667797][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.670595][ T5610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.687839][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.707879][ T4226] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.707971][ T4226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.708453][ T5610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.711731][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.794763][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.872559][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.907301][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.907404][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.965899][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.965992][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.140343][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.201678][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.289622][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.291862][ T5611] veth0_vlan: entered promiscuous mode [ 83.318612][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.318712][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.345716][ T5611] veth1_vlan: entered promiscuous mode [ 83.376347][ T4226] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.376443][ T4226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.539346][ T5611] veth0_macvtap: entered promiscuous mode [ 83.551109][ T5611] veth1_macvtap: entered promiscuous mode [ 83.606723][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.619481][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.674354][ T4226] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.688050][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.872212][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.872241][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.911450][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.001454][ T737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.001472][ T737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.008556][ T5609] veth0_vlan: entered promiscuous mode [ 84.030266][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 84.030280][ T30] audit: type=1400 audit(1792302204.504:157): avc: denied { mounton } for pid=5611 comm="syz-executor" path="/root/syzkaller.WCaZjm/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 84.030935][ T30] audit: type=1400 audit(1792302204.504:158): avc: denied { mount } for pid=5611 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.037382][ T78] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.039757][ T30] audit: type=1400 audit(1792302204.514:159): avc: denied { mounton } for pid=5611 comm="syz-executor" path="/root/syzkaller.WCaZjm/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 84.047424][ T5609] veth1_vlan: entered promiscuous mode [ 84.070141][ T30] audit: type=1400 audit(1792302204.524:160): avc: denied { mount } for pid=5611 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 84.070187][ T30] audit: type=1400 audit(1792302204.524:161): avc: denied { mounton } for pid=5611 comm="syz-executor" path="/root/syzkaller.WCaZjm/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 84.070238][ T30] audit: type=1400 audit(1792302204.524:162): avc: denied { mounton } for pid=5611 comm="syz-executor" path="/root/syzkaller.WCaZjm/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 84.092344][ T30] audit: type=1400 audit(1792302204.554:163): avc: denied { unmount } for pid=5611 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 84.114581][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.124230][ T5617] veth0_vlan: entered promiscuous mode [ 84.128603][ T4926] Bluetooth: hci1: command tx timeout [ 84.128629][ T4926] Bluetooth: hci2: command tx timeout [ 84.128649][ T4926] Bluetooth: hci0: command tx timeout [ 84.174027][ T5617] veth1_vlan: entered promiscuous mode [ 84.184938][ T30] audit: type=1400 audit(1792302204.644:164): avc: denied { mounton } for pid=5611 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 84.193253][ T30] audit: type=1400 audit(1792302204.664:165): avc: denied { mount } for pid=5611 comm="syz-executor" name="/" dev="gadgetfs" ino=7613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 84.195074][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.210313][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.212174][ T5609] veth0_macvtap: entered promiscuous mode [ 84.213743][ T5615] Bluetooth: hci4: command tx timeout [ 84.218224][ T30] audit: type=1400 audit(1792302204.694:166): avc: denied { mount } for pid=5611 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 84.248448][ T5609] veth1_macvtap: entered promiscuous mode [ 84.294407][ T5615] Bluetooth: hci3: command tx timeout [ 84.359864][ T5617] veth0_macvtap: entered promiscuous mode [ 84.367756][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.395865][ T5617] veth1_macvtap: entered promiscuous mode [ 84.402035][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.420207][ T5611] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.500073][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.538562][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.613535][ T43] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.667286][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.694067][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.694104][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.694132][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.694160][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.694190][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.694492][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.694528][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.718252][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.718271][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.857279][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.857299][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.984930][ T5610] veth0_vlan: entered promiscuous mode [ 86.077286][ T4142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.077306][ T4142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.194409][ T5621] veth0_vlan: entered promiscuous mode [ 86.198436][ T5610] veth1_vlan: entered promiscuous mode [ 86.217423][ T5615] Bluetooth: hci0: command tx timeout [ 86.217450][ T5615] Bluetooth: hci2: command tx timeout [ 86.217473][ T5615] Bluetooth: hci1: command tx timeout [ 86.241929][ T5610] veth0_macvtap: entered promiscuous mode [ 86.256510][ T5610] veth1_macvtap: entered promiscuous mode [ 86.273596][ T4926] Bluetooth: hci4: command tx timeout [ 86.275066][ T4226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.275083][ T4226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.314459][ T5621] veth1_vlan: entered promiscuous mode [ 86.321834][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.353859][ T4926] Bluetooth: hci3: command tx timeout [ 86.359371][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.389370][ T5621] veth0_macvtap: entered promiscuous mode [ 86.393001][ T4226] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.393370][ T4226] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.393436][ T4226] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.393472][ T4226] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.406124][ T5621] veth1_macvtap: entered promiscuous mode [ 86.497302][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.530149][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.664508][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.664528][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.886934][ T737] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.903535][ T737] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.903613][ T737] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.903707][ T737] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.097628][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.097676][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.434965][ T5823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'. [ 87.470129][ T5823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'. [ 87.493211][ T5823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'. [ 87.504517][ T5823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'. [ 88.502045][ T737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.502076][ T737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.583846][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.583860][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.774424][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 89.774443][ T30] audit: type=1400 audit(1792302210.224:206): avc: denied { create } for pid=5827 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 90.033421][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 92.593457][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 94.266714][ T30] audit: type=1400 audit(1792302211.114:207): avc: denied { read } for pid=5827 comm="syz.2.8" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 94.266744][ T30] audit: type=1400 audit(1792302211.114:208): avc: denied { open } for pid=5827 comm="syz.2.8" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 94.266767][ T30] audit: type=1400 audit(1792302212.224:209): avc: denied { create } for pid=5825 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 94.266789][ T30] audit: type=1400 audit(1792302212.854:210): avc: denied { ioctl } for pid=5825 comm="syz.0.1" path="socket:[9549]" dev="sockfs" ino=9549 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 94.266813][ T30] audit: type=1400 audit(1792302213.084:211): avc: denied { bind } for pid=5825 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 94.413317][ T5788] rxe_eth0 speed is unknown, defaulting to 1000 [ 95.126806][ T30] audit: type=1400 audit(1792302215.164:212): avc: denied { create } for pid=5844 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.127422][ T30] audit: type=1400 audit(1792302215.174:213): avc: denied { mounton } for pid=5844 comm="syz.1.11" path="/3/file0" dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 95.127458][ T30] audit: type=1400 audit(1792302215.184:214): avc: denied { create } for pid=5844 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 95.167602][ T30] audit: type=1400 audit(1792302215.184:215): avc: denied { bind } for pid=5844 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 95.167754][ T30] audit: type=1400 audit(1792302215.194:216): avc: denied { setopt } for pid=5844 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 95.167852][ T30] audit: type=1400 audit(1792302215.194:217): avc: denied { ioctl } for pid=5844 comm="syz.1.11" path="socket:[9563]" dev="sockfs" ino=9563 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 95.167962][ T30] audit: type=1400 audit(1792302215.194:218): avc: denied { read } for pid=5844 comm="syz.1.11" path="socket:[9563]" dev="sockfs" ino=9563 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 95.381026][ T30] audit: type=1400 audit(1792302215.814:219): avc: denied { mount } for pid=5842 comm="syz.3.9" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 95.876616][ T30] audit: type=1400 audit(1792302216.354:220): avc: denied { getattr } for pid=5846 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.956028][ T30] audit: type=1400 audit(1792302216.354:221): avc: denied { search } for pid=5846 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.701264][ T5858] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 97.305285][ T5857] syz.1.12 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 97.309710][ T5857] Zero length message leads to an empty skb [ 97.634192][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.815976][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 97.818123][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.820405][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.820428][ T9] usb 4-1: Product: syz [ 97.820444][ T9] usb 4-1: Manufacturer: syz [ 97.820461][ T9] usb 4-1: SerialNumber: syz [ 97.896477][ T9] cdc_subset 4-1:1.0: probe with driver cdc_subset failed with error -22 [ 97.897371][ T9] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 97.897417][ T9] cdc_ncm 4-1:1.0: bind() failure [ 97.912869][ T5786] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 97.934313][ T9] cdc_subset 4-1:1.1: probe with driver cdc_subset failed with error -22 [ 97.934993][ T9] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 97.935032][ T9] cdc_ncm 4-1:1.1: bind() failure [ 98.064124][ T5786] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 98.067335][ T5786] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 98.067367][ T5786] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.067381][ T5786] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.067396][ T5786] usb 1-1: config 0 interface 0 has no altsetting 0 [ 98.067414][ T5786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.072195][ T5786] usb 1-1: config 0 descriptor?? [ 98.355154][ T5786] usbhid 1-1:0.0: can't add hid device: -71 [ 98.355217][ T5786] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 98.368698][ T5786] usb 1-1: USB disconnect, device number 2 [ 99.254260][ T5914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20'. [ 99.254416][ T5914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20'. [ 99.757362][ T2265] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 99.906907][ T2265] usb 5-1: not running at top speed; connect to a high speed hub [ 99.906942][ T2265] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 99.910197][ T2265] usb 5-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 99.910253][ T2265] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.951243][ T2265] uvcvideo 5-1:1.0: Found UVC 1.00 device (046d:0825) [ 99.951323][ T2265] uvcvideo 5-1:1.0: No streaming interface found for terminal 32770. [ 100.026278][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.046633][ T5925] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 100.560916][ T5926] @0Ù: renamed from bond_slave_1 (while UP) [ 101.093331][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 101.258179][ T9] usb 3-1: New USB device found, idVendor=05c6, idProduct=9211, bcdDevice= 0.00 [ 101.284850][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 101.284879][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 101.288692][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 101.288707][ T30] audit: type=1400 audit(1792302221.764:260): avc: denied { write } for pid=5911 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.354488][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.354522][ T9] usb 3-1: Product: syz [ 101.354551][ T9] usb 3-1: Manufacturer: syz [ 101.354597][ T9] usb 3-1: SerialNumber: syz [ 101.433356][ T30] audit: type=1400 audit(1792302221.884:261): avc: denied { bind } for pid=5922 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 101.433443][ T30] audit: type=1400 audit(1792302221.884:262): avc: denied { name_bind } for pid=5922 comm="syz.1.21" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 101.433522][ T30] audit: type=1400 audit(1792302221.894:263): avc: denied { node_bind } for pid=5922 comm="syz.1.21" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 101.662319][ T9] qcserial 3-1:1.0: Qualcomm USB modem converter detected [ 101.736203][ T5934] tmpfs: Cannot disable swap on remount [ 101.741188][ T30] audit: type=1400 audit(1792302222.204:264): avc: denied { remount } for pid=5922 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 101.844496][ T9] usb 3-1: USB disconnect, device number 2 [ 101.934709][ T9] qcserial 3-1:1.0: device disconnected [ 102.490188][ T9] usb 5-1: USB disconnect, device number 2 [ 102.671646][ T2265] usb 4-1: USB disconnect, device number 2 [ 102.846825][ T30] audit: type=1400 audit(1792302223.324:265): avc: denied { write } for pid=5935 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.960858][ T30] audit: type=1400 audit(1792302223.434:266): avc: denied { setopt } for pid=5939 comm="syz.4.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.200367][ T30] audit: type=1400 audit(1792302223.664:267): avc: denied { mount } for pid=5943 comm="syz.1.27" name="/" dev="autofs" ino=8615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 103.334613][ T2265] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 103.833110][ T30] audit: type=1400 audit(1792302224.304:268): avc: denied { mount } for pid=5943 comm="syz.1.27" name="/" dev="configfs" ino=1098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 103.836706][ T30] audit: type=1400 audit(1792302224.314:269): avc: denied { search } for pid=5943 comm="syz.1.27" name="/" dev="configfs" ino=1098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 103.922752][ T2265] usb 4-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 103.941543][ T2265] usb 4-1: config 0 interface 0 has no altsetting 0 [ 103.941618][ T2265] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.993765][ T5948] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input6 [ 104.221809][ T2265] usb 4-1: config 0 descriptor?? [ 104.497090][ T5940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.497567][ T5940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.854570][ T5955] Bluetooth: MGMT ver 1.23 [ 104.947573][ T5959] sg_write: data in/out 12/136 bytes for SCSI command 0x0-- guessing data in; [ 104.947573][ T5959] program syz.1.29 not setting count and/or reply_len properly [ 105.539915][ T5940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.542138][ T5940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.653229][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 105.741736][ T2265] usb 4-1: string descriptor 0 read error: -71 [ 105.746761][ T2265] usbhid 4-1:0.0: can't add hid device: -71 [ 105.746846][ T2265] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 105.764284][ T2265] usb 4-1: USB disconnect, device number 3 [ 105.803446][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 105.804186][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 105.805281][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.805323][ T9] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.805350][ T9] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.805373][ T9] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 105.805399][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 105.805429][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.817529][ T9] usb 5-1: config 0 descriptor?? [ 107.166855][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 107.166877][ T30] audit: type=1400 audit(1792302227.644:297): avc: denied { unmount } for pid=5621 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 107.918702][ T9] logitech-djreceiver 0003:046D:C53A.0001: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.4-1/input0 [ 108.007060][ T9] usb 5-1: USB disconnect, device number 3 [ 108.379508][ T30] audit: type=1400 audit(1792302228.804:298): avc: denied { map_read map_write } for pid=5988 comm="syz.3.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 108.521080][ T5983] fido_id[5983]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 109.263737][ T30] audit: type=1400 audit(1792302229.744:299): avc: denied { mount } for pid=6002 comm="syz.0.35" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 109.588980][ T6015] SELinux: Context system_u:object_r:ipmi_device_t:s0 is not valid (left unmapped). [ 109.664244][ T30] audit: type=1400 audit(1792302230.064:300): avc: denied { create } for pid=6008 comm="syz.4.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 109.664439][ T30] audit: type=1400 audit(1792302230.064:301): avc: denied { relabelto } for pid=6008 comm="syz.4.37" name="file0" dev="tmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ipmi_device_t:s0" [ 109.664647][ T30] audit: type=1400 audit(1792302230.074:302): avc: denied { associate } for pid=6008 comm="syz.4.37" name="file0" dev="tmpfs" ino=55 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ipmi_device_t:s0" [ 109.664845][ T30] audit: type=1400 audit(1792302230.074:303): avc: denied { listen } for pid=6008 comm="syz.4.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 109.720049][ T3214] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 109.905225][ T5736] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 109.976095][ T6012] kernel profiling enabled (shift: 63) [ 109.976113][ T6012] profiling shift: 63 too large [ 110.009622][ T6012] jffs2: notice: (6012) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 110.033966][ T30] audit: type=1400 audit(1792302230.514:304): avc: denied { write } for pid=5969 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.038587][ T30] audit: type=1400 audit(1792302230.514:305): avc: denied { mount } for pid=6011 comm="syz.1.38" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 110.064307][ T5736] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 110.065333][ T5736] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.065383][ T5736] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 110.065408][ T5736] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.076107][ T5736] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 110.076131][ T5736] usb 1-1: Product: syz [ 110.076146][ T5736] usb 1-1: Manufacturer: syz [ 110.103341][ T6003] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 110.107045][ T5736] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 110.108656][ T3214] usb 3-1: Using ep0 maxpacket: 8 [ 110.108759][ T30] audit: type=1400 audit(1792302230.564:306): avc: denied { write } for pid=6011 comm="syz.1.38" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.142216][ T5736] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 110.151614][ T3214] usb 3-1: unable to get BOS descriptor or descriptor too short [ 110.151655][ T3214] usb 3-1: New USB device found, idVendor=045e, idProduct=0404, bcdDevice=5d.44 [ 110.172631][ T3214] usb 3-1: config 1 has an invalid interface number: 24 but max is 0 [ 110.172655][ T3214] usb 3-1: config 1 has no interface number 0 [ 110.172700][ T3214] usb 3-1: config 1 interface 24 altsetting 5 endpoint 0xC has an invalid bInterval 64, changing to 10 [ 110.172728][ T3214] usb 3-1: config 1 interface 24 has no altsetting 0 [ 110.272033][ T5786] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 110.309660][ T3214] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.309692][ T3214] usb 3-1: Product: syz [ 110.309707][ T3214] usb 3-1: Manufacturer: syz [ 110.309723][ T3214] usb 3-1: SerialNumber: syz [ 110.396642][ T6003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.433267][ T6003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.476343][ T5786] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 110.479283][ T5786] usb 4-1: config 0 has no interfaces? [ 110.479332][ T5786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.518251][ T5786] usb 4-1: config 0 descriptor?? [ 110.586561][ T6020] netlink: 'syz.4.39': attribute type 29 has an invalid length. [ 110.643817][ T6023] syz.2.36 uses obsolete (PF_INET,SOCK_PACKET) [ 111.663469][ T5736] usb 1-1: USB disconnect, device number 3 [ 111.710163][ T5736] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 111.714497][ T5736] garmin_gps 1-1:1.0: device disconnected [ 111.751877][ T5786] usb 4-1: USB disconnect, device number 4 [ 113.666044][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 113.666081][ T30] audit: type=1400 audit(1792302234.144:318): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 114.308601][ T3214] usb 3-1: unknown interface protocol 0xf2, assuming v1 [ 114.308639][ T3214] usb 3-1: 24:1 : does not exist [ 114.308649][ T3214] usb 3-1: 24:2 : does not exist [ 114.930216][ T6060] netlink: 32 bytes leftover after parsing attributes in process `syz.2.46'. [ 114.932767][ T6060] bridge_slave_0: left allmulticast mode [ 114.932917][ T6060] bridge_slave_0: left promiscuous mode [ 114.933982][ T6060] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.991311][ T3214] usb 3-1: USB disconnect, device number 3 [ 115.057759][ T30] audit: type=1400 audit(1792302235.534:319): avc: denied { write } for pid=6057 comm="syz.2.46" name="sda1" dev="devtmpfs" ino=1026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 115.389821][ T6053] IPv6: NLM_F_CREATE should be specified when creating new route [ 115.389962][ T6053] netlink: 'syz.0.44': attribute type 1 has an invalid length. [ 115.396491][ T6053] sctp: Trying to GSO but underlying device doesn't support it. [ 115.401276][ T30] audit: type=1400 audit(1792302235.864:320): avc: denied { ioctl } for pid=6052 comm="syz.0.44" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x5882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 115.401328][ T30] audit: type=1400 audit(1792302235.864:321): avc: denied { mount } for pid=6052 comm="syz.0.44" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 115.401370][ T30] audit: type=1400 audit(1792302235.874:322): avc: denied { write } for pid=6052 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 116.248421][ T30] audit: type=1400 audit(1792302236.724:323): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 116.327984][ T5634] udevd[5634]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.24/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.878434][ T6069] IPv6: NLM_F_CREATE should be specified when creating new route [ 116.879277][ T6069] netlink: 'syz.3.47': attribute type 1 has an invalid length. [ 117.387519][ T30] audit: type=1400 audit(1792302237.304:324): avc: denied { map } for pid=6065 comm="syz.3.47" path="/dev/vbi4" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 117.387574][ T30] audit: type=1400 audit(1792302237.334:325): avc: denied { search } for pid=6065 comm="syz.3.47" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 117.387617][ T30] audit: type=1400 audit(1792302237.334:326): avc: denied { read } for pid=6065 comm="syz.3.47" name="buffer_size_kb" dev="tracefs" ino=3648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 117.387660][ T30] audit: type=1400 audit(1792302237.334:327): avc: denied { open } for pid=6065 comm="syz.3.47" path="/6/tracefs_dir/buffer_size_kb" dev="tracefs" ino=3648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 119.783809][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 119.783827][ T30] audit: type=1400 audit(1792302240.264:331): avc: denied { write } for pid=6085 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.945658][ T30] audit: type=1400 audit(1792302240.424:332): avc: denied { write } for pid=6098 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.985945][ T30] audit: type=1400 audit(1792302240.464:333): avc: denied { name_connect } for pid=6095 comm="syz.4.53" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 120.022176][ T6097] fuse: fd is not a fuse device [ 121.413411][ T29] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 121.782869][ T30] audit: type=1400 audit(1792302242.184:334): avc: denied { map } for pid=6114 comm="syz.4.57" path="socket:[8903]" dev="sockfs" ino=8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 122.530237][ T29] usb 2-1: device descriptor read/all, error -71 [ 123.426868][ T6120] v: renamed from vlan1 [ 123.540226][ T30] audit: type=1400 audit(1792302244.014:335): avc: denied { mmap_zero } for pid=6136 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 123.548106][ T6138] futex_wake_op: syz.1.58 tries to shift op by 144; fix this program [ 123.548737][ T6138] futex_wake_op: syz.1.58 tries to shift op by 144; fix this program [ 123.565217][ T30] audit: type=1400 audit(1792302244.024:336): avc: denied { write } for pid=6136 comm="syz.1.58" name="dynamic_events" dev="tracefs" ino=1065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 123.565264][ T30] audit: type=1400 audit(1792302244.024:337): avc: denied { prog_run } for pid=6136 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 123.565303][ T30] audit: type=1400 audit(1792302244.024:338): avc: denied { read write } for pid=6136 comm="syz.1.58" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 123.565344][ T30] audit: type=1400 audit(1792302244.024:339): avc: denied { open } for pid=6136 comm="syz.1.58" path="/dev/ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 123.565383][ T30] audit: type=1400 audit(1792302244.044:340): avc: denied { ioctl } for pid=6136 comm="syz.1.58" path="socket:[10009]" dev="sockfs" ino=10009 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 124.875427][ T6140] rxe_eth0 speed is unknown, defaulting to 1000 [ 124.905777][ T30] audit: type=1400 audit(1792302245.384:341): avc: denied { write } for pid=6105 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.002855][ T5736] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 125.020805][ T30] audit: type=1400 audit(1792302245.494:342): avc: denied { create } for pid=6144 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 125.137882][ T6152] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 125.137919][ T6152] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 125.139067][ T30] audit: type=1400 audit(1792302245.614:343): avc: denied { firmware_load } for pid=6144 comm="syz.1.61" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 125.147041][ T6152] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 125.210514][ T30] audit: type=1400 audit(1792302245.684:344): avc: denied { write } for pid=6156 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.258802][ T5736] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 125.261804][ T5736] usb 4-1: config 0 has no interfaces? [ 125.288487][ T5736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.288512][ T5736] usb 4-1: Product: syz [ 125.288527][ T5736] usb 4-1: Manufacturer: syz [ 125.288544][ T5736] usb 4-1: SerialNumber: syz [ 125.324309][ T5736] usb 4-1: config 0 descriptor?? [ 125.577808][ T30] audit: type=1400 audit(1792302246.054:345): avc: denied { create } for pid=6158 comm="syz.0.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 126.003031][ T5736] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 126.173375][ T5736] usb 2-1: Using ep0 maxpacket: 16 [ 126.218010][ T5736] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 126.273555][ T5736] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.273598][ T5736] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 126.273626][ T5736] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 126.273648][ T5736] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 126.273670][ T5736] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.352568][ T5736] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 126.352619][ T5736] usb 2-1: Manufacturer: syz [ 126.477378][ T5736] usb 2-1: config 0 descriptor?? [ 127.655941][ T6172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.656352][ T6172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.723863][ T6172] Bluetooth: MGMT ver 1.23 [ 127.754216][ T5736] rc_core: IR keymap rc-hauppauge not found [ 127.754232][ T5736] Registered IR keymap rc-empty [ 127.754489][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 127.781222][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 129.996324][ T5736] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 130.026733][ T5736] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7 [ 130.099499][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 130.113389][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 130.134133][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 130.153139][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 130.173603][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 130.192972][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 130.212938][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 130.233104][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 130.262904][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 130.282960][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 130.304987][ T5736] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 130.305010][ T5736] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 130.309301][ T5736] usb 2-1: USB disconnect, device number 4 [ 130.593112][ T3214] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 130.752939][ T3214] usb 3-1: Using ep0 maxpacket: 16 [ 130.753955][ T3214] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 130.756703][ T3214] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.756736][ T3214] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.756761][ T3214] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 130.756802][ T3214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.780964][ T3214] usb 3-1: config 0 descriptor?? [ 130.868696][ T30] audit: type=1400 audit(1792302251.344:346): avc: denied { write } for pid=6183 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.000682][ T984] usb 4-1: USB disconnect, device number 5 [ 131.015376][ T6192] mmap: syz.2.68 (6192) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 131.189775][ T30] audit: type=1400 audit(1792302251.654:347): avc: denied { create } for pid=6188 comm="syz.2.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 131.190507][ T30] audit: type=1400 audit(1792302251.664:348): avc: denied { write } for pid=6188 comm="syz.2.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 132.124589][ T30] audit: type=1400 audit(1792302252.094:349): avc: denied { write } for pid=6205 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.583619][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.583687][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.273104][ T3214] usbhid 3-1:0.0: can't add hid device: -71 [ 134.273201][ T3214] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 134.635479][ T3214] usb 3-1: USB disconnect, device number 4 [ 135.650159][ T6228] warning: `syz.0.73' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 135.800863][ T6236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.75'. [ 135.803117][ T6236] 8021q: VLANs not supported on ip6tnl0 [ 135.993792][ T3214] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 136.691924][ T3214] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 136.766108][ T3214] usb 1-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 136.766163][ T3214] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 52, changing to 7 [ 136.766192][ T3214] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 9272, setting to 1024 [ 136.766221][ T3214] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.766262][ T3214] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.006972][ T3214] usb 1-1: config 0 descriptor?? [ 137.157944][ T6242] ip_tables: iptables: counters copy to user failed while replacing table [ 137.285857][ T30] audit: type=1400 audit(1792302257.764:350): avc: denied { bind } for pid=6226 comm="syz.0.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 137.327201][ T30] audit: type=1400 audit(1792302257.804:351): avc: denied { ioctl } for pid=6226 comm="syz.0.73" path="socket:[9075]" dev="sockfs" ino=9075 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 137.328139][ T3214] ath6kl: Failed to submit usb control message: -71 [ 137.328181][ T3214] ath6kl: unable to send the bmi data to the device: -71 [ 137.328196][ T3214] ath6kl: Unable to send get target info: -71 [ 137.333685][ T3214] ath6kl: Failed to init ath6kl core: -71 [ 137.334744][ T3214] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 137.362561][ T3214] usb 1-1: USB disconnect, device number 4 [ 137.486514][ T30] audit: type=1400 audit(1792302257.964:352): avc: denied { create } for pid=6254 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 137.513522][ T30] audit: type=1400 audit(1792302257.974:353): avc: denied { write } for pid=6254 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 137.513570][ T30] audit: type=1400 audit(1792302257.974:354): avc: denied { read } for pid=6254 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 137.692862][ T984] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 137.753774][ T30] audit: type=1400 audit(1792302258.234:355): avc: denied { write } for pid=6233 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.856843][ T984] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 137.857969][ T984] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 137.857988][ T984] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.858001][ T984] usb 5-1: config 0 interface 0 has no altsetting 0 [ 137.858019][ T984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.859492][ T984] usb 5-1: config 0 descriptor?? [ 138.047385][ T30] audit: type=1400 audit(1792302258.524:356): avc: denied { write } for pid=6267 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.318894][ T984] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 138.318931][ T984] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 138.318956][ T984] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 138.318981][ T984] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 138.319014][ T984] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 138.319040][ T984] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 138.319066][ T984] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 138.319090][ T984] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 138.319115][ T984] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 138.319139][ T984] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 138.491302][ T30] audit: type=1400 audit(1792302258.964:357): avc: denied { ioctl } for pid=6250 comm="syz.4.79" path="socket:[10130]" dev="sockfs" ino=10130 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 138.557818][ T30] audit: type=1400 audit(1792302259.034:358): avc: denied { mount } for pid=6250 comm="syz.4.79" name="/" dev="ramfs" ino=10228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 138.625896][ T6270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.83'. [ 139.035666][ T30] audit: type=1400 audit(1792302259.514:359): avc: denied { execute } for pid=6274 comm="syz.1.78" name="file0" dev="tmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 139.062797][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 139.089499][ T984] hid-led 0003:0FC5:B080.0002: probe with driver hid-led failed with error -71 [ 139.112149][ T984] usb 5-1: USB disconnect, device number 4 [ 139.112852][ T5627] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 140.312843][ T5627] usb 1-1: Using ep0 maxpacket: 16 [ 140.313626][ T5627] usb 1-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 140.315449][ T5627] usb 1-1: config 0 interface 0 altsetting 183 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.315483][ T5627] usb 1-1: config 0 interface 0 has no altsetting 0 [ 140.315514][ T5627] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.366215][ T5627] usb 1-1: config 0 descriptor?? [ 142.197345][ T5627] usbhid 1-1:0.0: can't add hid device: -71 [ 142.197435][ T5627] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 142.254096][ T5627] usb 1-1: USB disconnect, device number 5 [ 142.424328][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 142.584334][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 142.589130][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.625866][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.626090][ T9] usb 4-1: Product: syz [ 142.626307][ T9] usb 4-1: Manufacturer: syz [ 142.626495][ T9] usb 4-1: SerialNumber: syz [ 142.715955][ T6309] FAULT_INJECTION: forcing a failure. [ 142.715955][ T6309] name failslab, interval 1, probability 0, space 0, times 1 [ 142.716040][ T6309] CPU: 0 UID: 0 PID: 6309 Comm: syz.0.91 Not tainted syzkaller #0 PREEMPT(full) [ 142.716065][ T6309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 142.716084][ T6309] Call Trace: [ 142.716092][ T6309] [ 142.716100][ T6309] dump_stack_lvl+0x100/0x190 [ 142.716150][ T6309] should_fail_ex.cold+0x5/0xa [ 142.716182][ T6309] should_failslab+0xc2/0x120 [ 142.716215][ T6309] __kmalloc_noprof+0xfc/0x840 [ 142.716241][ T6309] ? rcu_is_watching+0x13/0xc0 [ 142.716274][ T6309] ? tomoyo_realpath_from_path+0xb6/0x690 [ 142.716302][ T6309] tomoyo_realpath_from_path+0xb6/0x690 [ 142.716330][ T6309] tomoyo_path_number_perm+0x23c/0x580 [ 142.716359][ T6309] ? tomoyo_path_number_perm+0x22e/0x580 [ 142.716390][ T6309] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 142.716432][ T6309] ? __lock_acquire+0x5c0/0x1f40 [ 142.716472][ T6309] ? __fget_files+0x34/0x3d0 [ 142.716504][ T6309] ? find_held_lock+0x2b/0x80 [ 142.716535][ T6309] ? hook_file_ioctl_common+0x140/0x440 [ 142.716565][ T6309] ? __fget_files+0x21f/0x3d0 [ 142.716601][ T6309] security_file_ioctl+0xd3/0x230 [ 142.716634][ T6309] __x64_sys_ioctl+0xb7/0x210 [ 142.716663][ T6309] do_syscall_64+0x123/0x790 [ 142.716698][ T6309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.716720][ T6309] RIP: 0033:0x7f7adcd9e559 [ 142.716742][ T6309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.716765][ T6309] RSP: 002b:00007f7addc05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.716788][ T6309] RAX: ffffffffffffffda RBX: 00007f7add026090 RCX: 00007f7adcd9e559 [ 142.716803][ T6309] RDX: 0000000000000081 RSI: 0000000000004c08 RDI: 0000000000000004 [ 142.716815][ T6309] RBP: 00007f7addc05090 R08: 0000000000000000 R09: 0000000000000000 [ 142.716828][ T6309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.716841][ T6309] R13: 00007f7add026128 R14: 00007f7add026090 R15: 00007ffe44150ef8 [ 142.716871][ T6309] [ 142.749507][ T6309] ERROR: Out of memory at tomoyo_realpath_from_path. [ 142.754834][ T4926] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 143.454317][ T9] cdc_subset 4-1:1.0: probe with driver cdc_subset failed with error -22 [ 143.455028][ T9] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 143.455069][ T9] cdc_ncm 4-1:1.0: bind() failure [ 143.518103][ T9] cdc_subset 4-1:1.1: probe with driver cdc_subset failed with error -22 [ 143.522733][ T9] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 143.528164][ T9] cdc_ncm 4-1:1.1: bind() failure [ 145.321284][ T984] usb 4-1: USB disconnect, device number 6 [ 145.656148][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 145.656165][ T30] audit: type=1400 audit(1792302266.134:361): avc: denied { mounton } for pid=6323 comm="syz.0.97" path="/16/file0/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 145.706510][ T6329] FAULT_INJECTION: forcing a failure. [ 145.706510][ T6329] name failslab, interval 1, probability 0, space 0, times 0 [ 145.706529][ T6329] CPU: 1 UID: 0 PID: 6329 Comm: syz.0.97 Not tainted syzkaller #0 PREEMPT(full) [ 145.706542][ T6329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 145.706549][ T6329] Call Trace: [ 145.706553][ T6329] [ 145.706558][ T6329] dump_stack_lvl+0x100/0x190 [ 145.706579][ T6329] should_fail_ex.cold+0x5/0xa [ 145.706596][ T6329] should_failslab+0xc2/0x120 [ 145.706614][ T6329] kmem_cache_alloc_noprof+0x92/0x6a0 [ 145.706630][ T6329] ? alloc_empty_file+0x5b/0x1c0 [ 145.706644][ T6329] alloc_empty_file+0x5b/0x1c0 [ 145.706656][ T6329] path_openat+0xdb/0x2450 [ 145.706675][ T6329] ? __pfx_path_openat+0x10/0x10 [ 145.706695][ T6329] do_file_open+0x20e/0x430 [ 145.706713][ T6329] ? __pfx_do_file_open+0x10/0x10 [ 145.706743][ T6329] ? _raw_spin_unlock+0x28/0x50 [ 145.706758][ T6329] ? alloc_fd+0x471/0x7a0 [ 145.706779][ T6329] do_sys_openat2+0x10f/0x1e0 [ 145.706791][ T6329] ? __pfx_do_sys_openat2+0x10/0x10 [ 145.706803][ T6329] ? fdget+0x18b/0x210 [ 145.706822][ T6329] __x64_sys_openat+0x12d/0x210 [ 145.706834][ T6329] ? __pfx___x64_sys_openat+0x10/0x10 [ 145.706851][ T6329] do_syscall_64+0x123/0x790 [ 145.706869][ T6329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.706881][ T6329] RIP: 0033:0x7f7adcd9e559 [ 145.706891][ T6329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.706902][ T6329] RSP: 002b:00007f7addc05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 145.706913][ T6329] RAX: ffffffffffffffda RBX: 00007f7add026090 RCX: 00007f7adcd9e559 [ 145.706920][ T6329] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 145.706927][ T6329] RBP: 00007f7adce35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 145.706934][ T6329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.706940][ T6329] R13: 00007f7add026128 R14: 00007f7add026090 R15: 00007ffe44150ef8 [ 145.706956][ T6329] [ 145.896184][ T30] audit: type=1400 audit(1792302266.374:362): avc: denied { read } for pid=5270 comm="dhcpcd" name="n40" dev="tmpfs" ino=2085 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 145.896216][ T30] audit: type=1400 audit(1792302266.374:363): avc: denied { open } for pid=5270 comm="dhcpcd" path="/run/udev/data/n40" dev="tmpfs" ino=2085 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 145.904393][ T30] audit: type=1400 audit(1792302266.374:364): avc: denied { getattr } for pid=5270 comm="dhcpcd" path="/run/udev/data/n40" dev="tmpfs" ino=2085 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 146.304121][ T30] audit: type=1400 audit(1792302266.764:365): avc: denied { create } for pid=6336 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 146.307692][ T30] audit: type=1400 audit(1792302266.774:366): avc: denied { ioctl } for pid=6336 comm="syz.2.99" path="socket:[9189]" dev="sockfs" ino=9189 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 146.307809][ T30] audit: type=1400 audit(1792302266.784:367): avc: denied { bind } for pid=6336 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 148.323460][ T3214] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 148.340316][ T30] audit: type=1400 audit(1792302268.814:368): avc: denied { write } for pid=6335 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.340365][ T30] audit: type=1400 audit(1792302268.814:369): avc: denied { create } for pid=6335 comm="dhcpcd-run-hook" name="resolv.conf.gprs0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 148.340405][ T30] audit: type=1400 audit(1792302268.814:370): avc: denied { write } for pid=6335 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.gprs0.link" dev="tmpfs" ino=2092 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 148.664018][ T3214] usb 5-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 148.671245][ T3214] usb 5-1: config 0 has no interfaces? [ 148.671335][ T3214] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.834217][ T3214] usb 5-1: config 0 descriptor?? [ 149.781905][ T6368] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 150.137038][ T9] usb 5-1: USB disconnect, device number 5 [ 150.168363][ T3214] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 150.334159][ T3214] usb 2-1: unable to get BOS descriptor or descriptor too short [ 150.334202][ T3214] usb 2-1: New USB device found, idVendor=1235, idProduct=8010, bcdDevice= 0.40 [ 150.339986][ T3214] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.340010][ T3214] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 150.345837][ T3214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.345858][ T3214] usb 2-1: Product: syz [ 150.345874][ T3214] usb 2-1: Manufacturer: syz [ 150.345890][ T3214] usb 2-1: SerialNumber: syz [ 150.656643][ T6362] jffs2: notice: (6362) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 150.738385][ T6362] ======================================================= [ 150.738385][ T6362] WARNING: The mand mount option has been deprecated and [ 150.738385][ T6362] and is ignored by this kernel. Remove the mand [ 150.738385][ T6362] option from the mount to silence this warning. [ 150.738385][ T6362] ======================================================= [ 150.738519][ T6362] MTD: Couldn't look up './file0': -15 [ 150.744311][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 150.744326][ T30] audit: type=1400 audit(1792302271.214:376): avc: denied { mounton } for pid=6361 comm="syz.1.104" path="/25/file0" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 151.293579][ T30] audit: type=1400 audit(1792302271.774:377): avc: denied { create } for pid=6384 comm="syz.4.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 151.298673][ T30] audit: type=1400 audit(1792302271.774:378): avc: denied { bind } for pid=6384 comm="syz.4.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 151.336530][ T3214] usb 2-1: USB disconnect, device number 5 [ 151.499078][ T6390] netlink: 'syz.3.109': attribute type 1 has an invalid length. [ 151.668386][ T5634] udevd[5634]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.793059][ T6390] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.947298][ T30] audit: type=1400 audit(1792302272.424:379): avc: denied { write } for pid=6376 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.174261][ T30] audit: type=1400 audit(1792302272.654:380): avc: denied { bind } for pid=6403 comm="syz.1.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 152.223724][ T30] audit: type=1400 audit(1792302272.704:381): avc: denied { connect } for pid=6403 comm="syz.1.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 152.275868][ T30] audit: type=1400 audit(1792302272.754:382): avc: denied { accept } for pid=6403 comm="syz.1.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 152.302065][ T6400] bond1: (slave veth3): Enslaving as an active interface with a down link [ 152.376739][ T30] audit: type=1400 audit(1792302272.854:383): avc: denied { write } for pid=6411 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.516005][ T6390] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 152.522031][ T6390] bond1: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 152.683398][ T984] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 152.854960][ T984] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 152.858424][ T984] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.904501][ T984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.904534][ T984] usb 5-1: Product: syz [ 152.904606][ T984] usb 5-1: Manufacturer: syz [ 152.904680][ T984] usb 5-1: SerialNumber: syz [ 153.251659][ T30] audit: type=1400 audit(1792302273.724:384): avc: denied { ioctl } for pid=6413 comm="syz.1.113" path="socket:[10603]" dev="sockfs" ino=10603 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 153.506037][ T984] cdc_subset 5-1:1.0: probe with driver cdc_subset failed with error -22 [ 153.647146][ T30] audit: type=1400 audit(1792302274.124:385): avc: denied { name_bind } for pid=6413 comm="syz.1.113" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 153.671180][ T6420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.113'. [ 153.820112][ T984] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 153.820150][ T984] cdc_ncm 5-1:1.0: bind() failure [ 153.826306][ T984] cdc_subset 5-1:1.1: probe with driver cdc_subset failed with error -22 [ 153.831326][ T984] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 153.831364][ T984] cdc_ncm 5-1:1.1: bind() failure [ 153.837226][ T984] usb 5-1: USB disconnect, device number 6 [ 154.158741][ T6419] netlink: 56 bytes leftover after parsing attributes in process `syz.1.113'. [ 154.633382][ T984] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 154.673040][ C0] net_ratelimit: 61 callbacks suppressed [ 155.261767][ T6434] netlink: 48 bytes leftover after parsing attributes in process `syz.3.117'. [ 155.294399][ T6436] FAULT_INJECTION: forcing a failure. [ 155.294399][ T6436] name failslab, interval 1, probability 0, space 0, times 0 [ 155.294495][ T6436] CPU: 0 UID: 0 PID: 6436 Comm: syz.3.117 Not tainted syzkaller #0 PREEMPT(full) [ 155.294522][ T6436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 155.294536][ T6436] Call Trace: [ 155.294544][ T6436] [ 155.294553][ T6436] dump_stack_lvl+0x100/0x190 [ 155.294591][ T6436] should_fail_ex.cold+0x5/0xa [ 155.294623][ T6436] should_failslab+0xc2/0x120 [ 155.294657][ T6436] __kmalloc_cache_noprof+0x91/0x6d0 [ 155.294681][ T6436] ? preempt_schedule_thunk+0x16/0x40 [ 155.294708][ T6436] ? sget_fc+0x1ba/0x1f70 [ 155.294739][ T6436] sget_fc+0x1ba/0x1f70 [ 155.294767][ T6436] ? irqentry_exit+0x24d/0xa10 [ 155.294798][ T6436] ? lockdep_hardirqs_on+0x7d/0x110 [ 155.294831][ T6436] ? __pfx_set_anon_super_fc+0x10/0x10 [ 155.294857][ T6436] ? __pfx_sget_fc+0x10/0x10 [ 155.294884][ T6436] ? __pfx_proc_fill_super+0x10/0x10 [ 155.294917][ T6436] ? __pfx_set_anon_super_fc+0x10/0x10 [ 155.294945][ T6436] ? __pfx_proc_fill_super+0x10/0x10 [ 155.294971][ T6436] get_tree_nodev+0x28/0x190 [ 155.295000][ T6436] vfs_get_tree+0x92/0x320 [ 155.295024][ T6436] path_mount+0x7d0/0x2850 [ 155.295053][ T6436] ? __pfx_path_mount+0x10/0x10 [ 155.295075][ T6436] ? lockdep_hardirqs_on+0x7d/0x110 [ 155.295110][ T6436] ? putname+0xb1/0x110 [ 155.295128][ T6436] ? kmem_cache_free+0x127/0x6c0 [ 155.295163][ T6436] ? __x64_sys_mount+0x293/0x310 [ 155.295185][ T6436] __x64_sys_mount+0x293/0x310 [ 155.295210][ T6436] ? __pfx___x64_sys_mount+0x10/0x10 [ 155.295243][ T6436] do_syscall_64+0x123/0x790 [ 155.295278][ T6436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.295307][ T6436] RIP: 0033:0x7fb665b9e559 [ 155.295326][ T6436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.295347][ T6436] RSP: 002b:00007fb663df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 155.295368][ T6436] RAX: ffffffffffffffda RBX: 00007fb665e26180 RCX: 00007fb665b9e559 [ 155.295383][ T6436] RDX: 0000200000000280 RSI: 0000200000000240 RDI: 0000000000000000 [ 155.295398][ T6436] RBP: 00007fb663df6090 R08: 0000000000000000 R09: 0000000000000000 [ 155.295412][ T6436] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000002 [ 155.295425][ T6436] R13: 00007fb665e26218 R14: 00007fb665e26180 R15: 00007ffe2734daf8 [ 155.295456][ T6436] [ 155.802464][ T984] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 155.819214][ T984] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 155.819230][ T984] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.819246][ T984] usb 3-1: config 0 interface 0 has no altsetting 0 [ 155.819274][ T984] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.855976][ T984] usb 3-1: config 0 descriptor?? [ 155.951931][ T4142] IPVS: starting estimator thread 0... [ 156.073029][ T6438] IPVS: using max 34 ests per chain, 81600 per kthread [ 156.318664][ T984] hid_parser_main: 10 callbacks suppressed [ 156.318673][ T984] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 156.318688][ T984] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 156.318710][ T984] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 156.318725][ T984] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 156.318740][ T984] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 156.318756][ T984] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 156.318771][ T984] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 156.318786][ T984] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 156.318801][ T984] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 156.318817][ T984] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 156.462843][ T3214] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 156.638607][ T3214] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 156.652395][ T3214] usb 1-1: config 0 has no interfaces? [ 156.652451][ T3214] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.652901][ T9] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 156.682299][ T3214] usb 1-1: config 0 descriptor?? [ 156.863423][ T9] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 156.871352][ T9] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 156.871380][ T9] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.871406][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 156.871458][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.880901][ T9] usb 2-1: config 0 descriptor?? [ 157.017313][ T984] hid-led 0003:0FC5:B080.0003: probe with driver hid-led failed with error -71 [ 157.033910][ T984] usb 3-1: USB disconnect, device number 5 [ 157.054952][ T5786] usb 1-1: USB disconnect, device number 6 [ 157.111382][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 157.111396][ T30] audit: type=1400 audit(1792302277.584:388): avc: denied { write } for pid=6432 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.898142][ T6456] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 158.593796][ T30] audit: type=1400 audit(1792302279.074:389): avc: denied { write } for pid=6455 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.351941][ T9] hid-led 0003:0FC5:B080.0004: probe with driver hid-led failed with error -71 [ 159.400440][ T9] usb 2-1: USB disconnect, device number 6 [ 160.316078][ T30] audit: type=1400 audit(1792302280.794:390): avc: denied { write } for pid=6464 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.560822][ T30] audit: type=1400 audit(1792302281.034:391): avc: denied { write } for pid=6482 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.593080][ C1] net_ratelimit: 58 callbacks suppressed [ 162.235110][ T30] audit: type=1400 audit(1792302282.714:392): avc: denied { create } for pid=6502 comm="syz.1.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 164.098437][ T30] audit: type=1400 audit(1792302284.574:393): avc: denied { write } for pid=6490 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.712821][ C0] net_ratelimit: 66 callbacks suppressed [ 166.189538][ T30] audit: type=1400 audit(1792302286.664:394): avc: denied { write } for pid=6529 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.266947][ T30] audit: type=1400 audit(1792302286.744:395): avc: denied { read write } for pid=6531 comm="syz.2.136" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 166.267148][ T30] audit: type=1400 audit(1792302286.744:396): avc: denied { write } for pid=6535 comm="syz.4.137" name="sg0" dev="devtmpfs" ino=992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 166.267243][ T30] audit: type=1400 audit(1792302286.744:397): avc: denied { open } for pid=6531 comm="syz.2.136" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 166.399479][ T6532] xt_HMARK: proto mask must be zero with L3 mode [ 166.492863][ T29] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 166.627261][ T30] audit: type=1400 audit(1792302287.104:398): avc: denied { ioctl } for pid=6535 comm="syz.4.137" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 166.671377][ T29] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 166.683732][ T29] usb 4-1: config 0 has no interfaces? [ 166.683789][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.700136][ T30] audit: type=1400 audit(1792302287.174:399): avc: denied { set_context_mgr } for pid=6535 comm="syz.4.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 166.702594][ T29] usb 4-1: config 0 descriptor?? [ 166.714719][ T30] audit: type=1400 audit(1792302287.184:400): avc: denied { map } for pid=6535 comm="syz.4.137" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 166.761607][ T6554] binder: BINDER_SET_CONTEXT_MGR already set [ 166.761615][ T6554] binder: 6535:6554 ioctl 4018620d 200000000980 returned -16 [ 166.801796][ T30] audit: type=1400 audit(1792302287.274:401): avc: denied { create } for pid=6535 comm="syz.4.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 167.035456][ T29] usb 4-1: USB disconnect, device number 7 [ 168.620789][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 168.620804][ T30] audit: type=1400 audit(1792302289.094:405): avc: denied { write } for pid=6571 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.705885][ T6587] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 170.992828][ C0] net_ratelimit: 197 callbacks suppressed [ 172.274184][ T6601] netlink: 52 bytes leftover after parsing attributes in process `syz.1.152'. [ 172.276874][ T6604] tmpfs: Unknown parameter '' [ 172.377432][ T6604] serio: Serial port ttyS3 [ 172.498747][ T6608] fuse: Unknown parameter 'f³5^ì»d}0x0000000000000003' [ 175.022885][ T5786] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 175.042899][ T5736] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 175.174486][ T5736] usb 1-1: device descriptor read/64, error -71 [ 175.185952][ T5786] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 175.191764][ T5786] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.214331][ T5786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.214355][ T5786] usb 2-1: Product: syz [ 175.214371][ T5786] usb 2-1: Manufacturer: syz [ 175.214388][ T5786] usb 2-1: SerialNumber: syz [ 175.323123][ T5786] cdc_subset 2-1:1.0: probe with driver cdc_subset failed with error -22 [ 175.337233][ T5786] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 175.337256][ T5786] cdc_ncm 2-1:1.0: bind() failure [ 175.398806][ T5786] cdc_subset 2-1:1.1: probe with driver cdc_subset failed with error -22 [ 175.399277][ T5786] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 175.399298][ T5786] cdc_ncm 2-1:1.1: bind() failure [ 175.424972][ T5736] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 175.553452][ T5736] usb 1-1: device descriptor read/64, error -71 [ 175.666414][ T5736] usb usb1-port1: attempt power cycle [ 175.729139][ T30] audit: type=1400 audit(1792302296.204:406): avc: denied { mounton } for pid=6630 comm="syz.4.160" path="/31/file0" dev="tmpfs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 175.911880][ T5615] Bluetooth: hci4: unexpected event for opcode 0x2087 [ 176.540702][ T30] audit: type=1400 audit(1792302296.734:407): avc: denied { getopt } for pid=6630 comm="syz.4.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 176.832819][ C1] net_ratelimit: 68 callbacks suppressed [ 176.891488][ T5627] usb 2-1: USB disconnect, device number 7 [ 176.898178][ T6212] IPVS: starting estimator thread 0... [ 176.993020][ T6647] IPVS: using max 33 ests per chain, 79200 per kthread [ 177.364139][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 177.512824][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 177.514614][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 177.521009][ T9] usb 3-1: config 127 has an invalid interface number: 124 but max is 0 [ 177.521034][ T9] usb 3-1: config 127 has no interface number 0 [ 177.521064][ T9] usb 3-1: config 127 interface 124 has no altsetting 0 [ 177.561443][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.561464][ T9] usb 3-1: Product: syz [ 177.561480][ T9] usb 3-1: Manufacturer: syz [ 177.561497][ T9] usb 3-1: SerialNumber: syz [ 177.976295][ T30] audit: type=1400 audit(1792302298.454:408): avc: denied { connect } for pid=6667 comm="syz.4.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 177.992827][ T5786] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 179.029900][ T30] audit: type=1400 audit(1792302299.154:409): avc: denied { open } for pid=6669 comm="syz.0.168" path="/dev/ttyq4" dev="devtmpfs" ino=379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 179.037350][ T30] audit: type=1400 audit(1792302299.514:410): avc: denied { read } for pid=6667 comm="syz.4.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 179.232827][ T30] audit: type=1400 audit(1792302299.684:411): avc: denied { ioctl } for pid=6667 comm="syz.4.169" path="socket:[11780]" dev="sockfs" ino=11780 ioctlcmd=0x8b04 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 179.252831][ T5786] usb 4-1: Using ep0 maxpacket: 32 [ 179.263302][ T5786] usb 4-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 179.267075][ T5786] usb 4-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 179.267112][ T5786] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.267140][ T5786] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.267162][ T5786] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 179.267190][ T5786] usb 4-1: config 0 interface 0 has no altsetting 0 [ 179.267239][ T5786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.274409][ T5786] usb 4-1: config 0 descriptor?? [ 180.184644][ T30] audit: type=1400 audit(1792302300.224:412): avc: denied { write } for pid=6663 comm="syz.3.167" name="anycast6" dev="proc" ino=4026533298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 180.184696][ T30] audit: type=1400 audit(1792302300.434:413): avc: denied { append } for pid=6663 comm="syz.3.167" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 180.200788][ T9] usb 3-1: USB disconnect, device number 6 [ 180.442826][ T30] audit: type=1400 audit(1792302300.914:414): avc: denied { write } for pid=6654 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.912196][ T30] audit: type=1400 audit(1792302301.384:415): avc: denied { write } for pid=6690 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.177418][ T30] audit: type=1400 audit(1792302301.654:416): avc: denied { cmd } for pid=6692 comm="syz.2.171" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 181.359374][ T5786] usbhid 4-1:0.0: can't add hid device: -71 [ 181.359503][ T5786] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 181.389207][ T5786] usb 4-1: USB disconnect, device number 8 [ 181.763640][ T28] rcu_tasks_wait_gp: rcu_tasks grace period number 9 (since boot) is 1025 jiffies old. [ 181.874327][ T5615] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 181.874388][ T5615] Bluetooth: hci3: Injecting HCI hardware error event [ 181.875638][ T4926] Bluetooth: hci3: hardware error 0x00 [ 182.112812][ C0] net_ratelimit: 60 callbacks suppressed [ 182.395602][ T5786] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 182.476387][ T30] audit: type=1400 audit(1792302302.954:417): avc: denied { write } for pid=6699 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.553202][ T5786] usb 2-1: Using ep0 maxpacket: 16 [ 182.554658][ T5786] usb 2-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 182.579883][ T5786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.579907][ T5786] usb 2-1: Product: syz [ 182.579921][ T5786] usb 2-1: Manufacturer: syz [ 182.579936][ T5786] usb 2-1: SerialNumber: syz [ 182.595057][ T5786] usb 2-1: config 0 descriptor?? [ 182.633943][ T5786] usb 2-1: selecting invalid altsetting 1 [ 182.633964][ T5786] technisat-usb2: could not set alternate setting to 0 [ 182.815420][ T5786] technisat-usb2: firmware version: 0.0 [ 182.815467][ T5786] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 182.881627][ T30] audit: type=1400 audit(1792302303.354:418): avc: denied { write } for pid=6730 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.932820][ T5735] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 183.573660][ T5735] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 183.575173][ T5735] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 183.575202][ T5735] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.575228][ T5735] usb 5-1: config 0 interface 0 has no altsetting 0 [ 183.575281][ T5735] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.579114][ T5735] usb 5-1: config 0 descriptor?? [ 183.650128][ T30] audit: type=1400 audit(1792302304.124:419): avc: denied { watch watch_reads } for pid=6715 comm="syz.1.174" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 183.669387][ T6717] process 'syz.1.174' launched '/dev/fd/8' with NULL argv: empty string added [ 183.698966][ T5786] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 183.700390][ T5786] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 183.700458][ T5786] usb 2-1: media controller created [ 183.728191][ T5786] technisat-usb2: i2c-error: out failed 53 = -22 [ 183.728300][ T5786] dvb-usb: MAC address reading failed. [ 183.979838][ T5786] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 184.005806][ T5735] hid_parser_main: 30 callbacks suppressed [ 184.008076][ T5735] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x0 [ 184.008110][ T5735] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x0 [ 184.008137][ T5735] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x0 [ 184.008163][ T5735] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x0 [ 184.008189][ T5735] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x0 [ 184.008217][ T5735] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x0 [ 184.008243][ T5735] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x0 [ 184.008269][ T5735] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x0 [ 184.008294][ T5735] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x0 [ 184.008320][ T5735] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x0 [ 184.034715][ T4926] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 184.203974][ T5735] hid-led 0003:0FC5:B080.0005: probe with driver hid-led failed with error -71 [ 184.212788][ T5735] usb 5-1: USB disconnect, device number 7 [ 184.524621][ T5786] DVB: Unable to find symbol stv090x_attach() [ 184.525256][ T5786] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 184.645580][ T6751] __vm_enough_memory: pid: 6751, comm: syz.2.180, bytes: 4503599627366400 not enough memory for the allocation [ 185.095295][ T5786] rc_core: IR keymap rc-technisat-usb2 not found [ 185.095310][ T5786] Registered IR keymap rc-empty [ 185.099622][ T5786] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 185.132486][ T5786] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input9 [ 185.262545][ T5786] dvb-usb: schedule remote query interval to 100 msecs. [ 185.271634][ T5786] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 185.293276][ T5786] usb 2-1: USB disconnect, device number 8 [ 185.400287][ T30] audit: type=1400 audit(1792302305.874:420): avc: denied { write } for pid=6753 comm="syz.3.182" lport=115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 185.431310][ T3214] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 185.654007][ T3214] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 185.667512][ T3214] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 185.667543][ T3214] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.667568][ T3214] usb 1-1: config 0 interface 0 has no altsetting 0 [ 185.667621][ T3214] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.673615][ T3214] usb 1-1: config 0 descriptor?? [ 185.795217][ T5786] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 185.962145][ T6764] netlink: 112 bytes leftover after parsing attributes in process `syz.3.186'. ** 3277 printk messages dropped ** [ 186.997386][ T3214] hid-led 0003:0FC5:B080.0006: probe with driver hid-led failed with error -71 [ 187.026243][ T3214] usb 1-1: USB disconnect, device number 10 [ 188.112815][ C1] net_ratelimit: 78 callbacks suppressed [ 188.328439][ T30] audit: type=1400 audit(1792302308.804:421): avc: denied { shutdown } for pid=6783 comm="syz.4.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 188.545819][ T6789] netlink: 24 bytes leftover after parsing attributes in process `syz.0.191'. [ 188.794515][ T30] audit: type=1400 audit(1792302309.234:422): avc: denied { unlink } for pid=6788 comm="syz.0.191" name="#1" dev="tmpfs" ino=223 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 189.772850][ T3214] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 189.793486][ T30] audit: type=1400 audit(1792302310.274:423): avc: denied { watch } for pid=6801 comm="syz.0.192" path="/36" dev="tmpfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 189.854933][ T6808] ïRy×À: renamed from veth0_to_hsr (while UP) [ 189.919533][ T30] audit: type=1400 audit(1792302310.394:424): avc: denied { create } for pid=6801 comm="syz.0.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 189.924667][ T3214] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 189.930374][ T3214] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.942935][ T3214] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.942957][ T3214] usb 5-1: Product: syz [ 189.942973][ T3214] usb 5-1: Manufacturer: syz [ 189.942989][ T3214] usb 5-1: SerialNumber: syz [ 189.990041][ T3214] usb 5-1: config 0 descriptor?? [ 190.273808][ T5615] Bluetooth: hci4: command 0x0405 tx timeout [ 190.432869][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 190.612881][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 190.682098][ T9] usb 4-1: config 0 has no interfaces? [ 190.682275][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.798990][ T9] usb 4-1: config 0 descriptor?? ** 1300 printk messages dropped ** [ 191.539136][ T9] usb 4-1: USB disconnect, device number 9 ** 4821 printk messages dropped ** [ 192.056471][ T6822] syz.1.201 (6822) used greatest stack depth: 19784 bytes left [ 192.402270][ T6829] netlink: 48 bytes leftover after parsing attributes in process `syz.2.202'. [ 192.720267][ T12] IPVS: starting estimator thread 0... [ 192.824710][ T6833] IPVS: using max 64 ests per chain, 153600 per kthread [ 192.888612][ T29] usb 5-1: USB disconnect, device number 8 [ 193.392824][ C1] net_ratelimit: 63 callbacks suppressed [ 193.611751][ T6851] se_dev->se_dev_ptr already set for storage object [ 194.106891][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.106939][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.162976][ T5627] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 194.323740][ T5627] usb 2-1: New USB device found, idVendor=05c5, idProduct=0002, bcdDevice= 1.00 [ 194.327116][ T5627] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.327138][ T5627] usb 2-1: Product: syz [ 194.327153][ T5627] usb 2-1: Manufacturer: syz [ 194.327168][ T5627] usb 2-1: SerialNumber: syz [ 194.366769][ T5627] digi_acceleport 2-1:1.0: Digi 2 port USB adapter converter detected [ 194.387801][ T5627] usb 2-1: Digi 2 port USB adapter converter now attached to ttyUSB0 [ 194.409793][ T5627] usb 2-1: Digi 2 port USB adapter converter now attached to ttyUSB1 [ 194.426264][ T5627] usb 2-1: Digi 2 port USB adapter converter now attached to ttyUSB2 [ 194.806006][ T6861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.209'. [ 195.408608][ T5627] usb 2-1: USB disconnect, device number 9 [ 195.422163][ T30] audit: type=1400 audit(1792302315.894:425): avc: denied { connect } for pid=6859 comm="syz.2.210" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 195.650118][ T6860] xt_policy: output policy not valid in PREROUTING and INPUT [ 195.652029][ T30] audit: type=1400 audit(1792302316.124:426): avc: denied { ioctl } for pid=6859 comm="syz.2.210" path="socket:[12093]" dev="sockfs" ino=12093 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 195.656229][ T5627] digi_2 ttyUSB0: Digi 2 port USB adapter converter now disconnected from ttyUSB0 [ 195.688445][ T5627] digi_2 ttyUSB1: Digi 2 port USB adapter converter now disconnected from ttyUSB1 [ 195.712273][ T5627] digi_2 ttyUSB2: Digi 2 port USB adapter converter now disconnected from ttyUSB2 [ 195.719487][ T5627] digi_acceleport 2-1:1.0: device disconnected [ 198.592829][ C1] net_ratelimit: 64 callbacks suppressed ** 10867 printk messages dropped ** [ 199.482638][ T6873] capability: warning: `syz.0.214' uses 32-bit capabilities (legacy support in use) [ 199.484918][ T6873] program syz.0.214 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.534764][ T5786] libceph: connect (1)[c::]:6789 error -101 [ 199.535779][ T5786] libceph: mon0 (1)[c::]:6789 connect error [ 199.537278][ T6873] ceph: No mds server is up or the cluster is laggy ** 2647 printk messages dropped ** ** 1454 printk messages dropped ** ** 3 printk messages dropped ** [ 199.794524][ T5786] libceph: connect (1)[c::]:6789 error -101 [ 199.794735][ T5786] libceph: mon0 (1)[c::]:6789 connect error ** 1447 printk messages dropped ** [ 200.612855][ T29] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 200.745336][ T6891] netlink: 28 bytes leftover after parsing attributes in process `syz.0.218'. [ 200.745391][ T6891] netlink: 28 bytes leftover after parsing attributes in process `syz.0.218'. [ 200.774855][ T29] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 200.776134][ T29] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.778498][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.778511][ T29] usb 3-1: Product: syz [ 200.778520][ T29] usb 3-1: Manufacturer: syz [ 200.778529][ T29] usb 3-1: SerialNumber: syz [ 200.782982][ T6891] netlink: 132 bytes leftover after parsing attributes in process `syz.0.218'. [ 200.783000][ T6891] netlink: 28 bytes leftover after parsing attributes in process `syz.0.218'. [ 200.825003][ T29] cdc_subset 3-1:1.0: probe with driver cdc_subset failed with error -22 [ 200.832419][ T29] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 200.832456][ T29] cdc_ncm 3-1:1.0: bind() failure [ 200.864415][ T29] cdc_subset 3-1:1.1: probe with driver cdc_subset failed with error -22 [ 200.864843][ T29] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 200.864864][ T29] cdc_ncm 3-1:1.1: bind() failure [ 201.162972][ T5735] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 201.245803][ T5618] Bluetooth: hci0: command 0x0406 tx timeout [ 201.247793][ T5618] Bluetooth: hci2: command 0x0406 tx timeout [ 201.249642][ T5618] Bluetooth: hci1: command 0x0406 tx timeout [ 201.370163][ T5735] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 201.396196][ T5735] usb 2-1: config 0 has no interfaces? [ 201.396336][ T5735] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.572854][ T5735] usb 2-1: config 0 descriptor?? [ 202.192525][ T5627] usb 3-1: USB disconnect, device number 7 [ 202.552606][ T5736] usb 2-1: USB disconnect, device number 10 [ 203.712879][ C1] net_ratelimit: 133 callbacks suppressed [ 204.333452][ T6912] team0: entered promiscuous mode [ 204.333484][ T6912] team_slave_0: entered promiscuous mode [ 204.334437][ T6912] team_slave_1: entered promiscuous mode [ 204.335211][ T6912] team0: entered allmulticast mode [ 204.335259][ T6912] team_slave_0: entered allmulticast mode [ 204.335287][ T6912] team_slave_1: entered allmulticast mode ** 442 printk messages dropped ** [ 205.754741][ T6919] binder_alloc: binder_alloc_mmap_handler: 6918 200000000000-200000b36000 already mapped failed -16 [ 206.146748][ T52] Bluetooth: hci0: unexpected event for opcode 0x20a3 [ 206.983448][ T6926] syz.1.225 (6926) used greatest stack depth: 19624 bytes left [ 207.058680][ T6941] Illegal XDP return value 70 on prog (id 21) dev syz_tun, expect packet loss! [ 208.992958][ C1] net_ratelimit: 377 callbacks suppressed ** 18286 printk messages dropped ** [ 211.067044][ T5627] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 211.102832][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 211.705905][ T6878] syz.0.214 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 211.705935][ T6878] CPU: 1 UID: 0 PID: 6878 Comm: syz.0.214 Not tainted syzkaller #0 PREEMPT(full) [ 211.705961][ T6878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 211.705975][ T6878] Call Trace: [ 211.705983][ T6878] [ 211.705992][ T6878] dump_stack_lvl+0x100/0x190 [ 211.706018][ T6878] dump_header+0xfb/0x606 [ 211.706033][ T6878] oom_kill_process.cold+0xd/0x380 [ 211.706048][ T6878] out_of_memory+0x340/0x14f0 [ 211.706079][ T6878] ? __pfx_out_of_memory+0x10/0x10 [ 211.706122][ T6878] mem_cgroup_out_of_memory+0xc6/0x130 [ 211.706150][ T6878] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 211.706165][ T6878] ? find_held_lock+0x2b/0x80 [ 211.706186][ T6878] ? do_raw_spin_unlock+0x145/0x1e0 [ 211.706203][ T6878] ? _raw_spin_unlock+0x28/0x50 [ 211.706233][ T6878] try_charge_memcg+0x783/0xf60 [ 211.706264][ T6878] ? __pfx_try_charge_memcg+0x10/0x10 [ 211.706286][ T6878] ? find_held_lock+0x2b/0x80 [ 211.706305][ T6878] ? rcu_read_unlock+0x17/0x60 [ 211.706319][ T6878] ? rcu_read_unlock+0x17/0x60 [ 211.706332][ T6878] ? find_held_lock+0x2b/0x80 [ 211.706349][ T6878] ? rcu_read_unlock+0x17/0x60 [ 211.706378][ T6878] charge_memcg+0x1ae/0x210 [ 211.706403][ T6878] __mem_cgroup_charge+0x2b/0x1c0 [ 211.706432][ T6878] shmem_alloc_and_add_folio+0x451/0xd40 [ 211.706451][ T6878] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 211.706465][ T6878] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 211.706482][ T6878] shmem_get_folio_gfp+0x75b/0x1980 [ 211.706500][ T6878] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 211.706526][ T6878] ? vm_normal_page+0x1d1/0x380 [ 211.706555][ T6878] ? __pfx_vm_normal_page+0x10/0x10 [ 211.706586][ T6878] shmem_write_begin+0x1a4/0x420 [ 211.706601][ T6878] ? __pfx_shmem_write_begin+0x10/0x10 [ 211.706614][ T6878] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 211.706631][ T6878] generic_perform_write+0x292/0xa40 [ 211.706653][ T6878] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 211.706690][ T6878] ? __pfx_generic_perform_write+0x10/0x10 [ 211.706725][ T6878] ? file_update_time_flags+0x38c/0x520 [ 211.706741][ T6878] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 211.706755][ T6878] shmem_file_write_iter+0x10e/0x140 [ 211.706771][ T6878] __kernel_write_iter+0x2ac/0x930 [ 211.706787][ T6878] ? __pfx___kernel_write_iter+0x10/0x10 [ 211.706821][ T6878] ? __up_read+0x333/0x980 [ 211.706854][ T6878] ? dump_user_range+0x65e/0xad0 [ 211.706881][ T6878] dump_user_range+0x3f9/0xad0 [ 211.706900][ T6878] ? __pfx_dump_user_range+0x10/0x10 [ 211.706921][ T6878] ? __pfx_writenote+0x10/0x10 [ 211.706942][ T6878] ? elf_core_dump+0x1f25/0x3d20 [ 211.706979][ T6878] elf_core_dump+0x2d68/0x3d20 [ 211.707022][ T6878] ? __pfx_elf_core_dump+0x10/0x10 [ 211.707037][ T6878] ? kasan_save_stack+0x3f/0x50 [ 211.707053][ T6878] ? kasan_save_stack+0x30/0x50 [ 211.707067][ T6878] ? kasan_save_track+0x14/0x30 [ 211.707085][ T6878] ? __kasan_kmalloc+0xaa/0xb0 [ 211.707114][ T6878] ? vfs_coredump+0x21f6/0x54a0 [ 211.707140][ T6878] ? get_signal+0x1f2a/0x21e0 [ 211.707162][ T6878] ? arch_do_signal_or_restart+0x91/0x7e0 [ 211.707184][ T6878] ? 0xffffffffff600000 [ 211.707215][ T6878] ? lock_acquire+0x1d1/0x380 [ 211.707235][ T6878] ? get_signal+0x1f2a/0x21e0 [ 211.707272][ T6878] ? vfs_coredump+0x281a/0x54a0 [ 211.707298][ T6878] vfs_coredump+0x281a/0x54a0 [ 211.707326][ T6878] ? __pfx_vfs_coredump+0x10/0x10 [ 211.707341][ T6878] ? __lock_acquire+0x5c0/0x1f40 [ 211.707359][ T6878] ? __lock_acquire+0x5c0/0x1f40 [ 211.707381][ T6878] ? lock_acquire+0x1d1/0x380 [ 211.707407][ T6878] ? unwind_next_frame+0xbd/0x2090 [ 211.707444][ T6878] ? lock_acquire+0x1d1/0x380 [ 211.707465][ T6878] ? bpf_ksym_find+0x128/0x1c0 [ 211.707477][ T6878] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 211.707496][ T6878] ? arch_stack_walk+0xa6/0xf0 [ 211.707522][ T6878] ? __sigqueue_free+0xbe/0x2a0 [ 211.707553][ T6878] ? stack_trace_save+0x8e/0xc0 [ 211.707576][ T6878] ? __pfx_stack_trace_save+0x10/0x10 [ 211.707598][ T6878] ? stack_depot_save_flags+0x27/0x9f0 [ 211.707612][ T6878] ? __lock_acquire+0x5c0/0x1f40 [ 211.707656][ T6878] ? proc_coredump_connector+0x2d3/0x4f0 [ 211.707687][ T6878] ? __pfx_proc_coredump_connector+0x10/0x10 [ 211.707725][ T6878] ? rcu_is_watching+0x13/0xc0 [ 211.707752][ T6878] get_signal+0x1f2a/0x21e0 [ 211.707772][ T6878] ? __pfx_get_signal+0x10/0x10 [ 211.707791][ T6878] arch_do_signal_or_restart+0x91/0x7e0 [ 211.707822][ T6878] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 211.707877][ T6878] irqentry_exit+0x402/0xa10 [ 211.707899][ T6878] asm_exc_page_fault+0x26/0x30 [ 211.707911][ T6878] RIP: 0033:0x7f7adcd9e561 [ 211.707922][ T6878] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 211.707933][ T6878] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 211.707943][ T6878] RAX: 0000000000000000 RBX: 00007f7add026090 RCX: 00007f7adcd9e559 [ 211.707957][ T6878] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 211.707971][ T6878] RBP: 00007f7adce35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 211.707985][ T6878] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 211.708000][ T6878] R13: 00007f7add026128 R14: 00007f7add026090 R15: 00007ffe44150ef8 [ 211.708031][ T6878] [ 211.708036][ T6878] memory: usage 307200kB, limit 307200kB, failcnt 18729 [ 211.708052][ T6878] memory+swap: usage 380036kB, limit 9007199254740988kB, failcnt 0 [ 211.708060][ T6878] kmem: usage 2744kB, limit 9007199254740988kB, failcnt 0 [ 211.708067][ T6878] Memory cgroup stats for /syz0: [ 211.708247][ T6878] cache 311173120 [ 211.708258][ T6878] rss 581632 [ 211.708266][ T6878] rss_huge 0 [ 211.708274][ T6878] shmem 311148544 [ 211.708283][ T6878] mapped_file 152997888 [ 211.708292][ T6878] dirty 0 [ 211.708299][ T6878] writeback 8192 [ 211.708308][ T6878] workingset_refault_anon 0 [ 211.708316][ T6878] workingset_refault_file 1119 [ 211.708323][ T6878] swap 74584064 [ 211.708327][ T6878] swapcached 74584064 [ 211.708332][ T6878] pgpgin 182280 [ 211.708336][ T6878] pgpgout 106168 [ 211.708340][ T6878] pgfault 83942 [ 211.708344][ T6878] pgmajfault 4 [ 211.708349][ T6878] inactive_anon 77824 [ 211.708353][ T6878] active_anon 311652352 [ 211.708357][ T6878] inactive_file 0 [ 211.708362][ T6878] active_file 4096 [ 211.708366][ T6878] unevictable 0 [ 211.708370][ T6878] hierarchical_memory_limit 314572800 [ 211.708375][ T6878] hierarchical_memsw_limit 9223372036854771712 [ 211.708381][ T6878] total_cache 311173120 [ 211.708389][ T6878] total_rss 581632 [ 211.708397][ T6878] total_rss_huge 0 [ 211.708406][ T6878] total_shmem 311148544 [ 211.708415][ T6878] total_mapped_file 152997888 [ 211.708424][ T6878] total_dirty 0 [ 211.708432][ T6878] total_writeback 8192 [ 211.708441][ T6878] total_workingset_refault_anon 0 [ 211.708451][ T6878] total_workingset_refault_file 1119 [ 211.708461][ T6878] total_swap 74584064 [ 211.708467][ T6878] total_swapcached 74584064 [ 211.708472][ T6878] total_pgpgin 182280 [ 211.708476][ T6878] total_pgpgout 106168 [ 211.708481][ T6878] total_pgfault 83942 [ 211.708485][ T6878] total_pgmajfault 4 [ 211.708489][ T6878] total_inactive_anon 77824 [ 211.708494][ T6878] total_active_anon 311652352 [ 211.708499][ T6878] total_inactive_file 0 [ 211.708503][ T6878] total_active_file 4096 [ 211.708508][ T6878] total_unevictable 0 [ 211.708512][ T6878] anon_cost 0 [ 211.708516][ T6878] file_cost 0 [ 211.708520][ T6878] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.150,pid=6598,uid=0 [ 211.708707][ T6878] Memory cgroup out of memory: Killed process 6598 (syz.0.150) total-vm:165752kB, anon-rss:0kB, file-rss:0kB, shmem-rss:80660kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 212.641789][ T28] rcu_tasks_wait_gp: rcu_tasks grace period number 9 (since boot) is 4112 jiffies old. [ 212.842762][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 214.332763][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 214.439958][ C1] net_ratelimit: 65 callbacks suppressed [ 214.654823][ T33] oom_reaper: reaped process 6598 (syz.0.150), now anon-rss:0kB, file-rss:0kB, shmem-rss:80660kB [ 214.664455][ T6952] syz.0.237 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 214.664484][ T6952] CPU: 1 UID: 0 PID: 6952 Comm: syz.0.237 Not tainted syzkaller #0 PREEMPT(full) [ 214.664510][ T6952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 214.664523][ T6952] Call Trace: [ 214.664530][ T6952] [ 214.664539][ T6952] dump_stack_lvl+0x100/0x190 [ 214.664577][ T6952] dump_header+0xfb/0x606 [ 214.664602][ T6952] oom_kill_process.cold+0xd/0x380 [ 214.664630][ T6952] out_of_memory+0x340/0x14f0 [ 214.664669][ T6952] ? __pfx_out_of_memory+0x10/0x10 [ 214.664709][ T6952] mem_cgroup_out_of_memory+0xc6/0x130 [ 214.664738][ T6952] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 214.664765][ T6952] ? find_held_lock+0x2b/0x80 [ 214.664804][ T6952] ? do_raw_spin_unlock+0x145/0x1e0 [ 214.664834][ T6952] ? _raw_spin_unlock+0x28/0x50 [ 214.664865][ T6952] try_charge_memcg+0x783/0xf60 [ 214.664896][ T6952] ? __pfx_try_charge_memcg+0x10/0x10 [ 214.664921][ T6952] ? find_held_lock+0x2b/0x80 [ 214.664951][ T6952] ? rcu_read_unlock+0x17/0x60 [ 214.664973][ T6952] ? rcu_read_unlock+0x17/0x60 [ 214.665005][ T6952] obj_cgroup_charge_pages+0x2b/0x1f0 [ 214.665035][ T6952] __memcg_slab_post_alloc_hook+0x47f/0x10c0 [ 214.665069][ T6952] ? kasan_save_track+0x14/0x30 [ 214.665100][ T6952] kmem_cache_alloc_noprof+0x4fa/0x6a0 [ 214.665129][ T6952] ? vm_area_dup+0x27/0x9d0 [ 214.665154][ T6952] vm_area_dup+0x27/0x9d0 [ 214.665177][ T6952] __split_vma+0x19c/0x1de0 [ 214.665207][ T6952] ? __pfx___split_vma+0x10/0x10 [ 214.665250][ T6952] vma_modify+0x137b/0x29b0 [ 214.665288][ T6952] ? __pfx_vma_modify+0x10/0x10 [ 214.665314][ T6952] ? lock_acquire+0x1d1/0x380 [ 214.665338][ T6952] ? clockevents_program_event+0x23e/0x820 [ 214.665373][ T6952] ? find_held_lock+0x2b/0x80 [ 214.665417][ T6952] vma_modify_flags+0x2c3/0x460 [ 214.665442][ T6952] ? __pfx_vma_modify_flags+0x10/0x10 [ 214.665467][ T6952] ? rcu_is_watching+0x13/0xc0 [ 214.665484][ T6952] ? percpu_counter_add_batch+0xb9/0x230 [ 214.665527][ T6952] mprotect_fixup+0x27a/0xe00 [ 214.665559][ T6952] ? __pfx_mprotect_fixup+0x10/0x10 [ 214.665595][ T6952] do_mprotect_pkey+0xa51/0xdd0 [ 214.665613][ T6952] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 214.665634][ T6952] ? __pfx_restore_altstack+0x10/0x10 [ 214.665680][ T6952] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 214.665721][ T6952] __x64_sys_mprotect+0x78/0xc0 [ 214.665733][ T6952] ? lockdep_hardirqs_on+0x7d/0x110 [ 214.665751][ T6952] do_syscall_64+0x123/0x790 [ 214.665770][ T6952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.665783][ T6952] RIP: 0033:0x7f7adcd9e357 [ 214.665802][ T6952] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.665823][ T6952] RSP: 002b:00007ffe44150e98 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 214.665845][ T6952] RAX: ffffffffffffffda RBX: 00007f7addbe46c0 RCX: 00007f7adcd9e357 [ 214.665860][ T6952] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f7addbc5000 [ 214.665870][ T6952] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 214.665877][ T6952] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffe44150ff0 [ 214.665885][ T6952] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 214.665902][ T6952] [ 214.860381][ T6952] memory: usage 307200kB, limit 307200kB, failcnt 23828 [ 214.860395][ T6952] memory+swap: usage 380028kB, limit 9007199254740988kB, failcnt 0 [ 214.860409][ T6952] kmem: usage 2724kB, limit 9007199254740988kB, failcnt 0 [ 214.860422][ T6952] Memory cgroup stats for /syz0: [ 214.860574][ T6952] cache 311201792 [ 214.860584][ T6952] rss 581632 [ 214.860592][ T6952] rss_huge 0 [ 214.860600][ T6952] shmem 311201792 [ 214.860608][ T6952] mapped_file 149262336 [ 214.860616][ T6952] dirty 0 [ 214.860624][ T6952] writeback 0 [ 214.860632][ T6952] workingset_refault_anon 0 [ 214.860640][ T6952] workingset_refault_file 1119 [ 214.860649][ T6952] swap 74575872 [ 214.860658][ T6952] swapcached 74584064 [ 214.860666][ T6952] pgpgin 182293 [ 214.860674][ T6952] pgpgout 106174 [ 214.860682][ T6952] pgfault 83945 [ 214.860690][ T6952] pgmajfault 4 [ 214.860698][ T6952] inactive_anon 89677824 [ 214.860706][ T6952] active_anon 222105600 [ 214.860715][ T6952] inactive_file 0 [ 214.860722][ T6952] active_file 0 [ 214.860740][ T6952] unevictable 0 [ 214.860748][ T6952] hierarchical_memory_limit 314572800 [ 214.860757][ T6952] hierarchical_memsw_limit 9223372036854771712 [ 214.860768][ T6952] total_cache 311201792 [ 214.860776][ T6952] total_rss 581632 [ 214.860784][ T6952] total_rss_huge 0 [ 214.860792][ T6952] total_shmem 311201792 [ 214.860800][ T6952] total_mapped_file 149262336 [ 214.860809][ T6952] total_dirty 0 [ 214.860817][ T6952] total_writeback 0 [ 214.860825][ T6952] total_workingset_refault_anon 0 [ 214.860835][ T6952] total_workingset_refault_file 1119 [ 214.860844][ T6952] total_swap 74575872 [ 214.860852][ T6952] total_swapcached 74584064 [ 214.860861][ T6952] total_pgpgin 182293 [ 214.860869][ T6952] total_pgpgout 106174 [ 214.860877][ T6952] total_pgfault 83945 [ 214.860886][ T6952] total_pgmajfault 4 [ 214.860894][ T6952] total_inactive_anon 89677824 [ 214.860903][ T6952] total_active_anon 222105600 [ 214.860912][ T6952] total_inactive_file 0 [ 214.860920][ T6952] total_active_file 0 [ 214.860928][ T6952] total_unevictable 0 [ 214.860936][ T6952] anon_cost 0 [ 214.860944][ T6952] file_cost 0 [ 214.860953][ T6952] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.164,pid=6660,uid=0 [ 214.861133][ T6952] Memory cgroup out of memory: Killed process 6660 (syz.0.164) total-vm:163704kB, anon-rss:0kB, file-rss:0kB, shmem-rss:68752kB, UID:0 pgtables:160kB oom_score_adj:1000 [ 215.883103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 217.722764][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 217.932767][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 219.555810][ C1] net_ratelimit: 40 callbacks suppressed [ 225.312835][ C1] net_ratelimit: 25 callbacks suppressed [ 319.922735][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 320.971933][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6947/1:b..l P6957/1:b..l P6775/2:b..l [ 320.982125][ C1] rcu: (detected by 1, t=10603 jiffies, g=21829, q=915 ncpus=2) [ 320.989830][ C1] task:syz.2.185 state:R running task stack:18488 pid:6775 tgid:6775 ppid:5617 task_flags:0x400640 flags:0x00080001 [ 321.003333][ C1] Call Trace: [ 321.006599][ C1] [ 321.009525][ C1] __schedule+0x1259/0x6920 [ 321.014032][ C1] ? __pfx_clockevents_program_event+0x10/0x10 [ 321.020216][ C1] ? __pfx___schedule+0x10/0x10 [ 321.025068][ C1] ? irqentry_exit+0x24d/0xa10 [ 321.029842][ C1] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 321.035910][ C1] preempt_schedule_notrace+0x57/0xd0 [ 321.041286][ C1] preempt_schedule_notrace_thunk+0x16/0x30 [ 321.047191][ C1] rcu_is_watching+0x90/0xc0 [ 321.051790][ C1] lock_acquire+0x31e/0x380 [ 321.056298][ C1] ? get_mem_cgroup_from_mm+0x69/0x5e0 [ 321.061761][ C1] get_mem_cgroup_from_mm+0x268/0x5e0 [ 321.067137][ C1] ? get_mem_cgroup_from_mm+0x69/0x5e0 [ 321.072609][ C1] __mem_cgroup_charge+0x1a/0x1c0 [ 321.077634][ C1] shmem_alloc_and_add_folio+0x451/0xd40 [ 321.083270][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 321.089421][ C1] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 321.095405][ C1] shmem_get_folio_gfp+0x75b/0x1980 [ 321.100607][ C1] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 321.106235][ C1] ? vm_normal_page+0x1d1/0x380 [ 321.111085][ C1] ? __pfx_vm_normal_page+0x10/0x10 [ 321.116289][ C1] shmem_write_begin+0x1a4/0x420 [ 321.121226][ C1] ? __pfx_shmem_write_begin+0x10/0x10 [ 321.126680][ C1] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 321.133533][ C1] generic_perform_write+0x292/0xa40 [ 321.138822][ C1] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 321.144637][ C1] ? __pfx_generic_perform_write+0x10/0x10 [ 321.150452][ C1] ? file_update_time_flags+0x38c/0x520 [ 321.156001][ C1] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 321.161806][ C1] shmem_file_write_iter+0x10e/0x140 [ 321.167100][ C1] __kernel_write_iter+0x2ac/0x930 [ 321.172213][ C1] ? __pfx___kernel_write_iter+0x10/0x10 [ 321.177847][ C1] ? __up_read+0x333/0x980 [ 321.182267][ C1] ? dump_user_range+0x65e/0xad0 [ 321.187215][ C1] dump_user_range+0x3f9/0xad0 [ 321.191988][ C1] ? __pfx_dump_user_range+0x10/0x10 [ 321.197282][ C1] ? __pfx_writenote+0x10/0x10 [ 321.202050][ C1] ? elf_core_dump+0x1f25/0x3d20 [ 321.206996][ C1] elf_core_dump+0x2d68/0x3d20 [ 321.211781][ C1] ? __pfx_elf_core_dump+0x10/0x10 [ 321.216892][ C1] ? kasan_save_stack+0x3f/0x50 [ 321.221743][ C1] ? kasan_save_stack+0x30/0x50 [ 321.226592][ C1] ? kasan_save_track+0x14/0x30 [ 321.231440][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 321.236204][ C1] ? vfs_coredump+0x21f6/0x54a0 [ 321.241051][ C1] ? get_signal+0x1f2a/0x21e0 [ 321.245722][ C1] ? arch_do_signal_or_restart+0x91/0x7e0 [ 321.251454][ C1] ? 0xffffffffff600000 [ 321.255639][ C1] ? lock_acquire+0x1d1/0x380 [ 321.260314][ C1] ? get_signal+0x1f2a/0x21e0 [ 321.264996][ C1] ? vfs_coredump+0x281a/0x54a0 [ 321.269844][ C1] vfs_coredump+0x281a/0x54a0 [ 321.274546][ C1] ? __pfx_vfs_coredump+0x10/0x10 [ 321.279569][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 321.284511][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 321.289448][ C1] ? lock_acquire+0x1d1/0x380 [ 321.294122][ C1] ? unwind_next_frame+0xbd/0x2090 [ 321.299250][ C1] ? lock_acquire+0x1d1/0x380 [ 321.303933][ C1] ? bpf_ksym_find+0x128/0x1c0 [ 321.308692][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 321.314850][ C1] ? arch_stack_walk+0xa6/0xf0 [ 321.319627][ C1] ? __sigqueue_free+0xbe/0x2a0 [ 321.324481][ C1] ? stack_trace_save+0x8e/0xc0 [ 321.329327][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 321.334692][ C1] ? stack_depot_save_flags+0x27/0x9f0 [ 321.340147][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 321.345141][ C1] ? proc_coredump_connector+0x2d3/0x4f0 [ 321.350780][ C1] ? __pfx_proc_coredump_connector+0x10/0x10 [ 321.356771][ C1] ? rcu_is_watching+0x13/0xc0 [ 321.361547][ C1] get_signal+0x1f2a/0x21e0 [ 321.366063][ C1] ? __pfx_get_signal+0x10/0x10 [ 321.370910][ C1] ? __pfx_force_sig_fault+0x10/0x10 [ 321.376202][ C1] arch_do_signal_or_restart+0x91/0x7e0 [ 321.381754][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 321.387932][ C1] irqentry_exit+0x402/0xa10 [ 321.392534][ C1] asm_exc_page_fault+0x26/0x30 [ 321.397402][ C1] RIP: 0033:0x0 [ 321.400855][ C1] RSP: 002b:0000200000000648 EFLAGS: 00010217 [ 321.406919][ C1] RAX: 0000000000000000 RBX: 00007f7e5ee25fa0 RCX: 00007f7e5eb9e559 [ 321.414880][ C1] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000020000 [ 321.422842][ C1] RBP: 00007f7e5ec35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 321.430804][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 321.438765][ C1] R13: 00007f7e5ee26038 R14: 00007f7e5ee25fa0 R15: 00007ffe93469c28 [ 321.446746][ C1] [ 321.449755][ C1] task:syz.4.231 state:R running task stack:26680 pid:6957 tgid:6938 ppid:5621 task_flags:0x400040 flags:0x00080002 [ 321.463258][ C1] Call Trace: [ 321.466524][ C1] [ 321.469447][ C1] __schedule+0x1259/0x6920 [ 321.473971][ C1] ? __pfx___schedule+0x10/0x10 [ 321.478827][ C1] ? mark_held_locks+0x40/0x70 [ 321.483591][ C1] preempt_schedule_irq+0x4e/0x90 [ 321.488616][ C1] irqentry_exit+0x205/0xa10 [ 321.493215][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 321.499193][ C1] RIP: 0010:__update_page_owner_handle+0x394/0x530 [ 321.505715][ C1] Code: c6 e8 50 ef 80 ff 85 db 0f 85 c4 00 00 00 e8 d3 f4 80 ff 48 c7 c7 e0 c5 de 8f 48 8d 35 00 00 00 00 e8 10 25 5c ff 48 83 c4 38 <5b> 5d 41 5c 41 5d 41 5e 41 5f e9 dd a4 65 ff e8 a8 f4 80 ff 48 89 [ 321.525315][ C1] RSP: 0018:ffffc90005806de0 EFLAGS: 00000292 [ 321.531373][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffc90005806d6c [ 321.539335][ C1] RDX: 0000000000000000 RSI: ffffffff8e3bd908 RDI: ffffffff8c625680 [ 321.547296][ C1] RBP: 000000000000000a R08: 0000000000000001 R09: 0000000000000000 [ 321.555257][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 321.563220][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: ffff888020cec900 [ 321.571206][ C1] __set_page_owner+0x11f/0x540 [ 321.576071][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 321.581453][ C1] ? bad_range+0x257/0x3f0 [ 321.585872][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 321.591076][ C1] ? get_page_from_freelist+0x10e6/0x35d0 [ 321.596798][ C1] post_alloc_hook+0xfd/0x120 [ 321.601471][ C1] get_page_from_freelist+0x110d/0x35d0 [ 321.607041][ C1] ? __pfx_get_page_from_freelist+0x10/0x10 [ 321.612931][ C1] ? prepare_alloc_pages+0x1f0/0x5b0 [ 321.618224][ C1] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 321.624118][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 321.629490][ C1] ? debug_object_free+0x521/0x550 [ 321.634598][ C1] ? stack_depot_save_flags+0x27/0x9f0 [ 321.640056][ C1] ? kasan_save_stack+0x3f/0x50 [ 321.644905][ C1] ? kasan_save_stack+0x30/0x50 [ 321.649754][ C1] ? kasan_save_track+0x14/0x30 [ 321.654606][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 321.659631][ C1] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 321.665265][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 321.671589][ C1] ? copy_page_range+0x3b36/0x57c0 [ 321.676695][ C1] ? copy_process+0x5084/0x8430 [ 321.681542][ C1] ? __do_sys_clone+0xd9/0x120 [ 321.686301][ C1] ? do_syscall_64+0x123/0x790 [ 321.691067][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.697137][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 321.702131][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 321.708039][ C1] ? policy_nodemask+0xed/0x4f0 [ 321.712906][ C1] alloc_pages_mpol+0x201/0x550 [ 321.717770][ C1] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 321.723153][ C1] ? page_table_check_set+0x31e/0x580 [ 321.728535][ C1] alloc_pages_noprof+0x1a/0x160 [ 321.733471][ C1] pte_alloc_one+0x1c/0x3d0 [ 321.737984][ C1] __pte_alloc+0x6d/0x380 [ 321.742320][ C1] ? __pfx___pte_alloc+0x10/0x10 [ 321.747261][ C1] ? __pfx___might_resched+0x10/0x10 [ 321.752541][ C1] ? copy_page_range+0x1c91/0x57c0 [ 321.757655][ C1] copy_page_range+0x3b36/0x57c0 [ 321.762626][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 321.767904][ C1] ? mas_wr_store_entry+0xa4/0x1d50 [ 321.773116][ C1] ? lock_acquire+0x1d1/0x380 [ 321.777791][ C1] ? dup_mmap+0xd0a/0x2370 [ 321.782216][ C1] ? find_held_lock+0x2b/0x80 [ 321.786896][ C1] ? dup_mmap+0xe66/0x2370 [ 321.791314][ C1] ? dup_mmap+0xe66/0x2370 [ 321.795733][ C1] ? down_write+0x146/0x1f0 [ 321.800231][ C1] ? up_write+0x2dc/0x5b0 [ 321.804564][ C1] dup_mmap+0x1230/0x2370 [ 321.808909][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 321.813588][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 321.819400][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 321.825212][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 321.830156][ C1] ? lock_acquire+0x1d1/0x380 [ 321.834820][ C1] ? copy_process+0x5079/0x8430 [ 321.839656][ C1] copy_process+0x5084/0x8430 [ 321.844326][ C1] ? __pfx_copy_process+0x10/0x10 [ 321.849344][ C1] ? _printk+0xcf/0x110 [ 321.853478][ C1] ? tomoyo_path_number_perm+0x188/0x580 [ 321.859116][ C1] kernel_clone+0x176/0x9d0 [ 321.863619][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 321.868641][ C1] __do_sys_clone+0xd9/0x120 [ 321.873226][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 321.878425][ C1] ? do_raw_spin_lock+0x128/0x260 [ 321.883471][ C1] ? kcov_ioctl+0x17a/0x760 [ 321.887986][ C1] do_syscall_64+0x123/0x790 [ 321.892584][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.898470][ C1] RIP: 0033:0x7f66d319e559 [ 321.902875][ C1] RSP: 002b:00007f66d40c5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 321.911282][ C1] RAX: ffffffffffffffda RBX: 00007f66d3426090 RCX: 00007f66d319e559 [ 321.919241][ C1] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 321.927205][ C1] RBP: 00007f66d3235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 321.935167][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 321.943127][ C1] R13: 00007f66d3426128 R14: 00007f66d3426090 R15: 00007ffdf6af21d8 [ 321.951112][ C1] [ 321.954123][ C1] task:iou-sqp-6945 state:R running task stack:27256 pid:6947 tgid:6944 ppid:5609 task_flags:0x40445c flags:0x00080002 [ 321.967622][ C1] Call Trace: [ 321.970889][ C1] [ 321.973818][ C1] __schedule+0x1259/0x6920 [ 321.978330][ C1] ? rcu_is_watching+0x13/0xc0 [ 321.983107][ C1] ? find_held_lock+0x2b/0x80 [ 321.987787][ C1] ? rcu_read_unlock+0x17/0x60 [ 321.992558][ C1] ? __pfx___schedule+0x10/0x10 [ 321.997415][ C1] ? folio_remove_rmap_ptes+0x7e0/0xdd0 [ 322.002960][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 322.008335][ C1] preempt_schedule_common+0x3c/0xb0 [ 322.013623][ C1] preempt_schedule_thunk+0x16/0x40 [ 322.018827][ C1] _raw_spin_unlock+0x3e/0x50 [ 322.023506][ C1] __zap_vma_range+0x23d3/0x48e0 [ 322.028477][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 322.033764][ C1] ? mas_next_slot+0xc05/0x13a0 [ 322.038627][ C1] unmap_vmas+0x299/0x5f0 [ 322.042966][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 322.047816][ C1] ? write_comp_data+0x19/0xa0 [ 322.052583][ C1] ? mas_next_slot+0xc05/0x13a0 [ 322.057445][ C1] exit_mmap+0x1ef/0xa00 [ 322.061694][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 322.066508][ C1] __mmput+0x12a/0x410 [ 322.070574][ C1] mmput+0x67/0x80 [ 322.074291][ C1] do_exit+0x83b/0x2a60 [ 322.078451][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 322.083832][ C1] ? __pfx_do_exit+0x10/0x10 [ 322.088430][ C1] ? rcu_is_watching+0x13/0xc0 [ 322.093197][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 322.099011][ C1] io_sq_thread+0x182/0x1460 [ 322.103614][ C1] ? __pfx_io_sq_thread+0x10/0x10 [ 322.108640][ C1] ? find_held_lock+0x2b/0x80 [ 322.113328][ C1] ? lock_acquire+0x1d1/0x380 [ 322.118005][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 322.124070][ C1] ? find_held_lock+0x2b/0x80 [ 322.128757][ C1] ? ret_from_fork+0x79/0xd60 [ 322.133432][ C1] ? rcu_is_watching+0x13/0xc0 [ 322.138200][ C1] ? __pfx_io_sq_thread+0x10/0x10 [ 322.143224][ C1] ret_from_fork+0x730/0xd60 [ 322.147815][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 322.152929][ C1] ? __switch_to+0x800/0x10f0 [ 322.157621][ C1] ? __pfx_io_sq_thread+0x10/0x10 [ 322.162644][ C1] ret_from_fork_asm+0x1a/0x30 [ 322.167418][ C1] [ 322.170439][ C1] rcu: rcu_preempt kthread starved for 10721 jiffies! g21829 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 322.181447][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 322.191402][ C1] rcu: RCU grace-period kthread stack dump: [ 322.197275][ C1] task:rcu_preempt state:R running task stack:27560 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 322.210785][ C1] Call Trace: [ 322.214051][ C1] [ 322.216979][ C1] __schedule+0x1259/0x6920 [ 322.221489][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 322.226442][ C1] ? __pfx___schedule+0x10/0x10 [ 322.231290][ C1] ? find_held_lock+0x2b/0x80 [ 322.235976][ C1] ? schedule+0x225/0x2c0 [ 322.240314][ C1] schedule+0xdd/0x2c0 [ 322.244384][ C1] schedule_timeout+0x127/0x280 [ 322.249230][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 322.254601][ C1] ? __pfx_process_timeout+0x10/0x10 [ 322.259887][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 322.265693][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 322.271157][ C1] rcu_gp_fqs_loop+0x1a9/0x8f0 [ 322.275920][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 322.281208][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 322.286147][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 322.291349][ C1] rcu_gp_kthread+0x17a/0x220 [ 322.296025][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 322.301222][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 322.307032][ C1] ? __kthread_parkme+0x18f/0x230 [ 322.312071][ C1] ? kthread+0x13a/0x450 [ 322.316313][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 322.321507][ C1] kthread+0x373/0x450 [ 322.325577][ C1] ? __pfx_kthread+0x10/0x10 [ 322.330171][ C1] ret_from_fork+0x730/0xd60 [ 322.334763][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 322.339872][ C1] ? __switch_to+0x800/0x10f0 [ 322.344555][ C1] ? __pfx_kthread+0x10/0x10 [ 322.349150][ C1] ret_from_fork_asm+0x1a/0x30 [ 322.353927][ C1] [ 322.356934][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 322.363263][ C1] Sending NMI from CPU 1 to CPUs 0: [ 322.368465][ C0] NMI backtrace for cpu 0 [ 322.368479][ C0] CPU: 0 UID: 0 PID: 6791 Comm: syz.0.191 Not tainted syzkaller #0 PREEMPT(full) [ 322.368503][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 322.368517][ C0] RIP: 0010:__lock_acquire+0x2a6/0x1f40 [ 322.368543][ C0] Code: 45 31 c0 45 85 d2 0f 84 f1 fd ff ff e9 f5 fd ff ff 49 8d 84 24 b0 0b 00 00 48 89 44 24 08 48 8b 44 24 08 89 ea 66 81 e2 ff 1f <48> 8d 1c 08 0f b7 43 20 4c 89 7b 10 66 25 00 e0 09 d0 31 d2 66 89 [ 322.368566][ C0] RSP: 0018:ffffc9000663e110 EFLAGS: 00000006 [ 322.368583][ C0] RAX: ffff88802fc93130 RBX: 0000000000000000 RCX: 0000000000000050 [ 322.368597][ C0] RDX: 000000000000018d RSI: ffff88802fc93158 RDI: ffff8880b8233ec0 [ 322.368610][ C0] RBP: 000000000000018d R08: 0000000000000001 R09: 0000000000000000 [ 322.368623][ C0] R10: 0000000000000002 R11: 0000000000000001 R12: ffff88802fc92580 [ 322.368637][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880b8233ec0 [ 322.368650][ C0] FS: 00007f7addc056c0(0000) GS:ffff888122946000(0000) knlGS:0000000000000000 [ 322.368669][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 322.368683][ C0] CR2: 00007f31c30c70d0 CR3: 000000003b589000 CR4: 00000000003526f0 [ 322.368697][ C0] Call Trace: [ 322.368703][ C0] [ 322.368712][ C0] ? __pfx_lruvec_evictable_size+0x10/0x10 [ 322.368742][ C0] ? mem_cgroup_get_nr_swap_pages+0x20/0x120 [ 322.368772][ C0] lock_acquire+0x1d1/0x380 [ 322.368794][ C0] ? lru_add_drain+0x6e/0x410 [ 322.368815][ C0] ? clear_mm_walk+0x166/0x1b0 [ 322.368837][ C0] ? kfree+0x1e5/0x6d0 [ 322.368856][ C0] ? __pfx_try_to_shrink_lruvec+0x10/0x10 [ 322.368889][ C0] lru_add_drain+0x86/0x410 [ 322.368908][ C0] ? lru_add_drain+0x6e/0x410 [ 322.368928][ C0] shrink_lruvec+0x28f/0x2670 [ 322.368957][ C0] ? xa_load+0x149/0x2c0 [ 322.368979][ C0] ? xa_load+0x153/0x2c0 [ 322.368998][ C0] ? __pfx_xa_load+0x10/0x10 [ 322.369020][ C0] ? __pfx_shrink_lruvec+0x10/0x10 [ 322.369050][ C0] ? do_shrink_slab+0xb6c/0x1200 [ 322.369072][ C0] ? find_held_lock+0x2b/0x80 [ 322.369101][ C0] ? do_shrink_slab+0xcde/0x1200 [ 322.369131][ C0] ? shrink_slab+0x677/0x12e0 [ 322.369162][ C0] ? __pfx___might_resched+0x10/0x10 [ 322.369182][ C0] ? page_counter_calculate_protection+0x344/0x730 [ 322.369210][ C0] ? shrink_node+0x7a0/0x4320 [ 322.369228][ C0] shrink_node+0x7a0/0x4320 [ 322.369254][ C0] ? __pfx_shrink_node+0x10/0x10 [ 322.369275][ C0] ? queue_work_on+0x11b/0x1e0 [ 322.369294][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 322.369322][ C0] ? queue_work_on+0x141/0x1e0 [ 322.369344][ C0] ? do_try_to_free_pages+0x33e/0x16d0 [ 322.369364][ C0] do_try_to_free_pages+0x33e/0x16d0 [ 322.369392][ C0] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 322.369417][ C0] try_to_free_mem_cgroup_pages+0x2bf/0x840 [ 322.369439][ C0] ? psi_group_change+0x457/0xa20 [ 322.369461][ C0] ? __pfx_try_to_free_mem_cgroup_pages+0x10/0x10 [ 322.369488][ C0] ? psi_memstall_enter+0x226/0x3b0 [ 322.369507][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 322.369535][ C0] ? psi_memstall_enter+0x226/0x3b0 [ 322.369561][ C0] try_charge_memcg+0x50b/0xf60 [ 322.369584][ C0] ? __pfx_try_charge_memcg+0x10/0x10 [ 322.369603][ C0] ? find_held_lock+0x2b/0x80 [ 322.369632][ C0] ? rcu_read_unlock+0x17/0x60 [ 322.369652][ C0] ? rcu_read_unlock+0x17/0x60 [ 322.369673][ C0] ? find_held_lock+0x2b/0x80 [ 322.369702][ C0] ? rcu_read_unlock+0x17/0x60 [ 322.369726][ C0] charge_memcg+0x1ae/0x210 [ 322.369747][ C0] __mem_cgroup_charge+0x2b/0x1c0 [ 322.369771][ C0] shmem_alloc_and_add_folio+0x451/0xd40 [ 322.369795][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 322.369816][ C0] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 322.369838][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 322.369862][ C0] shmem_get_folio_gfp+0x75b/0x1980 [ 322.369885][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 322.369905][ C0] ? inode_set_ctime_current+0x9c/0x850 [ 322.369925][ C0] ? find_held_lock+0x2b/0x80 [ 322.369955][ C0] ? timestamp_truncate+0x22e/0x2f0 [ 322.369975][ C0] shmem_write_begin+0x1a4/0x420 [ 322.369997][ C0] ? __pfx_shmem_write_begin+0x10/0x10 [ 322.370018][ C0] ? inode_set_ctime_current+0x283/0x850 [ 322.370037][ C0] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 322.370061][ C0] ? inode_maybe_inc_iversion+0x169/0x220 [ 322.370091][ C0] generic_perform_write+0x292/0xa40 [ 322.370119][ C0] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 322.370147][ C0] ? __pfx_generic_perform_write+0x10/0x10 [ 322.370176][ C0] ? mnt_put_write_access_file+0x4e/0x100 [ 322.370206][ C0] ? file_update_time_flags+0x38c/0x520 [ 322.370229][ C0] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 322.370252][ C0] shmem_file_write_iter+0x10e/0x140 [ 322.370277][ C0] __kernel_write_iter+0x2ac/0x930 [ 322.370304][ C0] ? __pfx___kernel_write_iter+0x10/0x10 [ 322.370329][ C0] ? __up_read+0x333/0x980 [ 322.370355][ C0] ? dump_user_range+0x65e/0xad0 [ 322.370384][ C0] dump_user_range+0x3f9/0xad0 [ 322.370413][ C0] ? __pfx_dump_user_range+0x10/0x10 [ 322.370443][ C0] ? __pfx_writenote+0x10/0x10 [ 322.370469][ C0] ? elf_core_dump+0x1f25/0x3d20 [ 322.370498][ C0] elf_core_dump+0x2d68/0x3d20 [ 322.370533][ C0] ? __pfx_elf_core_dump+0x10/0x10 [ 322.370564][ C0] ? kasan_save_stack+0x3f/0x50 [ 322.370589][ C0] ? kasan_save_stack+0x30/0x50 [ 322.370615][ C0] ? kasan_save_track+0x14/0x30 [ 322.370640][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 322.370665][ C0] ? vfs_coredump+0x21f6/0x54a0 [ 322.370689][ C0] ? get_signal+0x1f2a/0x21e0 [ 322.370710][ C0] ? arch_do_signal_or_restart+0x91/0x7e0 [ 322.370743][ C0] ? 0xffffffffff600000 [ 322.370775][ C0] ? lock_acquire+0x1d1/0x380 [ 322.370796][ C0] ? get_signal+0x1f2a/0x21e0 [ 322.370823][ C0] ? vfs_coredump+0x281a/0x54a0 [ 322.370846][ C0] vfs_coredump+0x281a/0x54a0 [ 322.370877][ C0] ? __pfx_vfs_coredump+0x10/0x10 [ 322.370902][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 322.370927][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 322.370952][ C0] ? lock_acquire+0x1d1/0x380 [ 322.370974][ C0] ? unwind_next_frame+0xbd/0x2090 [ 322.371005][ C0] ? lock_acquire+0x1d1/0x380 [ 322.371031][ C0] ? bpf_ksym_find+0x128/0x1c0 [ 322.371051][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 322.371078][ C0] ? arch_stack_walk+0xa6/0xf0 [ 322.371109][ C0] ? __sigqueue_free+0xbe/0x2a0 [ 322.371136][ C0] ? stack_trace_save+0x8e/0xc0 [ 322.371156][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 322.371177][ C0] ? stack_depot_save_flags+0x27/0x9f0 [ 322.371199][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 322.371245][ C0] ? proc_coredump_connector+0x2d3/0x4f0 [ 322.371273][ C0] ? __pfx_proc_coredump_connector+0x10/0x10 [ 322.371303][ C0] ? rcu_is_watching+0x13/0xc0 [ 322.371335][ C0] get_signal+0x1f2a/0x21e0 [ 322.371362][ C0] ? __pfx_get_signal+0x10/0x10 [ 322.371389][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 322.371419][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 322.371458][ C0] irqentry_exit+0x402/0xa10 [ 322.371488][ C0] asm_exc_page_fault+0x26/0x30 [ 322.371508][ C0] RIP: 0033:0x7f7adcd9e561 [ 322.371524][ C0] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 322.371543][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 322.371563][ C0] RAX: 0000000000000000 RBX: 00007f7add026090 RCX: 00007f7adcd9e559 [ 322.371576][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 322.371590][ C0] RBP: 00007f7adce35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 322.371602][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 322.371615][ C0] R13: 00007f7add026128 R14: 00007f7add026090 R15: 00007ffe44150ef8 [ 322.371637][ C0] [ 324.971317][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.971353][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.972184][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.972230][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.978858][ T5627] usb 4-1: device descriptor read/all, error -110 [ 325.983941][ T33] oom_reaper: reaped process 6660 (syz.0.164), now anon-rss:0kB, file-rss:0kB, shmem-rss:68752kB [ 326.025360][ T5736] net_ratelimit: 14 callbacks suppressed [ 326.223888][ T6791] syz.0.191 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 326.223913][ T6791] CPU: 0 UID: 0 PID: 6791 Comm: syz.0.191 Not tainted syzkaller #0 PREEMPT(full) [ 326.223927][ T6791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 326.223935][ T6791] Call Trace: [ 326.223940][ T6791] [ 326.223946][ T6791] dump_stack_lvl+0x100/0x190 [ 326.223968][ T6791] dump_header+0xfb/0x606 [ 326.223983][ T6791] oom_kill_process.cold+0xd/0x380 [ 326.223998][ T6791] out_of_memory+0x340/0x14f0 [ 326.224021][ T6791] ? __pfx_out_of_memory+0x10/0x10 [ 326.224042][ T6791] mem_cgroup_out_of_memory+0xc6/0x130 [ 326.224059][ T6791] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 326.224073][ T6791] ? find_held_lock+0x2b/0x80 [ 326.224095][ T6791] ? do_raw_spin_unlock+0x145/0x1e0 [ 326.224111][ T6791] ? _raw_spin_unlock+0x28/0x50 [ 326.224129][ T6791] try_charge_memcg+0x783/0xf60 [ 326.224147][ T6791] ? __pfx_try_charge_memcg+0x10/0x10 [ 326.224158][ T6791] ? find_held_lock+0x2b/0x80 [ 326.224175][ T6791] ? rcu_read_unlock+0x17/0x60 [ 326.224191][ T6791] ? rcu_read_unlock+0x17/0x60 [ 326.224203][ T6791] ? find_held_lock+0x2b/0x80 [ 326.224221][ T6791] ? rcu_read_unlock+0x17/0x60 [ 326.224237][ T6791] charge_memcg+0x1ae/0x210 [ 326.224250][ T6791] __mem_cgroup_charge+0x2b/0x1c0 [ 326.224265][ T6791] shmem_alloc_and_add_folio+0x451/0xd40 [ 326.224283][ T6791] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 326.224297][ T6791] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 326.224311][ T6791] ? __lock_acquire+0x5c0/0x1f40 [ 326.224326][ T6791] shmem_get_folio_gfp+0x75b/0x1980 [ 326.224343][ T6791] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 326.224355][ T6791] ? inode_set_ctime_current+0x9c/0x850 [ 326.224367][ T6791] ? find_held_lock+0x2b/0x80 [ 326.224386][ T6791] ? timestamp_truncate+0x22e/0x2f0 [ 326.224400][ T6791] shmem_write_begin+0x1a4/0x420 [ 326.224414][ T6791] ? __pfx_shmem_write_begin+0x10/0x10 [ 326.224427][ T6791] ? inode_set_ctime_current+0x283/0x850 [ 326.224439][ T6791] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 326.224453][ T6791] ? inode_maybe_inc_iversion+0x169/0x220 [ 326.224472][ T6791] generic_perform_write+0x292/0xa40 [ 326.224489][ T6791] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 326.224507][ T6791] ? __pfx_generic_perform_write+0x10/0x10 [ 326.224525][ T6791] ? mnt_put_write_access_file+0x4e/0x100 [ 326.224543][ T6791] ? file_update_time_flags+0x38c/0x520 [ 326.224558][ T6791] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 326.224572][ T6791] shmem_file_write_iter+0x10e/0x140 [ 326.224588][ T6791] __kernel_write_iter+0x2ac/0x930 [ 326.224605][ T6791] ? __pfx___kernel_write_iter+0x10/0x10 [ 326.224619][ T6791] ? __up_read+0x333/0x980 [ 326.224636][ T6791] ? dump_user_range+0x65e/0xad0 [ 326.224656][ T6791] dump_user_range+0x3f9/0xad0 [ 326.224674][ T6791] ? __pfx_dump_user_range+0x10/0x10 [ 326.224696][ T6791] ? __pfx_writenote+0x10/0x10 [ 326.224712][ T6791] ? elf_core_dump+0x1f25/0x3d20 [ 326.224730][ T6791] elf_core_dump+0x2d68/0x3d20 [ 326.224756][ T6791] ? __pfx_elf_core_dump+0x10/0x10 [ 326.224771][ T6791] ? kasan_save_stack+0x3f/0x50 [ 326.224787][ T6791] ? kasan_save_stack+0x30/0x50 [ 326.224802][ T6791] ? kasan_save_track+0x14/0x30 [ 326.224816][ T6791] ? __kasan_kmalloc+0xaa/0xb0 [ 326.224831][ T6791] ? vfs_coredump+0x21f6/0x54a0 [ 326.224844][ T6791] ? get_signal+0x1f2a/0x21e0 [ 326.224858][ T6791] ? arch_do_signal_or_restart+0x91/0x7e0 [ 326.224879][ T6791] ? 0xffffffffff600000 [ 326.224910][ T6791] ? lock_acquire+0x1d1/0x380 [ 326.224923][ T6791] ? get_signal+0x1f2a/0x21e0 [ 326.224941][ T6791] ? vfs_coredump+0x281a/0x54a0 [ 326.224955][ T6791] vfs_coredump+0x281a/0x54a0 [ 326.224977][ T6791] ? __pfx_vfs_coredump+0x10/0x10 [ 326.224992][ T6791] ? __lock_acquire+0x5c0/0x1f40 [ 326.225010][ T6791] ? __lock_acquire+0x5c0/0x1f40 [ 326.225025][ T6791] ? lock_acquire+0x1d1/0x380 [ 326.225038][ T6791] ? unwind_next_frame+0xbd/0x2090 [ 326.225058][ T6791] ? lock_acquire+0x1d1/0x380 [ 326.225076][ T6791] ? bpf_ksym_find+0x128/0x1c0 [ 326.225088][ T6791] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 326.225107][ T6791] ? arch_stack_walk+0xa6/0xf0 [ 326.225129][ T6791] ? __sigqueue_free+0xbe/0x2a0 [ 326.225145][ T6791] ? stack_trace_save+0x8e/0xc0 [ 326.225157][ T6791] ? __pfx_stack_trace_save+0x10/0x10 [ 326.225170][ T6791] ? stack_depot_save_flags+0x27/0x9f0 [ 326.225188][ T6791] ? __lock_acquire+0x5c0/0x1f40 [ 326.225231][ T6791] ? proc_coredump_connector+0x2d3/0x4f0 [ 326.225248][ T6791] ? __pfx_proc_coredump_connector+0x10/0x10 [ 326.225267][ T6791] ? rcu_is_watching+0x13/0xc0 [ 326.225288][ T6791] get_signal+0x1f2a/0x21e0 [ 326.225309][ T6791] ? __pfx_get_signal+0x10/0x10 [ 326.225327][ T6791] arch_do_signal_or_restart+0x91/0x7e0 [ 326.225346][ T6791] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 326.225374][ T6791] irqentry_exit+0x402/0xa10 [ 326.225394][ T6791] asm_exc_page_fault+0x26/0x30 [ 326.225407][ T6791] RIP: 0033:0x7f7adcd9e561 [ 326.225417][ T6791] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 326.225429][ T6791] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 326.225439][ T6791] RAX: 0000000000000000 RBX: 00007f7add026090 RCX: 00007f7adcd9e559 [ 326.225447][ T6791] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 326.225454][ T6791] RBP: 00007f7adce35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 326.225462][ T6791] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 326.225469][ T6791] R13: 00007f7add026128 R14: 00007f7add026090 R15: 00007ffe44150ef8 [ 326.225486][ T6791] [ 326.225491][ T6791] memory: usage 307200kB, limit 307200kB, failcnt 253569 [ 326.225499][ T6791] memory+swap: usage 380020kB, limit 9007199254740988kB, failcnt 0 [ 326.225507][ T6791] kmem: usage 2724kB, limit 9007199254740988kB, failcnt 0 [ 326.225514][ T6791] Memory cgroup stats for /syz0: [ 326.225619][ T6791] cache 311201792 [ 326.225624][ T6791] rss 581632 [ 326.225628][ T6791] rss_huge 0 [ 326.225633][ T6791] shmem 311201792 [ 326.225637][ T6791] mapped_file 147058688 [ 326.225641][ T6791] dirty 0 [ 326.225645][ T6791] writeback 0 [ 326.225649][ T6791] workingset_refault_anon 0 [ 326.225654][ T6791] workingset_refault_file 1119 [ 326.225659][ T6791] swap 74575872 [ 326.225663][ T6791] swapcached 74584064 [ 326.225668][ T6791] pgpgin 182293 [ 326.225672][ T6791] pgpgout 106174 [ 326.225677][ T6791] pgfault 83945 [ 326.225681][ T6791] pgmajfault 4 [ 326.225685][ T6791] inactive_anon 89677824 [ 326.225689][ T6791] active_anon 222105600 [ 326.225694][ T6791] inactive_file 0 [ 326.225698][ T6791] active_file 0 [ 326.225702][ T6791] unevictable 0 [ 326.225706][ T6791] hierarchical_memory_limit 314572800 [ 326.225712][ T6791] hierarchical_memsw_limit 9223372036854771712 [ 326.225717][ T6791] total_cache 311201792 [ 326.225721][ T6791] total_rss 581632 [ 326.225726][ T6791] total_rss_huge 0 [ 326.225730][ T6791] total_shmem 311201792 [ 326.225735][ T6791] total_mapped_file 147058688 [ 326.225739][ T6791] total_dirty 0 [ 326.225743][ T6791] total_writeback 0 [ 326.225748][ T6791] total_workingset_refault_anon 0 [ 326.225753][ T6791] total_workingset_refault_file 1119 [ 326.225757][ T6791] total_swap 74575872 [ 326.225762][ T6791] total_swapcached 74584064 [ 326.225766][ T6791] total_pgpgin 182293 [ 326.225771][ T6791] total_pgpgout 106174 [ 326.225775][ T6791] total_pgfault 83945 [ 326.225779][ T6791] total_pgmajfault 4 [ 326.225784][ T6791] total_inactive_anon 89677824 [ 326.225788][ T6791] total_active_anon 222105600 [ 326.225793][ T6791] total_inactive_file 0 [ 326.225797][ T6791] total_active_file 0 [ 326.225802][ T6791] total_unevictable 0 [ 326.225806][ T6791] anon_cost 0 [ 326.225810][ T6791] file_cost 0 [ 326.225815][ T6791] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.214,pid=6878,uid=0 [ 326.225978][ T6791] Memory cgroup out of memory: Killed process 6878 (syz.0.214) total-vm:102400kB, anon-rss:1464kB, file-rss:47876kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:1000 [ 326.987783][ T6791] syz.0.191 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 326.987807][ T6791] CPU: 0 UID: 0 PID: 6791 Comm: syz.0.191 Not tainted syzkaller #0 PREEMPT(full) [ 326.987821][ T6791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 326.987829][ T6791] Call Trace: [ 326.987834][ T6791] [ 326.987839][ T6791] dump_stack_lvl+0x100/0x190 [ 326.987862][ T6791] dump_header+0xfb/0x606 [ 326.987877][ T6791] oom_kill_process.cold+0xd/0x380 [ 326.987892][ T6791] out_of_memory+0x340/0x14f0 [ 326.987914][ T6791] ? __pfx_out_of_memory+0x10/0x10 [ 326.987936][ T6791] mem_cgroup_out_of_memory+0xc6/0x130 [ 326.987952][ T6791] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 326.987967][ T6791] ? find_held_lock+0x2b/0x80 [ 326.987989][ T6791] ? do_raw_spin_unlock+0x145/0x1e0 [ 326.988006][ T6791] ? _raw_spin_unlock+0x28/0x50 [ 326.988024][ T6791] try_charge_memcg+0x783/0xf60 [ 326.988041][ T6791] ? __pfx_try_charge_memcg+0x10/0x10 [ 326.988052][ T6791] ? find_held_lock+0x2b/0x80 [ 326.988069][ T6791] ? rcu_read_unlock+0x17/0x60 [ 326.988081][ T6791] ? rcu_read_unlock+0x17/0x60 [ 326.988094][ T6791] ? find_held_lock+0x2b/0x80 [ 326.988111][ T6791] ? rcu_read_unlock+0x17/0x60 [ 326.988127][ T6791] charge_memcg+0x1ae/0x210 [ 326.988140][ T6791] __mem_cgroup_charge+0x2b/0x1c0 [ 326.988155][ T6791] shmem_alloc_and_add_folio+0x451/0xd40 [ 326.988173][ T6791] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 326.988187][ T6791] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 326.988204][ T6791] shmem_get_folio_gfp+0x75b/0x1980 [ 326.988220][ T6791] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 326.988234][ T6791] ? vm_normal_page+0x1d1/0x380 [ 326.988250][ T6791] ? __pfx_vm_normal_page+0x10/0x10 [ 326.988268][ T6791] shmem_write_begin+0x1a4/0x420 [ 326.988283][ T6791] ? __pfx_shmem_write_begin+0x10/0x10 [ 326.988296][ T6791] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 326.988314][ T6791] generic_perform_write+0x292/0xa40 [ 326.988330][ T6791] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 326.988350][ T6791] ? __pfx_generic_perform_write+0x10/0x10 [ 326.988368][ T6791] ? file_update_time_flags+0x38c/0x520 [ 326.988384][ T6791] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 326.988398][ T6791] shmem_file_write_iter+0x10e/0x140 [ 326.988414][ T6791] __kernel_write_iter+0x2ac/0x930 [ 326.988430][ T6791] ? __pfx___kernel_write_iter+0x10/0x10 [ 326.988445][ T6791] ? __up_read+0x333/0x980 [ 326.988462][ T6791] ? dump_user_range+0x65e/0xad0 [ 326.988481][ T6791] dump_user_range+0x3f9/0xad0 [ 326.988500][ T6791] ? __pfx_dump_user_range+0x10/0x10 [ 326.988521][ T6791] ? __pfx_writenote+0x10/0x10 [ 326.988537][ T6791] ? elf_core_dump+0x1f25/0x3d20 [ 326.988555][ T6791] elf_core_dump+0x2d68/0x3d20 [ 326.988581][ T6791] ? __pfx_elf_core_dump+0x10/0x10 [ 326.988596][ T6791] ? kasan_save_stack+0x3f/0x50 [ 326.988615][ T6791] ? kasan_save_stack+0x30/0x50 [ 326.988629][ T6791] ? kasan_save_track+0x14/0x30 [ 326.988644][ T6791] ? __kasan_kmalloc+0xaa/0xb0 [ 326.988658][ T6791] ? vfs_coredump+0x21f6/0x54a0 [ 326.988672][ T6791] ? get_signal+0x1f2a/0x21e0 [ 326.988685][ T6791] ? arch_do_signal_or_restart+0x91/0x7e0 [ 326.988706][ T6791] ? 0xffffffffff600000 [ 326.988737][ T6791] ? lock_acquire+0x1d1/0x380 [ 326.988750][ T6791] ? get_signal+0x1f2a/0x21e0 [ 326.988768][ T6791] ? vfs_coredump+0x281a/0x54a0 [ 326.988782][ T6791] vfs_coredump+0x281a/0x54a0 [ 326.988803][ T6791] ? __pfx_vfs_coredump+0x10/0x10 [ 326.988819][ T6791] ? __lock_acquire+0x5c0/0x1f40 [ 326.988836][ T6791] ? __lock_acquire+0x5c0/0x1f40 [ 326.988852][ T6791] ? lock_acquire+0x1d1/0x380 [ 326.988865][ T6791] ? unwind_next_frame+0xbd/0x2090 [ 326.988885][ T6791] ? lock_acquire+0x1d1/0x380 [ 326.988902][ T6791] ? bpf_ksym_find+0x128/0x1c0 [ 326.988915][ T6791] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 326.988934][ T6791] ? arch_stack_walk+0xa6/0xf0 [ 326.988956][ T6791] ? __sigqueue_free+0xbe/0x2a0 [ 326.988972][ T6791] ? stack_trace_save+0x8e/0xc0 [ 326.988984][ T6791] ? __pfx_stack_trace_save+0x10/0x10 [ 326.988997][ T6791] ? stack_depot_save_flags+0x27/0x9f0 [ 326.989011][ T6791] ? __lock_acquire+0x5c0/0x1f40 [ 326.989053][ T6791] ? proc_coredump_connector+0x2d3/0x4f0 [ 326.989071][ T6791] ? __pfx_proc_coredump_connector+0x10/0x10 [ 326.989090][ T6791] ? rcu_is_watching+0x13/0xc0 SYZFAIL: failed to send rpc fd=3 want=296 sent=0 n=-1 (errno 32: Broken pipe) [ 326.989111][ T6791] get_signal+0x1f2a/0x21e0 [ 326.989131][ T6791] ? __pfx_get_signal+0x10/0x10 [ 326.989149][ T6791] arch_do_signal_or_restart+0x91/0x7e0 [ 326.989168][ T6791] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 326.989196][ T6791] irqentry_exit+0x402/0xa10 [ 326.989216][ T6791] asm_exc_page_fault+0x26/0x30 [ 326.989229][ T6791] RIP: 0033:0x7f7adcd9e561 [ 326.989239][ T6791] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 326.989251][ T6791] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 326.989261][ T6791] RAX: 0000000000000000 RBX: 00007f7add026090 RCX: 00007f7adcd9e559 [ 326.989269][ T6791] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 326.989276][ T6791] RBP: 00007f7adce35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 326.989283][ T6791] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 326.989291][ T6791] R13: 00007f7add026128 R14: 00007f7add026090 R15: 00007ffe44150ef8 [ 326.989308][ T6791] [ 326.989313][ T6791] memory: usage 307200kB, limit 307200kB, failcnt 256607 [ 326.989321][ T6791] memory+swap: usage 380016kB, limit 9007199254740988kB, failcnt 0 [ 326.989329][ T6791] kmem: usage 2836kB, limit 9007199254740988kB, failcnt 0 [ 326.989336][ T6791] Memory cgroup stats for /syz0: [ 326.989403][ T6791] cache 311107584 [ 326.989408][ T6791] rss 405504 [ 326.989412][ T6791] rss_huge 0 [ 326.989417][ T6791] shmem 311107584 [ 326.989421][ T6791] mapped_file 158814208 [ 326.989425][ T6791] dirty 0 [ 326.989429][ T6791] writeback 0 [ 326.989434][ T6791] workingset_refault_anon 1 [ 326.989438][ T6791] workingset_refault_file 3637 [ 326.989443][ T6791] swap 74563584 [ 326.989447][ T6791] swapcached 74584064 [ 326.989452][ T6791] pgpgin 194608 [ 326.989456][ T6791] pgpgout 118555 [ 326.989460][ T6791] pgfault 84362 [ 326.989464][ T6791] pgmajfault 12 [ 326.989468][ T6791] inactive_anon 201768960 [ 326.989473][ T6791] active_anon 109744128 [ 326.989477][ T6791] inactive_file 0 [ 326.989482][ T6791] active_file 0 [ 326.989486][ T6791] unevictable 0 [ 326.989490][ T6791] hierarchical_memory_limit 314572800 [ 326.989495][ T6791] hierarchical_memsw_limit 9223372036854771712 [ 326.989500][ T6791] total_cache 311107584 [ 326.989505][ T6791] total_rss 405504 [ 326.989509][ T6791] total_rss_huge 0 [ 326.989514][ T6791] total_shmem 311107584 [ 326.989518][ T6791] total_mapped_file 158814208 [ 326.989523][ T6791] total_dirty 0 [ 326.989527][ T6791] total_writeback 0 [ 326.989531][ T6791] total_workingset_refault_anon 1 [ 326.989536][ T6791] total_workingset_refault_file 3637 [ 326.989541][ T6791] total_swap 74563584 [ 326.989545][ T6791] total_swapcached 74584064 [ 326.989550][ T6791] total_pgpgin 194608 [ 326.989554][ T6791] total_pgpgout 118555 [ 326.989559][ T6791] total_pgfault 84362 [ 326.989563][ T6791] total_pgmajfault 12 [ 326.989567][ T6791] total_inactive_anon 201768960 [ 326.989572][ T6791] total_active_anon 109744128 [ 326.989577][ T6791] total_inactive_file 0 [ 326.989581][ T6791] total_active_file 0 [ 326.989586][ T6791] total_unevictable 0 [ 326.989590][ T6791] anon_cost 0 [ 326.989594][ T6791] file_cost 0 [ 326.989599][ T6791] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.191,pid=6791,uid=0 [ 326.989718][ T6791] Memory cgroup out of memory: Killed process 6791 (syz.0.191) total-vm:102400kB, anon-rss:1432kB, file-rss:53316kB, shmem-rss:11480kB, UID:0 pgtables:232kB oom_score_adj:1000 [ 327.244018][ T6791] syz.0.191 (6791) used greatest stack depth: 19352 bytes left [ 327.252866][ T4926] Bluetooth: hci4: command 0x0405 tx timeout [ 327.252872][ T28] rcu_tasks_wait_gp: rcu_tasks grace period number 9 (since boot) is 15574 jiffies old. [ 328.295180][ T6838] syz.1.204 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 328.295209][ T6838] CPU: 1 UID: 0 PID: 6838 Comm: syz.1.204 Not tainted syzkaller #0 PREEMPT(full) [ 328.295234][ T6838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 328.295247][ T6838] Call Trace: [ 328.295255][ T6838] [ 328.295263][ T6838] dump_stack_lvl+0x100/0x190 [ 328.295300][ T6838] dump_header+0xfb/0x606 [ 328.295328][ T6838] oom_kill_process.cold+0xd/0x380 [ 328.295355][ T6838] out_of_memory+0x340/0x14f0 [ 328.295395][ T6838] ? __pfx_out_of_memory+0x10/0x10 [ 328.295436][ T6838] mem_cgroup_out_of_memory+0xc6/0x130 [ 328.295465][ T6838] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 328.295491][ T6838] ? find_held_lock+0x2b/0x80 [ 328.295530][ T6838] ? do_raw_spin_unlock+0x145/0x1e0 [ 328.295561][ T6838] ? _raw_spin_unlock+0x28/0x50 [ 328.295592][ T6838] try_charge_memcg+0x783/0xf60 [ 328.295623][ T6838] ? __pfx_try_charge_memcg+0x10/0x10 [ 328.295645][ T6838] ? find_held_lock+0x2b/0x80 [ 328.295675][ T6838] ? rcu_read_unlock+0x17/0x60 [ 328.295697][ T6838] ? rcu_read_unlock+0x17/0x60 [ 328.295722][ T6838] ? find_held_lock+0x2b/0x80 [ 328.295754][ T6838] ? rcu_read_unlock+0x17/0x60 [ 328.295784][ T6838] charge_memcg+0x1ae/0x210 [ 328.295808][ T6838] __mem_cgroup_charge+0x2b/0x1c0 [ 328.295836][ T6838] shmem_alloc_and_add_folio+0x451/0xd40 [ 328.295868][ T6838] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 328.295893][ T6838] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 328.295917][ T6838] ? __lock_acquire+0x5c0/0x1f40 [ 328.295946][ T6838] shmem_get_folio_gfp+0x75b/0x1980 [ 328.295983][ T6838] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 328.296003][ T6838] ? inode_set_ctime_current+0x9c/0x850 [ 328.296024][ T6838] ? find_held_lock+0x2b/0x80 [ 328.296059][ T6838] ? timestamp_truncate+0x22e/0x2f0 [ 328.296084][ T6838] shmem_write_begin+0x1a4/0x420 [ 328.296110][ T6838] ? __pfx_shmem_write_begin+0x10/0x10 [ 328.296133][ T6838] ? inode_set_ctime_current+0x283/0x850 [ 328.296155][ T6838] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 328.296181][ T6838] ? inode_maybe_inc_iversion+0x169/0x220 [ 328.296216][ T6838] generic_perform_write+0x292/0xa40 [ 328.296248][ T6838] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 328.296282][ T6838] ? __pfx_generic_perform_write+0x10/0x10 [ 328.296315][ T6838] ? mnt_put_write_access_file+0x4e/0x100 [ 328.296348][ T6838] ? file_update_time_flags+0x38c/0x520 [ 328.296376][ T6838] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 328.296402][ T6838] shmem_file_write_iter+0x10e/0x140 [ 328.296430][ T6838] __kernel_write_iter+0x2ac/0x930 [ 328.296460][ T6838] ? __pfx___kernel_write_iter+0x10/0x10 [ 328.296487][ T6838] ? __up_read+0x333/0x980 [ 328.296518][ T6838] ? dump_user_range+0x65e/0xad0 [ 328.296551][ T6838] dump_user_range+0x3f9/0xad0 [ 328.296586][ T6838] ? __pfx_dump_user_range+0x10/0x10 [ 328.296625][ T6838] ? __pfx_writenote+0x10/0x10 [ 328.296654][ T6838] ? elf_core_dump+0x1f25/0x3d20 [ 328.296689][ T6838] elf_core_dump+0x2d68/0x3d20 [ 328.296747][ T6838] ? __pfx_elf_core_dump+0x10/0x10 [ 328.296775][ T6838] ? kasan_save_stack+0x3f/0x50 [ 328.296802][ T6838] ? kasan_save_stack+0x30/0x50 [ 328.296829][ T6838] ? kasan_save_track+0x14/0x30 [ 328.296856][ T6838] ? __kasan_kmalloc+0xaa/0xb0 [ 328.296884][ T6838] ? vfs_coredump+0x21f6/0x54a0 [ 328.296909][ T6838] ? get_signal+0x1f2a/0x21e0 [ 328.296931][ T6838] ? arch_do_signal_or_restart+0x91/0x7e0 [ 328.296973][ T6838] ? 0xffffffffff600000 [ 328.297036][ T6838] ? lock_acquire+0x1d1/0x380 [ 328.297059][ T6838] ? get_signal+0x1f2a/0x21e0 [ 328.297094][ T6838] ? vfs_coredump+0x281a/0x54a0 [ 328.297120][ T6838] vfs_coredump+0x281a/0x54a0 [ 328.297160][ T6838] ? __pfx_vfs_coredump+0x10/0x10 [ 328.297188][ T6838] ? __lock_acquire+0x5c0/0x1f40 [ 328.297220][ T6838] ? __lock_acquire+0x5c0/0x1f40 [ 328.297249][ T6838] ? lock_acquire+0x1d1/0x380 [ 328.297274][ T6838] ? unwind_next_frame+0xbd/0x2090 [ 328.297310][ T6838] ? lock_acquire+0x1d1/0x380 [ 328.297343][ T6838] ? bpf_ksym_find+0x128/0x1c0 [ 328.297366][ T6838] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 328.297400][ T6838] ? arch_stack_walk+0xa6/0xf0 [ 328.297438][ T6838] ? __sigqueue_free+0xbe/0x2a0 [ 328.297468][ T6838] ? stack_trace_save+0x8e/0xc0 [ 328.297490][ T6838] ? __pfx_stack_trace_save+0x10/0x10 [ 328.297514][ T6838] ? stack_depot_save_flags+0x27/0x9f0 [ 328.297538][ T6838] ? __lock_acquire+0x5c0/0x1f40 [ 328.297618][ T6838] ? proc_coredump_connector+0x2d3/0x4f0 [ 328.297648][ T6838] ? __pfx_proc_coredump_connector+0x10/0x10 [ 328.297684][ T6838] ? rcu_is_watching+0x13/0xc0 [ 328.297721][ T6838] get_signal+0x1f2a/0x21e0 [ 328.297759][ T6838] ? __pfx_get_signal+0x10/0x10 [ 328.297783][ T6838] ? __pfx_force_sig_fault+0x10/0x10 [ 328.297815][ T6838] arch_do_signal_or_restart+0x91/0x7e0 [ 328.297850][ T6838] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 328.297902][ T6838] irqentry_exit+0x402/0xa10 [ 328.297937][ T6838] asm_exc_page_fault+0x26/0x30 [ 328.297959][ T6838] RIP: 0033:0x7f4ac919e559 [ 328.297986][ T6838] Code: Unable to access opcode bytes at 0x7f4ac919e52f. [ 328.297996][ T6838] RSP: 002b:00007f4aca10aef8 EFLAGS: 00010246 [ 328.298015][ T6838] RAX: 0000000000000000 RBX: 0000000000000058 RCX: 00007f4ac919e559 [ 328.298029][ T6838] RDX: 00007f4aca10af10 RSI: 0000000000000058 RDI: 00007f4aca10af10 [ 328.298043][ T6838] RBP: 00007f4ac9235ab8 R08: 0000000000000000 R09: 0000000000000058 [ 328.298057][ T6838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.298070][ T6838] R13: 00007f4ac9426038 R14: 00007f4ac9425fa0 R15: 00007ffff927e138 [ 328.298103][ T6838] [ 328.451888][ T6838] memory: usage 307200kB, limit 307200kB, failcnt 26539 [ 328.451905][ T6838] memory+swap: usage 359040kB, limit 9007199254740988kB, failcnt 0 [ 328.451919][ T6838] kmem: usage 2152kB, limit 9007199254740988kB, failcnt 0 [ 328.451931][ T6838] Memory cgroup stats for /syz1: [ 328.452074][ T6838] cache 312119296 [ 328.452084][ T6838] rss 245760 [ 328.452091][ T6838] rss_huge 0 [ 328.452099][ T6838] shmem 312119296 [ 328.452107][ T6838] mapped_file 133558272 [ 328.452116][ T6838] dirty 0 [ 328.452124][ T6838] writeback 0 [ 328.452132][ T6838] workingset_refault_anon 1 [ 328.452140][ T6838] workingset_refault_file 448 [ 328.452150][ T6838] swap 53084160 [ 328.452157][ T6838] swapcached 53092352 [ 328.452165][ T6838] pgpgin 148771 [ 328.452173][ T6838] pgpgout 72509 [ 328.452181][ T6838] pgfault 90089 [ 328.452189][ T6838] pgmajfault 7 [ 328.452197][ T6838] inactive_anon 260431872 [ 328.491469][ T6838] active_anon 51937280 [ 328.491478][ T6838] inactive_file 0 [ 328.491487][ T6838] active_file 0 [ 328.491495][ T6838] unevictable 0 [ 328.491504][ T6838] hierarchical_memory_limit 314572800 [ 328.491515][ T6838] hierarchical_memsw_limit 9223372036854771712 [ 328.491525][ T6838] total_cache 312119296 [ 328.491534][ T6838] total_rss 245760 [ 328.491543][ T6838] total_rss_huge 0 [ 328.491551][ T6838] total_shmem 312119296 [ 328.491560][ T6838] total_mapped_file 133558272 [ 328.491569][ T6838] total_dirty 0 [ 328.491578][ T6838] total_writeback 0 [ 328.491586][ T6838] total_workingset_refault_anon 1 [ 328.491596][ T6838] total_workingset_refault_file 448 [ 328.491606][ T6838] total_swap 53084160 [ 328.491614][ T6838] total_swapcached 53092352 [ 328.491624][ T6838] total_pgpgin 148771 [ 328.491632][ T6838] total_pgpgout 72509 [ 328.491641][ T6838] total_pgfault 90089 [ 328.491649][ T6838] total_pgmajfault 7 [ 328.491658][ T6838] total_inactive_anon 260431872 [ 328.491667][ T6838] total_active_anon 51937280 [ 328.491676][ T6838] total_inactive_file 0 [ 328.491685][ T6838] total_active_file 0 [ 328.491694][ T6838] total_unevictable 0 [ 328.491702][ T6838] anon_cost 0 [ 328.491710][ T6838] file_cost 0 [ 328.491719][ T6838] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.111,pid=6407,uid=0 [ 328.492823][ T6838] Memory cgroup out of memory: Killed process 6407 (syz.1.111) total-vm:165752kB, anon-rss:0kB, file-rss:0kB, shmem-rss:94640kB, UID:0 pgtables:272kB oom_score_adj:1000 [ 329.250481][ T6826] syz.1.201 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 329.250510][ T6826] CPU: 0 UID: 0 PID: 6826 Comm: syz.1.201 Not tainted syzkaller #0 PREEMPT(full) [ 329.250536][ T6826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 329.250549][ T6826] Call Trace: [ 329.250558][ T6826] [ 329.250566][ T6826] dump_stack_lvl+0x100/0x190 [ 329.250604][ T6826] dump_header+0xfb/0x606 [ 329.250631][ T6826] oom_kill_process.cold+0xd/0x380 [ 329.250659][ T6826] out_of_memory+0x340/0x14f0 [ 329.250698][ T6826] ? __pfx_out_of_memory+0x10/0x10 [ 329.250739][ T6826] mem_cgroup_out_of_memory+0xc6/0x130 [ 329.250769][ T6826] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 329.250797][ T6826] ? find_held_lock+0x2b/0x80 [ 329.250836][ T6826] ? do_raw_spin_unlock+0x145/0x1e0 [ 329.250869][ T6826] ? _raw_spin_unlock+0x28/0x50 [ 329.250900][ T6826] try_charge_memcg+0x783/0xf60 [ 329.250931][ T6826] ? __pfx_try_charge_memcg+0x10/0x10 [ 329.250953][ T6826] ? find_held_lock+0x2b/0x80 [ 329.250984][ T6826] ? rcu_read_unlock+0x17/0x60 [ 329.251006][ T6826] ? rcu_read_unlock+0x17/0x60 [ 329.251029][ T6826] ? find_held_lock+0x2b/0x80 [ 329.251061][ T6826] ? rcu_read_unlock+0x17/0x60 [ 329.251091][ T6826] charge_memcg+0x1ae/0x210 [ 329.251116][ T6826] __mem_cgroup_charge+0x2b/0x1c0 [ 329.251143][ T6826] shmem_alloc_and_add_folio+0x451/0xd40 [ 329.251175][ T6826] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 329.251201][ T6826] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 329.251232][ T6826] shmem_get_folio_gfp+0x75b/0x1980 [ 329.251263][ T6826] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 329.251288][ T6826] ? vm_normal_page+0x1d1/0x380 [ 329.251317][ T6826] ? __pfx_vm_normal_page+0x10/0x10 [ 329.251351][ T6826] shmem_write_begin+0x1a4/0x420 [ 329.251378][ T6826] ? __pfx_shmem_write_begin+0x10/0x10 [ 329.251407][ T6826] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 329.251439][ T6826] generic_perform_write+0x292/0xa40 [ 329.251470][ T6826] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 329.251505][ T6826] ? __pfx_generic_perform_write+0x10/0x10 [ 329.251540][ T6826] ? file_update_time_flags+0x38c/0x520 [ 329.251568][ T6826] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 329.251594][ T6826] shmem_file_write_iter+0x10e/0x140 [ 329.251623][ T6826] __kernel_write_iter+0x2ac/0x930 [ 329.251653][ T6826] ? __pfx___kernel_write_iter+0x10/0x10 [ 329.251681][ T6826] ? __up_read+0x333/0x980 [ 329.251712][ T6826] ? dump_user_range+0x65e/0xad0 [ 329.251748][ T6826] dump_user_range+0x3f9/0xad0 [ 329.251782][ T6826] ? __pfx_dump_user_range+0x10/0x10 [ 329.251822][ T6826] ? __pfx_writenote+0x10/0x10 [ 329.251851][ T6826] ? elf_core_dump+0x1f25/0x3d20 [ 329.251885][ T6826] elf_core_dump+0x2d68/0x3d20 [ 329.251929][ T6826] ? __pfx_elf_core_dump+0x10/0x10 [ 329.251957][ T6826] ? kasan_save_stack+0x3f/0x50 [ 329.251984][ T6826] ? kasan_save_stack+0x30/0x50 [ 329.252011][ T6826] ? kasan_save_track+0x14/0x30 [ 329.252039][ T6826] ? __kasan_kmalloc+0xaa/0xb0 [ 329.252066][ T6826] ? vfs_coredump+0x21f6/0x54a0 [ 329.252092][ T6826] ? get_signal+0x1f2a/0x21e0 [ 329.252114][ T6826] ? arch_do_signal_or_restart+0x91/0x7e0 [ 329.252153][ T6826] ? 0xffffffffff600000 [ 329.252211][ T6826] ? lock_acquire+0x1d1/0x380 [ 329.252234][ T6826] ? get_signal+0x1f2a/0x21e0 [ 329.252269][ T6826] ? vfs_coredump+0x281a/0x54a0 [ 329.252295][ T6826] vfs_coredump+0x281a/0x54a0 [ 329.252334][ T6826] ? __pfx_vfs_coredump+0x10/0x10 [ 329.252362][ T6826] ? __lock_acquire+0x5c0/0x1f40 [ 329.252399][ T6826] ? __lock_acquire+0x5c0/0x1f40 [ 329.252428][ T6826] ? lock_acquire+0x1d1/0x380 [ 329.252452][ T6826] ? unwind_next_frame+0xbd/0x2090 [ 329.252489][ T6826] ? lock_acquire+0x1d1/0x380 [ 329.252522][ T6826] ? bpf_ksym_find+0x128/0x1c0 [ 329.252546][ T6826] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 329.252580][ T6826] ? arch_stack_walk+0xa6/0xf0 [ 329.252619][ T6826] ? __sigqueue_free+0xbe/0x2a0 [ 329.252648][ T6826] ? stack_trace_save+0x8e/0xc0 [ 329.252671][ T6826] ? __pfx_stack_trace_save+0x10/0x10 [ 329.252696][ T6826] ? stack_depot_save_flags+0x27/0x9f0 [ 329.252719][ T6826] ? __lock_acquire+0x5c0/0x1f40 [ 329.252799][ T6826] ? proc_coredump_connector+0x2d3/0x4f0 [ 329.252830][ T6826] ? __pfx_proc_coredump_connector+0x10/0x10 [ 329.252867][ T6826] ? rcu_is_watching+0x13/0xc0 [ 329.252903][ T6826] get_signal+0x1f2a/0x21e0 [ 329.252941][ T6826] ? __pfx_get_signal+0x10/0x10 [ 329.252975][ T6826] arch_do_signal_or_restart+0x91/0x7e0 [ 329.253009][ T6826] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 329.253062][ T6826] irqentry_exit+0x402/0xa10 [ 329.253098][ T6826] asm_exc_page_fault+0x26/0x30 [ 329.253119][ T6826] RIP: 0033:0x7f4ac919e561 [ 329.253137][ T6826] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 329.253157][ T6826] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 329.253176][ T6826] RAX: 0000000000000000 RBX: 00007f4ac9426090 RCX: 00007f4ac919e559 [ 329.253190][ T6826] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 329.253204][ T6826] RBP: 00007f4ac9235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 329.253218][ T6826] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 329.253231][ T6826] R13: 00007f4ac9426128 R14: 00007f4ac9426090 R15: 00007ffff927e138 [ 329.253263][ T6826] [ 329.393912][ T6826] memory: usage 307196kB, limit 307200kB, failcnt 26634 [ 329.393929][ T6826] memory+swap: usage 359036kB, limit 9007199254740988kB, failcnt 0 [ 329.393943][ T6826] kmem: usage 2104kB, limit 9007199254740988kB, failcnt 0 [ 329.393956][ T6826] Memory cgroup stats for /syz1: [ 329.394090][ T6826] cache 312205312 [ 329.394100][ T6826] rss 192512 [ 329.394108][ T6826] rss_huge 0 [ 329.394116][ T6826] shmem 312205312 [ 329.394124][ T6826] mapped_file 127225856 [ 329.394133][ T6826] dirty 0 [ 329.394140][ T6826] writeback 0 [ 329.394148][ T6826] workingset_refault_anon 1 [ 329.394157][ T6826] workingset_refault_file 448 [ 329.394166][ T6826] swap 53084160 [ 329.394174][ T6826] swapcached 53092352 [ 329.394182][ T6826] pgpgin 148792 [ 329.394190][ T6826] pgpgout 72522 [ 329.394198][ T6826] pgfault 90100 [ 329.394206][ T6826] pgmajfault 7 [ 329.394214][ T6826] inactive_anon 260399104 [ 329.394222][ T6826] active_anon 52002816 [ 329.394231][ T6826] inactive_file 0 [ 329.394238][ T6826] active_file 0 [ 329.394246][ T6826] unevictable 0 [ 329.394254][ T6826] hierarchical_memory_limit 314572800 [ 329.394264][ T6826] hierarchical_memsw_limit 9223372036854771712 [ 329.394274][ T6826] total_cache 312205312 [ 329.394283][ T6826] total_rss 192512 [ 329.394291][ T6826] total_rss_huge 0 [ 329.394299][ T6826] total_shmem 312205312 [ 329.394308][ T6826] total_mapped_file 127225856 [ 329.394316][ T6826] total_dirty 0 [ 329.394324][ T6826] total_writeback 0 [ 329.394333][ T6826] total_workingset_refault_anon 1 [ 329.394342][ T6826] total_workingset_refault_file 448 [ 329.394352][ T6826] total_swap 53084160 [ 329.394360][ T6826] total_swapcached 53092352 [ 329.394374][ T6826] total_pgpgin 148792 [ 329.394382][ T6826] total_pgpgout 72522 [ 329.394390][ T6826] total_pgfault 90100 [ 329.394399][ T6826] total_pgmajfault 7 [ 329.394407][ T6826] total_inactive_anon 260399104 [ 329.394416][ T6826] total_active_anon 52002816 [ 329.394425][ T6826] total_inactive_file 0 [ 329.394433][ T6826] total_active_file 0 [ 329.394441][ T6826] total_unevictable 0 [ 329.394450][ T6826] anon_cost 0 [ 329.394458][ T6826] file_cost 0 [ 329.394466][ T6826] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.201,pid=6826,uid=0 [ 329.394556][ T6826] Memory cgroup out of memory: Killed process 6826 (syz.1.201) total-vm:102532kB, anon-rss:1444kB, file-rss:26180kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 330.599549][ T33] oom_reaper: reaped process 6407 (syz.1.111), now anon-rss:0kB, file-rss:0kB, shmem-rss:22772kB